Principles relating to personal data processing
In relation to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Collection of Laws on protection of personal data, we hereby fulfil our information obligation with respect to the processing of your personal data. Please, read the following information on how we process your personal data.
Who is your personal data controller?
The controller of your personal data is the company: Wittee, a. s., with registered office at: Na Hrebienku 12, 811 02 Bratislava, Company ID No. (IČO): 36 663 280, registered with the Companies Register of the District Court of Bratislava I, Section: Sa, Item No.: 5612/B. The controller has appointed a Data Protection Officer supervising the processing of personal data; you can contact the data protection officer via e-mail at: firstname.lastname@example.org
What is the purpose and legal basis for processing of your personal data?
Processing based on a contract and a pre-contractual relationship:
In relation to the offer of provided services, goods and activities on our websites, in mass media and personal meetings, we process the personal data of contact persons – employees of legal entities or natural persons that expressed interest in cooperation and provided us their contact information, without consent, based on a contractual and pre-contractual relationship. In relation to the management of residential and non-residential premises, we process personal data without consent based on a contractual relationship or a specific act. The personal data obtained from the filled-in contact form on our website are used for the pre-contractual relationship purposes (e.g. request for a price bid, request for further specification of provided services, product information) and we are entitled to process them also without consent.
We may process personal data of a job applicant in the scope of the CV or the scope of the applicant’s personal profile sent via e-mail for the purpose of entry into the electronic database of job applicants solely based on his/her voluntary consent. We obtain the consent directly from the data subject (job applicant) or from third parties (Profesia). We send the free company newsletter to our clients, via which we inform clients about our news regarding our company (direct marketing), solely based on the voluntary consent of the clients. You have the right to withdraw the consent with the processing of personal data any time, by clicking on the de-registration (disclaimer) link directly in the provided newsletter or by sending a request to the e-mail: email@example.com
What entities have access to your personal data?
We use services of external suppliers that may process personal data. Processors are companies providing forwarding services, payroll processing, accounting, safety, and health protection at work and fire protection, companies providing for the training and education of our employees, application providers and suppliers of IT services and contractual partners that perform business activities on our behalf. With regard to all suppliers, we see to it that they follow the applicable laws, are bound by confidentiality obligations, and process your data solely in the scope of the concluded contracts and protect them appropriately, in compliance with the GDPR requirements, international standards, and applicable regulations.
How long will we store your personal data?
We will store your personal data during the term of the contract and during the personal data archiving period stipulated by law, the period necessary for proving legal claims or for the period necessary to achieve a purpose.
Personal data obtained from the filled-in contact form for the pre-contract relationship purposes and the provided CVs are processed for a period of no more than 1 year, unless a contract is concluded, the data will be deleted from the system.
As regards personal data obtained with your consent (for newsletter subscription, a photograph provision), we are entitled to process the data for this purpose until the consent is withdrawn.
What are your rights in relation to the processing of your personal data?
Right of access to personal data:
You have the right to ask us for confirmation of the fact that we process your personal data.
Right to personal data rectification:
You have the right to have your personal data rectified, if such data is inaccurate or incomplete.
Right to erasure (right to be forgotten):
We are obliged to erase your personal data, without undue delay, if:
The controller shall not apply the request for erasure, to the extent that the processing is necessary:
Right to restriction of personal data processing:
You have the right to ask us to restrict the processing of your personal data where one of the following applies:
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed:
Right to personal data transfer:
You have the right to receive your personal data which you have provided to us and you have the right to transmit the data to another controller (e.g. in case of a change of a certain service provider). Based on your request, we are obliged to provide you with your personal data in a structured, commonly used and machine-readable format (e.g. XML or CSV).
Who can you contact in relation to the processing of your personal data?
Our company has an appointed data protection officer. Should you have any questions or suggestions regarding the processing of your personal data or if you wish to exercise any of your rights, contact us in writing at: firstname.lastname@example.org Furthermore, if you assume your rights have been violated, you have the right to file a complaint with the Office for Personal Data Protection (Úrad na ochranu osobných údajov).