evo-servis sk

Privacy Policy

 

We take a responsible approach to the protection of your personal data and strive to ensure your right to information. In processing personal data, we also adhere to the principles of lawfulness, purpose limitation, minimisation of the scope and storage, accuracy, integrity, confidentiality and accountability, with particular emphasis on security and protection of personal data.

As of May 25, 2018, the processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation or "GDPR"), and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws ("Personal Data Protection Act").

In accordance with Articles 13 and 14 of the GDPR and Section 19 of the Personal Data Protection Act, evo-servis sk s. r. o. is obliged to provide you with the following information:

1. Operator's contact details

The data controller (Article 4 point 6 GDPR and § 5 letter o) of the Personal Data Protection Act) is the company evo-servis sk s. r. o., with registered headquarters Zámocká 1063/8 901 01 Malacky, ID No.: 50983075, registered in the Commercial Register of the District Court Bratislava III, Section Sro, Insert No. 121103/B, contact details: tel:
+421 915 534 291, e-mail: , ("the Company"). 

2. Purpose of personal data processing

The company processes your personal data in order to ensure the quality of its services and to know some of the personal data of the data subjects and needs to provide them to other recipients in order to comply with its legal obligations.

The company processes the personal data provided for several purposes:

  • processing of contractual and pre-contractual obligations
  • processing of the personnel and payroll agenda
  • processing of the accounting agenda

3. Legal basis for the processing of personal data

The company processes your personal data in accordance with the current and valid law. The legal basis for the processing of personal data is:

  • specific legislation, in particular:
    • Social Insurance Act, Labour Code, applicable payroll and accounting regulations, Commercial Code, Civil Code, Trade Licensing Act, Occupational Health and Safety Act
  • consent of the data subject to the processing of personal data, depending on the purpose of personal data processing
  • fulfillment of a contract of which the person concerned is a party
  • processing of personal data to protect the life, health or property of the data subject
  • the legitimate interest of the company.

The company also processes personal data without the data subject's consent if:

a) the purpose of personal data processing, the scope of data subjects, and the list of personal data or their extent are determined by a directly enforceable legal act of the European Union, an international treaty to which the Slovak Republic is bound, or by this law. If the list or scope of personal data is not specified, the company may process personal data only to the extent and in a manner necessary to achieve the specified purpose of processing while adhering to the basic obligations under § 13 paragraphs 3 letters a) to e) i) of the Personal Data Protection Act.

b) the company further processes personal data without the consent of the data subject if the purpose of processing personal data, the scope of data subjects, and the list of personal data are specified by a special law, but only to the extent and in the manner determined by the special law. Processed personal data may be provided, made accessible, or disclosed only when a special law specifies the purpose of providing, making accessible, or disclosing, the list of personal data that may be provided, made accessible, or disclosed, as well as third parties to whom personal data is provided or the recipients to whom personal data is made accessible, unless the Personal Data Protection Act provides otherwise.

c) the processing of personal data is necessary to protect the life, health, or property of the data subject.

d) personal data that has already been lawfully made public and properly identified as such by the controller is processed; anyone claiming to process published personal data must, upon request, demonstrate to the supervisory authority that the processed personal data has already been lawfully disclosed.

e) the company processes personal data that is necessary for the protection of the rights and legitimate interests of the data controller or a third party for these purposes:

  • Securing pre-contractual/contractual relationships.

4. Recipients or categories of recipients

Recipients include employees of the company who, based on their job position and company authorization, are authorized to process personal data related to job applicants.

5. Transfer of personal data to a third country or international organization

The company does not transfer and will not transfer your personal data to a third country, nor will it transfer them to any international organization.

6. Retention period of personal data

The retention period of personal data is determined by the purpose of processing personal data and the requirements of specific regulations.

Specific retention periods are stipulated by the internal regulation, the Filing Plan of the company, prepared in accordance with the Archives and Filing Act.

The company will dispose of personal data in the prescribed manner when the purpose of processing and the retention period have expired. After the defined purpose has ended, the company is authorized to process personal data to the necessary extent for research or statistical purposes in anonymized form.

The company ensures that the personal data of the data subjects are processed in a form allowing the identification of individual data subjects for no longer than necessary to achieve the purpose of processing.

 

7. Your rights as a data subject

The data subject has the right, upon a written request to the company, to request:

  • You have the right to request access to your personal data at any time - upon your request, the company will provide you with information on what personal data it processes about you, for what purpose, from what source the personal data was obtained, to whom the personal data was provided and what is the expected retention period of the personal data.
  • You have the right at any time to request the correction of inaccurate, incomplete or outdated personal data that are the subject of processing.
  • You also have the right to request the removal of personal data that is no longer necessary for the purpose for which it was originally collected or processed.
  • You have the right to request a restriction of the processing of personal data – you can ask the company not to delete your personal data that it would otherwise be obligated to delete, and you can also request the company not to further process your personal data until it is clarified whether the processed data is accurate, or if your objection to the processing of personal data has been reasonably raised.
  • You have the right to object to the processing of your personal data at any time (only for personal data processed based on the legitimate interests of the company). If you exercise this right, your personal data will only continue to be processed by the company if there are compelling legitimate grounds for such processing.
  • You have the right to prevent the processing of personal data that you believe is or will be processed for direct marketing purposes without its consent and to request its destruction,
  • You have the right to transfer your personal data to another controller

In case you believe that your rights regarding the processing of your personal data have been violated, you have the right to lodge a complaint with the supervisory authority – the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, tel. 02 323 132 14, e-mail: , or contact the authority through its website https://dataprotection.gov.sk/uoou/sk. 

If the data subject does not have full legal capacity, their rights may be exercised by a legal representative. If the data subject is deceased, the rights they had under this law may be exercised by a close relative.

The company will process the request of the data subject under the Personal Data Protection Act free of charge, except for a fee that may not exceed the purposefully incurred material costs associated with making copies, procuring technical media, and sending information to the data subject, unless a special law provides otherwise.

The company is obligated to process the data subject's request in writing no later than 30 days from the date of receiving the request.

8. How can you exercise your rights?

You exercise your rights (including the right to withdraw consent) with the controller - the company, through one of the following ways: in writing or by email (contact details are provided in point 1 above).

9. What personal data will be processed?

The company will process the following personal data:

  • first name and surname;
  • date of birth;
  • home address or contact address;
  • achieved education (including relevant documents);
  • information about previous work experience;
  • e-mail address;
  • telephone contact.

The company has hereby informed you about the protection of your personal data and has instructed you about your rights regarding the protection of personal data within the scope of this written information obligation.