Basic information
We access your personal data responsibly and therefore in the sense of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC ( General Data Protection Regulation) (hereinafter referred to as the “GDPR Regulation”) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and addition of certain laws (hereinafter referred to as “the Law”), to you as the affected person (a natural person whose personal data is processed) on your website in addition to your identification and contact data and the contact data of the responsible person, we also make other necessary information available in the tabs on the left.
Operator – company Mgr. Katarína Bielovič, registered in the trade register of the Žiar nad Hronom District Office, trade register number 110-237250, registered office at Lietajova cesta 6340/17, 96801 Nová Baňa, ID number: 47 994 291, within the meaning of art. 24 of the GDPR regulation and section § 31 of the Act proceeded with the adoption of adequate technical, organizational, personnel and security measures and guarantees, which mainly take into account:
the principles of personal data processing, which are legality, fairness and transparency, limitation and compatibility of the purposes of personal data processing, further minimization of personal data, their pseudonymization and encryption, as well as integrity, confidentiality and availability,
the principles of necessity and adequacy (it also applies to the scope and amount of processed personal data, storage period and access to the personal data of the person concerned) of processing personal data with regard to the purpose of the processing operation,
taking measures to immediately determine whether there has been a breach of personal data protection and promptly informing the supervisory authority and the responsible person
the nature, scope, context and purpose of the processing operation,
resilience and restoration of personal data processing systems,
instructing authorized persons of the operator,
taking measures to ensure the correction or deletion of incorrect data, or the realization of other rights of the person concerned,
risks of varying probability and severity for the rights and freedoms of natural persons (in particular, accidental or illegal destruction of personal data, loss or alteration of personal data, misuse of personal data – unauthorized access or unauthorized provision, assessment of risks with regard to the origin, nature, probability and severity of the risk in relation to processing and to identify best practices for risk mitigation).
Processing activities of the operator
Wages and HR
The purpose of processing personal data – maintaining the salary and personnel agenda of employees working for the employer who is the operator, in an employment relationship, or in another relationship (e.g. agreements on the performance of work, etc.). .
Categories of processed personal data – name, surname, maiden surname, previous surname, title, permanent/temporary residence, date of birth, place of birth, birth number, nationality, citizenship, gender, bank account of a natural person, marital status, education, experience , ID number, signature, basic salary, personal evaluation, job and functional classification, day of work start, salary classification, place of work, email address, telephone number, data for statistics, name of health insurance company, data from supplementary pension savings account contract , SDS saver data, data on time worked, amounts affected by the execution of a decision ordered by a court or an administrative authority, fines and fines, as well as compensation imposed on an employee by an enforceable decision of the competent authorities, data on incapacity for work, data on important personal obstacles to work, data on changed work ability, degree of disability, data from the employment certificate, data on the employee’s record in the register of unemployed citizens, data on the use of maternity leave and parental leave, data on the granting of a pension, on the type of pension, annual total of pension paid, legal capacity, data from a certificate of integrity, personal data processed on confirmations, certificates of passed exams and educational activities, data listed in the curriculum vitae or other, if required by a special legal regulation or other legal basis for processing personal data.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – employees of the operator, former employees of the operator, job seekers, family members of the operator’s employees.
Provision of personal data to third parties – courts, authorities active in criminal proceedings, health insurance companies, Social Insurance, supplementary pension savings banks, pension management companies, tax office, executors, state administration and public authorities for control and supervision (e.g. labor inspectorate) , the Labor, Social Affairs and Family Headquarters of the Slovak Republic, employee representatives, inspectors of the Personal Data Protection Office of the Slovak Republic, other authorized entities in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Fulfilling the employer’s obligations towards the health insurance company – 10 years
Fulfilling the employer’s obligations towards the social insurance company – 10 years
Compliance with tax obligations – 10 years
Foreclosures – 20 years
Records of attendance, vacations – 5 years
Employer’s wage policy – 72 years
Fulfilling the employer’s obligations in connection with an employment law or similar relationship – 72 years
Legal basis for personal data processing – Council Regulations (EEC) No. 311/76 on compiling statistics of foreign workers, Council Regulation (EEC) no. 1612/68 on the freedom of movement of workers within the community, Act no. 18/2018 Coll. on the protection of personal data and on amendments to certain laws, Act No. 311/2001 Coll. Labor Code, Act No. 552/2003 Coll. on the performance of works in the public interest, as amended, Act No. 553/2003 Coll. on the remuneration of certain employees for the performance of work in the public interest and on the amendment and supplementation of certain laws, as amended, Act No. 595/2003 Coll. on income tax, as amended, Act No. 563/2009 Coll. on tax administration (tax code) and on amendments to certain laws as amended, Act no. 461/2003 Coll. on social insurance as amended, Act no. 600/2003 Coll. on child allowance and on amendments to Act no. 461/2003 Coll. on social insurance as amended, Act no. 462/2003 Coll. on compensation of income in case of temporary incapacity for work of an employee and on amendments and additions to certain laws as amended, Act no. 580/2004 Coll. on health insurance and on amendments to certain laws, as amended, Act no. 650/2004 Coll. on supplementary pension savings, as amended, Act no. 448/2008 Coll. on social services, as amended, Act no. 5/2004 Coll. on employment services, as amended, Act no. 82/2005 Coll. on illegal work and illegal employment, as amended, Act No. 152/1994 Coll. on the social fund and on amendments to Act no. 286/1992 Coll. on income taxes, as amended, Act no. 43/2004 Coll. on old-age pension savings, Act no. 570/2005 Coll. on conscription, Act no. 42/1994 Coll. on civil protection of residents, as amended, by Act no. 314/2001 Coll. on fire protection, Act no. 124/2006 Coll. on safety and health protection at work, Act no. 355/2007 Coll. on the protection, support and development of public health and related legal regulations, Act no. 179/2011 Coll. on economic mobilization and on amendments to Act no. 387/2002 Coll. on managing the state in crisis situations outside of wartime and martial law, as amended, Act No. 215/2004 Coll. on the protection of classified information and on the amendment of certain laws, as amended, Act No. 233/1995 Coll. on bailiffs and enforcement activities (Executive Regulations), Act No. 663/2007 Coll. on the minimum wage, Act No. 317/2009 Coll. on teaching staff and professional staff and on amendments to certain laws, Act no. 283/2002 Coll. on travel reimbursements.
Accounting documents
The purpose of processing personal data – processing orders, incoming and outgoing invoices, dealing with banks, managing cash registers, securing cash income and expenses, warehouse management, recording of investment property (including automatic depreciation) and small property, keeping single / double-entry bookkeeping of the organization.
Categories of processed personal data – title, first name, last name, address, telephone number, e-mail address, date of birth, type and number of identity document, EČV, signature, bank account number or others, if required by a special legal regulation or other legal basis processing of personal data.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – employees of the operator, former employees of the operator, cooperating subjects of the operator (e.g. suppliers or subcontractors).
Provision of personal data to third parties – courts, authorities active in criminal proceedings, health insurance companies, Social Insurance Company, tax office, inspectors of the Slovak Personal Data Protection Office, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Invoice books – 10 years
List of claims and liabilities – 10 years
Invoices – 10 years
Treasury agenda – 10 years
Accounting documents – 10 years
Bank statements – 10 years
General ledgers – 20 years
Financial statements – 10 years
Financial statements – 10 years
Annual tax settlement – 10 years
Legal basis for personal data processing – Act No. 431/2002 Coll. on accounting, as amended, Act no. 222/2004 Coll. on value added tax, as amended, Act no. 18/2018 Coll. on the protection of personal data and on amendments to certain laws, Act no. 145/1995 Coll. on administrative fees as amended, Act no. 40/1964 Coll. Civil Code, as amended, Act No. 152/1994 Coll. on the social fund and on amendments to Act no. 286/1992 Coll. on income taxes, as amended, Act no. 311/2001 Coll. Labor Code, Act No. 400/2009 Coll. on the civil service and on the amendment and supplementation of certain laws, as amended, Act No. 513/1991 Coll. Commercial Code, as amended, Act No. 583/2004 Coll. on the budgetary rules of the territorial self-government and on the amendment and supplementation of certain laws, Act no. 283/2002 Coll. on travel reimbursements, Act No. 55/2017 Coll. on civil service and on amendments to certain laws, Act No. 595/2003 Coll. on income tax, as amended, Act No. 582/2004 Coll. on local taxes and the local fee for municipal waste and small construction waste, as amended.
Health and safety
The purpose of processing personal data – fulfilling the obligations of the operator, as an employer, which are related to an employment relationship, a state employee relationship or a similar relationship, within the framework of which there is the provision of professional and consulting services in the field of safety and protection and support of health at work, fire protection and occupational health services.
Categories of processed personal data – title, first name, last name, residence, registered office, signature, specialization, department, or others, if required by a special legal regulation or other legal basis for processing personal data.
Special categories of personal data processed – health status.
Categories of affected persons – employees of the operator, occupational health service providers, safety technicians, fire protection technicians.
Provision of personal data to third parties – courts, authorities active in criminal proceedings, Social Insurance, labor inspectorates, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Records of occupational accidents – 5 years
Fulfilling the employer’s obligations in the area of safety and health protection – 5 years after the termination or termination of the obligation
Documentation of training and retraining in the field of health and safety – 5 years
Legal basis for personal data processing – Art. 9 point 2 letter b) REGULATIONS OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic no. 147/2013 Coll., which establishes details for ensuring safety and health protection in construction works and works related to them and details about professional competence to perform certain work activities, Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic no. 356/2007 Coll., which establishes details on the requirements and scope of educational and educational activities, on the education and training project, keeping prescribed documentation and verifying the knowledge of participants in educational and educational activities, Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic no. . 45/2010 Coll., establishing details for ensuring safety and health protection in agricultural work, Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic no. 46/2010 Coll., which establishes details for ensuring safety and health protection during forest work and details about professional competence to perform certain work activities and to operate certain technical equipment, Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic no. 500/2006 Coll., establishing a sample record of a registered occupational accident, Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic no. 508/2009 Coll., which establishes details for ensuring safety and health protection when working with pressure, lifting, electric and gas technical equipment and which establishes technical equipment that is considered reserved technical equipment, Act No. 124/2006 Coll. on safety and health protection at work and on amendments to certain laws, Act no. 311/2001 Coll. Labor Code, Act No. 355/2007 Coll. on the protection, support and development of public health, as amended.
Record of job applicants
The purpose of personal data processing – keeping records of job applicants at the operator.
Categories of processed personal data – title, first name, last name, permanent residence, temporary residence, date of birth, telephone number, education, experience, e-mail address, other data in the scope of a resume, motivation letter and application for employment.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of data subjects – natural persons applying for employment with the operator.
Provision of personal data to third parties – courts, authorities active in criminal proceedings, the Central Office of Labor, Social Affairs and Family of the Slovak Republic, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Employment applications and application responses – 5 years
Legal basis for personal data processing – Art. 6 par. 1 letter a) REGULATIONS OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, section § 13 par. 1 letter a) Act no. 18/2018 Coll. on the protection of personal data and on amendments to certain laws, Act no. 311/2001 Coll. Labor Code, Act No. 5/2004 Coll. on employment services and on amendments to certain laws.
Records of contracts concluded by the operator
The purpose of personal data processing – records of contracts concluded by the operator.
Categories of processed personal data – name, surname, title, date of birth, birth number, permanent or temporary residence, account number, bank name, identity card number, and other data related to the subject of the contract concluded by the operator.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – natural persons whose personal data are the content of the concluded contract.
Provision of personal data to third parties – courts, law enforcement agencies, inspectors of the Slovak Personal Data Protection Office, other authorized entities in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Legal representation – 10 years
Credit agreements – 5 years after expiration
Property – legal contracts – 50 years
Legal basis for personal data processing – Art. 6 par. 1 letter b) REGULATION OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, Act no. 40/1964 Coll. Civil Code, Act no. 513/1991 Coll. Commercial Code, as amended, Act No. 311/2001 Coll. Labour Code.
Client records
The purpose of personal data processing – client records.
Categories of processed personal data – name, surname, title, place of residence, date of birth, social security number, health insurance company, identification number of the insured.
Special categories of processed personal data – personal data related to the client’s health.
Categories of affected persons – clients, legal representatives of minor natural persons.
Provision of personal data to third parties – Health insurance companies, Social insurance companies, Labor, Social Affairs and Family Offices, courts, law enforcement agencies, Inspectors of the Slovak Personal Data Protection Office, other authorized entities in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Securing and retaining client records – 20 years after the death of the individual or 20 years after the last service was provided to the individual.
Legal basis for personal data processing – Act No. 580/2004 Coll. on health insurance and on amendments to Act no. 95/2002 Coll. on the insurance industry and on amendments to certain laws, Act no. 581/2004 Coll. on health insurance companies, supervision of health care and amendments to certain laws, Act no. 578/2004 Coll. on health care providers, health workers, state organizations in the health sector and on amendments to certain laws as amended, Act no. 461/2003 Coll. on social insurance, Act no. 18/2018 Coll. on the protection of personal data, Act no. 153/2013 Coll. on the national health information system and on amendments to certain laws, Act no. 576/2004 Coll. on health care, services related to the provision of health care and on amendments to certain laws, Act no. 577/2004 Coll. on the scope of health care paid for on the basis of public health insurance and on payments for services related to the provision of health care.
Photos and videos
The purpose of processing personal data – creating an image for the purpose of transferring it to paper or other media.
Categories of processed personal data – characteristic features that make up the physical identity of a person as a unique human being and other data more specifically specifying the physical person depicted in the photograph.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – natural persons who are depicted in the photographs.
Provision of personal data to third parties – court, law enforcement authorities, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
Photos and videos – 5 years
Legal basis for processing personal data – Art. § 11 – 16 of Act no. 40/1964 Coll. of the Civil Code, Act no. 18/2018 Coll. on personal data and on amendments to certain laws.
Records of incoming and outgoing mail (paper or e-mail)
The purpose of personal data processing – record of incoming and outgoing mail (letters, suggestions, complaints and others) in paper or electronic form.
Categories of processed personal data – name, surname, title, address, e-mail address, signature, guaranteed electronic signature and other data that may be the content of incoming or outgoing mail.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – natural persons whose personal data may be the content of incoming and outgoing mail.
Provision of personal data to third parties – courts, law enforcement authorities, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation.
Deadlines for deletion of personal data
correspondence – 3 years
Legal basis for personal data processing – Act No. 305/2013 Coll. on the electronic form of exercise of the powers of public authorities and on the amendment and supplementation of certain laws (the e-Government Act), Act No. 272/2016 Coll. on trusted services for electronic transactions in the internal market and on the amendment of certain laws (Act on trusted services), Art. 6 par. 1 letter f) REGULATION OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, § 13 par. 1 letter f) Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws, as amended.
Records of complaints
The purpose of personal data processing – record of complaints.
Categories of processed personal data – name, surname, title, residence, telephone number, e-mail, number of the claimed product, date and time of the claim.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – consumers who advertise a good or service.
Provision of personal data to third parties – courts, law enforcement agencies, inspectors of the Personal Data Protection Office of the Slovak Republic, Slovak Trade Inspection.
Deadlines for deletion of personal data
complaints about goods and services – 5 years
correspondence – 3 years
Legal basis for personal data processing – Act No. 40/1964 Coll. Civil Code, as amended, Act No. 395/2002 Coll. on archives and registries and on the addition of certain laws, Act no. 250/2007 Coll. on consumer protection and on the amendment of Act of the Slovak National Council No. 372/1990 Coll. on offenses as amended, Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws.
Marketing
The purpose of personal data processing – sales support – marketing offers, newsletter, information about products and news.
Categories of processed personal data – name, surname, place of residence, e-mail, phone number, date of birth
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – clients
Provision of personal data to third parties – courts, law enforcement agencies.
Deadlines for deletion of personal data
correspondence – 3 years
contracts – 10 years
Legal basis for personal data processing – Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws.
Camera information system
The purpose of personal data processing – protection of property and other legitimate interests of the operator.
Categories of processed personal data – audio-visual recording from cameras.
Special categories of personal data processed – special categories of personal data are not processed.
Categories of affected persons – natural persons captured by the camera information system.
Provision of personal data to third parties – courts, law enforcement agencies.
Deadlines for deletion of personal data
camera recording for a maximum of 72 hours.
Legal basis for personal data processing – 13 par. 1 letter f) Act no. 18/2018 Coll. on personal data protection and amendments to certain laws, Art. 6 par. 1 letter f) and Art. 35 par. 3 letters c) REGULATIONS OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data.
Cross-border transfer of personal data does not take place in any of the categories.