DECLARATION OF THE CONTROLLER ON THE PREPARING OF PERSONAL DATA
In this section, we provide information on the processing and protection of personal data in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) and Act of the Slovak Republic No. 18/2018 on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”).
To ensure the protection of the rights of data subjects, the controller SETL SK s.r.o. with its registered office at Partizánska 2635, 085 01 Bardejov, ID: 36823422 (the “controller”) has taken appropriate technical and organizational measures that declare the lawful processing of personal data. Furthermore, the controller has put in place a transparent system for recording security incidents and any questions from the data subject and also other persons.
If necessary, the data subject can also obtain individual information by phone: +421 915 942 244 or by e-mail: info@setl.sk.
1. Controller
SETL SK s.r.o.
Partizánska 2635
085 01 Bardejov
ID: 36823422
We process your data for our own purposes as the Data Controller. This means that we determine the purpose for which we collect your personal data, determine the means of processing and are responsible for its proper execution.
2. Recipients or categories of recipients of personal data
Categories of recipients of personal data: persons acting under the authority of the controller, legal representative, auditor, state administration bodies and public authorities for the performance of control and supervision.
During the provision of services as a recruitment agency or temporary employment agency, we are also legally obliged to provide your personal data to the Central Office of Labour, Social Affairs and Family of the Slovak Republic under the provisions of Section 31(1)(e) of Act no. 5/2004 on Employment Services, as amended (the “Central Office of Labour”). We have this obligation because of control activities in relation to work placements. We provide the Central Office of Labour with your personal data in the scope of: title, first name surname, street, city, postcode, date of employment, profession and date of birth.
Potential employers may conclude an employment relationship with the data subject, while the controller provides information about specific potential employers at a personal interview.
Processors
In certain cases, the controller may also process the personal data of data subjects through processors who are entrusted with the processing of personal data in accordance with Article 28 of the GDPR.
Processors process the personal data of data subjects on behalf of the Controller. The processing of personal data by a processor does not adversely affect the exercise of the rights of the data subject. The controller uses only processors providing appropriate technical, organizational and other measures so that the processing meets the requirements of the GDPR and the rights of the data subject are fully protected.
In processing the personal data of data subjects, the controller uses the following categories of processors:
- companies providing supplies of technical solutions, maintenance and support of IT systems used by the Operator
3. Purpose of personal data processing
As a controller, we process only personal data that we can substantiate with a legitimate legal basis and defined purpose:
- registration in the Jobseekers Register
As a candidate looking for a suitable job, you have the option of registering in the Jobseekers Register in person directly at the registered office of our company or by using the electronic registration form on the website. The receipt and processing of personal data takes place in accordance with Article 6(1)(a) of the GDPR – on the basis of consent to the processing of personal data. You have the right to withdraw your consent at any time.
- reaction to a specific job position
The receipt and processing of personal data in response to a specific job position takes place in accordance with Article 6(1)(b) GDPR – where the processing of data is necessary to take the necessary measures as required by you as the data subject prior to entering into a contractual relationship, i.e., during the pre-contractual relationship.
- Provision of candidates’ personal data to potential employers or temporary employers
In order to be able to provide you with the most suitable employment, we need to provide your personal data to employers who meet your requirements or who you meet in relation to your profession. We provide this data on the basis of the consent to the processing of personal data that you give us under Article 6(1)(a) of the GDPR. We provide your data to our business partners for the purpose of arranging an interview with a potential employer and performing other actions leading to the conclusion of an employment contract between the person concerned and the potential employer. You have the right to withdraw your consent at any time.
Before starting the process of providing your data to a potential employer or in the case of posting you as a seconded employee to a user employer, you as the data subject/candidate are fully informed in accordance with Article 13 of the GDPR regulations before the first processing operation for that purpose.
- conclusion of an employment placement agreement
We process personal data within the scope of this contract in accordance with Article 6(1)(b) of the General Data Protection Regulation and under Section 25 of Act no. 5/2004 on Employment Services and on Amendments to Certain Acts, as amended, as such processing is necessary for the performance of a contract under which you as a client interested in entering into an employment relationship with a particular company, or to apply for a specific position in the selected company. We also process this data for the purposes of mutual communication and also for the fulfilment of obligations and exercise of rights arising from this contractual relationship.
- concluding a temporary assignment agreement with the temporary work agency
In order to fulfil the purpose of the activities of a temporary employment agency under Section 29 et seq. of Act no. 5/2004 on Employment Services and on Amendments to Certain Acts, as amended, and Section 58 et seq. of Act no. 311/2001, the Labour Code, we conclude an employment relationship and an agreement on temporary assignment with the persons concerned. The processing of personal data takes place within the meaning of Article 6(1)(b) of the GDPR, where such processing is necessary for the performance of the subject of the contract to which you as a future temporary employee are party. We further process personal data within the scope of this contract also for the purposes of mutual communication and also for the fulfilment of obligations and the exercise of rights arising from this contractual relationship.
- contact form or inquiries in another form
If you want to contact us via the contact form, write us your opinion, rating, or address another issue, you can contact us and we will be happy to help you. For this purpose, we will process your contact personal data in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest in this case is to help our clients, but also to handle questions or requests or complaints of third parties. You have the right to object to such processing at any time.
4. List of processed personal data
Depending on the specific purpose of processing, we process different categories of your personal data, namely:
a) Conclusion of an Agreement on employment placement / temporary assignment of an employee
– first name surname, residence, date of birth, citizenship, e-mail, phone contact.
b) Provision of personal data of clients / temporarily assigned employees to potential employers / user employers
– first name and surname date of birth, citizenship, address of residence, telephone number, e-mail, and correspondence address, educational attainment and previous work experience, image (photograph) and other data voluntarily provided by the person concerned to the operator in the CV.
c) Contact form – online chat on the website
– name, email, message.
5. Duration of processing and storage of your personal data
Your personal data that we have processed or process under Article 6(1)(b) of the GDPR Regulation – within the fulfilment of the controller’s obligations, we further process in order to fulfil our legal obligations regarding taxes and accounting, which arise from generally binding legal regulations (for example, keeping individual accounting records and invoicing in accordance with Act no. 431/2002 on Accounting, as amended, for cases of proving compliance with tax obligations under tax legislation, Act no. 595/2003 on Income Tax, Act no. 563/2009 on Tax Administration, etc.), We must keep it for the period specified by applicable law. In any case, we follow the principle of minimizing the storage of personal data in accordance with Article 5(1)(e) of the GDPR and therefore your personal data that are not subject to archiving under specific legal regulations will be deleted or anonymized.
Personal data processed in accordance with Article 6(1)(a) of the GDPR Regulation – based on consent given, for example, with the inclusion of the data subject in the Job Seekers Register, or for the purpose of sending current marketing news, we process for a period of 3 years or until revocation of consent. At the end of the data processing period, we make contact with the data subject, when consent to the processing of personal data for a defined purpose can be renewed and extended for the following processing period. If the data subject does not give consent for the following period or does not respond to the contact made, we will no longer process the personal data of the data subject - i.e., we automatically remove the data from the records, technically delete electronic data from the system and shred physical data.
Personal data processed under Article 6(1)(f) of the GDPR Regulation – on the basis of a legitimate interest, which were obtained in response to a submitted inquiry / suggestion or question for the purpose of feedback aimed at satisfying the data subject and were not subsequently forwarded to a pre-contractual or contractual relationship after processing, are immediately deleted.
As the Controller, we will ensure the deletion of personal data without undue delay after all contractual relations between you and us as the controller have been terminated; and/or
- all your obligations to the operator have expired; and/or
- all your complaints and requests have been processed; and/or
- all other rights and obligations between you and us as the operator have been settled; and/or
- all processing purposes stipulated by law or processing purposes for which you have given us consent have been fulfilled, if the processing was carried out with the consent of the data subject; and/or
- the period for which consent was given has expired or the data subject has withdrawn their consent; and/or
- the data subject’s request for erasure of personal data has been complied with and one of the reasons justifying compliance with this request has been fulfilled; and/or
- a decisive legal fact has occurred for the termination of the purpose of processing and at the same time the protection retention period defined with regard to the principle of minimizing the retention period of personal data has expired;
- and at the same time no legitimate interest of the operator persists, all obligations stipulated by generally binding legal regulations that require the storage of personal data of the person concerned (especially for archiving purposes, tax audits, etc.) or which would not have been possible without its storage have expired.
Under no circumstances do we further systematically process any accidentally obtained personal data for any purpose defined by us. If possible, we will inform the data subject to whom the accidentally obtained personal data belong of their accidental acquisition and, depending on the nature of the case, we will provide them with the necessary cooperation leading to the restoration of control over their personal data. Immediately after these necessary actions aimed at resolving the situation, we will immediately destroy all accidentally obtained personal data in a secure manner.
If you are interested in further information about the specific retention period of your personal data, please contact us using the contact details provided.
6. Disclosure of data
Our company does not publish the obtained data in any way.
7. Cross-border transfer of personal data
The transfer of data takes place only within the EEA area. Transfers to third countries are not made or considered.
8. Rights and obligations of the data subject
- The customer is obliged to provide only complete and truthful data.
- The customer undertakes to update their data in the event of a change, at the latest before the first order following the change.
- The customer undertakes that if they provide the personal data of a third party (first name surname, telephone number), they do so only with their consent and the data subject is familiar with the procedures, rights and obligations specified on this site.
- As our client and data subject, you have the right to decide on the handling of your personal data to the specified extent. You can exercise these rights in person at the registered office of the Operator or by phone or in writing (post / e-mail).
We will endeavour to respond to you as soon as possible, but we will always respond no later than 30 days after receiving your request. Valid legal regulations and the GDPR Regulation or the Act provide you in particular with:
Right of access – You have the right to request from us confirmation as to whether your personal data is being processed and, if so, to obtain a copy of this data and additional information resulting from Article 15 of the Regulation or Section 21 of the Act. If we collect a large amount of data about you, we may require you to specify your request for the range of specific data we process about you.
Right to rectification – In order to constantly process only up-to-date personal data about you, we need you to notify us of a change as soon as possible. If we process incorrect data about you, you have the right to request its rectification.
Right to erasure – If the conditions of Article 14 of the Regulation or Section 23 of the Act are met, you may request the deletion of your personal data. Therefore, you may request deletion if, for example, you have withdrawn your consent to the processing of personal data and there is no other legal basis for processing, or if we process your personal data illegally or the purpose for which we processed your personal data has ceased to exist and we do not process it for another compatible purpose. However, we will not delete your data if it is necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing – If the conditions of Article 18 of the Regulation or Section 24 of the Act are met, you may require us to restrict the processing of your personal data. Therefore, you can request a restriction, for example, when you object to the accuracy of the data processed or if the processing is unlawful and you do not want us to erase the data, but you need their processing to be restricted while you exercise your rights. We continue to process your data if there are grounds for establishing, exercising or defending legal claims.
Right to portability – If processing is based on your consent or carried out for the purpose of fulfilling a contract concluded with you and at the same time carried out by automated means, you have the right to receive from us your personal data that we have obtained from you in a commonly used machine-readable format. If you are interested and it is technically feasible, we will transfer your personal data directly to another controller. This right will not be applicable to processing carried out for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to object to processing – If we process your personal data for the performance of a task carried out in the public interest or in the exercise of official authority entrusted to us, or if the processing is carried out on the basis of our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. Based on your objection, we will restrict the processing of personal data and unless we demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms or reasons for establishing, exercising or defending legal claims, we will no longer process personal data and delete your personal data. You have the right to object at any time to the processing of personal data for direct marketing purposes, including profiling to the extent that it relates to such direct marketing. After you object, we will no longer process your personal data for this purpose.
Right to lodge a complaint – If you believe that the processing of your personal data is contrary to the Regulation or the Act, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For the territory of the Slovak Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at: Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, web: www.dataprotection.gov.sk, tel.: +421 /2/ 3231 3220.
Right to withdraw consent – If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect processing already carried out. If at any time later you decide that you are interested in receiving sales and marketing offers from us about our products and services again, you can revoke your consent (or objection) at any time by any of the above forms of contact.
9. Contact details of the Office and the Data Protection Officer
Office for Personal Data Protection of the Slovak Republic
Address:
Hraničná 12
820 07, Bratislava 27
Slovak Republic
ID: 36 064 220
E-mail:
- a) in general: dozor@pdp.gov.sk
- b) for providing information under Act no. 211/2000 Coll.: info@pdp.gov.sk
- c) website: webmaster@pdp.gov.sk
- d) Use the online form to submit requests for information under Act No 211/2000 on freedom of information.
- e) e-mail address through which the Office will provide you with advice regarding personal data protection. It is intended for children, young people, students, teachers, parents who suspect that their personal data has been misused: ochrana@pdp.gov.sk
A template for initiating proceedings on the protection of personal data can be found on the Office’s website (https://dataprotection.gov.sk/uoou/sk/content/konanie-o-ochrane-osobnych-udajov).
Registry:
Monday – Thursday: 8:00 - 15:00
Friday: 8:00 - 14:00
Telephone consultations regarding personal data protection:
Tuesday and Thursday from 8:00 to 12:00 +421 2 323 132 20
Secretariat of the President of the Office +421 2 323 132 11
Secretariat of the Office +421 2 323 132 14
Fax: +421 2 323 132 34
Spokesman:
Mobile: 0910 985 794
E-mail: hovorca@pdp.gov.sk