INFORMATION FOR THE DATA SUBJECT REGARDING THE COLLECTION AND PROCESSING OF PERSONAL DATA

provided by the controller to the data subject when collecting personal data from the data subject

The controller hereby in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the « Regulation« ) provides to the Data Subject, from whom the Controller obtains personal data relating to them, the following information:

Identity and contact details of the Controller:

The controller is Antarex s.r.o., with registered office at Osadná 2, 831 03 Bratislava – Nové Mesto district, Company ID: 52 614 760, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert No. 140533/B, VAT ID: 2121095735 VAT ID: SK2121095735, statutory body: Dmytro Zagorevskyi, email: [email protected], telephone number: 0904 543 216.

Contact details of the data protection officer:

A data protection officer has not been appointed.

Personal data processed:

The controller processes the following personal data: name, surname, address, telephone number, email address, IP address, cookies, account number, bank name, signature, data on education, data on health status, data on marital status, data on work experience, photograph, as well as any other data and information that the Data Subject provides in the curriculum vitae, which the Data Subject subsequently publishes on the website operated by the Controller: www.driver-work.com, for the purpose of publishing their curriculum vitae and making it available to third parties, with the aim of finding employment.

Purposes of processing personal data of the Data Subject:

The purposes of processing personal data of the Data Subject are:

  1. processing of accounting documents
  2. fulfilment and record-keeping of contracts
  3. operation of the website www.driver-work.sk and provision of services ordered from the Controller by the data subject – in particular making the Data Subject’s curriculum vitae available to third parties (potential employers and employment agencies) and facilitating employment for the Data Subject
  4. record-keeping of clients and contractual partners for the purposes of concluding and fulfilling contracts
  5. archiving of documents in accordance with legal regulations
  6. correspondence and communication

Legal basis for processing personal data of the Data Subject:

The legal basis for processing personal data of the Data Subject will be, depending on the specific personal data and the purpose of their processing, the fulfilment of a legal obligation of the controller or the performance of a contract to which the data subject is a party or the consent of the Data Subject.

Specification of legitimate interests pursued by the Controller or a third party: Not applicable.

Recipients or categories of recipients of personal data:

The recipients of personal data of the Data Subject may be employees and collaborators of the controller, bodies and members of bodies of the Controller, its business partners, suppliers and contractual partners, in particular: an accounting company, a company providing legal services to the controller, a company providing services related to the creation and maintenance of software.

The recipients of personal data may also be (based on the consent of the Data Subject) business companies that use the services of the Controller through the website www.driver-work.com and are registered on the website www.driver-work.com. These are persons who are interested in finding an employee for themselves or for a third party through the website www.driver-work.com.

The recipients of personal data will also be courts, law enforcement authorities, the tax office and other state authorities, in cases stipulated by law.

Information on the intended transfer of personal data to a third country: Not carried out.

Retention period of personal data:

Personal data will be stored in accordance with legal regulations for the necessary period for which they are needed for the purposes of fulfilling the contract and their subsequent archiving.

Instruction on the existence of relevant rights of the Data Subject:

The data subject has, among other things, the following rights:

a)      the Data Subject’s right of access to data under Article 15 of the Regulation, the content of which is:

  1. the right to obtain from the Controller confirmation as to whether or not personal data concerning the Data Subject are being processed;
  2. in the event that personal data of the Data Subject are being processed, the right to obtain access to the personal data being processed and the right to obtain the following information:

– information on the purposes of the processing;

– information on the categories of personal data concerned;

–        information on the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;

–        where possible, information on the envisaged period for which the personal data will be stored or, if that is not possible, information on the criteria used to determine that period;

–        information on the existence of the right to request from the Controller rectification or erasure of personal data concerning the Data Subject or restriction of processing and on the existence of the right to object to such processing;

–        information on the right to lodge a complaint with a supervisory authority;

–        where the personal data have not been obtained from the Data Subject, any available information as to their source;

–        information on the existence of automated decision-making, including profiling referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject;

  1. right to be informed of the appropriate safeguards under Article 46 of the Regulation, relating to the transfer of personal data, if personal data is transferred to a third country or international organization;
  2. right to be provided with a copy of the personal data being processed, but subject to the condition that the right to be provided with a copy the processed personal data must not adversely affect on the rights and freedoms of others;

b) the Data Subject’s right to rectification under Article 16 of the Regulation, the content of which is:

  1. right for the Controller to rectify without undue delay inaccurate personal data concerning the Data Subject;
  2. right to supplement incomplete personal data of the Data Subject, including by providing a supplementary statement from the Data Subject person;

c) the Data Subject’s right to erasure of personal data (the so-called right « to be forgotten ») under Article 17

Regulation, the content of which is:

(i) right to obtain from the Controller the erasure of personal data without undue delay personal data concerning the Data Subject where one of the following applies of these reasons:

–        personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;

–        The data subject withdraws the consent on the basis of which the processing is carried out is carried out, and on the condition that there is no other legal basis for the processing of personal data;

–        The data subject objects to the processing of personal data under Article 21(1) of the Regulation and no legitimate grounds prevail grounds for processing personal data or the Data Subject objects to the processing of personal data under Article 21 paragraph 2. Regulation;

–        personal data have been processed unlawfully;

–        personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Controller is subject;

–        personal data were obtained in connection with the offer of services information society in accordance with Article 8(1) of the Regulation;

  1. right, for the Controller who has published the personal data of the Data Subject person, having regard to available technology and the cost of taking measures, take reasonable steps, including technical measures to inform other controllers who process personal data that the Data Subject person asks them to delete all links to this personal data, their copy or replicas;

at the same time applies that right to erasure of personal data with the content of rights under Article 17 paragraph 1. and 2. Regulation [i.e. with the content of rights under (i) and (ii) of this point c) of point J. of this document] will not arise, if the processing of personal data is necessary:

  1. on to exercise the right to freedom of expression and information;
  2. on to fulfill a legal obligation that requires processing under European Union law or the law of a Member State, to which the Controller is subject, or to fulfill a task carried out in the public interest or in the exercise of official authority entrusted to the Controller;
  3. z for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9 paragraph 3. Regulation;
  4. on for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1. of the Regulation, insofar as the right referred to is likely in Article 17 paragraph 1. of the Regulation makes it impossible or serious in a way that makes it difficult to achieve the objectives of such processing personal data; or
  5.  on to demonstrate, assert or defend legal claims;

d) the Data Subject’s right to restriction of processing of personal data under Article 18 of the Regulation,

the content of which is:

(i) the right to for the Controller to restrict the processing of personal data, as far as for one of these cases:

– The data subject challenges the accuracy of personal data, for a period allowing for the Controller to verify the accuracy of the personal data;

– processing of personal data is unlawful and the Data Subject objects to the erasure personal data and requests instead restriction of their use;

–        The controller no longer needs personal data for the purposes of processing, but the Data Subject needs them to demonstrate, asserting or defending legal claims;

–        The data subject has objected to processing under Article 21(1). 1. Regulation, until it is verified whether legitimate reasons for on the part of the Controller outweigh the legitimate reasons Data Subject;

  1. right, that in the event that the processing of personal data has been restricted under point (i) of this point d) of point J. of this document, such restricted processed personal data shall, with the exception of storage processed only with the consent of the Data Subject or for demonstrating, asserting or defending legal claims, or to protect the rights of another natural or legal person, or z for reasons of important public interest of the European Union or a Member State;
  2. right to be informed in advance of the lifting of the restriction on processing personal data;

e) the Data Subject’s right to fulfill the notification obligation to recipients under Article 19 of the Regulation, the content of which is:

  1. right, for the Controller to notify each recipient to whom personal data have been provided, any rectification or erasure of personal data data or restriction of processing carried out in accordance with Article 16, Article 17 paragraph 1. and Article 18 of the Regulation, unless it proves impossible or requires disproportionate effort;
  2. right, for the Controller to inform the Data Subject of these recipients person, if the Data Subject requests it;

f) the Data Subject’s right to data portability under Article 20 of the Regulation, the content of which is:

(i) right to obtain personal data concerning the Data Subject and provided to the Controller in a structured, commonly used and machine-readable format and the right to transfer this data to another controller without hindrance from the Controller if:

– processing is based on the consent of the Data Subject pursuant to Article 6(1)(a). a) of the Regulation or Article 9(2)(a). a) of the Regulation, or on the contract pursuant to Article 6(1)(b). b) of the Regulation, and at the same time

–        processing is carried out by automated means, and at the same time

–        the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer this data to another controller without the Controller preventing it, will not adversely affect the rights and freedoms of others;

(ii) the right to transfer personal data directly from one controller to another controller, where technically feasible;

g) the right of the Data Subject to object under Article 21 of the Regulation, whose content is:

  1. right to object at any time, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her which is carried out on the basis of Article 6 paragraph 1 letter e) or f) of the Regulation, including objecting to profiling based on these provisions of the Regulation;
  2. [in the event of implementation the right to object at any time, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her which is carried out on the basis of Article 6 paragraph 1 letter e) or f) of the Regulation, including objecting to profiling based on these provisions of the Regulation] the right for the Controller not to further process personal data of the Data Subject, unless it demonstrates necessary legitimate reasons for the processing which override the interests, rights and freedoms of the Data Subject, or reasons for demonstrating, exercising or defending legal claims
  3. right to object at any time to the processing of personal data which concerns the Data Subject for the purposes of direct marketing, including profiling to the extent that it is related to direct marketing; it is true that if the Data Subject objects to the processing personal data for direct marketing purposes, personal data will be no longer processed for such purposes;
  4. (in connection with the use of information society services) the right to exercise the right to object to the processing of personal data through automated means using technical specifications;
  5. right to object, on grounds relating to the particular situation of the Data Subject person against the processing of personal data concerning Data Subject, if personal data are processed for the purposes scientific or historical research or for statistical purposes pursuant to Article 89(1). 1. of the Regulation, but with the exception cases where processing is necessary for the performance of a task for reasons of public interest;

h) the right of the Data Subject related to automated individual decision-making pursuant to Article 22 of the Regulation, whose content is:

  1. right, that the Data Subject shall not be subject to a decision which is based solely on automated processing of personal data data, including profiling, and which has legal effects which concern him or her or similarly significantly affect him or her, with the exception of cases under Article 22(2). of the Regulation [i.e. with the exception of cases if the decision is: (a) necessary for the conclusion or performance of a contract between the Data Subject and the Controller, (b) permitted by European Union law or the law of the Member State to which the Controller is subject and which also lays down also appropriate measures guaranteeing the protection of rights and freedoms and legitimate interests of the Data Subject or (c) based on the explicit consent of the Data Subject].

Instruction on the right of the Data Subject to withdraw consent to the processing of personal data data:

Data the person is entitled at any time to withdraw his consent to the processing personal data, without prejudice to the lawfulness processing of personal data based on consent given before its revocation.

Data the person is entitled at any time to withdraw his consent to the processing personal data – in full or in part. Partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation / processing operations, while the lawfulness of processing personal data in the scope of the remaining processing operations remain unaffected. Partial withdrawal of consent to the processing of personal data may relate to a specific specific purpose of processing personal data / certain specific purposes of processing personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.

Right withdraw consent to the processing of personal data may be Data person to be realized in paper form to the address of the Controller registered as its registered office in the commercial register at the time revocation of consent to the processing of personal data or in electronic form via electronic means (by sending an e-mail to the Controller’s e-mail address stated in the identification of the Controller in this document or by filling in an electronic form published on the website the Controller’s website).

Instruction on the right of the Data Subject to lodge a complaint with a supervisory authority:

Data the person has the right to lodge a complaint with a supervisory authority, in particular especially in the Member State of his or her habitual residence, place of work work or the place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her is in breach of with the Regulation, all without prejudice to any other administrative or judicial remedies. Supervisory the authority in the Slovak Republic is the Office for Personal Data Protection data of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava, IČO: 36 064 220, email: [email protected], telephone: 02/3231 3214.

Information on the existence / non-existence of the Data Subject’s obligation to provide personal data:

Controller informs the Data Subject that the provision of personal data The data subject is necessary for the conclusion of the contract and for its performance. The controller informs the data subject that the data subject the person is not obliged to provide personal data nor is he obliged to give consent to their processing. The consequence of non-provision personal data and/or as a result of not giving consent to the processing of personal data will be that the Controller will not be able to conclude and fulfill the contract.

Information related to automatic decision-making, including profiling: Not applicable