INFORMATION FOR DATA SUBJECTS ABOUT THE LAWFUL PROCESSING AND DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
We would like to assure you that we adhere to strict rules that determine which employee or department has access to your personal data and what personal data may be processed. We further assure you that the processing of your personal data is always carried out only to the extent necessary for the specific purpose of processing.
IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
Controller: HANT BA, a.s.
Stará Ivanská cesta 1/386, 821 04 Bratislava
Company ID No.: 36 328 375
Contact details:
HANT BA, a.s., Stará Ivanská cesta 1/386, 821 04 Bratislava
Tel.: 00421 42 432 51 76
e-mail: sekretariat@hantgroup.sk
web: www.hant-ba.sk
PURPOSE OF PROCESSING AND LEGAL BASIS FOR PROCESSING
The purpose of processing personal data is:
- recording sent and received mail,
- recording one-time entries into the premises of the controller at Stará Ivanská cesta 1, 821 04 Bratislava,
- exercise of rights and obligations arising from the contractual relationship between you and the controller,
- recording and handling dispute and accounting agenda,
- recording and handling complaints,
- monitoring areas accessible to the public.
The legal basis for processing personal data is:
- performance of a contract between you and the controller pursuant to § 13(1)(b) of Act No. 18/2018 Coll.,
- legitimate interest of the controller in protecting property, life, and health pursuant to § 13(1)(f) of Act No. 18/2018 Coll. when monitoring areas accessible to the public. The legitimate interest of the controller is the protection of the controller’s property.
- a special regulation pursuant to § 13(1)(c) of Act No. 18/2018 Coll. (Act No. 395/2002 Coll. on Archives and Registries, Act No. 307/2014 Coll. on measures related to reporting anti-social activities, Act No. 40/1964 Coll. Civil Code, Act No. 513/1991 Coll. Commercial Code, Act No. 152/1994 Coll. on the Social Fund, Act No. 431/2002 Coll. on Accounting, Act No. 595/2003 Coll. on Income Tax, Act No. 222/2004 Coll. on Value Added Tax, etc.).
The controller does not carry out automated individual decision-making within the meaning of § 28 of Act No. 18/2018 Coll.
CATEGORIES OF PROCESSED PERSONAL DATA
The controller processes ordinary personal data:
Identification data: First name, surname, academic title, maiden name, date of birth, signature, image recording.
Contact data: Permanent/temporary residence address, telephone number, e-mail address.
Economic and employment data: Bank account number, etc.
RECIPIENTS OF PERSONAL DATA
A recipient of personal data under the GDPR and Act No. 18/2018 Coll. is any person to whom personal data are provided, regardless of whether they are a third party; a public authority that processes personal data under a special regulation or international treaty binding on the Slovak Republic is not considered a recipient, provided it processes the data in accordance with the applicable personal data protection rules for the given purpose.
Your personal data will be provided to the controller’s processors to the necessary extent, namely:
- G 3 Plus, s.r.o., Šoltésova 421, Považská Bystrica 017 01, Company ID No.: 36 316 202,
- Advokátska kancelária KZ partners, s. r. o., Slnečná 4, Senec 903 01, Company ID No.: 47 236 477,
- URFA s.r.o., Jaspisová 912/14C, Bratislava - Jarovce 851 10, Company ID No.: 47 721 588.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
Your personal data are not transferred to third countries.
RETENTION PERIOD
The controller retains personal data for:
- the period necessary to protect the legitimate interests of the controller in case of monitoring publicly accessible areas (15 days),
- the period necessary to exercise rights and obligations arising from other purposes of personal data processing (for 10 years).
RIGHTS OF THE DATA SUBJECT
As a data subject, you have the right to:
- access personal data concerning you,
- rectification, restriction, deletion of personal data,
- object to the processing of personal data,
- accuracy of data,
- data portability upon request to another controller,
- information about the source from which personal data originate, including whether they come from publicly accessible sources,
- confidentiality regarding all data and facts obtained from the data subject,
- file a complaint with the supervisory authority (Office for Personal Data Protection of the Slovak Republic),
- transparent processing of personal data.
Anyone who believes that their rights or legally protected interests have been violated due to non-compliance with the principle of equal treatment may seek legal protection in court under a special regulation.
INFORMATION ABOUT VOLUNTARY OR MANDATORY PROVISION OF PERSONAL DATA
Consent of the data subject for processing, providing, and making personal data available is not required.
PERSONAL DATA SECURITY CONDITIONS
The controller declares that it has adopted all appropriate technical and organizational measures to secure personal data.
The controller declares that only persons authorized by the controller have access to personal data.
