Preskočiť na obsah

GDPR

Information provided when collecting personal data 

pursuant to Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter “GDPR”), in conjunction with Sections 19 and 20 of Act No. 18/2018 Z.z. on the Protection of Personal Data and on the Amendment of Certain Acts, as amended (hereinafter “the Information”)

Introductory provisions

a) the term “controller” or the pronoun “we”/”our”, including all its relevant grammatical forms used in this Information, is deemed to refer to the term controller under point 1.1 of this Information (i.e. us);

b) the term “data subject” or the pronoun “you”/”your”, including all its relevant grammatical forms used in this Information, is deemed to refer to the term data subject (i.e. you, the person about whom we process personal data);

c) the terms “data subject”, “processor”, “recipient” and “processing” have, for the purposes of this document, the meanings assigned to them by the official Slovak version of the GDPR.

1.1 Identity and contact details of the controller

HOUR, spol. s r.o., with its registered office at M. R. Štefánika 836/33, 010 01 Žilina, registered in the Commercial Register of the District Court Žilina, Section: Sro, Insert No.: 1182/L;

1.2 Contact details of the Data Protection Officer
Lenka Futová, +421 41 285 01 64, gdpr@hour.sk;

1.3 Categories of personal data concerned

1.3.1 identification data, meaning in particular name, surname, title, permanent residence address (place of business), nationality, signature, and possibly other personal data stated in a price quote, order, contract, invoice, and related accounting documents, business name, place of business, and identification number of a self-employed individual;

1.3.2 contact data, meaning in particular billing and delivery address, phone number, and e-mail address;

1.3.3 data related to making payments, meaning in particular the bank account number;

1.3.4 data about your orders, primarily data about services you have ordered or used, the method of delivery and payment including the payment account number, and data about complaints;

1.3.5 data related to the fulfillment of your contractual obligations, meaning information about the amount of outstanding liabilities;

1.3.6 data about your behavior on the website, particularly offers you view, links you click on, how you navigate our website and the system we provide, as well as data about the device you use to browse our website, such as IP address and the location derived from it, device identification, its technical parameters such as operating system, its version, screen resolution, the browser used and its version, and also data obtained from cookies and similar technologies used to identify the device;

1.3.7 derived data, meaning personal data derived from your settings, from data about goods and services you purchase from us, from data about your behavior on the website, and from data about your behavior when reading messages we send you;

1.4 Purposes of processing personal data

1.4.1 processing is necessary for the conclusion and performance of the agreement on the provision of services in the Humanet system, concluded between the provider (processor or sub-processor) and the user (controller or processor), the subject of which is the provision of services in the Humanet system (hereinafter the “agreement”), in particular:

1.4.1.1 billing of contractual claims and fulfillment of payment obligations;

1.4.1.2 for the purposes of making a payment;

1.4.1.3 in connection with the fulfillment and handling of complaints regarding delivered goods/services provided;

1.4.1.4 in connection with your other requests addressed to us;

1.4.2 processing is necessary for the fulfillment of the controller’s legal obligations (e.g. accounting, etc.), which apply to the controller in particular (but not exclusively) under the following legislation:

1.4.2.1 Act No. 513/1991 Z.z., the Commercial Code;

1.4.2.2 Act No. 595/2003 Z.z. on Income Tax;

1.4.2.3 Act No. 222/2004 Z.z. on Value Added Tax;

1.4.2.4 Act No. 431/2002 Z.z. on Accounting;

1.4.2.5 Act No. 124/2006 Z.z. on Occupational Health and Safety;

1.4.2.6 Act No. 395/2002 Z.z. on Archives and Registries;

1.4.3 processing is necessary for the purposes of the controller’s legitimate interests, namely for the purpose of:

1.4.3.1 obtaining information on the basis of which we will be able to improve our services for you in the future, so that you can use our services even more efficiently, in particular determining your satisfaction with our services (improving our services for you);

1.4.3.2 preparing a price quote based on an inquiry from a potential business partner, or contacting them in relation to the requested service or product:

1.4.3.2.1 personal data may be provided to a subcontractor that ensures the delivery and implementation of the attendance system, or another product or service, if this is necessary for preparing the price quote;

1.4.3.3 providing tailored offers and targeted advertising, which we may show you on our website (effective promotion of our products and services);

1.4.3.4 testing new features and applications before deployment;

1.4.3.5 protecting our legal claims (in other words, so that we can defend our own legal claims in judicial, out-of-court, or enforcement proceedings), where our legitimate interest is preventing damage;

1.4.3.6 checking the proper performance of the agreement (e.g. checking that services are duly provided);

1.4.3.7 ensuring safety and the protection of property, where our legitimate interest is ensuring physical and IT security, as well as protecting our property;

1.4.3.8 offering our products and services;

1.4.3.9 supporting business activities and marketing, marketing research, satisfaction surveys, sending information about news relating to the controller’s activities and the services it provides;

1.5 Legal basis for processing personal data

1.5.1 Art. 6(1)(b) GDPR – processing is necessary for the performance of a contract concluded between the controller and the data subject under point 1.5.1 of this Information;
1.5.2 Art. 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the controller is subject under applicable legislation;
1.5.3 Art. 6(1)(f) GDPR – processing is necessary for the purposes of the controller’s legitimate interests under point 1.5.3 of this Information;

1.6 Recipients or categories of recipients of personal data

The controller provides your personal data mainly to the following recipients/ categories of recipients:

1.6.1 provider of legal services;
1.6.1 administrator of the controller’s website;
1.6.2 providers of legal services;
1.6.3 providers of accounting and tax advisory services, audit services;
1.6.4 providers of insurance services;
1.6.5 providers of telecommunications services;
1.6.6 providers of courier services; 
1.6.7 providers of banking services;
1.6.8 providers of external consulting services; 
1.6.9 providers of translation services;
1.6.10 providers of outsourcing services for analytical, consulting, and programming work;
1.6.11 providers of information system and technical infrastructure administration services, where they manage internal systems for the administration of personal data;
1.6.12 persons who carry out the sale of goods and provision of services on behalf of and for the account of the controller (mandataries, sales representatives);
1.6.13 providers of accounting services;

1.7  Personal data retention period (criteria for determining it):

The controller is authorized to retain personal data for the following period:
Please note that all relevant retention periods for your personal data are identified within the Records of Processing Activities maintained and regularly updated by our company. If you are interested, you may review the current Records of Processing Activities at any time on our website, in the personal data protection section. Below we provide only an illustrative list of possible retention periods for your personal data by our company:

1.7.1 for the duration of the contractual relationship with the data subject;
1.7.2 for the period necessary to exercise the rights and obligations arising from the contractual relationship with the data subject;
1.7.3 for the duration of the limitation or preclusion periods relating to claims arising from or related to the contractual relationship with the data subject, and for one year after the expiry of the relevant limitation or preclusion period, in case a legal claim may be asserted against our company at the end of the limitation or preclusion period;
1.7.4 for the duration of judicial, administrative, or other proceedings, to the necessary extent for the entire duration of such proceedings, and for the remaining part of the limitation or preclusion period after their conclusion;
1.7.5 for the purposes under point 1.5.2 of this Information, for the period resulting from the relevant legislation;

1.8 Identification of the data subject’s rights

1.8.1 the right to object to the processing of the data subject’s personal data, in particular to object to processing under point 1.5.3 of this Information; in such a case, we will not continue to process your personal data for the given purpose unless we have compelling legitimate grounds to continue such processing;
1.8.2 the right to access personal data relating to the data subject;
1.8.3 the right to rectification of the data subject’s personal data;
1.8.4 the right to erasure of the data subject’s personal data;
1.8.5 the right to restriction of processing of the data subject’s personal data;
1.8.6 the right to data portability of the data subject’s personal data;
1.8.7 the right to lodge a complaint with the Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava 27, Slovak Republic;

1.9 Information on whether the provision of personal data is a statutory or contractual
requirement, or a requirement necessary to conclude a contract (including information on whether the data subject is obliged to provide the personal data and the possible consequences of failing to provide it)

1.9.1 in the case of processing personal data for the purpose under point 1.5.1 of this Information, the provision of personal data and its processing by the controller is necessary for the performance of the contract (if the data subject did not provide the personal data, the controller would not be able to perform the contract);
1.9.2 in the case of processing personal data for the purpose under point 1.5.2 of this Information, the processing of the data subject’s personal data by the controller is necessary for compliance with a legal obligation to which the controller is subject under generally binding legislation;
1.9.3 in the case of processing personal data for the purpose under point 1.5.3 of this Information, the data subject is not obliged to provide personal data and is entitled to object to the processing of their personal data (if you exercise your right to object to the processing of your personal data under point 1.5.3 of this Information, in such a case we will not continue to process your personal data, unless we have compelling legitimate grounds to continue such processing );

1.10 What sources do we obtain personal data from? 

We obtain most personal data directly from you, when you provide it to us as part of your registration or order related to a business transaction, or provide it on some other occasion;

1.11 Information on the existence of automated decision-making, including profiling (including information on the procedure used, as well as the significance and anticipated consequences of such processing for the data subject):

1.11.1 If you visit our website, we store small files such as cookies on your device and subsequently read from them. A cookie is a small file of letters and numbers that we store in your web browser or on your computer’s hard drive. Some cookies allow us to link your activities while browsing our website from the moment you open a browser window until the moment you close it. As soon as you close the browser window, these cookies are deleted. Others remain on the device for a set period of time and are activated whenever you visit the website that created the particular cookie. The reason for using cookies is mainly to publish submitted posts, track visits, and improve our services. If you register with us, we use your data to manage your account and provide related features. We also use your contacts and other data to show and send you our offers. We also use your data when you order goods through our shopping cart, and when handling any complaints, if  we are required to process them by legislation, and also to protect our legal claims.

1.11.2 Cookies also help us to:

1.11.2.1 identify you when moving between individual pages (tabs) of our website and on repeat visits, for example so that your shopping cart is not cleared during a purchase, so that we can remember your login from a specific device and not repeatedly ask you for your e-mail and password, or so that we can save which version of our website to show you, in case the website offers multiple variants at a given time;

1.11.2.2 with ensuring security, for example so that we can ensure that no one misuses your connection to our website or acts on your behalf;

1.11.2.3 record, investigate, and remove faults and non-functioning parts of our website;

1.11.. We do not obtain data about your behavior on our website only from cookies; we also supplement it with data such as:

1.11.3.1 the IP address of your device (the address of your device that you use to communicate with other devices on the internet);

1.11.3.2 the operating system of your device, its version, and language settings;

1.11.3.3 the browser you use on your device, its version, and language settings;

1.11.3.4 the address of the web page (URL) from which you arrive at our website;

If you do not disable the use of cookies in your web browser settings, and after our notice you click on any link on our website, or click the “I understand” button that is part of the notice, we will reasonably assume that you consent to the use of these cookies. You may withdraw your consent at any time by disabling the use of cookies in your web browser settings.

You also have the right to object to this processing, in accordance with point 1.8.1 of this Information.