The protection of your personal data is important for us
To protect your personal data we take responsibility for and protect your right to information. Legal base is represented by the law of the National Council of the Slovak Republic No. 18/2018 Coll. on the protection of personal data and on the amendment of certain provisions (hereinafter referred to as the "Personal Data Protection Act") and Regulation (EU) No. 2016/679 (hereinafter referred to as GDPR). When processing your personal information we also comply with the principles of legality, limitation of the purpose of personal data, minimization of scope and storage, accuracy, integrity, confidentiality and liability.
1. Data Controller
Business name: GLOVIS SLOVAKIA, s. r. o.
- Address of registered office: Na Brane 1, 010 48 Zilina
- • ID: 35 916 249
- • TIN: 2021961194
- • Statutory authority: Yong Gyun Kim
2. Contact to the Responsible person
If you have any questions regarding your personal data, please contact our responsible person – Alois Švajda, by e-mail to info@sigmapoint.sk, by the phone +421 908 768 827 or you can visit us personally in the premises of GLOVIS SLOVAKIA, s. r. o., located in the premises of the Kia Motors Slovakia plant in Teplicka nad Vahom on Sv. Jana Nepomuckeho 1282/1.
3. Purpose of personal data processing
The company processes the personal data provided for the following purpose:
- - Processing of contractual and pre-contractual obligations
- - Processing of personnel and payroll agenda
- - Accounting and auditing
- - Security and property protection
- - Ensure Occupational health and safety, Fire protection, Occupational Health Service
- - Ensure preventive medical check-ups
- - Keeping a database of job seekers
- - Provision of temporary and permanent residence of foreigners
- - Providing of legal service
- - Ensure transport of employees to and from work
- - Provision of meal for employees
- - Measures to detect corruption
4. The legal basis for processing the personal data of the concerned persons
When processing personal data the company proceeds in accordance with valid and current law of the National Council of the Slovak Republic No. 18/2018 Coll. (hereinafter referred to as the "Personal Data Protection Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as GDPR).
The legal basis for the processing of personal data is:
- - The consent of the concerned person to the processing of personal data, depending on the purpose of the processing of personal data,
- - the performance of the contract to which the concerned person is a contracting party,
- - special legislation, in particular: the Personal Data Protection Act, the Social Insurance Act, the Labor Code, the valid wage and accounting regulations, the Commercial Code, the Civil Code, the Trades Licensing Act, the Occupational Health and Safety Act, the Act on the Protection, Support and Development of Public Health
- - processing of personal data is necessary to protect the vital interests of the concerned person; or
- - the legitimate interest of the company,
- - authorization.
5. Consent of the concerned person
The company obtains the consent of the concerned person freely without pressure and enforcement as well as without threatening the rejection of the contractual relationship the provided services or the obligations arising for the data controller from legally binding acts of the European Union the international treaty to which the Slovak Republic is bound or by law.
Consent is granted separately for each purpose of personal data processing. You can appeal to the concerned person at any time in the same form as the consent was granted. The company respects privacy and considers personal data to be confidential.
6. Beneficiaries
For the quality of its services the company needs to know some of the personal data of the concerned people and needs them to provide additional recipients to fulfill their legal obligations and to provide the highest quality services.
In company business activities the company cooperates with a number of processors to provide quality services while in the performance of their contractual activities for the company they process the personal data of the concerned persons. Examples include support services in the following areas:
- 1. Safety and health at work, fire protection (SAFIRS, s. r. o.)
- 2. Occupational Health Service (Pro Benefit, s. r. o.)
- 3. Accounting and Human Resources (Asseco Solutions, s. r. o., HOUR, s. r. o.)
- 4. Legal Services (LEGALSKILLS.SK, s. r. o.)
- 5. Transport of employees to and from employment (Blaguss Slovakia, s.r.o., Transport Company of Žilina, s.r.o., NITRABUS, s. r. o.)
- 6. Economic audit (Deloitte Audit, s. r. o.)
- 7. Object protection, approval and registration of premises (Kia Motors Slovakia, s. r. o.)
- 8. Provision of IT services within the Hyundai Motor Group (Hyundai AutoEver Europe GmbH, organizational unit)
- 9. Confirmation for obtaining a permanent residence in the Slovak Republic (Slovak Agency for
Development of Investments and Trade – SARIO)
- 10. Notary Services (Zuzana Kolembusova Notary Office)
- 11. Distribution of meals (Edenred Slovakia, s. r. o.)
- 12. Catering (Sodexo, s. r. o.)
The Company honestly declares that when selecting individual processors it has taken due account of their professional, technical, organizational and personnel capabilities and their ability to guarantee the security of the processed personal data by the adoption of security measures under the Personal Data Protection Act. At the same time the company has chosen to select a suitable processor so as not to endanger the rights and legitimate interests of the persons concerned.
The company as the data controller concluded with the processors within the meaning of Art. 28 section 3 Regulations of a written contract on the protection of personal data processed by processors that are authorized to process the personal data of the concerned persons to the extent under the conditions and for the purpose agreed in the contract and in the manner provided by the Act on Personal Data Protection.
The company also provides information to the third parties – health insurance companies, social insurance companies, tax offices, labor offices, social affairs and families, supplementary pension companies, supplementary management companies and others (banks, commercial insurers, exequatur...), Foreign police (for the purpose of equipping foreigners with temporary residence), parent company.
7. Terms and method of processing the personal data of the persons concerned
The company processes in its information systems the personal data of the concerned persons by fully or partially automated or non-automated means of processing.
The company does not disclose personal data processed unless it is required by a specific law or by a court or other state authority.
The Company will not process your personal data without your explicit consent or other legal basis for any other purpose or to a greater extent than is stated in this information and the records of the individual information systems of the data controller.
8. The retention period of the personal data of the concerned persons
The retention period of personal data is determined by the purpose of the processing of personal data and the requirements of individual regulations. Specific time of retention is prescribed by the internal regulation of the Company's Registered Plan drawn up in accordance with the Act on Archives and Registers.
The company will in a prescribed manner, liquidate those personal data whose processing purpose and retention period is over. At the end of the defined purpose the company is authorized to process personal data to the extent necessary for research or statistical purposes in an anonymous form.
The company ensures that the personal data of the concerned persons are processed in a form which makes it possible to identify individual concerned persons for no longer than is necessary to achieve the purpose of the processing.
9. Automated individual decisions including profiling
The company does not currently make automated individual decisions (google analytics, facebook and others) in its business. In the event that such decision-making is applied the company will communicate the facts to the concerned persons by the available forms.
10. Transmission of personal data to third countries and international institutions
The company performs data transfer to the parent company – HYUNDAI GLOVIS CO., LTD. on the basis of approved contractual clauses between companies.
11. The rights of the data subject related to the processing of his or her personal data
The concerned person has the right upon written request from the company to require:
- - in a generally understandable form, accurate information about the source from which it obtained its personal data for the processing,
- - access to its personal data,
- - in a generally comprehensible form a list of its personal data which is the subject of processing,
- - correcting or liquidating any incorrect, incomplete or outdated personal data that is being processed,
- - the deletion of its personal data whose purpose of processing has ended; if they are the subject of
processing, official documents containing personal data, they may request their return,
- - the liquidation of her personal data that is being processed, if the law has been violated,
- - limit the processing of its personal data,
- - the person concerned upon written request to the company or personally if the case does not delay,
the right to object at any time to the processing of personal data by stating reasons or providing
evidence of unauthorized interference with its rights and the rights of interest which are or may be in
a particular case processing of personal data damaged; if the legal grounds do not prevent it and it is
proved that the person concerned's objection is legitimate, the company is obliged to block and
destroy the personal data processed by the person concerned without delay, as soon as
circumstances allow,
- - prevent the processing of personal data which it considers to be or will be processed for direct
marketing purposes without its consent and to request the liquidation,
- - the right to transfer its personal data to another data controller
- - whether the provision of personal data is a statutory requirement or a contractual requirement or
requirement that is necessary for the conclusion of the contract and whether the person concerned is
required to provide personal data and the possible consequences of the failure to provide personal
data,
- - the right to complain to the supervisory authority,
- - the right to file a motion under Article 100. The person concerned, suspecting that his or her personal
data are being processed improperly may file a petition for the personal data protection proceedings
with the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 820 07
Bratislava 27, Slovak Republic or contact the office through its web site
http://www.dataprotection.gov.sk.
If the concerned persons not fully entitled to legal action, his/her rights may be used by a legal representative. If the concerned person does not live, his or her rights under this Act may be used by a close person. The request of the data subject in accordance with the Personal Data Protection Act shall provide the Company free of charge in addition to payment of a sum that can not exceed the amount of expense actually incurred in connection with the making of copies with the incorporation of technical media and the forwarding of information to the concerned person unless otherwise provided in a special law. The company is required to respond in writing to the request of the concerned person within 30 days of receipt of the application.
Limiting the rights of the data subject under the Personal Data Protection Act the Company shall notify the data subject and the Personal Data Protection Office of the Slovak Republic in writing without undue delay.
The company hereby informs you as to the concerned person about the protection of your personal data and has informed you of your rights in relation to the protection of personal data within the scope of this written disclosure obligation.
In Zilina, on 25.5.2018