This document describes the procedure and purpose of personal data processing of the company UNIPAS, spol. s r.o., Železničná 285/12 972 41 Koš, IČO: 31 576 991, operator (hereinafter ”WE“ or “operator“) and provides any further information required by law, including information on rights of data subjects and the procedure of exerting the same.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Personal Data (hereinafter only ”Regulation“) represents a legal regulation on protection of natural persons with regard to the processing of personal data and on the free movement of such data and protects basic rights and freedom of natural persons, especially with regard to the right to personal data protection.
Pursuant to Article 4 (1) of the Regulation the term “personal data“ means any information regarding the identified and/or identifiable natural person (hereinafter only “data subject“)
”Processing“ is the operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Article 4(2) of the Regulation).
Pursuant to Article 12 and subseq. of the Regulation, the data subject must also be provided by relevant information on processing activities of the operator and on rights of the person concerned.
- UPON WHAT BASIS CAN WE PROCESS YOUR PERSONAL DATA?
Processing is legal only insofar as at least one of the following conditions is satisfied:
- the data subject expressed their consent with the processing of their personal data for one and/or more concrete purposes,
- processing is necessary for the fulfilment of the agreement to which the data subject is a party, or in order to adopt measures upon the basis of the application of the data subject before entering into such agreement,
- processing is necessary for the fulfilment of legal obligation,
- processing is necessary for the purposes of legitimate interest that are observed by the operator and/or a third party, with the exception of cases when the interests or basic rights and freedoms of person concerned prevail such legitimate interests, especially if the person concerned is a child.
- JOB APPLICATIONS
The operator processes personal data of the job applicants for the purposes of their recording in the selection procedure for a free job position of the operator, or they record personal data of job applicants without the aim of occupying a concrete job position. In case the operator decides to enter into a work agreement or any of the agreements out of the occupation, state employment agreement, i.e. the applicant proves to be successful, personal data of such applicant shall be further processed by the operator for the purposes of fulfilment of obligations following from entering into an employment relationship.
Legal basis: in accordance with provision of Article 6 Subsec.4 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Personal Data on protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter „GDPR regulations“). Act No.311/2001 Coll. Labour Code as amended.
Period of data storage: for 1 year after the delivery of a CV, data will be erased afterwards.
- WHAT IS THE PURPOSE OF PERSONAL DATA PROCESSING, WHAT PERSONAL DATA ARE PROCESSED, HOW LONG SHALL YOUR PERSONAL DATA BE STORED?
Your personal data will be processed upon specific legal regulations and purposes set out by the operator. These are individually listed in INFORMATION ON PURPOSES OF PROCESSING.
- WHO IS THE RECIPIENT OF YOUR PERSONAL DATA?
Category of recipients: state and civil administration authorities, self-governing bodies, Company website administrator, auditor, lawyer, mediators (accounting records), companies performing the administration and support of information technologies, providers of information services, courts and law enforcement authorities in justifiable cases.
- „COOKIES“ ON OUR WEBSITE
- PERSONAL DATA DISCLOSURE
Personal data will not be disclosed.
- AUTOMATED INDIVIDUAL DECISION MAKING
Personal data will not be used for automated individual decision making including profiling.
- TRANSFER OF PERSONAL DATA OUTSIDE EUROPEAN UNION
Transfer of personal data to a third country and/or an international organization is not applicable.
We hereby take the liberty to ensure you that our employees and co-workers who are processing your personal data are obliged to keep the personal data confidential. Such confidentiality holds true also after termination of employment relationships.
- PERSONAL DATA PROTECTION
Your personal data are safe with us. In order to prevent unauthorized access and misuse of your personal data, we adopted adequate technical and organizational measures. We put great emphasis on the protection of your personal data. Therefore, not only we monitor regularly the protection thereof but we also continuously improve their protection. We strive to use such safety precautions that provide sufficient protection with regard to current technological conditions. Adopted safety measures are regularly updated.
- RIGHTS OF DATA SUBJECTS
Withdraw the consent – in cases when your personal data are processed upon the basis of your consent, you have the right to withdraw this consent anytime. The consent can be withdrawn through electronic mail at the given mail address, in writing and/or personally at the operator’s seat. The withdrawal of consent shall not affect the lawfulness of processing based on the consent before its withdrawal. Regardless to this, you have always right to object against personal data processing.
Right to access – you have the right to be provided a copy of your personal data that we have about you, as well as the information on the means of utilization of your given data. In majority of cases your personal data shall be provided to you in writing, if you do not require other means of providing. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
Right to rectification – we adopt adequate measures in order to ensure accuracy, completeness and currency of the information that we have about you. If you think that data that are at our disposal are inaccurate, incomplete and/or outdated, please, do not hesitate to require rectification, update and/or completion.
Right to erasure (to be forgotten) – you have the right to obtain from the operator the erasure of your personal data for example in case that the personal data provided by you are not necessary anymore to fulfil the original purpose of the processing. Your right needs to be assessed from the point of view of all relevant circumstances. For example, we may have certain legal and regulation obligations which means that we will not be able to comply with your request.
Right to restriction of processing – under certain circumstances you are authorized to require us to stop using your personal data. For example, in cases when you think that your personal data that are at our disposal are incorrect or when you think we do not need them anymore.
Right to data portability – under certain circumstances you have the right to claim the transfer of the personal data provided to us to a third party of your choice. The right to data portability is applicable only to personal data that we obtained from you upon the consent and/or upon an agreement to which you are one of the parties.
Right to object – you have the right to object against the data processing that is based upon your own legitimate authorized interests. In case we don’t have a legitimate authorized reason for processing and you file an appeal against the same, our personal data will not be further processed by us.
Right to file an appeal for the proceeding on personal data protection – if you think that your personal data are processed unfairly and/or illegally, you may file an appeal to a supervisory body, which is Office for personal data protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; Phone No.: +421 /2/ 3231 3214; e-mail: [email protected], https://dataprotection.gov.sk. In case of filing the appeal through electronic mail, the appeal must satisfy the requirements pursuant to Sec.19 Subsec.1 of Act No. 7181967 Coll. on Administrative Proceedings (administration fee).
- INFORMATION AND EXERTION OF RIGHTS OF DATA SUBJECTS
In order to exert your right, you may contact your operator anytime as follows:
- Address: UNIPAS, spol. s r.o., Železničná 285/12 972 41 Koš
- e-mail: [email protected]
Your application shall be processed free of charge within 30 days. In case the application is complicated and/or in case there is a number of applications we may prolong this period by further 60 days. In such case you will be informed on this fact and on the reasons thereof.
In case of a repeated application we are authorized to charge adequate administrative fee or the covering of costs related to the provision of this service.