Principles of Personal Data Processing

We value your trust when you entrust us with your personal data, and we are determined to protect your personal data so that you feel safe with us. Therefore, in this document we would like to inform you about how we handle your personal data, how you can contact us if you have questions regarding the processing of your personal data, and other important information about the processing of your personal data.

When processing your personal data, we follow Act No. 18/2018 Coll. on the Protection of Personal Data, as amended (hereinafter referred to as the “Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive No. 95/46/EC (hereinafter referred to as the “GDPR”), and related regulations.

Who we are

The controller in processing your personal data is us:

SEOYON E-HWA AUTOMOTIVE SLOVAKIA s.r.o.
Robotnícka 1, 017 01 Považská Bystrica
Company ID No.: 36 347 884
Registered in the Commercial Register of the District Court Trenčín, Section: Sro, Insert No. 16046/R
Email: podnety@seoyoneh.sk

What personal data we process

We process the following categories of personal data about you:

• Ordinary personal data, such as name, surname, date and place of birth, residence, nationality, email, telephone number.

Purpose, legal basis of processing and retention period

1. Career

Purposes and legal bases:

• Recruitment procedure: We process personal data for the purpose of the recruitment procedure based on your job application (pre-contractual relations).

• Maintaining an applicant database: If, when submitting your job application, you give us consent to process personal data for the purpose of inclusion in the applicant database, we will include you in our applicant database for the purpose of repeated contact. We process personal data for the purpose of inclusion in the applicant database based on your consent.

Retention period:
We will keep your personal data until the recruitment procedure is completed. If you have given us consent to be included in the applicant database, we will keep your personal data for 1 year from the date your consent was given.

2. Contractual relationships

Purposes and legal bases:

• Performance of a contract: If you are a contracting party to a contract concluded with us, the processing of your personal data may be necessary for the performance of the subject matter of this contract, and such processing will be carried out precisely on the basis of this contract.

• The processing of your personal data for the purpose of performance of a contract may also occur if you are not a contracting party to the given contract but the contract otherwise relates to you, e.g., you are a contact person (employee) for our contractual partner (your employer) specified in the contract, and in such case we will process your personal data on the basis of our legitimate interest.

Retention period:
We retain your personal data for as long as the purpose of processing (the subject matter of the contract) has not been fulfilled and until the expiry of the limitation period for possible claims. Accounting documents related to contracts must be retained for 10 years after the year to which they relate.

3. Communication

Purposes and legal bases:

• Mutual communication: If you contact us in any matter via any communication channel (by post, email or telephone), we process your personal data for the purpose of mutual contact with you. We process personal data for communication with you based on your request within contractual or pre-contractual relations. Records of incoming and outgoing mail are processed on the basis of a special law.

• Contacting the client / care for better relations with you: By better identifying your needs, we can better meet your requirements and needs, since it is our interest to continuously improve our products and services for your satisfaction. Such processing of personal data is therefore based on our legitimate interest in providing our services in the best possible way and ensuring the satisfaction of our clients.

Retention period:
We will retain your personal data for the time necessary to process your request. Records of incoming and outgoing mail will be retained for 10 years after the year to which they relate.

Fulfilment of our legal obligations

When processing your personal data for individual purposes, your personal data is also processed based on various special regulations which impose on us different obligations, such as retaining data in our accounting, or disclosing, providing data to state and other authorities which supervise our activities or resolve disputes, or in the performance of decisions. Such special regulations include, for example, Act No. 40/1964 Coll., the Civil Code, Act No. 102/2014 Coll. on Consumer Protection, Act No. 222/2004 Coll. on Value Added Tax, Act No. 513/1991 Coll., the Commercial Code, Act No. 431/2002 Coll. on Accounting, Act No. 582/2004 Coll. on Local Taxes and Local Fee for Municipal Waste and Small Construction Waste, Act No. 404/2011 Coll. on the Residence of Foreigners.

Retention period:
It will depend on the obligation we are required to fulfil under a special regulation.

Necessity to provide personal data

If the provision of personal data is a legal or contractual requirement, or a requirement necessary to conclude a contract, the data subject is obliged to provide personal data. Otherwise, the purpose of processing intended by the controller cannot be fulfilled in the case of providing personal data.

Disclosure and provision of your personal data

We may generally disclose and/or provide your personal data also to other entities, such as the tax office, state administration and public authorities for the performance of control and supervision, courts, law enforcement authorities, accountants, auditors, lawyers, IT systems and support providers, and other external professional advisors and companies that provide us with products and services. We are responsible for the proper protection of your personal data that is provided and/or disclosed to other entities in the position of processor.

Transfer of personal data to a third country or international organization

The controller does not carry out and does not intend to carry out the transfer of personal data to a third country or an international organization.

Automated decision-making including profiling

When processing personal data for the above purposes, no automated decision-making or profiling is carried out.

Your rights as a data subject in the processing of personal data

• Right of access
  In simple terms, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we provide it, who else processes it apart from us, and what other rights you have related to the processing of your personal data. If you are not sure which personal data we process about you, you may request confirmation from us whether or not personal data concerning you are processed by us, and if so, you have the right to access such personal data. As part of the right of access, you may request a copy of the personal data processed, whereby we will provide the first copy free of charge and additional copies for a fee. However, the rights of third parties cannot be restricted thereby.

• Right to rectification
  Personal data must be correct, up to date and truthful. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected without undue delay, or supplemented. By exercising this right, you help us keep your personal data accurate and up to date.

• Right to erasure
  In some cases, you have the right to have your personal data erased. We will erase your personal data without undue delay if any of the following reasons are met:

  • your personal data is no longer necessary for the purposes for which we processed it;

  • you withdraw your consent to the processing of personal data, where such data is processed based on your consent and we have no other legal basis or reason for further processing;

  • you exercise your right to object to the processing of personal data which we process on the basis of our legitimate interests, and we find that there are no such overriding legitimate grounds on our part over your legitimate grounds; or

  • you believe that the processing of personal data carried out by us was unlawful.

  But please note that even if this is one of the reasons, it does not mean that we will immediately erase all your personal data. This right does not apply if the processing of your personal data is still necessary to fulfil our legal obligation or to establish, exercise or defend our legal claims.

• Right to restriction of processing
  In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you, in certain cases, to request that your personal data be marked and not subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited time. We must restrict the processing of personal data when:

  • you contest the accuracy of the personal data, for a period enabling us to verify its accuracy;

  • your personal data is processed unlawfully, but you prefer restriction to erasure;

  • we no longer need your personal data for the stated purposes, but you require it to establish, exercise or defend your legal claims; or

  • you object to processing, for the time necessary to verify whether your objection is justified.

• Right to data portability
  You have the right to receive from us all your personal data that you have provided to us and that we process by automated means on one of these two legal bases: based on a contractual relationship or based on consent. We will provide your personal data in a structured, commonly used and machine-readable format, and in this connection you may exercise your right to transfer this data to another controller, if such transfer is technically feasible. To be able to easily transfer the data at your request, this may only involve data that we process automatically in our electronic databases. However, the rights of third parties cannot be restricted thereby.

• Right to object to processing
  You have the right to object at any time to the processing of personal data which takes place based on our legitimate interest. We may no longer process such personal data unless we demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims. You also always have the right to object to the processing of your personal data if it is processed for direct marketing purposes. In such case, we will immediately stop processing your personal data for direct marketing purposes.

• Right to lodge a complaint
  If you believe that we process your personal data unlawfully or in violation of generally binding legal regulations, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

• Right to withdraw consent
  You have the right to withdraw your consent to the processing of personal data at any time, if the data is processed on this legal basis.

How and where you can exercise your rights

If you have any questions regarding this document or the use of your personal data, or if you wish to exercise your rights described in this document, you may do so by email, in writing or in person at the registered office of our company.

We will respond to your request regarding the processing of personal data without undue delay, in any case within one month of its receipt. In exceptional cases, the period may be extended by another two months, but in any case, we will inform you of the reasons for the extension within one month of receiving the request. Information is provided free of charge. However, if your requests are unreasonable or frequently repeated, we may charge a reasonable administrative fee for their processing.

Security

We have adopted the necessary statutory, organizational, material and technical measures to protect personal data that comply with data security and privacy protection standards. If we provide and/or disclose personal data to a third party that provides services necessary to fulfil one of the purposes of personal data processing, such third party in the position of processor has likewise adopted appropriate measures to protect the confidentiality, integrity and security of personal data. We have also taken the necessary steps to ensure that the personal data we process is reliable, accurate and complete for the purpose of its use.