Declaration on the Processing of Personal Data

Company Železiarne Podbrezová a.s., abbreviated as ŽP a.s. (hereinafter referred to as the “Controller”), collects, processes, and uses personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as with Act No. 18/2018 Coll. on Personal Data Protection, and takes all necessary steps to ensure compliance with these legal regulations.

The Controller will process personal data only for the purpose for which they were obtained. The Controller declares that it will process personal data only in accordance with good morals and will act in a manner that does not conflict with the Personal Data Protection Act or with other generally binding legal regulations, nor will it circumvent these regulations. After the purpose of processing personal data has been fulfilled, the Controller will ensure, without undue delay, the disposal of personal data unless a special law requires otherwise.

The Controller will ensure an appropriate level of personal data protection and will protect the processed personal data against damage, destruction, loss, alteration, unauthorized access and disclosure, provision or publication, as well as against any other unlawful forms of processing. For this purpose, the Controller has adopted and continues to adopt appropriate security measures corresponding to the manner of personal data processing.

The Controller will process personal data in accordance with the rights of the data subject. The data subject has the right to obtain confirmation from the Controller as to whether personal data concerning them are being processed. If the Controller processes such personal data, the data subject has the right to obtain access to these personal data and information about:

the purpose of the processing of personal data,
the category of processed personal data,
the identification of the recipient or the category of recipient to whom the personal data have been or will be disclosed, in particular recipients in a third country or an international organisation, where possible,
the period for which the personal data will be stored; if this is not possible, information about the criteria used to determine that period,
the right to request from the Controller the rectification of personal data concerning the data subject, their erasure or restriction of processing, or the right to object to the processing of personal data,
the right to lodge a complaint with a supervisory authority,
the source of the personal data if the personal data were not obtained from the data subject,
the existence of automated individual decision-making, including profiling.

Controller: Železiarne Podbrezová a.s., abbreviated as ŽP a.s., Kolkáreň 35, 976 81 Podbrezová, contact for the responsible person: zodpovednaosobaZP@zelpo.sk, hereinafter referred to as the “Controller”, informs the data subjects that their personal data are processed and transmitted to the Office of Labour, Social Affairs and Family (hereinafter UPSVAR) for the purpose of “Support for maintaining jobs within assistance to employers to preserve employment during the COVID-19 pandemic”, on the legal basis of a contract between ŽP a.s. and UPSVAR.

Within the report submitted to obtain the financial contribution under Measure No. 3B, the following employee data are provided to UPSVAR:

first name,
last name,
personal identification number,
assessment base for the purposes of the Social Insurance Act,
gross salary of the employee.

In the case of Measure No. 3A, we submit the following data: the average hourly earnings for labour-law purposes pursuant to § 134 of the Labour Code, as amended, for the previous quarter, the number of hours of obstacles on the employer’s side pursuant to § 142(3), (4) or § 250b(6) of the Labour Code, as amended, reported for the given month, and the amount of wage compensation of the employee pursuant to § 142(3), (4) or § 250b(6) of the Labour Code that has already been paid by the employer or that will be paid on the next payroll date.

REQUEST FOR QUOTATION (INQUIRY)

The personal data provided will be used solely for the purpose of sending a price quotation. Železiarne Podbrezová a.s. will, after the purpose of processing personal data has been fulfilled, ensure without undue delay the deletion of the personal data. Železiarne Podbrezová a.s. will ensure an appropriate level of personal data protection, will process personal data only in accordance with good morals and will act in a manner that does not conflict with the Personal Data Protection Act or other generally binding legal regulations, nor will it circumvent them.

Controller: Železiarne Podbrezová a.s., abbreviated as ŽP a.s.
Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk
Recipients or categories of recipients: Železiarne Podbrezová, a.s., Kolkáreň 35, 976 81 Podbrezová
Transfer of personal data to a third country: none
Retention period of personal data: until the quotation is processed, or for a period of 2 years.

Rights of the Personal Data Provider:

Consent to the processing of personal data may be withdrawn by the applicant at any time free of charge in writing at the address of the Controller.
The applicant has the right to request access from the Controller to their personal data and the right to their rectification or erasure or restriction of processing, as well as the right to object to the processing and the right to data portability.
The applicant has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection, pursuant to §100 of Act No. 18/2018 Coll.

I agree that the Controller may process and store my personal data for possible changes in the offer or for the purpose of further contact. The retention period of personal data is 2 years.

I agree to receive information about new products, discounts and special offers related to the offered goods (newsletter).

CONSENT – CURRICULUM VITAE (AND OTHER APPLICATIONS IN THE CAREER SECTION)

Controller: Železiarne Podbrezová a.s., abbreviated as ŽP a.s.
Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk (not intended for sending offers, CVs, job applications, etc.)
Recipients or categories of recipients: Železiarne Podbrezová, a.s., Kolkáreň 35, 976 81 Podbrezová
Transfer of personal data to a third country: none
Retention period of personal data: 18 months

By signing the application, I voluntarily grant the Controller consent to process my personal data for the purpose of registering my job application in the Controller’s database.

After the purpose of processing personal data has been fulfilled, the Controller will, without undue delay, ensure the deletion of personal data unless otherwise required by a specific law. The Controller declares that it will ensure an appropriate level of personal data protection and that it will process personal data only in accordance with good morals and will act in a manner that does not conflict with the Personal Data Protection Act or other generally binding legal regulations, nor will it circumvent them.

Rights of the applicant:

Consent to the processing of personal data may be withdrawn by the applicant at any time free of charge in writing at the address of the Controller.
The applicant has the right to request access from the Controller to their personal data and the right to their rectification or erasure or restriction of processing, as well as the right to object to the processing and the right to data portability.
The applicant has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to §100 of Act No. 18/2018 Coll.

Information on the Collection of Personal Data – SPECIAL LAW

Controller: Železiarne Podbrezová a.s., abbreviated as ŽP a.s.
Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk
Legal basis: special law
Recipients or categories of recipients: Železiarne Podbrezová, a.s., Kolkáreň 35, 976 81 Podbrezová
Transfer of personal data to a third country: none
Retention period of personal data: according to the special law and the records management regulation.

After the purpose of processing personal data has been fulfilled, the Controller will, without undue delay, ensure the deletion of personal data unless a special law requires otherwise. The Controller declares that it will ensure an appropriate level of personal data protection and that it will process personal data only in accordance with good morals and will act in a manner that does not conflict with the Personal Data Protection Act or with the special laws under which the personal data are processed.

Rights of the applicant:

The applicant has the right to request access from the Controller to their personal data and the right to their rectification, as well as the right to data portability.
The applicant has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to §100 of Act No. 18/2018 Coll.

Information on the Collection of Personal Data – CONTRACT

Controller: Železiarne Podbrezová a.s., abbreviated as ŽP a.s.
Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk
Legal basis: contract
Recipients or categories of recipients: Železiarne Podbrezová, a.s., Kolkáreň 35, 976 81 Podbrezová
Transfer of personal data to a third country: none
Retention period of personal data: according to the special law and the records management regulation, or specify a specific retention period.

Rights of the applicant:

The applicant has the right to request access from the Controller to their personal data and the right to their rectification, as well as the right to data portability.
The applicant has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to §100 of Act No. 18/2018 Coll.

Information on the Collection of Personal Data – LEGITIMATE INTEREST

Controller: Železiarne Podbrezová a.s., abbreviated as ŽP a.s.
Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk
Legal basis: legitimate interest of the Controller
Recipients or categories of recipients: Železiarne Podbrezová, a.s., Kolkáreň 35, 976 81 Podbrezová
Transfer of personal data to a third country: none
Retention period of personal data: according to the records management regulation.

Rights of the applicant:

The applicant has the right to request access from the Controller to their personal data and the right to their rectification, as well as the right to data portability.
The applicant has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to §100 of Act No. 18/2018 Coll.

NEWSLETTER

By providing my email address, I agree to receive information about product news via the newsletter. Železiarne Podbrezová a.s. will act in a manner that does not conflict with the Personal Data Protection Act or other generally binding legal regulations, nor will it circumvent them.

Controller:
Železiarne Podbrezová a.s., abbreviated as ŽP a.s.
Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk
Recipients or categories of recipients: Železiarne Podbrezová, a.s., Kolkáreň 35, 976 81 Podbrezová
Transfer of personal data to a third country: none
Retention period of personal data: 2 years

Rights of the Personal Data Provider:

Consent to the processing of personal data may be withdrawn by the Provider at any time free of charge in writing at the address of the Controller.
The Provider has the right to request access from the Controller to their personal data and the right to their rectification or erasure or restriction of processing, as well as the right to object to the processing and the right to data portability.
The Provider has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to §100 of Act No. 18/2018 Coll.

I am under 16 years of age and my parent, the holder of parental rights and responsibilities, consents to the processing of my personal data.
I am over 16 years of age.

The data subject has the right to have the Controller correct inaccurate personal data concerning them without undue delay. Taking into account the purpose of the processing of personal data, the data subject has the right to have incomplete personal data completed.

The data subject has the right to have the Controller erase personal data concerning them without undue delay if:

the personal data are no longer necessary for the purpose for which they were collected or otherwise processed,
the data subject withdraws the consent on the basis of which the processing of personal data is carried out and there is no other legal basis for the processing of personal data,
the data subject objects to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data,
the personal data have been processed unlawfully.

The data subject has the right to have the Controller restrict the processing of personal data if:

the data subject contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data,
the processing of personal data is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
the Controller no longer needs the personal data for the purpose of processing, but the data subject requires them for the establishment, exercise or defence of legal claims, or
the data subject objects to the processing of personal data.

The data subject has the right to obtain the personal data concerning them that they have provided to the Controller in a structured, commonly used and machine-readable format and has the right to transmit those personal data to another controller, if technically feasible. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

The data subject has the right to object to the processing of their personal data on grounds relating to their particular situation carried out on the basis of the legitimate interest of the Controller, including profiling based on these provisions. The Controller may not further process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the rights or interests of the data subject, or grounds for the establishment, exercise or defence of legal claims.

The data subject has the right to object to the processing of personal data concerning them for the purposes of direct marketing, including profiling to the extent that it is related to such direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the Controller may no longer process the personal data for such purposes.

The data subject has the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless this concerns personal data necessary for the conclusion or performance of a contract between the data subject and the Controller.

The data subject has the right to submit a request for investigation pursuant to §100 of Act No. 18/2018 Coll. on Personal Data Protection if they suspect that their personal data are being handled unlawfully or if the processing of their personal data or a breach of processing security has resulted in a violation of their rights.

The Controller or processor may, under the conditions laid down by a special regulation or an international treaty by which the Slovak Republic is bound, restrict the scope of obligations and rights if such restriction is established in order to ensure:

the security of the Slovak Republic,
the defence of the Slovak Republic,
public order,
the performance of tasks for the purposes of criminal proceedings,
other important objectives of general public interest of the European Union or the Slovak Republic, in particular matters of significant economic or financial interest of the European Union or the Slovak Republic, including monetary, budgetary and tax matters, public health or social security,
the protection of the independence of the judiciary and judicial proceedings,
the prevention of breaches of ethics in regulated professions or regulated professional activities,
monitoring, inspection or regulatory functions connected with the exercise of public authority,
the protection of the rights of the data subject or of other persons,
the establishment, exercise or defence of legal claims,
economic mobilisation.

The data subject has the right to defend their rights through the responsible person or by submitting a request for investigation or a complaint to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to §100 of Act No. 18/2018 Coll.

Contact details of the responsible person: zodpovednaosobaZP@zelpo.sk (not intended for sending offers, CVs, job applications, etc.)