Personal Data Protection
Identification and Contact Details of the Controller
Your personal data is processed by the controller:
CHEMOSVIT STROJCHEM, s.r.o., Štúrova 101, 059 21 Svit, Slovak Republic, Company ID (IČO): 36 459 852
Your personal data will be stored securely, in accordance with the controller's security policy and only for the period necessary to fulfill the purpose of processing. Access to your personal data will be granted exclusively to persons authorized by the controller to process personal data, who process it based on the controller's instructions and in accordance with the controller's security policy. Your personal data will be backed up by us to prevent security incidents, in particular the disruption of data availability due to a security incident, in accordance with the security requirements of the GDPR and Act No. 18/2018 Coll.
Contact details of responsible persons:
Facility Management Specialist, vojsovic.i@strojchem.sk, +421 52 715 2279
Information Sheet on the Processing of Personal Data
Purposes of processing, legal basis, and recipients:
We process personal data for the following purposes:
1. Fulfillment of employer obligations related to the employment of graduates based on National Projects of the Office of Labour, Social Affairs and Family (ÚPSVaR), resulting from valid legislation.
The legal basis for processing personal data is a specific law (Act on Employment Services). Providing personal data is a statutory requirement, meaning it is the duty of the data subject to provide personal data necessary to meet legislative requirements and employer obligations.
We provide personal data only to authorized entities based on the law.
2. Fulfillment of obligations related to the registration and distribution of mail (including e-mail and electronic mailboxes), the management of registry records arising from the controller's economic activities stored in the registry center, including the disposal and destruction of documents and the archiving of archival documents in accordance with valid legislation.
The legal bases for processing personal data are specific laws (Act on Postal Services, Act on e-Government, Act on Electronic Communications, Act on Archives and Registries). Providing personal data is a statutory requirement. Without the provision of personal data, we cannot fulfill the obligations prescribed by legislation in the field of postal services and registry record management.
The following intermediary companies have access to your personal data: postal and forwarding service providers, CHEMOSVIT SLUŽBY, s.r.o., OZO–RECYCLING, s.r.o. (which ensures the disposal of discarded registry records after their storage periods expire), the intermediary company Apptc.me s.r.o. ensuring the maintenance and updates of e-mail communication, researchers who, in accordance with legislation, conduct research activities in the archive (only if documents containing your personal data have permanent archival value), and other authorized entities entitled to such access by legislation.
3. Ensuring the health and safety of external persons entering the controller's premises (Osh training and education, OSH preventive activities, recording of accidents on the controller's premises).
We process personal data in accordance with a specific law (Act on Occupational Safety and Health). Providing personal data is a statutory requirement and thus an obligation of the data subject; we need it to fulfill our legislative obligations.
Personal data may be provided to your employer, the intermediary company CHEMOSVIT SLUŽBY, s.r.o., and authorized entities in accordance with legislation.
4. Maintaining records of the entry and exit of persons and vehicles to and from the protected site for the purpose of protecting property and persons within the controller's premises.
We process personal data on the legal basis of a specific law (Act on the Provision of Services in the Field of Private Security) and the legitimate interest to ensure the protection of property and persons located on our premises. Providing personal data is a statutory requirement and an obligation of the data subject; we need it to fulfill our legislative obligations.
Personal data is processed by the intermediary company SBS CHEMOSVIT, s.r.o., and may be provided or made available to authorized entities in accordance with legislation.
5. Internal network of the controller – a portal providing service and operational activities for the controller – access to individual applications, employee contact list, registration for training, medical check-ups, etc.
We publish employee personal data within the scope of Section 78(3) of Act No. 18/2018 Coll. on Personal Data Protection based on the legal basis provided by this Act. In this case, the processing of personal data is lawful even without your consent. We publish photographs based on your consent. You may withdraw your consent at any time.
Access to personal data published on the Infoweb is granted to the controller's employees, employees of companies within the CHEMOSVIT and FINCHEM groups, employees of other companies with granted access rights, and the intermediary CHEMOSVIT SLUŽBY, s.r.o.
6. Monitoring of premises via a camera system (CCTV) for the purpose of protecting property, health, and crime detection.
The legal basis for processing personal data via the camera system is the controller's legitimate interest. In this way, we ensure the protection of the company's property, the property of employees, and the property of other persons in the monitored area; the camera system assists in crime detection and the protection of the health of persons in the monitored areas.
You provide personal data by voluntarily entering and moving within the monitored area, about which you are informed at the entrance to this area, which is marked with clear stickers as a monitored space.
Access to personal data from the camera system is granted to the intermediary company SBS CHEMOSVIT, s.r.o., the sub-processor KELCOM INTERNATIONAL, s.r.o., Konica Minolta Slovakia, s.r.o., and, in the event of criminal or misdemeanor proceedings, authorized entities in accordance with legislation.
7. Monitoring of employees by technical means for control purposes.
We process personal data in accordance with a specific law (Labor Code). We record personal data regarding the behavior of persons in information and communication networks using technical means during working hours when these persons use the controller's networks for their activities. This is our legal right resulting from valid legislation. The data subject is informed about the monitoring through internal regulations.
The intermediary companies CHEMOSVIT SLUŽBY, s.r.o. and ALCASYS Slovakia, a.s. have access to the personal data.
8. Preparation, registration, and distribution of documents of an organizational, management, and commercial nature (contracts, internal management documents, organizational standards) for the purpose of organizing and managing operational activities at the controller.
Legislation allows or directly mandates the preparation of certain documents. In this case, the legal bases are specific laws (e.g., the Act on Accounting); in the case of concluding contracts, the legal basis for processing is the performance of a contract to which the data subject is a party. Providing personal data is a statutory or contractual requirement. Without your personal data, we will not be able to fulfill our legislative obligations or conclude a contract with you.
We also process personal data when creating documents that ensure our legitimate interests, e.g., when organizing and managing operational activities, when ensuring the protection of our property entrusted to employees, or for the accurate and clear definition of rights, duties, and responsibilities for individual employees.
Intermediaries CHEMOSVIT SLUŽBY, s.r.o. and FINCHEM INSURANCE, s.r.o. have access to the personal data. In cases specified by law, authorized entities in accordance with legislation may also have access.
9. Fulfillment of employer obligations related to the employment relationship or similar relationship (agreements for work performed outside of an employment relationship), including pre-contractual relationships resulting from valid labor, social, health, and OSH legislation.
The legal bases for processing personal data for this purpose are specific laws (Labor Code, Act on Social Insurance, Act on Health Insurance, Act on Income Tax, Act on Employment Services, Act on Old-Age Pension Savings, Act on Supplementary Pension Savings, Act on Income Replacement during Temporary Incapacity for Work, Act on the Social Fund, Act on the Protection, Support and Development of Public Health, Act on Enforcement Officers and Enforcement Activities, Act on OSH).
Providing personal data is a contractual requirement for concluding an employment contract or an agreement for work performed outside of an employment relationship, and simultaneously a statutory requirement for fulfilling the controller's obligations resulting from valid labor, social, health, and OSH legislation. Without the provision of personal data, an employment relationship cannot be concluded.
For purposes related to the employment relationship, we also process your photograph (non-biometric form) – in the personal file, on the identification card, and in the attendance system – to ensure our legitimate interest, which is the need to identify the data subject as an employee of the controller.
Access to your personal data is granted to the intermediary company CHEMOSVIT SLUŽBY, s.r.o., occupational health service providers, WEGA LH, s.r.o. for the purpose of managing the attendance and catering system, intermediary companies providing catering (DOXX stravné lístky s.r.o. and REKREATOUR, s.r.o.), and the intermediary company FINCHEM INSURANCE, s.r.o. for the purpose of processing the supplementary pension savings agenda. We also provide and make personal data available to authorized entities in accordance with legislation.
10. Informing employees, former employees, business partners, visitors, and the public about the company's performance, activities, social, and commercial events through the company newspaper.
Personal data related to the data subject's work at the controller or documenting working, commercial, and social events in the company are processed based on legitimate interest, which is our need to ensure adequate information for target groups, develop good public relations, and increase awareness of the company.
We publish the identification and contact details of employees based on Section 78(3) of Act No. 18/2018 Coll. on Personal Data Protection.
Personal data related to the employee's privacy are processed based on consent granted by them. Granted consent may be withdrawn at any time (in person, by e-mail, by telephone).
The provision of personal data is voluntary – providing an interview to a company newspaper editor and allowing oneself to be photographed is an expression of the data subject's free will. Similarly, the data subject may express disagreement with the processing by moving out of range of the editor and photographer or by objecting to the processing with the controller.
Access to personal data is granted to the intermediary company Popradská tlačiareň, s.r.o., which ensures the printing of the company newspaper, as well as to subscribers of the company newspaper (employees of controllers within the CHEMOSVIT and FINCHEM groups, former employees), business partners, visitors, and the public.
11. Handling of legal agenda in the field of commercial and labor law and legal representation of the controller in civil proceedings, bankruptcy and restructuring proceedings, enforcement proceedings, and criminal proceedings.
The legal bases for processing personal data are specific laws (e.g., Code of Civil Dispute Procedure, Act on Enforcement Officers and Enforcement Activities, Code of Criminal Procedure, Code of Administrative Justice Procedure) and the securing of our legitimate interests, such as resolving labor-law disputes, debt recovery, resolving other litigation in the areas of civil, commercial, and labor law, and the preparation of contracts and other legal documents. Providing personal data is a statutory requirement.
We provide personal data to our intermediary: the law firm BERNÍK & partneri, s.r.o.. Other parties to the proceedings and authorized entities in accordance with legislation may also have access.
12. Preparation of documentation for Europrojects and grant applications in accordance with the requirements of published calls, fulfillment of contractual obligations of the recipient of a non-repayable financial contribution.
The legal basis for processing personal data is specific laws (e.g., the Act on Contributions Provided from European Structural and Investment Funds). Providing personal data is a statutory requirement for fulfilling the controller's obligations resulting from valid legislation.
Personal data may be provided to authorized entities in accordance with legislation.
13. Maintaining a database of job applicants for future use in filling vacant positions.
We process personal data based on the consent of the data subject. You grant us consent via a written statement when submitting your job application. You provide personal data voluntarily, and the granted consent can be withdrawn at any time in writing by letter or e-mail delivered to the company's registered office.
Your personal data is processed by the intermediary CHEMOSVIT SLUŽBY, s.r.o. and may be provided to the management employees of other companies within the CHEMOSVIT and FINCHEM groups for the purposes of recruitment processes carried out in those companies, thereby increasing your chance of being employed with us.
14. Fulfillment of obligations related to the processing of accounting documents in accordance with valid legislation.
We process personal data based on specific laws (Act on Accounting, Act on VAT, Act on Income Tax, Act on Local Taxes and Local Fee for Municipal Waste, Act on Administrative Fees, Commercial Code, Act on the Social Fund, Act on Travel Allowances).
Providing personal data is a statutory requirement for fulfilling the controller's obligations resulting from valid legislation. The data subject has an obligation to provide personal data in accordance with this legislation.
We make personal data available to the intermediary CHEMOSVIT SLUŽBY, s.r.o., the auditing company AUDIT-CONSULTING, s.r.o. for the purpose of performing an accounting audit, and authorized entities in accordance with legislation.
15. Fulfillment of obligations related to handling requests from data subjects when exercising their rights under valid personal data protection legislation.
We process personal data based on specific regulations (Regulation of the European Parliament and of the Council (EU) – GDPR, Act on Personal Data Protection).
The provision of personal data takes place in accordance with this legislation when exercising the data subject's rights with the controller. Without your identification and contact details, we will not be able to process your request.
Personal data may be provided to authorized entities in accordance with legislation.
16. Informing the public about the company, promoting the company, informing about events and activities of the company via the website.
We publish identification and contact details of employees based on Section 78(3) of Act No. 18/2018 Coll. on Personal Data Protection. Personal data in the photo gallery is published based on the consent of the data subject.
The processing of personal data within the scope of legislation is lawful without the data subject's consent; providing personal data beyond the scope of the law is voluntary.
Access to the published personal data is granted to the intermediary CHEMOSVIT SLUŽBY, s.r.o. and the public accessing the controller's website.
17. Conclusion, registration, and performance of contracts / agreements (including pre-contractual relationships)
The legal basis for processing is the performance of a contract to which the data subject is a party. Providing personal data is a contractual requirement. Without your personal data, we will not be able to conclude a contract with you.
Intermediaries CHEMOSVIT, a.s. and FINCHEM INSURANCE, s.r.o. have access to the personal data. In cases specified by law, authorized entities in accordance with legislation may also have access.
Will your personal data be provided outside the European Union?
The transfer of personal data from our company to a third country or an international organization does not take place.
Will your data be used for automated individual decision-making?
Personal data in our company will not be used for automated individual decision-making, including profiling.
How long will your personal data be stored?
Retention periods for personal data are in most cases determined by specific laws, the Act on Archives and Registries, and are in accordance with the company's registry plan, which was approved by the Ministry of Interior of the Slovak Republic – State Archive.
Personal data that are part of registry records have storage periods determined according to the type of registry record in the relevant laws and the controller's registry plan.
Occupational accidents are archived for 50 years, other personal data in the field of OSH for 5 years.
Submitted reports of anti-social activity are archived for three years from the receipt of the report or until its resolution.
The records of entries of persons and vehicles into the controller's premises have a storage period of 3 years.
Personal data published on the Infoweb is stored for the duration of the data subject's employment with the controller.
Internal documentation is stored for another 5 years after the document loses its validity.
Personal data obtained by monitoring internet communication is stored for 6 months, and e-mail communication for 5 years after it is obtained.
Personal files of employees are stored for 90 years from birth, documentation on occupational accidents for 50 years from the occurrence of the accident, agreements for 10 years, data on employee attendance for 3 years, and other personnel and payroll documents for 5 years.
The company newspaper is stored for 5 years from publication; one copy has permanent documentary value and is kept in our archive.
Legal agenda is stored for 5 or 10 years depending on the type of document; some documents have permanent documentary value in accordance with the law and internal directives.
Personal data related to handling employment projects co-financed by ÚPSVaR are stored for 5 years from the termination of the project or according to the terms of the specific contract.
Personal data of job applicants are stored for 1 year from the granting of consent or until the withdrawal of consent by the data subject.
Accounting documents with personal data are stored for 10 years after the end of the accounting period in which they were issued.
Personal data related to handling requests from data subjects when exercising their rights under valid personal data protection legislation are stored for 5 years from the registration of the request.
Personal data specified in contracts and agreements are stored for 5 or 10 years depending on the type of contract / agreement.
After the statutory or designated storage periods expire, we will ensure the destruction of your personal data. In the event of withdrawal of granted consent, your data will be destroyed immediately without undue delay.
RIGHTS OF THE DATA SUBJECT
Right of access– you have the right to be provided with a copy of the personal data we have available about you, as well as information on how we use your personal data – for what purpose, to whom we provide it, and how long we store it. In most cases, your personal data will be provided to you in written paper form unless you request another method of provision. If you have requested this information by electronic means, it will be provided to you electronically if technically possible.
Right to rectification– we take appropriate measures to ensure the accuracy, completeness, and timeliness of the information we have available about you. If you believe the data we possess is inaccurate, incomplete, or outdated, please do not hesitate to ask us to correct, update, or supplement this information.
Right to erasure (Right to be forgotten)– you have the right to request the erasure of your personal data, for example, if the personal data we collected about you is no longer necessary to fulfill the original purpose of processing. However, your right must be assessed from the perspective of all relevant circumstances. For example, we may have certain legal and regulatory obligations, meaning we will not be able to comply with your request.
Right to restriction of processing– under certain circumstances, you are entitled to ask us to stop using your personal data. This includes cases where you believe that the personal data we have about you may be inaccurate or when you believe that we no longer need to use your personal data.
Right to data portability– under certain circumstances, you have the right to ask us to transfer the personal data you provided to us to another third party of your choice. However, the right to portability only applies to personal data we obtained from you based on consent or based on a contract to which you are a party.
Right to object– you have the right to object to the processing of data based on our legitimate interests. If we do not have a compelling legitimate reason for processing and you submit an objection, we will not process your personal data further.
Right to withdraw consent– in cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. You may withdraw your consent electronically, in writing, by a notice of withdrawal of consent, or in person at the company's registered office. The withdrawal of consent does not affect the lawfulness of the processing of personal data processed based on it prior to its withdrawal.
Right to file a petition to initiate proceedings on personal data protection– if you believe that we are processing your personal data unfairly or unlawfully, you may file a complaint with the supervisory authority, which is:
Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; Company ID: 36 064 220; tel. number: +421 /2/ 3231 3214; email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk.
In the case of submitting a petition in electronic form, it must meet the requirements according to Section 19(1) of Act No. 71/1967 Coll. on Administrative Proceedings (Administrative Procedure Code).
Right to information about the data source– if we did not obtain the personal data directly from you, you have the right to request information about the source from which we obtained it.
Right to information on the existence of automated individual decision-making, including profiling– you have the right to ask us for information on whether we use your personal data for automated individual decision-making, including profiling, and if so, you have the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which has legal effects concerning you or similarly significantly affects you.
Right to information on appropriate safeguards for data transfer– if we transfer your personal data to a third country or an international organization, you have the right to request information from us about the appropriate safeguards we provide during such transfer.
You may exercise the aforementioned rights through a written request or by electronic means with the controller. If you request the provision of information orally, the information will be provided to you provided that you prove your identity.