pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the personal data processing and on the free movement of such data and repealing Directive 95/46 / EC (“the General Data Protection Regulation”) “) And Act no. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”)
1. Our identification and contact details
We process personal data of persons in the organization KONŠTRUKTA – Defense, a.s., Lieskovec 575/25, Dubnica nad Váhom 018 41, Business ID: 34139800, as the operator.
2. Contact details of the responsible person of the operator
We care about protecting your privacy. That is why we have entrusted the supervision of the personal data processing to a responsible person, which you can contact at any time:
- in person or in writing at the address above,
- by phone at 0948268523,
- or electronically via the email address zodpovnaosoba@amso.sk.
3. How do we process personal data?
In accordance with the General Data Protection Regulation and the Personal Data Protection Act, we process personal data for various purposes. Each processing purpose is characterized by:
- separate activities of personal data processing that lead to its achievement,
- the relevant legal basis (or authorization to process personal data),
- the various recipients to whom personal data may be provided or made available,
- different personal data retention periods, resp. deadline for deleting personal data.
In the following sections, you will find more detailed information about the individual purposes of personal data processing.
3.1 Purpose of processing: Management of supplier-customer relationships
In order to effectively manage our relationships with business partners, customers and potential customers, we process the person concerned as required: name, surname, name of the organization, telephone number, e-mail address; information that is the subject of the communication.
| Processing activities leading to the stated purpose: | registration of contact details of the customer, supplier and their employees in the operator’s system,inquiry management and mutual communication with suppliers and customers and their employees,quotation management, business contracts registration (purchase, sales)monitoring and evaluation of customer satisfaction, etc. |
| Processing legal basis | Art. 6 par. 1 letter c) of the General Regulation on Data Protection, where the processing of personal data is our legal obligation, for example within the meaning of Act no. 222/2004 Coll. on Value Added Tax, as amended; Act no. 431/2002 Coll. on accounting; Act no. 595/2003 Coll. on Income Tax. Without the processing of personal data, we cannot fulfil the obligations imposed on us by special laws. Art. 6 par. 1 letter f) the General Data Protection Regulation, which is our legitimate interest, when we process your personal data in order to effectively register the contact details of our customers or potential customers, inquiry management and overall communication with our business partners or other persons. |
| Possible supply of recipient’s data | Apart from mutual communication with our business partners, we do not provide personal data to any other recipients. |
| Retention period (period for deleting personal data) | We will save the personal data in accordance with our registration plan, namely: ○ 10 years (for example, business contracts and price agreements with other entities); ○ 5 years (for example inquiry management and mutual communication). |
3.2 Accounting agenda
In order to properly maintain the accounting agenda, we process the information of the person concerned as needed: name of the organization, title, name, surname, email address, telephone contact.
| Processing activities leading to the stated purpose: | registration, posting of invoices (supplier – customer),processing of other tax and accounting documents. |
| Processing legal basis | Art. 6 par. 1 letter c) of the General Regulation on Data Protection, where the processing of personal data is our legal obligation, for example within the meaning of Act no. 222/2004 Coll. on Value Added Tax, as amended; Act no. 431/2002 Coll. on Accounting; Act no. 595/2003 Coll. on Income Tax.Without the processing of personal data, we cannot fulfill the obligations imposed on us by special laws. |
| Possible supply of recipient’s data | In order to properly maintain our accounting agenda, we do not provide personal information to any other recipients. |
| Retention period (period for deleting personal data) | We will keep the personal data that is part of the accounting and tax documents in accordance with our registration plan for 10 years. |
3.3 Organization promotion
In order to promote the organization, we process the person concerned data as needed: video, audio recordings; name, surname, job title, photograph, contact details.
| Processing activities leading to the stated purpose: | presentation of the company activities – by publishing the presentation videos, PR articles, photographs (via the website, social networks, etc.) |
| Processing legal basis | Art. 6 par. 1 letter (a) of the General Data Protection Regulation, which is consent to processing. The consent can be revoked at any time. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal. |
| Possible supply of recipient’s data | Personal data will be provided to recipients of presentation materials, for example at the exhibitions and in the schools; graphic studios, printers and shipping companies. At the same time, we will process them in cooperation with the web hosting service provider and using the services of Facebook Ireland Limited, Ireland and LinkedIn Ireland Unlimited Company, Ireland. |
| Retention period (period for deleting personal data) | We will process personal data until the consent is revoked. |
3.4 Job seekers agenda
If you want to become part of our team, then we will process your personal data exclusively for the purpose of selecting employees within the current filling of free job position. Your personal data will only become a part of our database of jobseekers (for example, if you do not respond to a specific job offer) only if you give us your consent.
| Processing activities leading to the stated purpose: | obtaining and registration of employment applications while filling a free job position (we process, for example, title, name, surname, address, telephone and email contact, education data and other personal data contained in the CV, motivation letter and other documents submitted by the applicant).conducting a job interview (we process, for example, title, name, surname, data on education and other personal data contained in the CV, in the motivation letter and in other documents submitted by the applicant and data obtained during the interview with the applicant).storage of applications for employment after the end of the selection procedure (we process, for example, title, name, surname, address, telephone and e-mail contact, data on education). |
| Processing legal basis | Art. 6 par. 1 letter c) of the General Regulation on Data Protection, namely Act no. 311/2001 Coll. Labour Code.Art. 6 par. 1 letter (a) of the General Data Protection Regulation, which is consent to processing. The consent can be revoked at any time. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal. |
| Possible supply of recipient’s data | We do not provide personal data of job seekers to any other recipients. |
| Retention period (period for deleting personal data) | We will process personal data during the selection procedure. If you give us your consent to processing, during the period of validity of the granted consent. |
4. Operation of our fan page and use of Facebook tools
We present our products through the social network Facebook, on which we have located our fan page. Facebook Ireland Limited is with us the so-called joint operator, in relation to the personal data processed, as it provides us various statistics. In order to comply with the requirements of the General Data Protection Regulation, you can consult the operator’s supplement to the site’s statistics.
The processing of personal data is carrying out by placing Facebook on your computer or other device through which you visit our fan page, the so-called cookies. (Cookies are short text – an alphanumeric string that is stored on the terminal of a visitor to our website. Cookie technology is used by many website operators and has become quite common.) These remain active for two years, unless deleted. Considering that the personal data processed in this way may also be processed by Facebook, Inc., based in the USA, personal data may be subject to cross-border transfer to third countries, in the regime of standard clauses, within the meaning of Art. 46 of the General Data Protection Regulation.
You can read all about how Facebook processes cookies in the policy on the use of cookies.
In the case of using Facebook tools (such as the “like” or “share” buttons), Facebook acts as our intermediary (terms of processing the brokerage relationship) or as an independent operator (terms and conditions for Facebook tools).
When you browse our website, Facebook creates a connection between your browser and Facebook’s servers. If you click the “like” or “share” button while logged in to your Facebook account, you can link the content of our website to your profile. If you do not want Facebook to link a visit to our site with your user account, log out of your Facebook account when you visit our site.
5. What are your rights and how can you enforce them?
As the person concerned, you have the following rights:
a. Requiring access to your personal data means that you have the right to provide a copy of the personal data, as well as information about how we use your personal data.
b. To require the correction of your personal data. This means we take reasonable steps to ensure the accuracy, completeness and timeliness of the information we have about you. If you believe that the information we hold is inaccurate, incomplete or out of date, please do not hesitate to contact us to edit, update or supplement to this information.
c. To require the deletion of your personal information.
d. To require the restrictions of the personal data processing. This means that under certain circumstances you are entitled to ask us to stop using your personal data. For example, when you think the personal information we hold about you may be inaccurate or when you think we no longer need to use your personal information.
e. To object to the processing of your personal data.
f. To require the portability of your personal information.
In order to enforce your rights, please contact us via the contact details mentioned above.
If you have any doubts about the lawfulness of the processing of your personal data, you can file a complaint with the supervisory authority, which means that if you think that we are processing your personal data unfairly or illegally, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection. Hraničná 12, 820 07 Bratislava 27; tel. number: +421 2 3231 3214; e-mail: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk.