Personal Data Protection
Principles of Personal Data Processing
We value the trust you place in us when you entrust us with your personal data, and we are committed to protecting your personal data so that you feel safe with us. In this document, we would therefore like to inform you about how we handle your personal data, how you can contact us if you have questions regarding the processing of your personal data, and other important information concerning the processing of your personal data.
When processing your personal data, we comply with Act No. 18/2018 Coll. on Personal Data Protection, as amended, hereinafter referred to as the “Act”, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, hereinafter referred to as the “GDPR”, and related legislation.
Who We Are`
The controller responsible for the processing of your personal data is:
APIS Plastic Slovakia s.r.o.
Areál ZŤS 924, 018 41 Dubnica nad Váhom
Company ID No.: 36 352 411
Registered in the Commercial Register of the District Court TrenÄŤĂn, Section: Sro, File No. 16560/R
Email: podnety-dca@apisplastic.sk, podnety-ca@apisplastic.sk
What Personal Data We Process
We process the following categories of your personal data:
ordinary personal data, such as name, surname, date and place of birth, address, nationality, email address, telephone number.
Purpose, Legal Basis of Processing and Retention Period
Career
Purposes and legal bases:
Selection procedure: We process personal data for the purpose of the selection procedure based on your job application, meaning pre-contractual relations.
Candidate database management: If, when submitting your job application, you provide us with consent to process your personal data for the purpose of inclusion in the candidate database, we will include you in our candidate database for the purpose of contacting you again. Personal data for the purpose of inclusion in the candidate database is processed based on your consent.
Retention period:
We will retain your personal data until the selection procedure is completed. If you have provided us with consent to be included in the candidate database, we will retain your personal data for a period of 1 year from the date your consent was granted.
Contractual Relations
Purposes and legal bases:
Performance of a contract: If you are a party to a contract concluded with us, the processing of your personal data may be necessary for the performance of the subject matter of that contract, and such processing will be carried out on the basis of that contract.
Your personal data may also be processed for the purpose of contract performance if you are not a party to the relevant contract but the contract otherwise relates to you, for example, if you are a contact person, employee of our contractual partner, your employer, listed in the contract. In such a case, we will process your personal data based on our legitimate interest.
Retention period:
We retain your personal data until the purpose of processing, namely the subject matter of the contract, has been fulfilled and the period for asserting any potential claims has expired. Accounting documents related to contracts must be retained for 10 years after the year to which they relate.
Communication
Purposes and legal bases:
Mutual communication: If you contact us regarding any matter through any communication channel, by post, email or telephone, we process your personal data for the purpose of mutual contact with you. Personal data for communication with you is processed based on your request within contractual or pre-contractual relations. Records of incoming and outgoing correspondence are processed based on a special law.
Contacting the client / care for better relations with you: By better understanding your needs, we can better meet your requirements and needs, as our interest is the continuous improvement of our products and services for your satisfaction. This processing of personal data is therefore based on our legitimate interest in providing our services in the best possible way and ensuring client satisfaction.
Retention period:
We will retain your personal data for the period necessary to handle your request. Records of incoming and outgoing correspondence will be retained for 10 years after the year to which they relate.
Fulfilment of Our Legal Obligations
When processing your personal data for individual purposes, your personal data is also processed based on various special regulations that impose various obligations on us, such as retaining data in our accounting records or disclosing or providing data to state and other authorities that supervise our activities, resolve disputes, or enforce decisions. Such special regulations include, for example, Act No. 40/1964 Coll., the Civil Code; Act No. 102/2014 Coll. on Consumer Protection; Act No. 222/2004 Coll. on Value Added Tax; Act No. 513/1991 Coll., the Commercial Code; Act No. 431/2002 Coll. on Accounting; Act No. 582/2004 Coll. on Local Taxes and Local Fees for Municipal Waste and Small Construction Waste; and Act No. 404/2011 Coll. on the Residence of Foreign Nationals.
Retention period:
The retention period will depend on the obligation we are required to fulfil under the relevant special regulation.
Necessity to Provide Personal Data
If the provision of personal data is a legal or contractual requirement, or a requirement necessary for concluding a contract, the data subject is obliged to provide the personal data. Otherwise, the purpose of processing intended by the controller in the event of providing personal data cannot be fulfilled.
Provision and Disclosure of Your Personal Data
In general, we may disclose and/or provide your personal data to other entities, such as the tax authority, state administration and public authorities for the performance of inspections and supervision, courts, law enforcement authorities, accountants, auditors, lawyers, IT system and support suppliers, and other external professional advisers and companies that provide us with products and services. We are responsible for the proper protection of your personal data that is provided and/or disclosed to other entities acting as processors.
Transfer of Personal Data to a Third Country or International Organisation
The controller does not carry out and does not intend to carry out any transfer of personal data to a third country or international organisation.
Automated Decision-Making Including Profiling
No automated decision-making or profiling is carried out when processing personal data for the purposes specified above.
Your Rights as a Data Subject in the Processing of Personal Data
Right of Access
Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data from, to whom we provide it, who processes it in addition to us, and what other rights you have in relation to the processing of your personal data. However, if you are unsure which personal data we process about you, you may ask us to confirm whether or not personal data concerning you is being processed by us. If it is, you have the right to access that personal data. As part of the right of access, you may request a copy of the processed personal data, with the first copy provided free of charge and additional copies subject to a fee. However, the rights of third parties must not be restricted by this.
Right to Rectification
Personal data must be accurate, up to date and truthful. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented by us without undue delay. By exercising this right, you help us keep your personal data accurate and up to date.
Right to Erasure
In some cases, you have the right to have your personal data erased by us. We will erase your personal data without undue delay if one of the following grounds applies:
your personal data is no longer necessary for the purposes for which it was processed;
you withdraw your consent to the processing of personal data, where your consent is necessary for the processing of such data, and we have no other legal basis or reason for further processing;
you exercise your right to object to the processing of personal data that we process based on our legitimate interests, and we determine that there are no longer any legitimate grounds on our side that override your legitimate grounds; or
you believe that the processing of personal data carried out by us was unlawful.
Please note, however, that even if one of these grounds applies, this does not mean that we will immediately delete all your personal data. This right does not apply if the processing of your personal data remains necessary for the fulfilment of our legal obligation or for the establishment, exercise or defence of our legal claims.
Right to Restriction of Processing
In some cases, in addition to the right to erasure, you may exercise the right to restriction of the processing of personal data. This right allows you, in certain cases, to request that your personal data be marked and that such data not be subject to any further processing operations. In this case, however, this is not permanent, as in the case of the right to erasure, but only for a limited period. We must restrict the processing of personal data when:
you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of your personal data;
we process your personal data unlawfully, but you prefer restriction of the data instead of its erasure;
we no longer need your personal data for the stated processing purposes, but you require it for the establishment, exercise or defence of your legal claims; or
you object to processing, for the period during which we determine whether your objection is justified.
Right to Data Portability
You have the right to obtain from us all personal data that you have provided to us and that we process by automated means on either of the following two legal bases: on the basis of a contractual relationship or on the basis of consent. We will provide your personal data to you in a structured, commonly used and machine-readable format, and in this context you may exercise your right to transfer this data to another controller, provided that such transfer is technically feasible. In order for us to easily transfer the data at your request, this may only involve data that we process automatically in our electronic databases. However, the rights of third parties must not be restricted by this.
Right to Object to Processing
You have the right to object at any time to the processing of personal data carried out on the basis of our legitimate interest. We must no longer process such personal data unless compelling legitimate grounds for such processing are demonstrated that override your interests, rights and freedoms, or unless there are grounds for the establishment, exercise or defence of legal claims. You also always have the right to object to the processing of your personal data if it is processed for direct marketing purposes. In such a case, we will immediately stop processing your personal data for direct marketing purposes.
Right to Lodge a Complaint
If you believe that we process your personal data unlawfully or in breach of generally binding legal regulations, you have the right to lodge a complaint against our processing of personal data with the Office for Personal Data Protection of the Slovak Republic.
Right to Withdraw Consent
You have the right to withdraw your consent to the processing of personal data at any time if the personal data is processed on this legal basis.
How and Where You Can Exercise Your Rights
If you have any questions regarding this document or the use of your personal data, or if you wish to exercise your rights described in this document, you may contact us by email, in writing, or in person at the registered office of our company.
We will respond to your request concerning the processing of personal data without undue delay, and in any case within one month of receiving it. In special cases, this period may be extended by another two months, but in any case, we will inform you of the reasons for extending the period within one month of receiving the request. Information is provided free of charge. However, if your requests are excessive or repetitive, we may charge a reasonable administrative fee for handling them.
Security
We have adopted the necessary legal, organisational, physical and technical measures to protect personal data in accordance with data security and privacy protection standards. If we provide and/or disclose personal data to a third party that provides services necessary to fulfil one of the purposes of personal data processing, such third party, acting as a processor, has also adopted appropriate measures to protect the confidentiality, integrity and security of personal data. We have also taken the necessary steps to ensure that the personal data we process is reliable, accurate and complete for the purpose of its use.
Reporting Anti-Social Activity / Whistleblowing
In accordance with applicable legislation, reports of anti-social activity may be submitted electronically to the following email addresses:
podnety-ca@apisplastic.sk — Čadca
podnety-dca@apisplastic.sk — Dubnica nad Váhom
All reports will be received, recorded and assessed in accordance with the company’s internal regulations and applicable legal regulations.
