IRP gmbh, Grafenauweg 8, 6300 Zug , CHE-139,909,666
contact information: Lukas Micega,tel. +421907555213 ,mail: irp-develop@irp-develop.ch
________________________________________________________________________
as the operator of the informational system announces in order to maintain justice and transparency concerning the affected persons this declaration about personal data protection called
General Data Protection Regulation
in a sense of paragraph 13 and relevant recitals of European Council and Parliament Regulations (EU) 2016/679 about the protection of a natural person when processing personal data and about free movement of these data (subsequently, only “Regulation”) and the Law of National Council of the Slovak Republic n.18/2018 legal code about personal data protection and about the change and the addition of certain laws as amended (subsequently, only “Personal Data Protection Act”)
The purpose of processing personal data is the reasons, for which the personal data of affected persons (clients, employees, etc.) are processed in our information systems based on precisely determined legal bases. The purposes are specifically given, explicitly stated, and authorized, taking into consideration that when processing personal data of affected persons we maintain the principles of law according to article 6 and 9 of Regulation (particular purposes and legal bases are included in this General Data Protection Regulation document)
Affected persons of whom the personal data are processed in our information system for purposes specifically defined, can claim their subsequent rights, in writing or electronically:
- The right to access to personal data – there is a possibility to acquire confirmation of whether your personal data are being processed as well as your right to gain access to these data, within the duration of processing your data, the category of affected personal data, the sector of recipients, about the procedure in every automatic processing, alternatively about the consequences of this kind of processing.
As an operator, we have a right to use every required measure to verify the identity of the affected person that requires access to data, especially in regards to online services and identifiers (article 15, recital 63, Regulation 64)
- The right to correct incorrect personal data and to add personal data in case the data is incomplete (article 16, recital 65 of Regulation)
- The right to erasure – “to forget” the personal data which are no longer necessary for the purposes acquired and processed in the first place, upon revocation of consent on the basis of which the processing is carried out; when processed unlawfully; if the personal data were acquired in connection with information company (regarding children), based on the conditions stated in the article 17, recital 65, 66 of Regulation.
- The right to limit processing is possible to put into effect if the affected person violates the correctness of personal data and other necessities in accordance with article 18, recital 67 of Regulation in a way of temporarily transferring selected personal data to a different system of a procession, prevent user access to selected personal data or temporarily stop processing.
- The right to portability of personal data is the right regarding your provided personal data in our information system based on your consent or resulting from the contract fulfillment to transfer them to another operator in a structured, commonly used, and computer-readable format, as long as it is technically possible to fulfill the conditions in article 20, recital 68 of Regulation in the event that the processing is carried out by automatic means. Putting into effect this right does not affect article 17 of Regulation. The right to portability of personal data does not apply to processing which is inevitable to complete the task implemented in public interests or in the case of performing public authority entrusted to us as the operator
- Without affecting any other administrative or judicial means of rectification, as the affected person you have a right to file in accordance with article 77 of Regulation a complaint to the Office for Personal Data Protection of the Slovak Republic, if you assume, that the processing of personal data that concerns you is contrary to the Regulation or Personal Data Protection Act
As an affected person you also have a right to object anytime due to the reasons concerning a particular situation against processing your personal data which is inevitable to complete the task implemented in public interests or in the case of performing public authority entrusted to us as the operator as well as when the processing is inevitable for purposes of justifiable interests that we follow as the operator or a third party (except for processing carried out by public authorities fulfilling their tasks), except in cases, wherein these type of interests predominate your interests or fundamental rights and freedoms as a person affected, which require protection of personal data (especially if the affected person is a child).
IRP gmbh, Grafenauweg 8, 6300 Zug adopted as the operator of the information system all appropriate personal, organizational, and technical measures in order to achieve maximum security of your personal data aiming to a large extent to decrease the danger of misusing or the danger of information leak, etc. In accordance with our duty resulting from article 34 of Regulation we inform you, as persons affected, that if there is a situation wherein we, as the operator, violate the protection of your personal information in a way that will most likely result in a high risk of violation of rights and freedoms of natural persons, we will inform you in short order.
WARNING: Due to the fact of compliance with principles of minimalization are all personal data provided by you, only an inevitable, legal or contractual requirement for fulfilling the purpose of their processing. Failure to provide mandatory data which is inevitable to conclude a contract might result in failure to enter into a contractual relationship.
As long as your personal data is processed based on the consent of article 6 section 1 a) of Regulation and Personal Data Protection Act, as an affected person, you also have a right to retract given consent regarding processing your personal data, also in cases before the expiry of the period for which this consent was given, in the following ways:
- by email request sent to irp-develop@irp-develop.ch
- over the phone +421 907 555 213 or
- by sending a written request to the address of our main office with “GDPR – retraction of consent” written on the envelope
Retraction of consent does not affect legal processing resulting from the consent prior to its retraction.
In case of any questions regarding the protection of personal data, including putting into effect your rights in accordance with the Regulation and Personal Data Protection Act we kindly ask you to contact us at irp-develop@irp-develop.ch or +421 907 555 213
Addendum to General Data Protection Regulation:
| DATA ABOUT INDIVIDUAL PURPOSES OF PROCESSING PERSONAL DATA | |
| 1 STAFF AND SALARY-RELATED ADMINISTRATIVE WORK OF EMPLOYEES | |
| The purpose of processing personal information | Fulfillment of the employer’s obligations related to the employment relationship or similar relationship (for example based on the work agreement carried out outside of the employment relationship) including administrative work of safety and security while working, administrative work of occupational health service, administrative work of increasing the abilities of employees and pre-contract relations. Within the information system, the fulfillment of the main purpose also happens by: a) keeping a record of personal administrative work of employees in an employment relationship or similar relationship b) processing the administrative work of accepting employees to the employment relationship and the termination of their work employment c) processing necessary statistical reports d) carrying out the processing of wages and keeping relevant records in accordance with salary regulations e) carrying out a deduction of wage in relation to the state and other subjects in accordance with corresponding laws f) getting ready the materials for creating a budget in a wage field g) keeping a record of creating a wage-related administrative work of employees of the operator IS for the purposes of employment law, wage-related purposes, sickness, health care, and social care purposes, and income tax from dependant activity of natural persons in employment relationships with relation to Labor Code and keeping a record of administrative work for the purposes of rewarding and related actions h) complex provision of main care regarding the health of employees at work in accordance with applicable legislation for the prevention of occupational illnesses, work injuries and keeping up work and functional fitness of employees during the duration of their employment (the period they are capable of work) i) complex provision of Occupational Safety and Health and with that relating actions like keeping records and registration of work injuries as well as record-keeping of executed checks to maintain regulations of Occupational Safety and Health, schooling employees, etc. j) increasing the abilities of employees – their education by carrying out training courses, achieving certificates, authorizations or other certificates |
| The name of the information system | Staff and salary-related administrative work of employees |
| Legal base | Personalization: Fulfilling the contract in accordance with article 6 section b) of Regulation. Fulfilling legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The legal base for processing personal information is the Constitution of the Slovak Republic, the law of the National Council of the Slovak Republic n.311/2001 legal code, Labor Code as amended, the law of the National Council of the Slovak Republic n. 552/2003 legal code, about performing work in the public interest as amended, the law of the National Council of the Slovak Republic n.553/2003 legal code, about rewarding certain employees while carrying out work in the public interest and about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.595/2003 legal code, about income taxes as amended, the law of the National Council of the Slovak Republic n.563/2009 legal code, about tax administration (tax code) about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.461/2003 legal code, about social insurance as amended, the National Council of the Slovak Republic n. 600/2003 legal code, about child allowance and about the change and the addition of the law of the National Council of the Slovak Republic n. 461/2003 legal code, about social insurance as amended, the law of the National Council of the Slovak Republic n.462/2003 legal code, about income compensation in case of incapacity of an employee to work and about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.580/2004 legal code, about health insurance and about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.650/2004 legal code, about additional pension savings as amended, the law of the National Council of the Slovak Republic n.448/2008 legal code, about social services as amended, the law of the National Council of the Slovak Republic n.5/2004 legal code, about employment services as amended, the law of the National Council of the Slovak Republic n.82/2005 legal code, about illegal work and illegal employment as amended, the Personal Data Protection Act and related legal regulations as amended in effect, the law of the National Council of the Slovak Republic n.152/1994 legal code, about Social Fund and about the change and the addition of the law of the National Council of the Slovak Republic n.286/1992 Code of income taxes as amended, the law of the National Council of the Slovak Republic n.43/2004 legal code, about old-age pension savings, the law of the National Council of the Slovak Republic n.570/2005 legal code, about compulsory military service, the law of the National Council of the Slovak Republic n.42/1994 legal code, about civil protection of citizens as amended, the law of the National Council of the Slovak Republic n.314/2001 legal code, about protection against fire, the law of the National Council of the Slovak Republic n.124/2006 legal code, about safety and security of health while working, the law of the National Council of the Slovak Republic n.355/2007 legal code, about the protection, support, and development of public health and related legislations, contracts related to the staff and wage-related administrative work of employees (for instance, the Agreement on deductions from wages, Agreement on sending payslips,…). Authorized interest in accordance with article 6 section 1 f) of Regulation in connection with § 78 of the law of the National Council of the Slovak Republic n.18/2018 legal code, about the protection of personal data and about the change and the addition of certain laws as amended. Wages: Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The legal base for processing personal information is the Constitution of the Slovak Republic, the law of the National Council of the Slovak Republic n.311/2001 legal code, Labor Code as amended, the law of the National Council of the Slovak Republic n. 552/2003 legal code, about performing work in the public interest as amended, the law of the National Council of the Slovak Republic n.553/2003 legal code, about rewarding certain employees while carrying out work in the public interest and about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.595/2003 legal code, about income taxes as amended, the law of the National Council of the Slovak Republic n.563/2009 legal code, about tax administration (tax code) about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.461/2003 legal code, about social insurance as amended, the National Council of the Slovak Republic n. 600/2003 legal code, about child allowance and about the change and the addition of the law of the National Council of the Slovak Republic n. 461/2003 legal code, about social insurance as amended, the law of the National Council of the Slovak Republic n.462/2003 legal code, about income compensation in case of incapacity of an employee to work and about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.580/2004 legal code, about health insurance and about the change and the addition of certain laws as amended, the law of the National Council of the Slovak Republic n.650/2004 legal code, about additional pension savings as amended, the law of the National Council of the Slovak Republic n.448/2008 legal code, about social services as amended, the law of the National Council of the Slovak Republic n.5/2004 legal code, about employment services as amended, the law of the National Council of the Slovak Republic n.82/2005 legal code, about illegal work and illegal employment as amended, the Personal Data Protection Act and related legal regulations as amended in effect, the law of the National Council of the Slovak Republic n.152/1994 legal code, about Social Fund and about the change and the addition of the law of the National Council of the Slovak Republic n.286/1992 Code of income taxes as amended, the law of the National Council of the Slovak Republic n.43/2004 legal code, about old-age pension savings, the law of the National Council of the Slovak Republic n.314/2001 legal code, about protection against fire, the law of the National Council of the Slovak Republic n.124/2006 legal code, about safety and security of health while working, the law of the National Council of the Slovak Republic n.355/2007 legal code, about the protection, support, and development of public health and related legislations Improving the qualification of employees: Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. § 153-155 of the Law n.311/2001 legal code, Labor Code as amended Occupational Health Service: Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The law n.355/2007 legal code, about the protection, support, and development of public health and about the change and the addition of certain laws, the Law n.577/2004 legal code, about the extent of health care paid based on public health insurance and about the remittance of services related to providing health care as amended, the Law n.578/2004 legal code, about providers of healthcare, medical staff, professional organizations in health care, and about the change and the addition of certain laws as amended, the ordinance of Ministry of Health of the Slovak Republic n.448/2007 legal code, about the details and work factors and work environment in relation to classifying work from the point of view of health risks and about necessities of the proposal to incorporate work to categories, the ordinance of Ministry of Health of the Slovak Republic n.208/2014 legal code, about the details of the extent and content of the performance of occupational health services, about team composition of specialists, who carry it out and about the requirements for their professional competence.
Occupational Safety and Health Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The Law n.n.124/2006 legal code, about safety and security of health while working and about the change and the addition of certain laws as amended, the ordinance of Ministry of Labor, Social Affairs and Family of the Slovak Republic n.500/2006 legal code, which declares an example of the Record of a registered occupational accident, the law of the National Council of the Slovak Republic n.314/2001 legal code, about protection against fire as amended and its performing regulations. |
| Categories of recipients | The operator for processing personalization, the operator for processing wage-related administration work, the operator for Occupational Safety and Health, the operator for processing administrative work relating to occupational health service, public authorities, state and public administration according to relevant legislation, Health Insurance Company, additional pension savings banks, additional administrative companies |
| Cross-border personal data transfer | It happens within the EU and a third country, which guarantees adequate protection of personal data – Switzerland. (curriculum vitae and documents relating to a declaration of professional competence of employees working on the projects of clients bounded by a contract) |
| Deadline for deletion of personal data | 5-10 years, personal files – up to 70 years of the employee’s life |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | Job applicants based on invitations for applications, employees, husbands or wives of employees, parents of maintained children of employees, close relatives, former employees |
| 2 ECONOMIC-ACCOUNTING ADMINISTRATIVE WORK | |
| The purpose of processing personal information | The purpose of processing personal information is the processing of orders, received invoices and billing customers, contact with the bank, managing a cash register, securing incomes in cash and expenses, managing economy, record-keeping of fixed assets (including automatic depreciation) and small property, record-keeping of simple/double-entry bookkeeping of an organization |
| Name of the information system | IS Economic-Accounting administrative work |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The Law n.431/2002 legal code, about accounting as amended, the Law n.222/2004 legal code, about VAT as amended, the Law n.18/2018 legal code, about the protection of personal data and about the change and the addition of certain laws as amended, the Law n.145/1995 legal code, about administrative fees as amended, the Law n.40/1964 Civil Code as amended, the Law n.152/1994 legal code, about Social Fund and about the change and the addition of the Law n.286/1992 Code of income taxes as amended, the Law n.311/2001 legal code, Labor Code as amended, the Law n.400/2009, about state service and about the change and the addition of certain laws as amended, the Law n.513/1991 Commercial Code as amended. |
| Categories of recipients | – public authorities according to the relevant legislation – the operator for processing the accounting |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | − 10 years |
| Information about the existence of automated decision-making, including profiling | Does not happen |
| Categories of affected persons | – natural persons, employees of the operator, suppliers, and customers – natural persons, employees of suppliers and customers, representatives of suppliers and customers |
| 3 MANAGEMENT OF REGISTRY | |
| The purpose of processing personal information | The purpose of processing personal information in relation to uniform administrative work is the management of the registry as a proper record-keeping of records (keeping a complete and accurate record in the registry diary, keeping a record of registers and index records), properly eliminating files (records), securing planned eliminating of files (records), which are not necessary for another activity and the period for keeping them expired, record-keeping of received and sent mail, record-keeping of e-mail. |
| Name of the information system | IS Management of registry |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The law of the National Council of the Slovak Republic n.395/2002 legal code, about archives and registries, 305/2013 legal code, about the electronic form of performing of force by public authorities and about the change and the addition of certain laws as amended (e-Government Act). |
| Categories of recipients | Public authorities according to the relevant legislation. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | From 30 days until the employee is 70 years old. |
| Information about the existence of automated decision-making, including profiling | Does not happen |
| Categories of affected persons | The affected persons in relation to all the purposes of processing personal data defined by the operator |
| 4 RECORD-KEEPING OF SELF-EMPLOYED PERSON (SZČO) | |
| The purpose of processing personal information | The purpose of processing personal information in relation to uniform administrative work is the preparation and keeping a record of supplier-customer relations with self-employed persons. In relation to the uniform administrative work, we are keeping a record of contract relationships, invoices, and orders, record-keeping of supply and purchases of goods, services, etc. |
| Name of the information system | Record-keeping of Self-employed person (SZČO) |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The contract between the operator and a self-employed person is allowed by the Constitution of the Slovak Republic, Civil Code, Commercial Code, the Law n.455/1991 legal code, about Self-employment Act and related legislation. |
| Categories of recipients | State administration bodies, public authorities, and public administration according to the relevant legislation |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 10 years after terminating a contract relation because of the record-keeping in relation to accounting administrative work. |
| Information about the existence of automated decision-making, including profiling | Does not happen |
| Categories of affected persons | customer/supplier – self-employed person |
| 5 RECORD-KEEPING OF REPRESENTATIVES OF SUPPLIERS AND CUSTOMERS | |
| The purpose of processing personal information | The purpose of processing personal information in relation to uniform administrative work is to keep a record of the database of representatives, or rather of the employees of suppliers due to the reason of fulfilling their work-related, company-related, and functional obligations and securing the continuous supplier-customer relationships. |
| Name of the information system | Record-keeping of representatives of suppliers and customers |
| Legal base | An authorized interest in accordance with article 6 section 1 f) of Regulation. The main authorized interest is securing continuous and effective communication with the representatives of suppliers and customers. |
| Categories of recipients | None |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | Up to 30 days after the day of terminating supplier-customer relations |
| Information about the existence of automated decision-making, including profiling | Does not happen |
| Categories of affected persons | a natural person – representative (an employee) of a supplier, of a customer |
| 6 PUTTING INTO EFFECT THE RIGHTS OF AFFECTED PERSONS | |
| The purpose of processing personal information | The purpose of processing personal information in relation to uniform administrative work is dealing with requests of natural persons wanting to put into effect their rights as the affected person in accordance with the ordinance of the European Parliament and the Council (EU) 2016/679, about the protection of natural persons when processing personal data and about free movement of such data. |
| Name of the information system | IS Putting into effect the rights of affected persons |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation in conformity with article 15-22 and 34 Regulations of the European Parliament and the Council (EU) 2016/679, about the protection of natural persons when processing personal data and about free movement of such data, the Law n.18/2018 legal code, about the protection of personal data and about the change and the addition of certain laws as amended |
| Categories of recipients | – state administration bodies, public authorities, and public administration according to the relevant legislation |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 1 year from the date of processing the application |
| Information about the existence of automated decision-making, including profiling | Does not happen |
| Categories of affected persons | a natural person who as the affected person turns to the operator in relation to the pre-defined purposes with a request to put his/her rights into effect |
| 7 NOTICES ACCORDING TO THE LAW OF THE NATIONAL COUNCIL OF THE SLOVAK REPUBLIC N.54/2019 LEGAL CODE, ABOUT THE PROTECTION OF ANNOUNCERS OF ANTI-COMPANY ACTIVITY AND ABOUT THE CHANGE AND THE ADDITION OF CERTAIN LAWS AS AMENDED | |
| The purpose of processing personal information | The purpose of processing personal information of the announcers is the investigation of filed announcements according to the law of the National Council of the Slovak Republic n.54/2019 legal code, about the protection of announcers of anti-company activity and about the change and the addition of certain laws. |
| Name of the information system | IS Notices according to the law of the National Council of the Slovak Republic n.54/2019 legal code, about the protection of announcers of anti-company activity and about the change and the addition of certain laws |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The law of the National Council of the Slovak Republic n.54/2019 legal code, about the protection of announcers of anti-company activity and about the change and the addition of certain laws. |
| Categories of recipients | Public authorities according to the relevant legislation |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 3 years from the date of delivery of the announcement |
| Information about the existence of automated decision-making, including profiling | Does not happen |
| Categories of affected persons | − the announcer − the person against whom the notice is directed |
| 8 CONTACT FORM | |
| The purpose of processing personal information | The processing of personal data necessary for dealing with requests (answering questions, providing the information) on request of the natural person through the contact form on the website of the operator |
| Name of the information system | IS Contact Form |
| Legal base | The consent of the affected person according to article 6 section 1 a) of Regulation and the Law about the protection of personal data where the affected person has a right to retract the consent anytime. The retraction of the consent does not have an impact on the legal processing resulting from the consent given prior to retraction. |
| Categories of recipients | None. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 6 months from the date of processing the application |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | the natural person – the applicant |
| 9 COMPANY MANAGEMENT ADMINISTRATIVE WORK | |
| The purpose of processing personal information | The purpose of processing personal information is to keep a record of a commercial company, keeping a record of their representatives, owners, keeping a record of commercial and trade register, drawing up contracts, statutory declarations, the preparation and securing of authorizations, power of attorneys, licenses and permits, securing paying out bank deposits, rewards, bonuses, etc. |
| Name of the information system | IS Company Management Administrative work |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The Law n.513/1991 Commercial Code as amended, the Law n.297/2008 legal code, about legalizing incomes from criminal offense and about the protection to prevent financing terrorism |
| Categories of recipients | State administration bodies, public authorities, and public administration according to the relevant legislation. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 5-10 years after the termination of the purpose of processing |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | − the members managing the company |
| 10 RECORDS OF JOB APPLICANTS | |
| The purpose of processing personal information | The purpose of processing personal information in relation to uniform administrative work is to keep a database of job applicants who sent the request for admission to the IS operator voluntarily without an announced selection procedure |
| Name of the information system | Records of job applicants |
| Legal base | The consent of the affected person according to article 6 section 1 a) of Regulation and the Law about the protection of personal data where the affected person has a right to retract the consent anytime. The retraction of the consent does not have an impact on the legal processing resulting from the consent given prior to retraction. |
| Categories of recipients | None. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 1 year from the end of the year in which the request was received |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | Job applicants. |
| 11 CONTRACT RELATIONS | |
| The purpose of processing personal information | The purpose of processing personal information is the processing of personal data of the natural persons within following the regulations, preparing contract relations, the works contracts, cooperation contracts, mandate contracts, etc. Next, it is participating in drawing up the contracts within supplier-customer relations, putting into effect the rights to fulfill obligations resulting from the contracts and property sanctions, the rights for compensation of damage, etc. |
| Name of the information system | IS Contract Relations |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. Performance of the contract in accordance with article 6 section 1 b) of Regulation. The Law n.40/1964 Civil Code as amended, the Law n.513/1991 Commercial Code as amended, the Law n.250/2007 legal code, the contracts concluded in accordance with the legislation mentioned above. |
| Categories of recipients | State administration bodies, public authorities, and public administration according to the relevant legislation. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 10 years after the termination of contract relation |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | – contracting party – the natural person |
| 12 MONITORING OF EMPLOYEES | |
| The purpose of processing personal information | The purpose of processing personal information is the employees’ monitoring in order to observe if the work discipline is kept in accordance with § 13 section 14 Labor Code namely by tracking the location and movement through a GPS device installed in company cars. |
| Name of the information system | IS Monitoring of Employees |
| Legal base | The legal base of processing personal data in the IS stands for the Authorized interest in accordance with article 6 section 1 f) of Regulation in connection with § 13 section 14 Labor Code. |
| Categories of recipients | Law enforcement bodies |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | GPS – 1 year after the termination of the employment relationship of the employee |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | − the employees of the operator IS |
| 13 PROVIDING DOCUMENTS TO PUBLIC AUTHORITIES | |
| The purpose of processing personal information | The purpose of processing personal information in relation to uniform administrative work is to provide documents to public authorities which can contain the personal data of the affected persons. |
| Name of the information system | IS Providing documents to public authorities |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. In relation to all the legal bases, which runs the operator, can the public authority request documents based on collaboration. |
| Categories of recipients | Public authorities according to the relevant legislation. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | In accordance with the Registry Rules. |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | Natural persons whose personal data are processed in the operator’s documentation. |
| 14 EMERGENCIES | |
| The purpose of processing personal information | The purpose of processing personal information is to record the personal data of natural persons – the employees and other external persons when entering the premises of the operator in the period of the emergency in order to secure the protection of the health of the affected persons. |
| Name of the information system | IS Emergencies |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The Law n.355/2007 legal code, about the protection, support, and development of public health and about the change and the addition of certain laws. |
| Categories of recipients | Public authorities according to the relevant legislation. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | 1 month after the end of the emergency |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | – the employees of the operator – other external natural persons |
| 15 UNAVOIDABLE COOKIES | |
| The purpose of processing personal information | The purpose of processing personal information is the processing of personal data of natural persons – the visitors of the operator’s website in order to save the data or the access to them, in order to transfer or facilitate the transfer of the message through the network or if it is unconditionally necessary for the operator as the provider of services to the information company to provide the services of the information company, which is explicitly requested by the affected person as the user. It is about adjusting the operation of our websites to meet your needs. |
| Name of the information system | IS Unavoidable Cookies |
| Legal base | Fulfillment of the legal obligation of the operator in accordance with article 6 section 1 c) of Regulation. The Law n.351/2011 about electronic communication §55 section 5. |
| Categories of recipients | None. |
| Cross-border personal data transfer | Does not happen. |
| Deadline for deletion of personal data | While browsing the operator’s website |
| Information about the existence of automated decision-making, including profiling | Does not happen. |
| Categories of affected persons | The affected persons who visited the operator’s website. |