Processing activities of the Operator
One of the principles of the processing of personal data is the purpose limitation principle. Under this principle, personal data may be collected only for a specifically identified, explicitly stated and legitimate purpose and may not be further processed in a way that is incompatible with that purpose.
The processing of personal data should be closely linked to the purpose of the processing of personal data, in particular as regards the list or scope of the personal data processed, which should be necessary for the processing of the personal data in question to achieve the purpose. It is not appropriate to artificially or additionally extend the list or scope of personal data in relation to the purpose. If the purpose and the list or scope of personal data is determined by law, it should be respected; if the controller determines the list or scope of the personal data to be processed, he should take care not to extend it unnecessarily beyond the purpose.
The Personal Data Protection Act provides for the obligation of the controller to provide the data subject with information on the purpose of the processing of personal data for which the personal data are intended, even if the personal data are not collected directly from the data subject. This information must be provided to the data subject at the latest at the time of obtaining his or her personal data, or in sufficient time, in a clear and comprehensible manner and in such a way that he or she can actually acquaint himself or herself with the information and understand it.
Payroll and HR
Information system name: Payroll and HR
Purpose of processing of personal data: performance of the employer's obligations related to the employment relationship or a similar relationship (e.g. on the basis of agreements on work performed outside the employment relationship), including pre-contractual relationships, management of personnel and payroll records
Categories of personal data processed: first name, surname, maiden name, surname at birth, previous surname, title, permanent/transient residence, date of birth, place of birth, birth number, nationality, citizenship, gender, bank account of natural person, marital status, education, work experience, ID card number, signature, functional salary, work and functional classification, date of commencement of work activity, salary classification, place of work, e-mail address, telephone number, name of the health insurance company, details of the supplementary pension scheme contract, details of the SDS saver, details of the time worked, amounts affected by enforcement of a decision ordered by a court or an administrative authority, fines and penalties, and compensation imposed on the employee by an enforceable decision of the competent authorities, data on incapacity for work, data on important personal obstacles to work, data on reduced capacity for work, degree of invalidity, data from the employment certificate, data on the employee's registration in the register of unemployed citizens, data on the taking of maternity and parental leave, data on the award of a pension, the type of pension, the annual total of pensions paid, legal capacity, data from proof of integrity, personal data processed on certificates, certificates of passed examinations and educational activities, data on CV, first name, surname, maiden name, previous surname, title, place of residence, date of birth, birth number, marital status, school attended by family members, medical examinations,
Special categories of personal data processed: trade union affiliation
Categories of data subjects:
- jobseekers
- employees of the operator
- family members of employees
- former employees
Disclosure of personal data to third parties:
Beneficiaries:
- Tax office
- Social Insurance Office
- Health insurance companies
- Supplementary pension savings banks
- Pension management companies
- Central Office for Labour, Social Affairs and Family
- Employee representatives
- Executor
- State administration and public authorities for control and supervision (e.g. labour inspectorate)
- other eligible entity
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
fulfilling the employer's obligations towards the social insurance company |
10 years |
|
fulfilling the employer's obligations towards the health insurance company |
10 years |
|
the employer's pay policy |
50 years |
|
the performance of the employer's obligations in connection with the employment relationship and similar relationships |
70 years |
|
tax compliance |
10 years |
|
foreclosures |
5 years after equipment |
|
attendance records, holidays |
2 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 311/2001 Coll., the Labour Code |
|
Act No. 124/2006 Coll. on Health and Safety at Work |
|
Act No. 663/2007 Coll. on the minimum wage |
|
Act No. 461/2003 Coll. on Social Insurance |
|
Act No. 462/2003 Coll. on Income Compensation in the Event of Temporary Incapacity for Work of an Employee |
|
Act No. 580/2004 Coll. on health insurance |
|
Act No. 595/2003 Coll. on Income Tax |
|
Act No. 43/2004 Coll. on old-age pension savings |
|
Act No. 650/2004 Coll. on supplementary pension savings |
|
Act No. 233/1995 Coll. on bailiffs and enforcement activity (Execution Rules) |
|
Act No. 355/2007 Coll. on the protection, promotion and development of public health and on the amendment and supplementation of certain acts |
|
Act No. 5/2004 Coll. on Employment Services and on Amendments and Additions to Certain Acts, as amended |
|
Act No. 152/1994 Coll. on the Social Fund and on amendment and supplementation of Act No. 286/1992 Coll. on Income Taxes, as amended |
|
Act No 283/2002 Coll. on travel allowances |
|
Council Regulation (EEC) No 1612/68 on freedom of movement for workers within the Community |
|
Council Regulation (EEC) No 311/76 concerning the compilation of statistics on foreign workers |
|
Act No. 18/2018 Coll. on Personal Data and on Amendments and Additions to Certain Acts |
|
Act No. 215/2004 Coll. on the protection of classified information and on amending and supplementing certain acts, as amended |
|
Act No. 570/2005 Coll. on Conscription and on Amendments and Additions to Certain Acts, as amended |
|
Act No. 553/2003 Coll., the Act on Remuneration of Certain Employees in the Performance of Public Work and on Amendments and Additions to Certain Acts |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Act No. 422/2015 Coll. on the recognition of documents on education and on the recognition of professional qualifications and on the amendment and supplementation of certain acts |
|
Act No. 138/2019 Coll. on Teaching and Professional Staff and on Amendments and Additions to Certain Acts |
|
Decree of the Ministry of Education, Science, Research and Sport of the Slovak Republic No. 173/2023 Coll. on the qualification requirements for teaching and professional staff |
Accounting documents
Information system name: Accounting documents
Purpose of processing personal data: processing orders, incoming and outgoing invoices, dealing with banks, cash management, cash receipts and disbursements, warehouse management, keeping records of fixed assets and small assets, keeping simple/ double-entry bookkeeping
Categories of personal data processed: title, name, surname, address, telephone number, e-mail address, date of birth, type and number of identity document, ID number, signature, bank account number
Special categories of personal data processed: not processed
Categories of data subjects:
- Staff
- Clients
- former employees
Disclosure of personal data to third parties:
Beneficiaries:
- Social Insurance Office
- Health insurance companies
- Tax office
- court, law enforcement authorities
- Controllers of the Office for Personal Data Protection of the Slovak Republic
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
invoice books |
10 years |
|
general ledgers |
10 years |
|
receivables and payables |
10 years |
|
financial statements |
10 years |
|
supplier-supplier invoices |
10 years |
|
accounting statements |
20 years |
|
treasury agenda |
10 years |
|
accounting documents |
10 years |
|
bank statements |
10 years |
|
tax returns |
10 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 431/2002 Coll. on Accounting, as amended |
|
Act No. 222/2004 Coll. on Value Added Tax, as amended |
|
Act No. 145/1995 Coll. on administrative fees as amended |
|
Act No. 40/1964 Coll. Civil Code as amended |
|
Act No. 152/1994 Coll. on the Social Fund and on amendment and supplementation of Act No. 286/1992 Coll. on Income Taxes, as amended |
|
Act No. 311/2001 Coll., the Labour Code as amended |
|
Act No. 595/2003 Coll. on Income Tax, as amended |
|
Act No. 582/2004 Coll. on Local Taxes and Local Fees for Municipal Waste and Small Construction Waste as amended |
|
Act No 283/2002 Coll. on travel allowances, as amended |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Register of jobseekers
Name of the information system: registry of jobseekers
Purpose of processing of personal data: registration of job applicants
Categories of personal data processed: name, surname, title, permanent residence, temporary residence, date of birth, telephone number, education, work experience, e-mail address, other data in the scope of CV, cover letter and job application
Special categories of personal data processed: not processed
Categories of data subjects:
- a natural person applying for a job
Disclosure of personal data to third parties:
Beneficiaries:
- Labour, Social Affairs and Family Office and Labour, Social Affairs and Family Offices
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
selection of employees |
5 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 5/2004 Coll. on Employment Services and on Amendments and Additions to Certain Acts |
|
Act No. 311/2001 Coll., the Labour Code |
|
Article 6(1)(a) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Records of incoming and outgoing mail (paper/email)
Information system name: Incoming and outgoing mail records (paper/email)
Purpose of processing of personal data: registration of incoming and outgoing mail (letters, suggestions, complaints, etc.) in paper or electronic form
Categories of personal data processed: name, surname, title, residence, date of birth, e-mail address, account number, signature, guaranteed electronic signature and other data that may be the content of incoming or outgoing mail
Special categories of personal data processed: not processed
Categories of data subjects:
- natural persons whose personal data may be contained in incoming and outgoing mail
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
Correspondence |
3 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 305/2013 Coll. on the electronic form of exercising the powers of public authorities and on amending and supplementing certain acts (Act on e-Government) |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Act No. 395/2002 Coll. on archives and registers and on the amendment of certain acts |
Records of contracts
Name of the information system: record of contracts
Purpose of processing of personal data: record of concluded contracts
Categories of personal data processed: name, surname, title, date of birth, birth number, permanent or temporary residence, account number, bank name, ID card number, and other data related to the subject of the contract
Special categories of personal data processed: not processed
Categories of data subjects:
- the natural person whose rights are affected by the contract
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
property-law contracts |
50 years |
|
legal representation |
10 years |
|
credit agreements, insurance contracts |
5 years after expiry |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 40/1964 Coll. Civil Code |
|
Article 6(1)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Act No. 513/1991 Coll. Commercial Code as amended |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
E-SHOP
Information system name: E-SHOP
Purpose of processing of personal data: purchase and sale of goods via the Internet, including delivery to the client
Categories of personal data processed: name, surname, title, residence, delivery address, e-mail, telephone number, date of birth, IP address, cookies
Special categories of personal data processed: not processed
Categories of data subjects:
- e-shop customers
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
accounting documents |
10 years |
|
tax documents |
10 years |
|
complaints |
5 years |
|
Correspondence |
3 years |
|
invoices - supplier-customer |
10 years |
|
contracts |
10 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 102/2014 Coll. on Consumer Protection in the Sale of Goods or Provision of Services under a Distance Contract or a Contract Concluded Outside the Seller's Premises and on Amendments and Additions to Certain Acts |
|
Article 6(1)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Marketing
Information system name: Marketing
Purpose of personal data processing: sales promotion - marketing offers, newsletter, product information and news
Categories of personal data processed: name, surname, place of residence, e-mail, telephone number, date of birth, birth number
Special categories of personal data processed: not processed
Categories of data subjects:
- Clients
- Customers
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
Correspondence |
3 years |
|
contracts |
10 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(a) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Responsible person's agenda
Name of the information system: responsible person's agenda
Purpose of the processing of personal data: handling requests from natural persons to exercise their rights as data subjects under the General Data Protection Regulation
Categories of personal data processed: name, surname, title, residence, telephone number, e-mail and signature
Special categories of personal data processed: not processed
Categories of data subjects:
- a natural person exercising his or her right as a data subject
Disclosure of personal data to third parties:
Beneficiaries:
- Court, law enforcement authorities
- other eligible entity
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
a request from the data subject |
1 year after the application is processed |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Attendance system electronically-(CHIP/KOD/MOBIL)
Information system name: Attendance system electronically-(CHIP/KOD/MOBIL)
Purpose of processing of personal data: employee records, attendance control, basis for documents directly related to the employment relationship of employees
Categories of personal data processed: first name, surname, title, data on time worked, data on incapacity for work, data on important obstacles to work on the part of the employee, data on altered working capacity, start and end of working time, breaks at work, business trip, leave of absence
Special categories of personal data processed: not processed
Categories of data subjects:
- Staff
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
attendance records |
5 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 311/2001 Coll., the Labour Code as amended |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
OHS, OHS, PO
Information system name: OSH, OHS, OHS, PO
Purpose of the processing of personal data: fulfilment of the employer's obligations in the field of occupational health and safety, occupational health services and fire protection
Categories of personal data processed: name, surname, title, place of residence, date of birth, nationality
Special categories of personal data processed: health
Categories of data subjects:
- Staff
- safety technicians and fire protection technicians
- occupational health service providers
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
- Labour inspectorates
- Social Insurance Office
Intermediaries:
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
injury records |
5 years |
|
the fulfilment of the employer's health and safety obligations |
5 years after termination or cessation of the obligation |
|
documentation of OSH training and retraining |
5 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 124/2006 Coll. on Health and Safety at Work and on Amendments and Additions to Certain Acts |
|
Act No. 355/2007 Coll. on the protection, promotion and development of public health, as amended |
|
Act No. 311/2001 Coll., the Labour Code as amended |
|
Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic No. 500/2006 Coll., which establishes a model record of a registered work accident |
|
Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic No. 356/2007 Coll., which establishes details on the requirements and scope of educational and training activities, on the project of education and training, the maintenance of prescribed documentation |
|
Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic No. 147/2013 Coll., laying down details for ensuring safety and health protection during construction and related works |
|
Article 9(2)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Decree of the Ministry of Labour, Social Affairs and Family of the Slovak Republic No. 508/2009 Coll., laying down details for ensuring safety and health protection at work with pressure, lifting, electrical and gas technical equipment |
Booking system
Information system name: Booking system
Purpose of processing of personal data: booking, sale and use of services by clients in the facilities of the operator and control of their use
Categories of personal data processed: name, surname, title, residence, e-mail address, telephone number, date and time of booking
Special categories of personal data processed: not processed
Categories of data subjects:
- applicants for reservation
Disclosure of personal data to third parties:
Beneficiaries:
- Data Protection Authority
- court, law enforcement authorities
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
Correspondence |
3 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Photos and videos
Information system name: Photos and videos
Purpose of the processing of personal data: creation of an image or video for the purpose of transferring it to paper or other media
Categories of personal data processed: the characteristics that constitute the physical identity of a person as a unique human being and other data further specifying the natural person depicted in a photograph or captured in a video recording
Special categories of personal data processed: not processed
Categories of data subjects:
- natural persons depicted in photographs and captured on videos
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authority
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
photographs and video recordings |
5 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(a) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Registry management
Name of the information system: registry management
Purpose of personal data processing: management of registry records, creation of registry schedules and plans, receipt of closed files into the registry centre, their registration, storage, protection, access to and registration of received files, discarding of files.
Categories of personal data processed: title, name, surname, signature, residence, e-mail address, telephone number and other data according to a special regulation
Special categories of personal data processed: not processed
Categories of data subjects:
- natural persons whose personal data are held in the management of the registry
Disclosure of personal data to third parties:
Beneficiaries:
- Ministry of the Interior of the Slovak Republic
- court, law enforcement authorities
- Slovak Post a.s.
- Health insurance companies
- State administration bodies
Intermediaries: none
Cross-border transfer of personal data: does not take place.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
registry diary |
10 years |
|
acceptance lists of files transferred to the registry centre |
10 years |
|
keeping records of files borrowed from the registry centre |
5 years |
|
decommissioning procedure |
10 years |
|
keeping records of the circulation of registry records and files |
5 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 395/2002 Coll. on archives and registers and on amendments to certain acts as amended |
|
Decree of the Ministry of the Interior of the Slovak Republic No. 410/2015 Coll. on the details of the administration of the registry of public authorities and on the creation of a file |
|
Decree of the Ministry of the Interior of the Slovak Republic No. 525/2011 Coll. on standards for electronic information systems for registry management |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Events
Information system name: Events
Purpose of personal data processing: registration of persons attending the event
Categories of personal data processed: first name, last name
Special categories of personal data processed: not processed
Categories of data subjects:
- event organisers
- event participants
Disclosure of personal data to third parties:
Beneficiaries:
- Municipal and town office
- court, law enforcement authorities
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
registration of event participants |
1 year |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(f) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Practice of secondary school / university students
Name of the information system:Practice of secondary school pupils / university students
Purpose of processing of personal data: registration of secondary school and university students who undertake vocational practice
Categories of personal data processed: name, surname, title, date and place of birth, permanent residence, e-mail address, year/semester of study
Special categories of personal data processed: not processed
Categories of data subjects:
- apprentices/students on apprenticeships
Disclosure of personal data to third parties:
Beneficiaries:
- court, law enforcement authorities
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
registration of pupils |
5 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Act No. 131/2002 Coll. on higher education and on amendment and supplementation of certain acts, as amended |
|
Act No. 245/2008 Coll. on Education and Training (School Act) and on Amendments and Additions to Certain Acts |
Public procurement
Name of the information system Public procurement
Purpose of processing of personal data: implementation of public procurements
Categories of personal data processed: name, surname, title, residence, contact details, account number, signature, personal data on certificates and diplomas
Special categories of personal data processed: not processed
Categories of data subjects:
- Applicants
- Interested parties
Disclosure of personal data to third parties:
Beneficiaries:
- Control bodies: the Public Procurement Authority, the Supreme Audit Office, the Antimonopoly Office, law enforcement authorities, the General Courts, the European Commission
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
participation in tendering procedures, tenders and competitions |
10 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 343/2015 Coll. on Public Procurement and on Amendments and Additions to Certain Acts |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Volunteers
Information system name: Volunteers
Purpose of processing of personal data: volunteer records
Categories of personal data processed: title, first name, surname, date of birth, permanent address, address of residence if different from permanent address
Special categories of personal data processed: not processed
Categories of data subjects:
- natural person - volunteer
- legal representatives
Disclosure of personal data to third parties:
Beneficiaries:
- courts, law enforcement authorities
- another authorised entity in accordance with the Personal Data Protection Act or other specific legislation.
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
Register of volunteers |
3 years |
Legal basis for the processing of personal data:
|
Legal basis |
|
Article 6(1)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Publication
Information system name: Disclosure
Purpose of processing of personal data: publication in accordance with Act 211/2000 Coll. on free access to information
Categories of personal data processed: title, name, surname, function and date of appointment or appointment to the function, job classification and date of commencement of the performance of the work activity, place of performance of the function or work activity and the authority in which the function or activity is performed, salary, wage or salary conditions and other financial benefits granted for the performance of the function or for the performance of the work activity, if reimbursed from the state budget or from another public budget, residence (in the case of a compulsorily disclosed contract)
Special categories of personal data processed: not processed
Categories of data subjects:
- party to the contractual relationship
- persons defined in § 9 (3) of Act No. 211/2000 Coll. on free access to information and on amendment and supplementation of certain acts (Freedom of Information Act)
Disclosure of personal data to third parties:
Beneficiaries:
- courts, law enforcement authorities
- the applicant within the meaning of the Act on free access to information
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
disclosure of mandatory information |
according to the registration plan |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 211/2000 Coll. .z on free access to information and on amendment and supplementation of certain acts (Freedom of Information Act) |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
Website
Name of the information system: website
Purpose of processing personal data: creation and management of the website
Categories of personal data processed: name, surname, e-mail address, photograph, audio-visual record, telephone number
Special categories of personal data processed: not processed
Categories of data subjects:
- persons whose data are on the website
Disclosure of personal data to third parties:
Beneficiaries:
- courts, law enforcement authorities
Information about the existence of automated decision-making, including profiling: not applicable:
Time limits for erasure of personal data:
|
Purpose of processing |
Duration |
|
publication on the website |
according to the registration plan |
Legal basis for the processing of personal data:
|
Legal basis |
|
Act No. 211/2000 Coll. .z on free access to information and on amendment and supplementation of certain acts (Freedom of Information Act) |
|
Article 6(1)(a) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Article 6(1)(e) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |
|
Article 6(1)(c) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data |