Principles relating to personal data processing
In relation to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Collection of Laws on protection of personal data, we hereby fulfil our information obligation with respect to the processing of your personal data. Please, read the following information on how we process your personal data.
Who is your personal data controller?
The controller of your personal data is the company: Wittee, a. s., with registered office at: Na Hrebienku 12, 811 02 Bratislava, Company ID No. (IČO): 36 663 280, registered with the Companies Register of the District Court of Bratislava I, Section: Sa, Item No.: 5612/B. The controller has appointed a Data Protection Officer supervising the processing of personal data; you can contact the data protection officer via e-mail at: office@wittee.sk
What is the purpose and legal basis for processing of your personal data?
Processing based on a contract and a pre-contractual relationship:
In relation to the offer of provided services, goods and activities on our websites, in mass media and personal meetings, we process the personal data of contact persons – employees of legal entities or natural persons that expressed interest in cooperation and provided us their contact information, without consent, based on a contractual and pre-contractual relationship. In relation to the management of residential and non-residential premises, we process personal data without consent based on a contractual relationship or a specific act. The personal data obtained from the filled-in contact form on our website are used for the pre-contractual relationship purposes (e.g. request for a price bid, request for further specification of provided services, product information) and we are entitled to process them also without consent.
Consent-based processing:
We may process personal data of a job applicant in the scope of the CV or the scope of the applicant’s personal profile sent via e-mail for the purpose of entry into the electronic database of job applicants solely based on his/her voluntary consent. We obtain the consent directly from the data subject (job applicant) or from third parties (Profesia). We send the free company newsletter to our clients, via which we inform clients about our news regarding our company (direct marketing), solely based on the voluntary consent of the clients. You have the right to withdraw the consent with the processing of personal data any time, by clicking on the de-registration (disclaimer) link directly in the provided newsletter or by sending a request to the e-mail: office@wittee.sk
What entities have access to your personal data?
We use services of external suppliers that may process personal data. Processors are companies providing forwarding services, payroll processing, accounting, safety, and health protection at work and fire protection, companies providing for the training and education of our employees, application providers and suppliers of IT services and contractual partners that perform business activities on our behalf. With regard to all suppliers, we see to it that they follow the applicable laws, are bound by confidentiality obligations, and process your data solely in the scope of the concluded contracts and protect them appropriately, in compliance with the GDPR requirements, international standards, and applicable regulations.
How long will we store your personal data?
We will store your personal data during the term of the contract and during the personal data archiving period stipulated by law, the period necessary for proving legal claims or for the period necessary to achieve a purpose.
Personal data obtained from the filled-in contact form for the pre-contract relationship purposes and the provided CVs are processed for a period of no more than 1 year, unless a contract is concluded, the data will be deleted from the system.
As regards personal data obtained with your consent (for newsletter subscription, a photograph provision), we are entitled to process the data for this purpose until the consent is withdrawn.
What are your rights in relation to the processing of your personal data?
Right of access to personal data:
You have the right to ask us for confirmation of the fact that we process your personal data.
Right to personal data rectification:
You have the right to have your personal data rectified, if such data is inaccurate or incomplete.
Right to erasure (right to be forgotten):
We are obliged to erase your personal data, without undue delay, if:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
- You withdraw the consent on which the processing is based,
- where there is no other legal ground for the processing of personal data,
- If you object to the processing and there are no overriding legitimate grounds for the processing,
- You object to the processing and the personal data have been unlawfully processed,
- the personal data have to be erased for compliance with a legal obligation,
- The personal data have been collected in relation to the offer of information society services.
The controller shall not apply the request for erasure, to the extent that the processing is necessary:
- for exercising the right of freedom of expression and information,
- for compliance with a legal obligation,
- for the performance of a task carried out in the public interest,
- for reasons of public interest in the area of public health,
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes,
- for the establishment, exercise or defense of legal claims.
Right to restriction of personal data processing:
You have the right to ask us to restrict the processing of your personal data where one of the following applies:
- If you contest the accuracy of the personal data, we will restrict the processing of the data until the accuracy thereof is verified,
- If we process your personal data unlawfully and you oppose the erasure of the personal data and request the restriction of their use instead,
- we no longer need your personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims,
- you object to processing of your personal data, we will restrict the processing thereof, pending the verification whether our legitimate grounds override your grounds.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed:
- With your consent,
- for the establishment, exercise or defense of legal claims,
- for the protection of the rights of another natural person or legal entity,
- for reasons of important public interest.
Right to personal data transfer:
You have the right to receive your personal data which you have provided to us and you have the right to transmit the data to another controller (e.g. in case of a change of a certain service provider). Based on your request, we are obliged to provide you with your personal data in a structured, commonly used and machine-readable format (e.g. XML or CSV).
Who can you contact in relation to the processing of your personal data?
Our company has an appointed data protection officer. Should you have any questions or suggestions regarding the processing of your personal data or if you wish to exercise any of your rights, contact us in writing at: office@wittee.sk Furthermore, if you assume your rights have been violated, you have the right to file a complaint with the Office for Personal Data Protection (Úrad na ochranu osobných údajov).