Principles of Processing Personal Data

under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation”) and Act no. 18/2018 Coll. on Personal Data Protection and the Amendment of Certain Acts (hereinafter referred to as the “Personal Data Protection Act”)

1. Our identification and contact details

We process the personal data of data subjects at the organization: PRORECO s.r.o., 3068 Trenčianske Stankovce 913 11, ID no: 36 311 375, email: info@proreco.sk, tel.: 032/744 3957, as the data controller.

2. How do we process personal data?

In accordance with the General Data Protection Regulation and the Personal Data Protection Act, we process personal data for various purposes. Every processing purpose is characterized by:

separate activities of personal data processing that lead to the achievement of the purpose,
a relevant legal basis (or authorization to process personal data),
various recipients to whom personal data may be provided or made available,
different retention periods of personal data, or deadlines for deleting personal data.

In the following sections, you will find more detailed information on the individual purposes for processing personal data.

2.1 Supplier-Customer Relationship Management

In order to effectively manage our relationships with business partners, customers and potential customers, we process the following information about the data subject as required: first name, surname, name of the organization, telephone number, e-mail address; information that is the subject of the communication.

Processing activities leading to the achievement of the stated purpose:	records of the contact details of the customer, supplier and their employees in the data controller’s system, administering customer demand and mutual communication with suppliers and customers and their employees, managing bids, records of business contracts (purchase, sale) monitoring and evaluation of customer satisfaction, etc.
Legal basis of processing	Art. 6 par. 1 letter c) of the general regulation on data protection, where the processing of personal data is our legal obligation, for example within the meaning of Act no. 222/2004 Coll. on Value Added Tax, as amended; Act no. 431/2002 Coll. on Accounting; Act no. 595/2003 Coll. on Income Tax. Without the processing of personal data, we cannot fulfil the obligations imposed on us by the specific laws. Art. 6 par. 1 letter f) the general data protection regulation, which is our legitimate interest, when we process your personal data for the purpose of effective registration of contact details of our customers or potential customers, administering customer demand and overall communication with our business partners or other natural persons.
Possible provision of data to recipients	Apart from mutual communication with our business partners, we do not provide personal data to any other recipients.
Retention period (deadline for deleting personal data)	We will store personal data in accordance with our registration plan, namely: 10 years (for example, business contracts and price agreements with other entities); 5 years (e.g. administering customer demand and mutual communication).

2.2 Accounting

In order to properly keep our accounts, we process the following information on the data subject as needed: name of the organization, title, first name, surname, email address, telephone contact.

Processing activities leading to the achievement of the stated purpose:	records, recording invoices (supplier – customer), processing of other tax and accounting documents.
Legal basis of processing	Art. 6 par. 1 letter c) of the general regulation on data protection, where the processing of personal data is our legal obligation, for example within the meaning of Act no. 222/2004 Coll. on Value Added Tax, as amended; Act no. 431/2002 Coll. on Accounting; Act no. 595/2003 Coll. on Income Tax. Without the processing of personal data, we cannot fulfil the obligations imposed onus by specific laws.
Possible provision of data to recipients	In order to properly keep our accounts, we do not provide personal information to any other recipients.
Retention period (deadline for deleting personal data)	We will keep the personal data that is part of the accounting and tax documents in accordance with our registration plan for 10 years.

2.3 Promotion of the organization

In order to promote the organization, we process the following information on the data subject as needed: video, audio recordings; first name, surname, job title, photograph, contact details.

Processing activities leading to the achievement of the stated purpose:	presentation of the company’s activities and events – by publishing the data controller’s presentation videos, PR articles, photographs (via the website, social networks, etc.)
Legal basis of processing	Art. 6(1)(a) of the General Data Protection Regulation with the voluntary consent of the data subject. The consent may be revoked by the data subject at any time, without altering the lawfulness of the processing based on the consent given before its revocation.
Possible provision of data to recipients	Personal data will be provided to the recipients of presentation materials, for example at trade fairs; graphic studios, printers and forwarding companies. At the same time, we will process it in cooperation with the web hosting service provider and using the services of Facebook Ireland Limited, Republic of Ireland, and LinkedIn Ireland Unlimited Company, Republic of Ireland.
Retention period (deadline for deleting personal data)	We will process personal data until the consent is revoked.

2.4 Candidates for employment

If you want to become part of our team, then we will process your personal data solely for the purpose of selecting employees within the ongoing filling of a vacancy. Your personal data will only become part of our database of jobseekers (for example, if you do not respond to a specific job offer) if you give us your consent.

Processing activities leading to the achievement of the stated purpose:	obtaining and registration of applications for employment during a vacancy (we process, for example, title, first name, surname, address, telephone and email contact, education data and other personal data contained in the CV, covering letter and other documents submitted by the applicant). conducting a job interview (we process, for example, title, first name, surname, education data and other personal data contained in the CV, covering letter and other documents submitted by the applicant and data obtained during the interview with the applicant). storage of applications for employment after the end of the selection procedure (we process, for example, title, first name, surname, address, telephone and e-mail contact, data on education).
Legal basis of processing	Art. 6(1)(c) of the General Regulation on Data Protection, specifically Act no. 311/2001 Coll., the Labour Code. Art. 6(1)(a) of the General Data Protection Regulation, which is consent to processing. The consent may be revoked at any time. Revocation of consent does not affect the lawfulness of the processing resulting from consent prior to its revocation.
Possible provision of data to recipients	We do not provide the personal data of job seekers to any other recipients.
Retention period (deadline for deleting personal data)	We will process personal data during the selection procedure. If you give us your consent to processing, during the period of validity of the granted consent.

2.5. Operation of our fan page and use of Facebook tools

We present our products via the social network Facebook, on which we have located our fan page. Facebook Ireland Limited is the joint controller with us, in relation to the personal data processed, as it provides us with various statistics. In order to comply with the requirements of the General Data Protection Regulation, you can familiarize yourself with the page controller’s addendum for the site’s statistics.

The processing of personal data takes place by Facebook placing on your computer, or other device by which you visit our fan page, the “cookies” (Cookies are short text – an alphanumeric string that is stored on the device of a visitor to our website. Cookie technology is now used by many website operators and has become quite common.) These remain active for two years, unless deleted. Because personal data processed in this way may also be processed by Facebook, Inc., a US-based company, personal data may be subject to cross-border transfer to third countries under the “Secure shield”.

You can read all about how Facebook processes cookies in its policy on the use of cookies.

When using Facebook tools (such as ‘like’ or ‘share’ buttons), Facebook acts as our intermediary (conditions for data processing in a intermediation relationship) or a stand-alone data controller (terms and conditions for Facebook tools).

As you browse our website, Facebook creates a connection between your browser and Facebook’s servers. If you click the “like” or “share” button while logged in to your Facebook account, you can link the content of our website to your profile. If you do not want Facebook to link a visit to our site with your user account, log out of your Facebook account at the time you visit our site.

2.6 Operation of our website

We may process data about the use of our websites and services (usage data). Usage data may include your IP address, geographical location, web browser and version, operating system, reference source, length of visit, page views and site navigation paths, as well as information on the timing, frequency and pattern of use of our service. The source of usage data is Google Analytics. This usage data may be processed for the purpose of analyzing the use of the website and services. The legal basis for this processing is consent and our legitimate interests, i.e. monitoring and improving our website and services.

3. What are your rights and how can you exercise them?

As the data subject, you have the following rights:

The right of access to your personal data, which means that you have the right to be provided with a copy of the personal data we have about you, as well as information about how we use your personal data.
The right of rectification of your personal data, that is, we take reasonable steps to ensure the accuracy, completeness and timeliness of the information we have about you. If you believe that the information that we hold is inaccurate, incomplete or out of date, please do not hesitate to contact us to edit, update or supplement this information.
The right of erasure of your personal data.
The right to restriction of the processing of your personal data. This means that under certain circumstances you are entitled to ask us to stop using your personal data. For example, when you think the personal information that we hold about you may be inaccurate or when you think we no longer need to use your personal information.
The right to object to the processing of your personal data.
The right to the portability of your personal data.

In order to exercise your rights, please contact us using the contact details above.

If you have doubts about the lawfulness of the processing of your personal data, you can submit a complaint to the supervisory authority, which means that if you think that we are processing your personal data unfairly or illegally, you can submit a complaint to the supervisory authority, which is the Office for Personal Data Protection. Hraničná 12, 820 07 Bratislava 27; tel. number: +421 2 3231 3214; e-mail: statny.dozor@pdp.gov.sk , https://dataprotection.gov.sk.