Information on the processing of personal data of data subjects pursuant to §19 and §20 of Act No.18/2018Z.z. on the protection of personal data and on amending and supplementing certain acts (hereinafter referred to as "the Act") and Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "the Regulation")
The purpose of this information is to provide you with information about what personal data we process, how we handle it, for what purposes we use it, to whom we may disclose it, where you can obtain information about your personal data and exercise your rights in relation to the processing of your personal data.
Identification and contact details:
The controller processing your personal data is PROBATUR GROUP s. r. o., Tolstého 5, 811 06 Bratislava - Staré Mesto, ID No. 55786537
1. Purpose of processing of personal data and legal basis for processing
The purpose of the processing of personal data is to keep records of the data subjects of the business partners/clients of the controller.
- Personal data are processed on the basis of Section 13(1)(f) of the Act and Article 6(1)(f) of the Regulation if the data subject is an employee of a business partner/client of the controller.
- Personal data are processed on the basis of Section 13(1)(b) of the Act and Article 6(1)(b) of the Regulation if the data subject is a statutory body or a person acting on behalf of a business partner/client of the controller.
Legitimate interests of the controller or of a third party
The processing of personal data is carried out for the purpose of the legitimate interests of the controller or a third party.
2. Identification of the processed personal data of the data subjects
The data subjects about whom personal data are processed are:
- Employees of business partners/clients of the controller or a statutory body/person acting on behalf of a business partner/client of the controller.
Scope of the personal data processed:
- Title, first name, surname, job title, job classification, functional classification, employee's personal number or employee number, professional department, place of work, telephone number, fax number, workplace e-mail address and employer's identification data.
3. Identification of recipients, categories of recipients
The controller may disclose personal data to authorised entities, such as institutions and organisations to which processing is permitted by specific legislation, or to contractors (in particular processors) who have contractually undertaken to take appropriate safeguards to preserve the protection of the personal data processed, as follows:
Other authorised body
General binding legal regulation pursuant to Section 13(1)(c) of the Act and pursuant to Article 6(1)(c) of the Regulation
With the consent of the data subject or on his/her instructions, personal data may be disclosed to other recipients.
4. Transfer of personal data to a third country/international organisation
Transfers to third countries or international organisations are not carried out.
5. Personal data in scope Identification of the source from which the personal data were obtained
Directly from the data subject or the data subject's employer
6. Retention period of the personal data
The controller shall process personal data for the period necessary to fulfil the purpose, but for a maximum of 1 year after its end.
7. Profiling
The controller does not process personal data by profiling or in a similar way based on automated individual decision-making.
8. Rights of the data subject
The data subject has the right to request from the controller access to the personal data processed about him or her, the right to rectification of personal data, the right to erasure or restriction of the processing of personal data, the right to object to the processing of personal data, the right to the ineffectiveness of automated individual decision-making, including profiling, the right to the portability of personal data, as well as the right to submit a petition to the supervisory authority. Where the controller processes personal data on the basis of the data subject's consent, the data subject shall have the right to withdraw his or her consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal. The data subject may exercise the rights by sending an e-mail to the following address: info@probatur-group.com, or by writing to the controller.
9. Obligation to provide personal data
The provision of personal data is a contractual requirement, the processing of personal data is necessary. In the event of failure to provide personal data, no contractual relationship will be concluded with the data subject or with the company he or she represents and on whose behalf he or she acts. The data subject has an obligation to provide true personal data, in case of failure to provide it, he/she is in breach of the law and the Regulation.