as an operator, provides for the purpose of observing justice

and transparency towards the affected persons this notification of the affected person

on the processing of personal data according to Articles 13 and 14. Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation") and § 19 of Act NR SR no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws

under the name

 

 Principles of personal data processing

 

Purpose of personal data processing - Call center:

As part of the activity, personal data is processed during the provision of customer services, hotline, support, call recording / client service

Range of affected persons: natural persons - clients who call the customer line, clients who are contacted by the operator

List of personal data: audio recording, title, first name, last name, address, phone, email and notes related to this activity

Legal basis for personal data processing: consent of the person concerned

Beneficiary categories: entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries is not carried out.

Periods for deletion of personal data: 5 years

Automated decision-making, including profiling, is not carried out.

The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time. The withdrawal of consent does not affect the legality of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned can revoke the consent in the same way in which he gave the consent.

 

Purpose of personal data processing - Contact form:

As part of the activity, personal data in the client register is processed for the purpose of sending an answer to the question asked

Range of affected persons: natural persons - clients

List of personal data: title, first and last name, e-mail

Legal basis for personal data processing: consent of the person concerned

Beneficiary categories: entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries is not carried out.

Periods for deletion of personal data: 1 year

Automated decision-making, including profiling, is not carried out.

The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time. The withdrawal of consent does not affect the legality of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned can revoke the consent in the same way in which he gave the consent.

 

The purpose of processing personal data in the Register of incoming and outgoing mail and in the registry administration:

As part of the activity, personal data is processed when registering incoming and outgoing mail and actions related to registry management

Range of affected persons: natural persons - addressees, employees

List of personal data: name, surname, title, address, organization name, job title, e-mail address, subject and content of mail.

Legal basis for personal data processing: Act no. 395/2002 Coll. on archives and registries and on supplementing some laws as amended

Beneficiary categories: entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries is not carried out.

Deadlines for deleting personal data:

Ordinary correspondence	3 years
Registry diary	10 years

Automated decision-making, including profiling, is not carried out.

due to compliance with the principle of minimization, all personal data provided by you is a necessary legal requirement for fulfilling the purpose of their processing.

 

The purpose of processing personal data in the Registry of accounting and tax documents:

As part of the activity, personal data is processed during the processing of accounting documents and the agenda associated with its processing

Range of affected persons: natural persons - clients, employees

List of personal data: name, surname, title, address of permanent residence, address of temporary residence, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of a natural person.

Legal basis for personal data processing: Act No. 431/2002 Coll. on accounting, as amended, Act no. 222/2004 Coll. on value added tax, as amended, Act no. 40/1964 Coll. Civil Code, as amended, Act No. 152/1994 Coll. on the social fund and on amendments to Act no. 286/1992 Coll. on income taxes, as amended, Act no. 311/2001 Coll. Labor Code as amended.

Beneficiary categories: social insurance, health insurance, tax office and entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: courts, law enforcement agencies

and intermediaries: BAZL, spol. with r. o., 930 52 Blahová 132, 44446489

The transfer of personal data to third countries is not carried out.

Deadlines for deleting personal data:

Accounting documents

10 years

Automated decision-making, including profiling, is not carried out.

due to compliance with the principle of minimization, all personal data provided by you is a necessary legal requirement for fulfilling the purpose of their processing.

The purpose of processing personal data in the Register of Contracts:

As part of the activity, personal data is processed, which is necessary for the performance of a contract to which the person concerned is a party, or for the implementation of measures prior to the conclusion of the contract based on the request of the person concerned

Range of affected persons: natural persons - contracting party

List of personal data: name, surname, title, permanent/temporary residence, account number of a natural person, name of the bank, ID number, data related to the subject of the contract.

Legal basis for processing personal data: § 13 par. 1 letter b) Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws

Beneficiary categories: entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries is not carried out.

Deadlines for deleting personal data:

Contracts

10 years

Automated decision-making, including profiling, is not carried out.

due to compliance with the principle of minimization, all personal data provided by you is a necessary contractual requirement for fulfilling the purpose of their processing.

 

Purpose of personal data processing - Photos:

As part of the activity, photos are published on the operator's website, social networks, wall boards, flyers, printed materials, print and electronic media for the purpose of promoting and presenting the company

Range of affected persons: natural persons

List of personal data: photo

Legal basis for personal data processing: consent of the person concerned

Categories of beneficiaries entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries is not carried out.

Deadlines for deleting personal data:

Photos

for the duration of the purpose

Automated decision-making, including profiling, is not carried out.

The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time. The withdrawal of consent does not affect the legality of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned can revoke the consent in the same way in which he gave the consent

The purpose of processing personal data in the register of job applicants:

As part of the activity, personal data is processed when registering job applicants
Group of affected persons: Natural persons - job seekers
List of personal data: name, surname, title, permanent residence, temporary residence, date of birth, telephone number, education, experience, e-mail address, other data in the scope of CV, motivation letter and job application, audio recording

Deadlines for deleting personal data:

CV	2 years
audio recording	2 years

The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time. The withdrawal of consent does not affect the legality of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned can revoke the consent in the same way in which he gave the consent

Affected persons whose personal data is processed for specifically defined purposes may exercise the following rights:

The right to request access to your personal data - The right to correct personal data - The right to delete personal data - The right to limit the processing of personal data - The right to object to the processing of personal data - The right to transfer your personal data - The right to file a complaint with a supervisory authority, i.e. Office for the Protection of Personal Data of the Slovak Republic

The rights of the data subject are specified in more detail in Articles 15 to 21 of the Regulation. The person concerned exercises the said rights in accordance with the Regulation and other relevant legal regulations. The affected person can exercise their rights against the operator through a written request or by electronic means. In the event that the data subject requests the provision of information orally, the information may be provided in this way, provided that the data subject has proved his identity.

PARADIGMA, s.r.o. has adopted all appropriate personnel, organizational and technical measures for the purpose of maximum protection of your personal data in order to reduce the risk of their misuse as much as possible. In accordance with our obligation arising from Article 34 of the Regulation, we inform you as the affected persons that if a situation arises where we, as the operator, violate the protection of your personal data in a way that is likely to lead to a high risk for the rights and freedoms of natural persons, we will notify you of this fact without undue delay .

Legal regulations and related methods of processing your personal data may change. If we decide to update this policy, we will post the changes on our website and notify you of the changes. In cases where there is to be a major change to these principles, or in cases where the law requires us to do so, we will inform you in advance. We ask you to read these policies carefully and in the next communication with us, or regularly check these policies while using our website.

If you have any questions regarding the processing of your personal data, including the exercise of the above-mentioned rights, you can contact our Responsible Person provided by JUDr. Iveta Gálošová Bušová, and in accordance with § 44 of Act no. 18/20128 Coll. and Article No. 37 REGULATION OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) 2016/679, provides us with a responsible person who can be contacted at galosova@poradenska.sk. You can read more information here: poradenska.sk We will properly check all your suggestions and complaints and send you a statement.

If you are not satisfied with our answer, or if you believe that we process your personal data unfairly or illegally, you can file a complaint with the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12 , 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.