Processing of personal data

Dear client, business partner, and website visitor, We would like to inform you about how our company works with your personal data. We value your privacy and have therefore taken appropriate technical and organizational measures to protect your personal data. Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts, we are obliged to be transparent when processing your personal data. The controller, SITEL s.r.o., Zemplínska 6, 040 01 Košice, ID No.: 31668305, processes personal data for various purposes in connection with its activities. The processing of personal data may be based on various legal grounds, which we will inform you about in the context of the individual purposes of personal data processing (below). The controller has appointed a person responsible for supervising the protection of personal data. The duties of the responsible person under the GDPR are performed by the external consulting company Top Privacy s.r.o., and the responsible person can be contacted at the email address: zodpovednaosoba@topprivacy.sk, in accordance with Article 38(4). In the following section, you will find the names of information systems, which are divided according to the purposes of personal data processing. Each of them contains detailed information in accordance with Articles 13 and 14 of the GDPR, which explains in detail why and how we process your personal data.

Purposes of personal data processing

The controller processes the personal data of clients, business partners, and website visitors in the following information systems: 1. ACCOUNTING DOCUMENTS, 2. REGISTRY MANAGEMENT, 3. CAMERA SYSTEM – technology monitoring, 4. BUSINESS PARTNER RECORDS, 5. VISIT BOOK, 6. COOKIES. Last but not least, we would like to inform you about your rights regarding the processing of personal data.

Rights of data subjects:

The data subject has the right to access their data. Upon request by the data subject, the controller shall issue a confirmation as to whether the personal data concerning the data subject are being processed. If the controller processes such personal data, it shall issue a copy of such personal data upon request by the data subject. If the data subject requests information by electronic means, it will be provided in a commonly used electronic form, namely by e-mail, unless the data subject expressly requests another method of provision. The data subject has the right to correct personal data if the controller records incorrect personal data about them. At the same time, the data subject has the right to have incomplete personal data completed. The controller shall correct or complete the personal data without undue delay after the data subject requests it. The data subject has the right to erasure (right to be forgotten) of personal data concerning him or her, provided that: a. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b. the data subject withdraws the consent on the basis of which the processing is carried out, c. the data subject objects to the processing of personal data, d. the personal data has been processed unlawfully, e. the reason for erasure is to comply with a legal obligation, a specific regulation, or an international treaty to which the Slovak Republic is bound, or f. the personal data was collected in connection with the offer of information society services to a person under the age of 16. The data subject shall not have the right to erasure of personal data provided that their processing is necessary: a. for exercising the right of freedom of expression and information; b. to comply with a legal obligation under a law, specific regulation, or international treaty to which the Slovak Republic is bound, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller; c. for reasons of public interest in the area of public health; d. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing, or e. for the establishment, exercise or defense of legal claims. The controller shall erase the personal data of the data subjects on the basis of a request without undue delay after assessing the request of the data subject as justified. The data subject has the right to restrict the processing of personal data if: a. they contest the accuracy of the personal data by raising an objection under this article, during a period enabling the controller to verify the accuracy of the personal data; b. the processing is unlawful and the data subject requests the restriction of the use of personal data instead of their erasure; c. the controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; d. the data subject has objected to the processing of personal data on the basis of a legitimate claim by the controller, pending verification of whether the legitimate reasons on the part of the controller outweigh the legitimate reasons of the data subject. If the data subject requests restriction of processing of their personal data, the controller shall not carry out any processing operations on the data concerned, except for storage, without the consent of the data subject. The data subject will be informed by the controller when the restriction on the processing of such data is lifted. The data subject has the right to data portability, which means obtaining the personal data they have provided to the controller and to transfer this data to another controller in a commonly used and machine-readable format, provided that the personal data has been obtained on the basis of the data subject’s consent or on the basis of a contract and is processed by automated means. The data subject has the right to object at any time to the processing of their personal data on grounds relating to their particular situation. The data subject may object to the processing of their personal data on the basis of: a. the legal title of performing tasks carried out in the public interest or in the exercise of public authority, or on the legal title of the legitimate interest of the controller, b. the processing of personal data for direct marketing purposes, c. processing for scientific or historical research purposes or for statistical purposes. If the data subject objects to the processing of personal data for direct marketing purposes, the controller may no longer process their personal data. The controller shall assess the objection received within a reasonable time. The controller may not continue to process personal data unless it demonstrates compelling legitimate grounds for the processing which override the rights or interests of the data subject or for the establishment, exercise or defense of legal claims. The data subject has the right to object to automated individual decision-making, including profiling, if the controller processes personal data by profiling or in a similar manner based on automated individual decision-making. The data subject has the right to withdraw their consent to the processing of personal data at any time, provided that the processing of personal data was based on this legal basis. The data subject shall withdraw their consent in the manner specified in the consent itself or in this information; if such information is not available, the consent shall be withdrawn by contacting the controller with their request in any manner of their choice. The controller’s contact details are provided above. The lawfulness of the processing of personal data prior to the withdrawal of consent on the basis of the consent given shall not be affected by its withdrawal. The data subject has the right to lodge a complaint/proposal to initiate proceedings with the supervisory authority – the Office for Personal Data Protection of the Slovak Republic. with its registered office at Hraničná 4826/12, 820 07 Bratislava – Ružinov, telephone number: +421 /2/ 3231 3214; email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk, if they believe that their rights in the area of personal data protection have been violated. If the proposal is submitted electronically, it must meet the requirements of Section 19(1) of Act No. 71/1967 Coll. on Administrative Procedure (Administrative Code). The data subject may address their comments and requests regarding the processing of personal data to the controller in writing or by electronic means using the contact details provided at the beginning of this text.