Privacy
Privacy
Home /
Privacy
INFORMATION ON THE PROCESSING OF THE PERSONAL DATA OF THE DATA SUBJECT
pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
The operator BBC Systém sro considers compliance with the legal conditions for processing personal data of data subjects to be one of its priorities. All actions carried out at individual stages of the personal data processing process are carried out with maximum emphasis on protecting the fundamental rights of data subjects, especially the protection of personality and privacy and compliance with the principles of lawful processing of personal data.
BBC Systém sro (hereinafter also the "Controller") processes all personal data in accordance with applicable legal regulations, with particular emphasis on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR) (hereinafter also the "Regulation" or "GDPR") and Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts (hereinafter also the "Act" or "Act No. 18/2018").
This document mainly concerns data subjects who are not employees of BBC Systém sro The information contained in this document is information within the meaning of Article 13 of the Regulation.
OPERATOR INFORMATION
Business name: BBC System sro
Registered office: Kamenárska 186, 966 01 Hliník nad Hronom
ID: 36634760
VAT number: 2021944870
The proper processing of personal data is supervised by an authorized person, contact details:
e-mail: harachovamariana@bbcsystem.eu
Correspondence address: company registered office address
This information is effective from March 1, 2025, and the operator is authorized to update it.
DEFINITIONS OF TERMS
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Person concerned – any person whose personal data is processed.
Personal data – any information relating to an identified natural person or an identifiable natural person.
Operator – is a natural or legal person who has determined the method and defined the purpose of processing personal data.
APPLICATIONS FOR EMPLOYMENT
Personal data is processed by the controller mainly for the purpose of filling vacant job positions within the framework of announced selection procedures or it records personal data of job applicants without the intention of filling a specific job position.
The provision of personal data by the data subject is a pre-contractual requirement. Failure to provide personal data will make it impossible for the data subject to be included in the selection procedure.
Legal basis: The data subject has consented to the processing of his/her personal data pursuant to Article 6(1)(a) of the General Regulation EP and R (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Retention period: for 1 year from the date of delivery of the CV and will then be destroyed.
Cancel You can withdraw your consent to the processing of personal data in the same simple way as you granted it - by sending an email request to the address: harachovamariana@bbcsystem.eu, without affecting the lawfulness of processing based on consent granted before its withdrawal pursuant to Article 7(3) of the Regulation.
PRINCIPLES OF PROCESSING PERSONAL DATA
Compliance with the principles of processing customer personal data pursuant to Article 5 of the Regulation.
- Lawfulness of processing – all processing must be lawful, i.e. we have an appropriate legal basis.
- Minimizing OU processing (necessity) – we only process your personal data to the extent necessary in relation to the purpose. We will always consider the scope of personal data processing.
- Minimization of personal data retention (disposal) – we keep it in a form that allows identification of the DO for as long as it is necessary for the purposes. Your personal data is thoroughly destroyed after the purpose of processing has been fulfilled.
- Integrity and confidentiality (security) – the operator has taken technical, organizational and personnel measures against loss, destruction, or damage to the OU.
WE COLLECT YOUR PERSONAL DATA
You will most often provide us with your personal data:
- We collect it primarily directly from you, for example from communicating with you via the contact form on our website.
- In case you are in the position of our customer or interested in our goods or services.
- During the selection process to fill a vacant job position of the operator, or recording personal data of job applicants without the intention of filling a specific job position.
WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA, THE LEGAL BASIS FOR THE PROCESSING ACTIVITY, HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The operator processes your personal data in the following way for the following purposes:
| Name of the processing operation | Purpose of processing personal data | Personal data category | Legal title of processing | Data retention period | Other recipients |
|---|---|---|---|---|---|
| Economic - accounting agenda | is a method of recording economic activity through accounts | name, surname, residential address, business address, identification number (IČO), VAT number, if VAT payer. | obligation under applicable law | 10 years | tax office, municipal and city offices, Slovak Post, other authorized entity |
| Business partner records | information about the company's business partners | name, surname, email, phone | legitimate interest of the controller | kept in a form that permits identification of the DO for as long as necessary for the purposes of the business transaction | contracting parties, partners in the implementation of project activities, state administration bodies, public authorities |
| Payroll and personnel agenda | complete information about employees required by law, as well as information about salary, vacation, health status | name, surname, title, address, ID number, attendance, information for salary calculation, information about family members | legal reason | up to 70 years | in case of inspection Social Insurance Agency, Federal Insurance Agency of the Slovak Republic, health insurance companies |
| Registry management | is ensuring the recording, creation, storage, protection of registry records, access to them and ensuring their disposal | common personal data | legal obligation of the operator | 10 years after registration ends | Ministry of the Interior of the Slovak Republic, other authorized entity |
| Registration of the rights of data subjects | processing requests from individuals seeking to exercise their rights | title, name, surname, address and other personal data to which the applied right of the data subject applies | legal obligation of the operator | 5 years from the date of processing the application | state administration, public authority and public administration bodies according to relevant legal regulations |
| Handling complaints from data subjects | the purpose of the processing is a submission by a natural or legal person seeking protection of their rights or legally protected interests which they believe have been violated | common personal data, other data necessary to verify the complaint | legal obligation of the operator | 5 years after the termination or expiry of the obligation | state administration, public authority and public administration bodies according to relevant legal regulations |
| Visitor records | recording of visitors entering the operator's premises | suppliers, customers, intermediaries, clients | legitimate interest of the operator | 1 year | Police officers if necessary, SBS |
| Camera system | protection of the operator's property | natural persons moving in the monitored area | legitimate interest of the operator | 72 hours | Police officers if necessary, legal representative of the operator |
| Disclosure of video recordings to law enforcement agencies | proving legal claims | natural persons moving in the monitored area | legal obligation of the operator | The records may also be used to prove legal claims and the operator will process them for the period necessary to prove them. | state administration bodies, public authorities |
| Responding to requests addressed to the operator | receiving and processing a request via a message sent via the contact form on the website or via social networks | clients | fulfillment of pre-contractual relations | 3 months from the date of receipt of the application or until the purpose is fulfilled, whichever occurs first | They are not |
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES AND AUTOMATED INDIVIDUAL DECISION-MAKING
Personal data will not be transferred to a third country or an international organization. Personal data will not be used for automated individual decision-making, including profiling.
DISCLOSURE OF PERSONAL DATA
Publishing information materials on the operator's website.
SECURITY
We would like to assure you that our employees and collaborators who will process your personal data are obliged to maintain confidentiality regarding personal data. This confidentiality continues even after the termination of the contractual relationship with us.
PERSONAL DATA SECURITY
In accordance with Articles 24 and 32 of the GDPR, we take appropriate technical and organizational measures to ensure a level of protection of personal data that is appropriate to the risk, taking into account the state of the art, the cost of implementing the measures and the nature, scope, circumstances and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons. Such measures include, in particular, the protection of the confidentiality, integrity and availability of data by controlling physical access to, as well as access to, input, disclosure, availability and separation of, personal data. We have also implemented procedures to ensure the exercise of the rights of the data subject, the erasure of personal data and the response to a personal data breach. In addition, we take personal data protection into account when developing and selecting hardware, software and processes in accordance with the principle of data protection by means of technological design and by means of data protection-friendly default settings (Article 25 of the GDPR).
COOKIES ON OUR WEBSITE
We are authorized to collect and otherwise process data about visitors and users of our website through tools used for automated data collection, in particular cookies, logs and other commonly used tools for obtaining information through the website.
The term cookie can be understood as a small amount of data that is sent as a file to your computer (tablet, smartphone) from the website you are currently visiting. The data file is stored on your computer and each time you visit the same website, the computer sends information to our server. Most websites, including ours, use cookies. The purpose of cookies is to make your use of our website easier and more enjoyable. A cookie file allows the website to recognize whether you have visited it in the past and which section you were interested in. At the same time, cookies are the ones that allow you to save your user settings, such as recognizing the language or remembering your login name. We use cookies to store data that we do not associate with your person and do not use the data obtained to identify the customer. The use of cookies is not dangerous for you; cookies cannot transmit viruses or read data from the device's hard drive.
This procedure follows from Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications. The use of cookies and their permission in the web browser is at the free will of each website user. You can freely delete cookies or pre-set your internet browser to either refuse to accept cookies or to notify you when the server tries to send you a cookie. However, it may then happen that websites that depend on cookie support will not function as you would imagine, or that parts of the pages will not be available to you. We use persistent cookies that help us identify your device when you visit the Website again and thus enable us to provide services in accordance with your expectations.
How can I change cookie settings?
You can accept or reject cookies – including those used for website tracking – by selecting the appropriate settings for your browser. You can set your browser to notify you when you receive a new cookie or block them completely.
For more information on how to manage cookie policy in the most commonly used browsers, please visit:
- Google Chrome
https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en
- Mozilla Firefox
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Microsoft Internet Explorer
https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
- Opera
https://help.opera.com/cs/latest/
- Apple Safari
https://support.apple.com/en-gb/safari
- Microsoft Edge
RIGHTS OF DATA SUBJECTS UNDER THE REGULATION AND THE ACT ON THE PROTECTION OF PERSONAL DATA
We consider it important that you understand that the personal data we process is your data and that there are rights associated with its processing. In addition to the right to withdraw consent to the processing of personal data, you also have other rights that arise from the Regulation and the Act on the Protection of Personal Data, namely:
Right of access – you have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written form, unless you request otherwise. If you have requested this information by electronic means, it will be provided to you electronically, if technically possible.
Right to redress – we take reasonable steps to ensure the accuracy, completeness and timeliness of the information we hold about you. If you believe that the data we hold about you is inaccurate, incomplete or out of date, please do not hesitate to ask us to correct, update or supplement this information.
Right to erasure – in certain circumstances, you have the right to ask us to erase your personal data, for example where the personal data we have collected about you is no longer necessary for the purposes for which it was collected or where you withdraw your consent to the processing. However, your right must be assessed in the light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean that we will not be able to comply with your request.
Right to restriction of processing – in certain circumstances, you have the right to ask us to stop using your personal data. This includes cases where you believe that the personal data we hold about you may be inaccurate or where you believe that we no longer need to use your personal data.
Right to data portability – under certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you based on consent or on the basis of a contract to which you are a party.
The right to object – you have the right to object to data processing that is based on our legitimate interests (for example, we process personal data for the purpose of network and infrastructure security). If we do not have a compelling legitimate reason for the processing and you object, we will no longer process your personal data.
Rights related to automated decision-making – you have the right to object to automated decision-making, including profiling, which produces legal or similar significant consequences for you. The operator does not usually use automated decision-making or profiling in the employment context.
Right to withdraw consent – in most cases we do not process your personal data based on your consent. However, in specific cases we may ask for your consent. In cases where we do, you have the right to withdraw your consent to the further use of your personal data. (e.g. Photography)
Right to file a complaint – if you wish to file a complaint about the way your personal data is processed, including exercising the rights listed above, you can contact our Data Controller (contact details are provided above).
We will properly review all your suggestions and complaints.
If you are not satisfied with our response, or you believe that we are processing your personal data unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; E-mail: statny.dozor@pdp.gov.skHowever, we would be happy if you would address your objections with us first.
HOW TO PROCEED TO EXERCISE YOUR RIGHTS
You always exercise your rights with the person who processes your personal data, i.e. with a specific controller. If the controller has a data controller, you can also address your request to this person. The request may be oral, written, electronic or submitted by other means (the General Data Protection Regulation does not prescribe a specific form). We recommend using a written or electronic form in particular.
Prepare identification data on the basis of which the operator will be able to identify you in its environment and provide you with data that concerns you.
We will respond to your request free of charge within 30 days. In the event of complexity or a large number of requests, we are entitled to extend this period by a further 60 days. If this happens, we will inform you of this and the reasons. In the event of a repeated request, we are entitled to charge a reasonable administrative fee to cover the costs associated with providing this service.
The data subject's right to object to automated decision-making cannot be exercised because the described processing activity does not involve automated decision-making.
The right of the data subject to request information from the controller about the source of the personal data is irrelevant because the controller processes personal data obtained from the data subject.
CONCLUSION
If you have any questions about personal data protection, you can contact us at any time by e-mail or by post at the registered office of the controller. If you exercise any of the rights of the data subject under the legislation governing the protection of personal data and your request cannot be verified, or if we have legitimate doubts regarding the identity of the person making the request, we reserve the right to ask that person to provide additional information necessary to confirm the identity of the person making the request.
About us
Contact
- Kamenárska 186, Hliník nad Hronom, 96601
- +421 948 151 151
- bbcsystem@bbcsystem.eu
- Mon-Fri: 7:00 a.m. - 4:00 p.m., Sat: 8:00 a.m. - 11:00 a.m.
Are you interested in a solution?
Call us: +421 948 151 151
We are available to answer your questions during business hours. We are ready to help you.
Copyright © 2024. All rights reserved.