Mapa Štúrova 50, 040 01 Košice



Information about the processing of data subject's personal data under Paragraph 19 and Paragraph 20 of the Act No. 18/2018 Coll. on Personal Data Protection and on the amendment of certain other Acts (hereinafter referred to as the "Act") and Article 13 and 14 Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation").

I. Basic provisions

Data protection is very important to us. We respect your privacy. Therefore, we have decided to notify you as a data subject about the processing of your personal data. In this document, you will find information on which of your personal data are being processed, whether it is processed by consent or other legal basis, for what purpose it is being used, to whom we can provide the data and what are your rights with regard to the processing of your personal data.

Controller: Unique People, s.r.o.

Address: Štúrova 50, 040 01 Košice - mestská časť Staré Mesto

Company ID: 46 789 146

Contact details: tel. No.: +421 940 626 812


II. Definitions

Processing of personal data shall mean a processing operation or a set of processing operations involving personal data or personal data files, in particular the obtaining, recording, organizing, structuring, storage, alteration, reviewing, browsing, use, provision by transmission, dissemination or otherwise, rearrangement, restriction, erasing, whether performed by automated means or non-automated means, with or without information-communication technology. (Article 4 (2) of the Regulation)

The controller is everyone who, alone or together with others, defines the purpose and means of processing personal data and processes personal data in his own name. (Article 4 (7) of the Regulation)

The data subject is any natural person whose personal data are being processed. (Article 4 (1) of the Regulation)

Personal data are all information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a particular identifier, such as name, identification number, location, network identifier or by reference to one or more specific physical, physiological, genetic, psychological, economic, cultural or the social identity of that natural person. (Article 4 (1) of the Regulation)

Specific categories of personal data are data that reveal racist or ethnic origin, political opinions, religious beliefs, philosophical beliefs, trade union membership, genetic data, biometric data, health data or data relating to a natural person's sexual life or sexual orientation.

III. Privacy Policy

The Operator declares that when processing your personal data, he adheres to the principles of personal data protection according to Art. 5 par. 1 and 2 of the Regulation:

  1. Legality, fairness and transparency, 
  2. Purpose limitation, 
  3. Data minimization, 
  4. Correctness, 
  5. Retention minimization, 
  6. Integrity and confidentiality, 
  7. Responsibility. 

IV. Legality of the processing of personal data

The Controller declares that during procession of your personal data he observes the lawful processing, that is the procession of the personal data only in case of the situation, that at least one of these conditions below is being met (Art. 6 par. 1 of Regulation):

  1. The data subject has consented to the processing of his personal data for one or more specific purposes, 
  2. Processing is necessary for the performance of the contract of which the contracting party is data subject, or to take pre-contractual arrangements at the request of the data subject, 
  3. Processing is necessary to fulfill the legal obligation of the Controller, 
  4. Processing is necessary in order to protect the vital interests of the data subject or other natural person, 
  5. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the Controller, 
  6. Processing is necessary for the purposes of the legitimate interests pursued by the Operator or by a third party, unless such interests are outweighed by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular if the data subject is a child. 

V. Information for data subjects

The Controller shall observe the principle of informing the data subjects by the Information for Data Subjects for particular information systems of the Controller pursuant to Art. 13 and 14 of the Regulation informing data subjects about purposes, legal bases of processing, identity of data subjects, the extent of personal data processed, recipients of personal data, (non)carrying out transfer of personal data to third countries, identity of source from which the personal data were obtained, the period of retention of personal data on the possible existence of profiling and automated decision making, the rights of the data subjects.

List of individual Information for data subjects according to individual information systems according to Art. 13 and 14 of Regulation:

  1. IS cookies
  2. IS processing of job applicants
  3. IS records of business partners
  4. IS clients
  5. IS marketing – legitimate interest
  6. IS human resources and payroll – employees
  7. IS promotion
  8. IS registry administration
  9. IS accounting documents

VI. Your rights

Under the conditions set forth in the Act, you have:

  1. the right to access your personal data pursuant to Section 21 of the Act, 
  2. the right to rectify personal data pursuant to Section 22 of the Act, or the restriction of processing pursuant to Section 24 of the Act, 
  3. the right to delete personal data pursuant to Section 23 of the Act, 
  4. the right to object to processing pursuant to Section 27 of the Act, 
  5. the right to data portability pursuant to Section 26 of the Act, 
  6. the right to withdraw consent to processing in writing or electronically to the address or email of the operator referred to in Art. III of these conditions. 
  7. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to privacy has been violated. 

VII. Terms of privacy

The Controller declares that all appropriate technical and organizational measures to secure personal data were taken. The operator declares that only the persons authorized by him can access the personal data.

VIII. Related documents

Part of the accepted terms and conditions of personal data protection is Security Analysis, Security Directive, Security Policy and other internal directives that are stored internally by the Controller.

IX. Final provisions

These principles entered into force on 25 May 2018.