1.) CONSULED spol. s r.o., with registered office at Mokrohájska cesta 10, 841 04 Bratislava, Company ID: 35 824 824 (hereinafter referred to as the “Controller”), is obliged under Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment and Supplementation of Certain Acts (hereinafter referred to as the “Personal Data Protection Act”) to ensure the protection of personal data.

We have therefore implemented technical, organizational, and personnel security measures to ensure network security and data backup, the resilience of information systems containing personal data against malicious codes, unauthorized modifications, access, or tampering with devices or storage media, and by preventive monitoring we aim to prevent various security incidents. These measures are regularly updated and define the scope and method of security measures necessary to eliminate and minimize threats and risks affecting the information system, aiming to ensure:

• availability, integrity, and reliability of management systems using state-of-the-art information technologies,
• protection of personal data against loss, damage, theft, modification, destruction, and to maintain confidentiality,
• identification and prevention of potential problems and sources of violations.

Contact for the Data Protection Officer: info@consuled.sk

2.) Access to personal data is granted only to office staff who have been instructed on rights and obligations regarding personal data processing and are obliged to maintain confidentiality, which continues even after the processing of personal data has ended.

3.) The privacy policy and the use of cookies apply to all services provided by CONSULED, s.r.o., directly in the office, on the website http://consuled.sk, or on Facebook. They do not apply to services offered by other companies or individuals, nor to products or websites that may appear on the http://consuled.sk website in the form of advertisements, links, or references.

4.) CONSULED spol. s r.o. collects personal data from:

• inquiring clients and clients offering services to CONSULED, s.r.o., both on the website http://consuled.sk and on Facebook,
• job applicants who register in the company’s database via the website contact form or respond to a job offer by providing data to info@consuled.sk (hereinafter referred to as the “data subjects”).

Processing of personal data of job applicants is based on the applicant’s Consent in accordance with Art. 6(1)(a) of the Regulation. The Controller will contact only successful applicants.

No transfer of personal data to a third country occurs. Personal data will not be used for automated individual decision-making, including profiling.

Personal data is stored for 12 months from the date of consent. You have the right to withdraw your consent at any time before this period by sending a request to the email address info@consuled.sk or by mailing a request to the Controller’s address marked “GDPR withdrawal of consent.” The Controller declares that, upon a written request from the data subject to terminate the processing of personal data before this period, the data will be deleted within 30 days of receipt of the withdrawal.

5.) Collected personal data is handled in accordance with the Personal Data Protection Act. We collect only personal data necessary to provide our services, maintain the applicant database, or provide employment. Your personal data will be retained only as long as necessary to fulfill the specified purposes of processing, but no longer than the duration of the respective contract or settlement of mutual obligations arising from it. Invoices and other tax and accounting documents are stored according to applicable law for 10 years from the year they relate to. After this period, your personal data will be deleted.

6.) According to §16(1) of the Personal Data Protection Act, the data subject is obliged to provide only truthful personal data and is responsible for the accuracy of this information.

7.) Each data subject has the right to information on the status of personal data processing, correction or deletion of incorrect data, deletion of personal data whose processing purpose has expired, deletion in case of law violation, blocking of personal data due to withdrawal of consent before its expiry, objection to processing based on justified reasons or proof of unlawful interference with rights and legally protected interests, and other rights arising from §28 of the Personal Data Protection Act.

8.) Provided consent may be withdrawn at any time in writing via the email or postal address listed below (see Article III).

9.) The legal basis for processing your personal data is Art. 6(1)(c) of the GDPR, Act No. 297/2008 Coll. on protection against money laundering and terrorist financing, and amendments to certain acts. This means that your consent is not required for processing, as we are obliged to process personal data as per the law for the purposes of preventing and detecting money laundering and terrorist financing. Data is subsequently stored in accordance with Act No. 395/2002 Coll. on archives and registries.