We value your trust when providing us with your personal data and we are committed to protect them, so you can feel safe with us. This document will let you know how we handle your personal data, how to proceed if you have any questions concerning the data processing and other important information relating to the processing of your personal data. Processing of your personal data is governed by the Act no. 18/2018 Coll. on Personal Data Protection as amended (hereinafter referred to as the „Act“) and Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the „GDPR“) and related regulations.
Who we are
The processor of your personal data is the company:
Operations: ŠARIŠ PARK
Železničná 1900, 082 21 Veľký Šariš
CIN: 36 481 017
registered in the BR of the DC Prešov, section: Sro, part no. 13640/P
What personal data we process
We process following categories of your personal data:
- Common personal data, e.g. name, surname, date and place of birth, residence, email, tel. number and other.
Purpose, legal basis for processing and data storage period
Purpose and legal basis:
Hiring process: Personal data provided for the purposes of the hiring process are processed on the basis of your application (pre-contractual relationships).
Candidate database: Should you provide your consent with the personal data processing when applying for a job to be included in our candidate database, we will list you in our candidate database for the purposes of contacting you. Personal data provided for the purposes of database listing are processed with your consent.
Storage period: Your personal data are stored until completion of the hiring process. If you provide your consent to list you in our candidate database, we will store your personal data for the period of one year since the day your consent is granted.
2. Contractual and pre-contractual relationships
Purpose and legal basis:
In case you book services with us, your personal data are processed with regard to such pre- contractual relationship, whose purpose is proper provision of the required services in an agreed time period. As long as you constitute a contracting party in an agreement concluded with us, we are required to process your personal data in order to fulfil the subject of the agreement and such data processing shall be done under such agreement.
Processing of your personal data for the purposes of contract fulfilment may include also cases, where you are not a contracting party of such contract, however, the contract concerns you in some way, e.g. you are a contact person (employee) of our contractual business partner (your employer) mentioned in the contract, and we are, therefore, processing your personal data in our legitimate interests.
Storage period: Your personal data will be stored for the period necessary for completion of processing purpose (proper fulfilment of contract) and expiration of the period for any claims. Accounting documents relating to the contract must be stored for the period of 10 years following the year concerned.
Purpose and legal basis:
Mutual communication: If you contact us in any matter by any means of communication (by mail, electronic mail or by phone), your personal data are processed for the purposes of our mutual contact. Personal data for our communication are processed on the basis of your request. Records on received and sent mail are processed on the basis of special regulation.
Contact with client / PR activities concerning better relationships with you and your satisfaction: By knowing better your needs we can better suit your requests and needs, since it is in our best interest to continuously improve our products and services to your satisfaction. Processing of personal data is based on our legitimate interests to provide the best services possible and to ensure our clients are satisfied.
Storage period: Your personal data will be stored for the period of 1 year since the day of termination of our communication or provision of a service. Records on received and sent mail shall be stored for the period of 10 years following the year concerned.
Purpose and legal basis:
Company newsletter: Newsletter and marketing information will be sent only to the extent and intervals, where they do not become obtrusive. Personal data processed for the marketing purposes are processed on the basis of your consent. The consent is voluntary and can be withdrawn at any time.
For the purposes of informing the public on organized events, our presentation to public, we may publish your pictures or video recording on our website or social networks. We will inform you about such publishing in advance. Pictures and video recording are taken/made and published on the basis of your consent or our legitimate interests.
Storage period: Your personal data acquired with your consent will be stored for the period of 5 years since the day of granting your consent. Personal data acquired in our legitimate interests shall be stored for the period of duration of such grounds for processing.
5. Safety and stability of information systems and network
Purpose and legal basis:
Safety and stability of the processor’s information systems and network: If you use our information systems, which you have an access to or if you are accessing our network (WIFI, LAN), we are allowed to process electronic data, which can be identifying in nature. Such data are recorded in so-called log files and their processing is based on our legitimate interest consisting in ensuring stability of operation of the information systems and network, whereas ensuring their safety, as well as safety and satisfaction of the users.
Storage period: Your personal data will be stored for the period of max. 1 month since the day of their recording.
Compliance with legal obligations
Processing of your personal data for the individual purposes also involve processing of your personal data on the basis of various special regulations obliging us to various activities, e.g. archiving the data in our bookkeeping system or accessing, providing the data to state and other authorities performing supervision over our business activities or solving possible disputes, or making decisions. Such special regulations include, e.g. Act no. 40/1964 Coll. Civil code, Act no. 102/2014 Coll. on consumer protection, Act no. 222/2004 Coll. on value added tax, Act no. 431/2002 Coll. on accounting, Act no. 582/2004 Coll. on local taxes and local fee for municipal waste and minor construction waste, Act no. 404/2011 Coll. on residence of aliens.
Storage period: Depending on the type of obligation to be complied with stipulated by the individual special regulation.
Obligation to provide personal data
Where provision of personal data becomes legal or contractual requirement or requirement necessary to conclude an agreement, the data subject shall provide such personal data. Otherwise the purpose of personal data processing intended by the processor in case of provision of personal data could not be fulfilled.
Disclosure and accessibility of your personal data
Generally, we may disclose and/or provide your personal data to other subjects, such as tax authorities, public and state authorities for the performance of control and supervision (e.g. labor inspectorate), courts, law enforcement authorities, accountants, auditors, lawyers, IT support and system provisioning, and other external professional consultants and companies providing us with products and services. We are fully liable for the protection of your personal data provided and/or disclosed to other subjects from our position of a processor.
Transfer of personal data to a third country or international organization
The processor does not make or has any intention to make any transfer of the personal data to any third country or international organization.
Automated decision-making, including profiling
The personal data processing for the aforementioned purposes does not include any automated decision-making or profiling.
Your rights as data subject during processing of your personal data
• Access to your data
To simplify, you have the right to know what personal data concerning your person we process, for what purposes and for how long, where do we get your personal data from, who do we provide them, who else is processing your personal data and what are your rights relating to the processing of your personal data. If you feel unsure what personal data concerning your person we process, you can ask for an information whether your personal data are or are not processed by us and if so, whether you can have access to such personal data. Within your right to access, you can ask for a copy of the personal data undergoing processing free of charge, any other copies are charged. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
• Rectification of your data
Personal data shall be correct, up-to-date and truthful. If you find out the processed personal data concerning your person to be incorrect or incomplete, you shall have the right to have incomplete personal data completed or corrected immediately. By exercising this right, you help us to keep your personal data complete and up-to-date.
• Erasure of your data
You shall have the right to erasure of data concerning your person without undue delay and we shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were processed;
- you withdraw your consent to processing of your personal data, whereas such case concerns data the processing of which require your consent and, at the same time, we have no other legal ground or reason for the processing of such data;
- you object to the processing of your personal data, which are being processed on the basis of our legitimate interests and there are no overriding legitimate grounds for the processing on our side; or
- you suspect the personal data have been unlawfully processed
However, please, bear in mind even if any of the aforementioned cases apply, this does not mean we can immediately erase all your personal data. The right to erasure does not apply to the extent that processing of your personal data is necessary for compliance with our legal obligations or establishment, exercise or defense of our legal claims.
• Restriction of processing of your data
In some cases, apart from the right to erasure, you have the right to restrict processing of your personal data. This right allows you to require, in some cases, to mark your personal data to remove such personal data from any other processing operations, however, in such case, not for indefinite time period (as is the case of erasure) but for a limited time period. Processing of your personal data shall be restricted if one of the following applies:
- the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
- you have objected to processing pending the verification whether our legitimate interests override yours.
• Portability of your personal data
You have the right to receive the personal data concerning you, which you have provided to us and which we process. All your personal data will be provided to you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another processor without hindrance, where technically feasible. In order to transmit your data easily, they shall only involve data processed automatically in our electronic databases. The right to portability of personal data shall not adversely affect the rights and freedoms of others.
• Right to object processing of your data
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data. We shall no longer process your personal data unless we demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of your personal data for such marketing. Should you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
• Right to complain
Should you feel we process your personal data illegally or in conflict with the generally binding legal regulations, you have the right to file a complaint to the Office for personal data protection of the Slovak Republic concerning the data processing.
• Right to withdraw consent
You have the right to withdraw your consent to process your personal data in case personal data are being processed on this legal basis.
How and where to apply your rights
Should you have any questions concerning this document or processing of your personal data, or exertion of your rights defined in this document, feel free to contact us by e-mail or personally at the address of the company. Your questions concerning processing of your personal data will be answered promptly, however, no later than one month since their receipt. In special cases, the period may be extended for two more months, however, we will inform you in case of extended response deadline and reasons for such extension within the one month period since receipt of your request. Information is provided free of charge. However, in cases of inadequate requests or frequently recurrent requests, we may apply an adequate administrative fee for the processing.
We have adopted all necessary legal, organizational, material and technical measures complying with the standards of data and privacy protection to protect your personal data. Where we provide and/or disclose any personal data to a third party providing the services necessary to fulfil any of the purposes of personal data processing, such third party, in a position of a processor, shall also adopt relevant measures to ensure confidentiality, integrity and safety of the personal data. We have also adopted all necessary measures to make sure the processed personal data are reliable, correct and complete for the purposes of their use.