Menu
Menu
Ironal, s.r.o. processes your data in the context of your use of the www.ironal.sk website in accordance with applicable law.
General information
Ironal, s. r. o. ensures the protection of personal data in the process of your use of the ironal.sk website in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of natural persons with regard to the processing of personal data and on the free movement of such data and Act No. 18/2018 Coll. of 29 November 2017 on the Protection of Personal Data, and on amendments and additions to certain acts, with effect from 25 May 2018.
Ironal, spol. s r. o., with its registered office at Kynceľova 18, 974 01 Banská Bystrica, ID No (IČO) 36 030 597, informs you on the basis of this notice that it respects the privacy of all data subjects with whom it comes into contact, regardless of whether it processes personal data itself or via another party. The scope of the personal data of the data subjects processed by Ironal, s.r.o. and the duration of the processing depend exclusively on the purpose of the processing. When processing the personal data of data subjects, Ironal, s. r. o. respects the principle of lawfulness in accordance with the relevant provisions of the Regulation and the Personal Data Protection Act, which means that Ironal, s.r.o. always processes the personal data of data subjects exclusively on the basis of one of the aforementioned legal bases. It is important to us at Ironal, s.r.o. that everyone understands what personal data we process about you, on what basis we process it and what your rights are. If you have any questions or concerns related to personal data processing, you can contact the Data Protection Officer by email at: gdpr@ironal.sk or at the address of the controller: Ironal, s. r. o., Kynceľová 18, 974 01 Banská Bystrica.
We process the personal data of data subjects in different ways and in different situations, depending on whether they are suppliers, customers, employees, job applicants or other data subjects. Ironal, s. r. o. also processes personal data about visitors to its website and the personal data of visitors to the company’s premises, depending on the preferred method of communication of the data subjects with Ironal, s.r.o.
Personal data controller
The controller of the personal data of data subjects is Ironal, spol. s r. o., Kynceľová 18, 974 01 Banská Bystrica, ID No (IČO): 36 030 597 to which the data subjects have provided their personal data for the fulfilment of one or more purposes. The controller manages, processes, disposes of and is responsible for lawful processing of the personal data of data subjects.
Personal data means data related to an identified natural person or an identifiable natural person who can be identified, directly or indirectly, by reference to a commonly identifiable identifier or to another identifier, such as a first name, surname, identification number, location data or online identifier, or to one or more characteristics or attributes which constitute his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity. Data subjects may exercise their legal rights in relation to the controller of their personal data.
Protection of stored data by the controller means the use of technical and organizational security measures to protect personal data provided to Ironal, s. r. o. by data subjects against loss, manipulation, destruction or access by unauthorized persons. These security measures are constantly improved upon and adapted in accordance with the latest technologies. If the data provided is unencrypted, it may be viewed by third parties. For this reason, we would like to emphasise that when it comes to the transmission of data over the internet (e.g. by email), secure transmission cannot be guaranteed. You should therefore either not transmit sensitive data at all, or only over a secure connection (SSL). If you are asked to enter personal information when using sites or files, the transmission of such information over the internet may not be secure and there is a risk that unauthorised persons may view or manipulate it.
Personal data processed by Ironal, s. r. o.
Ironal, s.r.o. processes only such personal data necessary for the provision of professional services by the company with regard to compliance with legal obligations, as well as with respect to the protection of the company’s legitimate interests. As a result, the majority of the data that Ironal, s.r.o. collects are primarily related to Ironal’s own employees and business partners.
Categories of personal data processed by Ironal, s. r. o:
Identification data:
Such data include first name, surname, birth number, sex, marital status, date of birth, personal identification number, ID card number or other identity document (passport) number, permanent address, nationality, citizenship, and, in the case of a business entity, also the company identification number and address of the company represented by the data subject. Ironal, s. r. o. processes the identification data to the extent permitted by law in order for the company to comply with its legal obligation, contractual obligations or to safeguard the company’s legitimate interests.
Contact details:
Ironal, s. r. o. also processes the telephone number and e-mail address of data subjects. Data related to the products and services offered by our company that you use as a data subject are also processed.
Asset protection – CCTV recordings:
To protect the property and health of persons on the premises of Ironal, s. r. o., the company also uses CCTV systems to make records. Areas that are monitored or recorded by CCTV are clearly marked so that the data subjects are informed of the designated area monitored by CCTV.
Please note that, in accordance with the General Data Protection Regulation of the European Union (hereinafter referred to as “GDPR”), you have the following rights as a data subject with respect to the processing of your data:
Reason and purpose for processing personal data
Ironal, s. r. o. processes only such personal data which it obtains directly from the data subject or which is obtained from the data subject via third parties, e.g. recruitment agencies, which provide Ironal, s. r. o. with the personal data in question to the extent necessary on the basis of the data subject’s consent. Ironal, s.r.o. processes personal data that is necessary for the performance of contracts and personal data for the purposes required by a special regulation. The company also processes such personal data that is necessary for the purposes of the legitimate interests of Ironal, s.r.o. and only for the period necessary to ensure the legitimate interests of the company. The company processes personal data on the basis of the data subject’s consent.
1.
Activities (what the company does with personal data): Processing of personal data for the purpose of interviewing job applicants
Purpose of personal data processing: Register of jobseekers
Legal basis of personal data processing: Consent
Categories of data subjects: Job applicants
2.
Activities (what the company does with personal data): The recruitment agency communicates the personal data of the job applicant to the extent necessary
Purpose of personal data processing: New staff recruitment
Legal basis of personal data processing: Contract with a recruitment agency
Categories of data subjects: Employee starting employment
3.
Activities (what the company does with personal data): Personal data is used by the company to issue attendance cards and MultiSport cards
Purpose of personal data processing: Employee records
Legal basis of personal data processing: Legitimate interest
Categories of data subjects: Company employees
4.
Activities (what the company does with personal data): Processing and the provision of data to the Social Insurance Agency for the purposes necessary under a special regulation
Purpose of personal data processing: Compliance with legal obligations when employing staff
Legal basis of personal data processing: Act No. 461/2003 Coll. on Social Insurance
Categories of data subjects: Company employees
5.
Activities (what the company does with personal data): Processing and the provision of data to selected health insurance agencies for the purposes necessary under a special regulation
Purpose of personal data processing: Compliance with legal obligations when employing staff
Legal basis of personal data processing: Act No. 580/2004 Coll. on Health Insurance
Categories of data subjects: Company employees
6.
Activities (what the company does with personal data): Keeping the results of medical examinations to fulfil a legal obligation and documentation of the medical condition at the end of the employment relationship with the employee
Purpose of personal data processing: Arranging a medical examination and report on medical fitness for work and health condition at the end of the employment relationship
Legal basis of personal data processing: Fulfilling a legal obligation
Categories of data subjects: Company employees
7.
Activities (what the company does with personal data): Records of the personal data of employees who have received training in occupational health and safety
Purpose of personal data processing: Occupational health and safety training
Legal basis of personal data processing: Act No. 311/2001 Coll. the Labour Code, Act No. 124/2006 Coll. on Security and on Occupational Health and Safety
Categories of data subjects: Company employees
8.
Activities (what the company does with personal data):The company stores camera recordings for the period allowed by law for the protection of property
Purpose of personal data processing: Asset protection
Legal basis of personal data processing: Legitimate interest
Categories of data subjects: Persons on the premises of Ironal, s. r. o.
Right of access to personal data
In the event that Ironal, s. r. o., as the controller, is actively contacted by you as a data subject with a request for access to your personal data, we will inform you whether your personal data is being processed and to what extent it is being processed. Ironal, s.r.o. will also inform you for what purpose we process your personal data, what categories of personal data we process, give you a list of recipients or categories of recipients of personal data to whom your personal data has been disclosed, inform you of the period during which we will keep your personal data, of your right to request correction or deletion of personal data, your right to object, your right to lodge a complaint with a supervisory authority, we will inform you of all available information about the source of personal data, if Ironal, s.r.o. has obtained it from someone other than you, whether automated decision-making, including profiling, is taking place in your case, and, if Ironal, s. r. o. did not process/is not processing your personal data, it must inform you thereof.
Right to rectification, completion
Each data subject has the right to have his or her personal data rectified if it is found to be inaccurate or incorrect and has exercised this right.
Right to erasure
Every data subject has the right to ask Ironal, s.r.o. to destroy the personal data concerning him or her that it processes. This personal data includes paper documents that are shredded or personal data that is erased. Ironal, s.r.o. will only comply with such request if it is not under a legal obligation to process the personal data of the data subject and is not bound by other contracts.
If the personal data of the data subject is not necessary for the purposes which it was collected or otherwise processed, or if the data subject withdraws his/her consent to the processing of the personal data and there is no other legal basis for its processing, Ironal, s. r. o. deletes the personal data of the data subject. At the request of the data subject, deletion from the database of Ironal, s. r. o. will also occur in the following cases:
Right to the restriction of processing
If the data subject exercises this right, the data subject has the right to suspend the processing of his/her personal data.
Right to portability
If the data subject is in a situation where he or she needs to obtain his or her personal data in a structured, commonly used and machine-readable format, or needs to transmit the personal data directly to the controller, Ironal, s.r.o. is obliged to provide the structured data, if technically possible.
Failure to provide personal data
Any data subject has the right to refuse to provide his or her personal data. However, if it is necessary to request it from the data subject, Ironal, s.r.o. will not be able to provide its services to such data subject, sell goods to him/her, employ him/her, invite him/her for an interview, allow him/her to enter the premises of Ironal, s.r.o., etc.
Withdrawal of consent
Where we require your consent to process your personal data, you are entitled to withdraw this consent at any time. Withdrawal of consent does not affect the processing of your data during the period when this consent was validly given by you, nor the processing of your personal data for other legal reasons, if applicable.
Ironal, s.r.o. processes the data of data subjects transparently, fairly and in accordance with the law. With respect to the processing of their personal data, data subjects may contact the Data Protection Officer at Ironal, s. r. o. using the following e-mail address: gdpr@ironal.sk, or the address of the controller: Ironal, s. r. o., Kynceľová 18, 974 01 Banská Bystrica.
Right of the data subject to bring a data protection action
Any data subject who believes that his or her rights provided for by the Regulation, the Personal Data Protection Act or a special regulation in the field of personal data protection are being compromised by the processing of his/her personal data by Ironal, s. r. o., Kynceľová 18, 974 01 Banská Bystrica, ID No: 36 030 597, is entitled to file a motion to the Office for Personal Data Protection of the Slovak Republic, pursuant to §100 of the Personal Data Protection Act:
Office of Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, SR
Identification No (IČO): 36 064 220
Tel. +421/2/3231 3214
E-mail: statny.dozor@pdp.gov.sk
Data Protection Officer
Ironal, s. r. o., Kynceľová 18, 974 01 Banská Bystrica, ID No (IČO): 36 030 597 has designated a Data Protection Officer for the purpose of proper and timely performance of activities related to the protection of personal data pursuant to the Regulation and the Personal Data Protection Act. The data subject may contact the Data Protection Officer with questions about the processing of his or her personal data by the company and the exercise of his or her rights. At gdpr@ironal.sk we deal exclusively with questions and consultations related to the current legislation on the protection of personal data (GDPR).
Contact data of the Data Protection Officer:
Name: MSc. Mgr. Martina Ďuračková
E-mail: ironal@ironal.sk ,
tel. kontakt: +421 907 831 090
Updated as of 27 April 2023
Controller:
Ironal, spol. s r. o.
Ing. Bc. Michal Ďuračka, Managing director