.svg)
.svg)
Contact reception
We appreciate your trust in us when you entrust us with your personal data and we are committed to protecting your personal data so that you feel safe with us. In this document, we would therefore like to inform you how we handle your personal data, how you can contact us if you have questions about the processing of your personal data and other important information about the processing of your personal data.
When processing your personal data, we are governed by Act No. 18/2018 Coll. on the Protection of Personal Data as amended (hereinafter referred to as the "Act")and Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (hereinafter referred to as "GDPR") and related regulations.
Who we are
When processing your personal data, the controller is:
Village Spišské Bystré
Michalská 394, 059 18Spišské Bystré
00 326 542
Contact the data protection officer for the processing of personal data:
Email: osobneudaje@spisskebystre.sk
What personal data we process
We process the following categories of personal data about you:
- ordinary personal data such as identification data (name, surname, date of birth, residence), contact details (email, tel. no.), educational data;
- a specific category of personal data, in particular health-related data.
Purpose, legal basis of the processing and retention period
1. Career
Purposes and legal bases:
Recruitment: We process personal data for the purposes of the selection procedure based on your application for employment (pre-contractual relations).
Retention period:
We will keep your personal data until the end of the selection procedure.
2. Contractual relations
Purposes and legal bases:
Performance of the contract: If you are a party to a contract concluded with us (in particular contracts for the provision of accommodation services and related services, contracts for the rental of premises), the processing of your personal data is necessary for the performance of the subject matter of this agreement and related responsibilities (complaints, liability for defects) and this processing will be carried out precisely on the basis of this contract and special legislation , such as in particular Act No. 250/2007 Coll. on Consumer Protection, as amended, Act No. 40/1964 Coll. Civil Code, as amended, Act No. 513/1991 Coll. Commercial Code, as amended.
The processing of your personal data for the purpose of performing the contract may also take place if you are not a party to the contract, but this agreement is otherwise related to you, e.g. you are the contact person (employee) for our contractual partner (your employer) specified in the contract and thus we will work your personal data with the basis of our legitimate interest , as we need to process them to the extent necessary, since there are links between you and our supplier and without the processing of your personal data we would not be able to properly secure our business activities and perform the contract.
Retention period:
We retain your personal data for as long as this purpose of processing (proper performance of the contract) and the expiry of the time limit for making any claims, but up to 3 years from the fulfilment of the subject matter of the contractual relationship, has been fulfilled. We keep accounting documents related to contracts for a period of 10 years after the year to which they relate for the purpose of processing and maintaining accounting, accounting and economic documents.
3. Communication
Purpose and legal basis:
Mutual communication: If you contact us on any matter through any communication channel (post, e-mail or telephone), we process your personal data for the purpose of contact with you. We process personal data to communicate with you at your request. We process the records of incoming and outgoing mail on the basis of a special law.
Retention period:
We will retain your personal data for a period of one year from the end of the individual communication. We will keep records of incoming and outgoing mail for 5 years after the year to which it relates.
4. Recovery of receivables and litigation
Purposes and legal basis:
We may process your personal data for the purpose of debt collection and litigation. The legal basis for such processing is our legitimate interest in defending and asserting our legal claims.
Retention period:
We keep the personal data behind this purpose for a maximum of 10 years after the legal termination of the litigation or until the claim is recovered.
5. Epidemiological measures at entry into service
Purpose and legal basis:
If you enter our premises, we will process your personal data in order to control the entrance to our premises for the purpose of observing the specified regime according to the currently valid decree of the Public Health Authority of the Slovak Republic or other legislation. We carry out this processing on the legal basis of Art. 6(1)(b).c) GDPR in conjunction with Art. 9(2)(g),(i) GDPR (referring in particular to act No. 355/2007 Coll. on protection, promotion and development of public health and the currently valid decree of the Public Health Authority of the Slovak Republic).
Retention period:
There is no retention of data.
Fulfillment of our legal obligations
When processing your personal data for individual purposes, your personal data are also processed on the basis of various special regulations that impose various obligations on us, e.g. processing of accounting, accounting and economic documents, registry administration, disclosure, disclosure, provision of data to state and other authorities that supervise our activities or which resolve disputes or in the implementation of decisions. Such special regulations are e.g. Act No. 40/1964 Coll. Civil Code, Act No. 513/1991 Coll. Commercial Code, Act No. 311/2001 Coll. Labour Code, Act No. 102/2014 Coll. on Consumer Protection, Act No. 222/2004 Coll., on Value Added Tax, Act No. 431/2002 Coll., on Accounting, Act No. 395/2002 Coll. on Archives and Registries.
Retention period:
It will depend on the obligation to be fulfilled by a specific regulation.
The need to provide personal data
If the provision of personal data is a legal or contractual requirement or a requirement necessary for the conclusion of the contract, the data subject is obliged to provide personal data. Otherwise, the purpose of the processing that the controller intended to carry out in the case of the provision of personal data will not be able to be fulfilled.
Provision and disclosure of your personal data
We may generally disclose and/or disclose your personal data to other entities such as the tax office, state administration and public authorities for the exercise of control and supervision (e.g. labour inspectorate), courts, law enforcement agencies, accountants, auditors, lawyers, suppliers of IT systems and support, and other external professional advisors, and other companies that provide us with products and services. We are responsible for the proper protection of your personal data, which are provided and/or made available to other entities in their capacity as processors. An up-to-date list of specific recipients of personal data can be provided upon request via our email address.
Transfer of personal data to a third country or international organisation
The controller does not or intends to transfer personal data to a third country or international organisation.
Automated decision-making, including profiling
When processing personal data for the purposes set out above, automated decision-making or profiling is not carried out.
Your rights as a data subject in the processing of personal data
· Right of access
Put simply, you have the right to know what data we process about you, for what purpose, for what purpose, for what time, for what time, when we collect your personal data, to whom we provide it, who processes it in addition to us, and what other rights you have related to the processing of your personal data. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not the personal data concerning you are processed by us and, if so, you have the right to access this personal data. As part of the right of access, you can ask us for a copy of the personal data processed, and we will provide you with the first copy free of charge and other copies already with a fee. However, the rights of third parties cannot thereby be restricted.
· Right to rectification
Personal data must be correct, up-to-date and true. If you find that the personal data we process about you are inaccurate or incomplete, you have the right to have them corrected without undue delay or supplemented. By exercising this right, you will help us to keep your personal data correct and up to date.
· Right to erasure
In some cases, you have the right to have your personal data deleted. We will delete your personal data without undue delay if one of the following reasons is fulfilled:
- we no longer need your personal data for the purposes for which we processed them;
- you withdraw your consent to the processing of personal data, which is the data for which your consent is necessary and at the same time we have no other basis or reason for their further processing;
- you will exercise your right to object to the processing of personal data that we process on the basis of our legitimate interests and we find that no such legitimate reasons on our part outweigh your legitimate reasons, or
- you believe that the processing of personal data carried out by us has been carried out unlawfully.
But please keep in mind that even if this is one of these reasons, this does not mean that we will immediately delete all your personal data. This right is not permitted if the processing of your personal data continues to be necessary to fulfil our legal obligation or to establish, exercise or defend our legal claims.
· Right to restriction of processing
In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you to require, in certain cases, that your personal data be marked and that this data is not subject to any further processing operations - in this case not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:
- you deny the accuracy of the personal data for a period enabling us to verify the accuracy of your personal data;
- We process your personal data unlawfully, but you will only prioritise restricting them over erasure of such data;
- We no longer need your personal data for the above-mentioned processing purposes, but you require them to prove, exercise or defend your legal claims, or
- you object to the processing, namely the period during which we determine whether your objection is justified.
· Right to data portability
You have the right to obtain from us all your personal data that you yourself have provided to us and which we process. We will provide you with your personal data in a structured, commonly used and machine-readable format and in this context you may exercise your right to transfer this data to the other controller, as long as such transfer is technically possible. In order to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. However, the rights of third parties cannot thereby be restricted.
· Right to object to processing
You have the right to object at any time to the processing of personal data that takes place on the basis of our legitimate interest. We may not further process this personal data unless compelling legitimate reasons for such processing have been demonstrated that outweigh your interests, rights and freedoms, or the reasons for proving, exercising or defending legal claims. You also always have the right to object to the processing of your personal data if these are processed for direct marketing purposes. In this case, we will immediately stop processing your personal data for direct marketing purposes.
· Right to lodge a complaint
If you believe that we process your personal data unlawfully or in violation of generally binding legal regulations, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic against the processing of personal data carried out by us.
· Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data at any time if personal data are processed on this legal basis.
How and where you can exercise your rights
If you have any questions about this document or the use of your personal data, or if you wish to exercise your rights described in this document, you may, by e-mail, in writing or in person, at the address of our company's registered office.
We will respond to your request regarding the processing of personal data without undue delay in any case within one month of receiving it. In specific cases, the time limit may be extended by a further two months, but in any case we will inform you of the reasons for the extension within one month of receipt of the request. The information shall be provided free of charge. However, should your requests be disproportionate or frequently repetitive, we may require a reasonable administrative fee for their handling.
Safety
We have taken the necessary legal, organizational, substantive and technical measures to protect personal data that comply with data security and privacy standards. If we provide and/or disclose personal data to a third party who provides the services necessary for the fulfilment of any of the purposes of the processing of personal data, such third party, in his capacity as a processor, shall also have appropriate measures taken to protect the confidentiality, integrity and security of the personal data. We have also taken the necessary steps to ensure that the personal data we process are reliable, accurate and fully for the purpose of their use.
