Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and applicable Slovak data protection law.
I. Data controller
JF, spol. s r.o.
Registered office: Somolického 3, 960 01 Zvolen, Slovakia
Company ID: 36 620 009
VAT ID: SK2020072802
E-mail: sekretariat@jf.sk
Tel.: +421 45 54 58 760
II. Purpose and legal basis for processing
We process personal data on the following bases:
- Contract performance (Article 6(1)(b) GDPR) – provision of OHS, fire protection, occupational health, approved equipment, training and inspection services; orders, invoicing, training and certificate records.
- Legal obligation (Article 6(1)(c) GDPR) – accounting, tax documents, statutory retention, records under employment and other legislation.
- Legitimate interest of the controller (Article 6(1)(f) GDPR) – assertion and defence of legal claims, direct marketing related to our services (you may object), IT security.
- Consent (Article 6(1)(a) GDPR) – where we expressly ask for it (e.g. newsletters, optional form fields). You may withdraw consent at any time.
III. Categories of data and recipients
We process, to the extent necessary, e.g.: identification data (name, title), contact details (email, phone, address), employer details (company name, IDs), data on training and certificates, communication and contract data. Data may be disclosed to processors (IT, hosting, accounting, legal services) under processing agreements with confidentiality and security obligations. We do not sell personal data to third parties for marketing.
IV. Retention period
We retain data for the duration of the contractual relationship and thereafter for the statutory period (e.g. 10 years for tax documents under accounting law) or the limitation period for claims. Data processed on the basis of consent until consent is withdrawn. Training and certificate records as required by applicable regulations.
V. Your rights
Within the limits of the GDPR you have the right to: access (Article 15), rectification (Article 16), erasure – “right to be forgotten” (Article 17), restriction of processing (Article 18), data portability (Article 20), object to processing (Article 21), withdraw consent. You may exercise these rights in writing or by e-mail to the controller in section 1. You also have the right to lodge a complaint with a supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.
VI. Obligation to provide data
Provision of data necessary for the contract or a legal obligation is mandatory; without it we cannot conclude the contract or comply with the law. Provision of data on the basis of consent is voluntary.
VII. Automated decision-making and profiling
Personal data are not subject to automated decision-making or profiling within the meaning of Article 22 GDPR.