Operator’s declaration on the processing of personal data
In this section we provide information on the processing and protection of personal data within the meaning of Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain acts (hereinafter referred to as the “Act on the Protection of Personal Data”).
The company ADEWIS, spol. s r.o. with its registered office at Rastislavova 783/388, Company ID: 47737841 (hereinafter referred to as the “operator”), has adopted appropriate technical and organizational measures to ensure the protection of the rights of data subjects, which declare the lawful processing of personal data. The operator has also implemented a transparent system for recording security incidents and any questions from the data subject, as well as other persons.
If necessary, the data subject can also obtain individual information by phone at: 0918 988 499 or by e-mail: info@adewis.sk
1. Controller
ADEWIS, spol. s r.o.
Rastislavova 783/388
951 41 Lužianky
IČO: 47737841
We process your data for our own purposes as the Controller. This means that we determine the purpose for which we collect your personal data, determine the means of processing and are responsible for their proper implementation.
2. Processors
In certain cases, the Controller may also process the personal data of data subjects through processors who are authorized to process personal data in accordance with Article 28 of the GDPR. Processors process the personal data of data subjects on behalf of the Controller. The processing of personal data through a processor does not negatively affect the exercise and application of the rights of the data subject. The Controller only uses processors that provide appropriate technical, organizational and other measures so that the processing meets the requirements of the GDPR and fully ensures the protection of the rights of the data subject. When processing the personal data of the data subjects, the operator uses the following categories of intermediaries: a supplier providing services in the field of accounting and tax obligations of the operator Categories of recipients of personal data: persons acting on the basis of the operator’s authorization, legal representative, auditor, state administration and public authorities for exercising control and supervision.
3.Purpose of processing personal data
As the controller, we exclusively process personal data that we can substantiate with a legitimate legal basis and a defined purpose:
• after the establishment of a contractual relationship between the controller and the data subject, with the necessary cooperative communication, the data processing takes place again in accordance with Article 6 (1) (b) of the GDPR, which is necessary for the fulfillment of the contractual relationship.
• if you are looking for a job and would like to work for our company, you can leave us your CV with a motivation letter based on the consent granted to the processing of personal data in accordance with Article 6 (1) (a) of the GDPR. We include the data received in this way in the register of job applicants. You can revoke your consent at any time.
• when responding to an inquiry, suggestion or question submitted physically, by telephone or in the form of electronic/paper mail, for the purpose of responding back to the person concerned, we apply the legal basis for processing Art. 6, para. 1, letter f) of the GDPR Regulation – legitimate interest of the operator. As the person concerned, you have the right to object to such processing at any time.
• when expressing interest in our services or products, when planning to establish cooperation, the legal basis for data processing is Art. 6, para. 1, letter b) of the GDPR Regulation – when data processing is necessary to carry out necessary measures before concluding a contract, i.e. during the pre-contractual relationship process.
4. Period of processing and storage of your personal data
We must store your personal data that we have processed or are processing pursuant to Article 6(1)(b) of the GDPR – within the framework of fulfilling the obligations of the controller, for the purpose of fulfilling our legal obligations in the field of taxes and accounting, which arise from generally binding legal regulations (e.g. keeping individual accounting records and invoicing pursuant to Act No. 431/2002 Coll. on accounting, as amended, for cases of proving compliance with tax obligations pursuant to tax regulations Act No. 595/2003 Coll. on income tax, Act No. 563/2009 Coll. on tax administration, etc.), for the period specified in the relevant legal regulations. In any case, we follow the principle of minimization of personal data storage pursuant to Article 5(1)(e) of the GDPR and therefore your personal data that is not subject to archiving under special legal regulations will be deleted or nonymized.
Personal data processed pursuant to Article 6(1)(a) of the GDPR – based on consent granted, e.g. with the inclusion of the data subject in the register of job applicants, we process it for a period of 3 years, or until its withdrawal. In the event of the end of the data processing period, we will contact the data subject, when it is possible to renew the consent to the processing of personal data for a defined purpose and extend it for the following processing period. If the data subject does not grant consent for the following period or does not respond to the contact made, we will no longer process the data subject’s personal data – i.e. we will automatically remove the data from the records, we will technically delete electronic data from the systems and we will physically shred it.
Personal data processed pursuant to Art. 6 para. 1 letter f) of the GDPR Regulation – based on a legitimate interest, which were obtained in response to a submitted inquiry/invitation or question for the purpose of a feedback aimed at satisfying the data subject and, after being processed, were not subsequently forwarded to a pre-contractual or contractual relationship, are deleted immediately.
As the Controller, we will ensure the deletion of personal data without undue delay after: all contractual relationships between you and us as the operator have been terminated; and/or
- all your obligations to the operator have ceased; and/or
- all your complaints and requests have been resolved; and/or
- all other rights and obligations between you and us as the controller have been settled; and/or
- all processing purposes established by law or processing purposes for which you have given us consent have been fulfilled, if the processing was carried out on the basis of the consent of the data subject; and/or
- the period for which consent was granted has expired or the data subject has withdrawn their consent; and/or
- the data subject’s request for erasure of personal data has been granted and one of the reasons justifying the granting of this request has been met; and/or
- the decisive legal event for the termination of the purpose of processing has occurred and at the same time the protective retention period defined with regard to the principle of minimization of the retention period of personal data has expired
- and at the same time the legitimate interest of the operator no longer exists, all obligations set out in generally binding legal regulations that require the retention of the personal data of the data subject (in particular for the purposes of archiving, tax control, etc.) have ceased to exist, or which would not be possible to fulfil without their retention.
We do not systematically process any accidentally obtained personal data for any purpose defined by us. If possible, we will inform the data subject to whom the accidentally obtained personal data belongs about their accidental acquisition and, depending on the nature of the case, we will provide them with the necessary cooperation leading to the restoration of control over their personal data. Immediately after these necessary actions aimed at resolving the situation, we will immediately destroy all accidentally obtained personal data in a secure manner.
If you are interested in further information about the specific retention period of your personal data, please contact us using the contact details provided.
5. Disclosure of data
Our company does not disclose the data obtained under any circumstances.
6. Cross-border transfer of personal data
There is no cross-border transfer.
7. Rights and obligations of the data subject
The data subject is obliged to provide only complete and true data. The data subject undertakes to update his/her data in the event of a change, at the latest before the first order following the change occurs. The data subject undertakes that if he/she provides personal data of a third party (name, surname, telephone number), he/she does so only with his/her consent and the data subject is familiar with the procedures, rights and obligations stated on this page.
As a data subject, you have the right to decide on the handling of your personal data to the extent specified. You can exercise the above rights in person at the registered office of the Controller or by telephone – in writing (by post / e-mail). We will try to respond to you as soon as possible, but we will always respond to you no later than 30 days from the receipt of your request. The applicable legal regulations and the GDPR Regulation or the Act provide you with the following in particular: Right of access – You have the right to request confirmation from us as to whether your personal data is being processed, and if so, to obtain a copy of this data and additional information pursuant to Art. 15 of the Regulation or Section 21 of the Act. In the event that we obtain a large amount of data about you, we may require you to specify your request for the specific data that we process about you. Right to rectification – In order to ensure that we only process up-to-date personal data about you, we need you to notify us of any changes as soon as possible. If we process incorrect data about you, you have the right to request their correction. Right to erasure – If the conditions of Article 14 of the Regulation or Section 23 of the Act are met, you may request the erasure of your personal data. You may therefore request erasure, for example, if you have withdrawn your consent to the processing of personal data and there is no other legal basis for the processing, or if we process your personal data unlawfully, or the purpose for which we processed your personal data has ceased to exist and we do not process it for another compatible purpose. However, we will not erase your data if it is necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing – If the conditions of Article 18 of the Regulation or Section 24 of the Act are met, you may request that we restrict the processing of your personal data. You may therefore request restriction, for example, when you contest the accuracy of the data being processed or when the processing is unlawful and you do not want us to erase the data, but you need the processing to be restricted while you exercise your rights. We will continue to process your data if there are grounds for establishing, exercising or defending legal claims.
Right to portability – If the processing is based on your consent or carried out for the purpose of fulfilling a contract concluded with you and is carried out by automated means, you have the right to receive from us the personal data that we have collected from you in a commonly used machine-readable format. If you are interested in this and it is technically possible, we will transfer your personal data directly to another controller. This right will not be applicable to processing carried out for the purpose of fulfilling a task carried out in the public interest or in the exercise of official authority.
Right to object to processing – If we process your personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or if the processing is carried out on the basis of our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. Based on your objection, we will restrict the processing of your personal data and, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims, we will no longer process your personal data and will erase your personal data. You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing. After you have objected, we will no longer process your personal data for this purpose.
Right to lodge a complaint – If you believe that the processing of your personal data is in conflict with the Regulation or the Law, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular in the Member State of your habitual residence, place of work or place of alleged infringement. For the territory of the Slovak Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at: Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, website: www.dataprotection.gov.sk, tel.: +421 /2/ 3231 3220.
Right to withdraw consent – If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the processing already carried out. If at any later time you decide that you are interested in receiving commercial and marketing offers from us about our products and services again, you can grant your withdrawn consent (or objection) again at any time, using any of the above-mentioned forms of contact.
8. Contact details of the Personal Data Protection Office
Personal Data Protection Office of the Slovak Republic
Address:
Hraničná 12
820 07, Bratislava 27
Slovak Republic
IČO: 36 064 220
Registration office:
Monday – Thursday: 8:00 – 15:00
Friday: 8:00 – 14:00
Telephone consultations in the field of personal data protection:
Tuesday and Thursday from 8:00 to 12:00 +421 2 323 132 20
Secretariat of the Chairman of the Office +421 2 323 132 11
Secretariat of the Office +421 2 323 132 14
Fax: +421 2 323 132 34
Speaker mobile: 0910 985 794
a) generally:
b) for the provision of information pursuant to Act No. 211/2000 Coll.:
c) website:
d) for submitting requests for the provision of information pursuant to Act No. 211/2000 Coll. on free access to information, use the online form.
e) email address through which the Office will provide you with advice in the area of personal data protection. It is intended for children, youth, students, teachers, parents who suspect that their personal data has been misused:
A sample of the proposal to initiate proceedings on the protection of personal data can be found on the Office’s website.