INFORMATION FOR DATA SUBJECTS ON PERSONAL DATA PROCESSING AND PRIVACY

A. Jobseekers – applicants for specific position

Data subjects: data subjects are for this case natural persons who have contacted the Personality Group electronically, by telephone, in person, by letter or in any other way in response to a specific published advertisement or offer of employment or a job position with a specific employer (hereinafter referred to as "applicants")

What data are processed, on what legal basis, for what purpose and for how long:

Scope of personal data: If you responded to a specific offer of employment or a job position made in any form or respond to an advertisement or information about a vacancy for a specific employer or the PERSONALITY Group for a specific employer (hereinafter referred to as the "Offer"), we process your personal data included in the response form and data requested in the Offer, which is mainly name, surname, title, date of birth, address, email, telephone number, professional history, language skills, education, salary expectations, the data contained in the CV, public profiles on the candidate's personal networks and other documents you have provided to us and the data contained in the records of interviews you have had with the PERSONALITY Group or the potential employer.

Purposes of processing:

1. Identification and recommendation of suitable candidates for a job position, verification that the candidates meet the requirements and needs of the specific employer and the process of recruiting an employee or worker for a job position (hereinafter referred to as the "recruitment process") as well as the preparation of an employment contract or other similar private law contract or agreement between the candidate and the prospective employer.

2. Providing data of applicants to prospective employers for the purposes of the recruitment process and the selection of employees or workers for a vacant position, as well as the preparation of an employment contract or other similar private law contract or agreement between the applicant and the prospective employer.

3. Establishment, exercise or defence of legal claims of the PERSONALITY Group and employers related to the recruitment process of the job applicant or the services provided by the PERSONALITY Group to the employer.

4. Archiving, scientific research or statistical purposes.

Legal Basis

The legal basis for the processing of applicants' personal data for the purposes of points 1 and 2 above is Article 6(1)(b) of the GDPR, i.e. the fact that the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (pre-contractual relationship between the applicant, PERSONALITY Group and the potential employer).

For the purpose of point 3, the legal basis is Article 6(1)(f) of the GDPR, i.e. the existing legitimate interest pursued by PERSONALITY Group and/or the employer with respect to establishment, exercise or defence of legal claims asserting, defending and proving the legal claims of the PERSONALITY Group and/or the employers related to the recruitment process or the services provided by the PERSONALITY Group to the employer.

For purpose 4, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from Act 395/2002 Coll. on archives and registers and on the amendment of certain acts

Processing period

For the purposes under 1 and 2, personal data are processed until the recruitment process is fully concluded by the employer for a specific offer and the selection of a specific employee.

For the purposes of point 3, the data shall be processed until the expiry of the limitation period for private law claims, i.e. for a maximum period of 4 years from the end of the recruitment process and, if any legal claims process has been initiated, then until the final conclusion of all proceedings and the recovery of all related claims.

For the purposes of point 4, the processing period shall be determined by the retention period of the record, determined by law or by the registration regulations, usually 5 years.

Categories of processors or other recipients of data:

The PERSONALITY Group provides personal data of applicants and candidates to third parties, which are natural or legal persons or institutions established in the European Union that search for or recruit employees or workers for vacancies or similar positions (hereinafter referred to as the "Employer"). The Employer is an independent controller within the meaning of the GDPR.

In addition, the PERSONALITY Group provides personal data of applicants and candidates to data processors who provide the PERSONALITY Group with services and activities related to the processing of personal data, which are in particular:

External personnel and contractors: Natural or legal persons established in the EU who provide the PERSONALITY Group with work or services related to its core business where personal data is or may be provided or processed, in particular external consultants and coordinators of the recruitment process, lectors, other persons coordinating the recruitments process or processing its results for the PERSONALITY Group.

Accounting, tax and legal advisors: natural or legal persons established in the EU who provide accounting, tax or legal advice to the PERSONALITY Group.

IT Services and IT Platforms: Individuals and legal entities usually based in the EU who are the authors, operators or administrators of electronic platforms or social networks through which PERSONALITY communicates with employers, applicants or candidates, conducts online seminars, online interviews or transmits or stores information are recipients of applicants' or candidates' personal data. Main contractual data processors for PERSONALITY Group are:

The operator of the RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610
The operator of the mailing server for email communication Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava, registered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 63270/B
Separate controllers whose conditions for the collection and processing of personal data are governed by their specific rules, such as in particular –
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google")
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (hereinafter referred to as "Hotjar")
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn")
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (hereinafter referred to as "Microsoft")
The Rocket Science Group LLC d/b/a Mailchimp, 512 Means St., Suite 404, Atlanta, Georgia, USA (hereinafter referred to as "Mailchimp")

Data Transfers

We do not transfer personal data outside of European Union member countries or to international organisation.

Consent Withdrawal

If we process data on the basis of consent, you have the right to withdraw this consent at any time. You may withdraw your consent by email to data@personalityhr.com or by sending a notice by post to the Company's address. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal.

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

B. Candidates for employment

Data Subjects: In this case the data subjects are those who have responded electronically, by telephone, in person, by letter or in any other way to the invitation or opportunity of the PERSONALITY group to be included in the database of candidates for employment, i.e. database of persons, who may be from time to time sent information about job offers and who may also be contacted as candidates for non-specified positions and whose data may be provided to non-specified employers looking for employees or workers and who have given their voluntary consent to such processing (hereinafter referred to as "candidates"). If you give us your consent to include you in our database of candidates, we will communicate with you and contact you when positions that may be suitable for you appear on our job offers. We may also collect and process more detailed information about you to help us recognise for which positions your skills might be suitable. That may be considered as profiling, which helps us to sort candidates by certain traits and characteristics to find a suitable job for them.

What data are processed, on what legal basis, for what purpose and for how long

Scope of personal data: The PERSONALITY Group processes candidates' personal data to the extent that it is provided in the contact form or collected via personal or telephone interview or retrieved from the publicly available sources by the PERSONALITY Group after a candidate has expressed a consent with being included in the database of candidates, usually in extent of mainly first name, surname, title, date of birth, address, email, telephone number, professional history, language skills, education, salary expectations, the data contained in the CV, publicly available data (profiles on the candidate's personal networks or public speeches) and other documents you have provided to us and the data contained in the records of interviews you have had with the PERSONALITY Group or the potential employer.

Purposes of processing:

Maintaining a database of job candidates, including the ability to (i) share their personal data with unspecified clients of the PERSONALITY Group and to contact the candidate if they are a suitable for a job position (ii) contact the candidate with questions about their priorities, skills, education and adding information to the candidate's profile
Establishment, exercise or defence of legal claims of the PERSONALITY Group and employers related to the recruitment process of the job applicant or the services provided by the PERSONALITY Group to the employer.
Archiving, scientific research or statistical purposes.

Legal basis

The legal basis for the processing of candidates' personal data for purpose 1 is the consent of the candidate in accordance with Article 6(1)(a) of the GDPR.

The legal basis for purpose 2 is Article 6(1)(f) of the GDPR, i.e. the existing legitimate interest pursued by PERSONALITY Group and/or the employer with respect to establishment, exercise or defence of legal claims asserting, defending and proving the legal claims of the PERSONALITY Group and/or the employers related to the recruitment process or the services provided by the PERSONALITY Group to the employer.

For purpose 3, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from Act 395/2002 Coll. on archives and registers and on the amendment of certain acts

Processing period

For the purpose personal data are processed for the period specified in the consent usually 3 years from the date of its granting or until the consent is withdrawn.

For the purpose under 2 the data shall be processed until the expiry of the limitation period for private law claims, i.e. for a maximum period of 4 years from the end of the recruitment process and, if any legal claims process has been initiated, then until the final conclusion of all proceedings and the recovery of all related claims.

For the purposes under point 3, the processing period shall be determined by the retention period of the record, determined by law or by the registration regulations, usually 5 years.

Categories of processors or other recipients of data:

The PERSONALITY Group provides personal data of applicants and candidates to third parties, which are natural or legal persons or institutions established in the European Union that search for or recruit employees or workers for vacancies or similar positions (hereinafter referred to as the "Employer"). The Employer is an independent controller within the meaning of the GDPR.

In addition, the PERSONALITY Group provides personal data of applicants and candidates to data processors who provide the PERSONALITY Group with services and activities related to the processing of personal data, which are in particular:

External personnel and contractors: Natural or legal persons established in the EU who provide the PERSONALITY Group with work or services related to its core business where personal data is or may be provided or processed, in particular external consultants and coordinators of the recruitment process, lectors, other persons coordinating the recruitments process or processing its results for the PERSONALITY Group.

Accounting, tax and legal advisors: natural or legal persons established in the EU who provide accounting, tax or legal advice to the PERSONALITY Group.

IT Services and IT Platforms: Individuals and legal entities usually based in the EU who are the authors, operators or administrators of electronic platforms or social networks through which PERSONALITY communicates with employers, applicants or candidates, conducts online seminars, online interviews or transmits or stores information are recipients of applicants' or candidates' personal data. Main contractual data processors for PERSONALITY Group are:

The operator of the RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610
The operator of the mailing server for email communication Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava, registered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 63270/B
Separate controllers whose conditions for the collection and processing of personal data are governed by their specific rules, such as in particular –
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google")
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (hereinafter referred to as "Hotjar")
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn")
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (hereinafter referred to as "Microsoft")
The Rocket Science Group LLC d/b/a Mailchimp, 512 Means St., Suite 404, Atlanta, Georgia, USA (hereinafter referred to as "Mailchimp")

Data Transfers

We do not transfer personal data outside of European Union member countries or to internationalal organisation.

Consent Withdrawal

If we process data on the basis of consent, you have the right to withdraw this consent at any time. You may withdraw your consent by email to data@personalityhr.com or by sending a notice by post to the Company's address. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal.

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

C. Individuals interested in webinar, online training or e-publication

Data Subjects: In this case the data subjects are individuals who have contacted PERSONALITY Group electronically, by telephone, in person, by letter or otherwise in response to an offer of a webinar, training, seminar or other educational or informational event (an "Event") or to request an e-publication.

What data we process, on what legal basis, for what purpose and for how long.

If you are responding to an offer of a paid or free webinar, seminar, training or other educational event organised by the PERSONALITY Group or request to receive an electronic publication, you will fill in the contact form with the following personal data: title, first name, last name, email, telephone number, profession, employer we will use this personal data for the following purposes:

1. Organisation of an Event: i.e. to allow you access in person or electronically to an event organised by the PERSONALITY group at the time and on the topic indicated in the form or event offer;

2. Consultation: if specified in the event offer, then also to provide you with a time- limited telephone or online consultation on the topic of the webinar

3. Delivery of requested content: With respect to e-publication we use data to deliver the requested publication to you.

4. Establishment, exercise or defence of legal claims of the PERSONALITY Group.

5. Tax and accounting purposes as determined by the applicable law in case of paid services/events, in extent of data required by such laws

6. Archiving, scientific research or statistical purposes.

By submitting the completed form and agreeing to the terms and conditions of the event, you enter into a contract for free or consultancy services paid (according to the terms and conditions of the event) with the company of the PERSONALITY Group organising the event, under which the company undertakes to give you access to the event, or to provide you with an personal consultation for a specified period of time after the event you have registered for, or to provide you with the information and educational publications produced by the PERSONALITY Group.

Legal basis

The legal basis for the processing of personal data of participants in an event for the purposes of points 1 to 3 above is Article 6(1)(b) of the GDPR, i.e. the fact that the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract with the participant and company from Personality Group organising the event or providing a content.

For the purpose of point 4, the legal basis is Article 6(1)(f) of the GDPR, i.e. the existing legitimate interest pursued by PERSONALITY Group with respect to establishment, exercise or defence of legal claims asserting, defending and proving the legal claims of the PERSONALITY Group.

For purpose 5, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from applicable tax and accounting laws.

For purpose 6, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from Act 395/2002 Coll. on archives and registers and on the amendment of certain acts

Processing period

For the purposes 1-3 the data is processed for the time necessary for fulfilment of obligations and liabilities relating to the respective event, publication or consultation

For the purpose under 4 the data shall be processed until the expiry of the limitation period for private law claims, i.e. for a maximum period of 4 years from the end of event, or completion of other services and, if any legal claims process has been initiated, then until the final conclusion of all proceedings and the recovery of all related claims.

For the purposes under points 5 and 6, the processing period shall be determined by the retention period of the record, determined by law or by the registration regulations, usually 5 years from the end of calendar year in which they were collected.

Categories of processors or other recipients of data:

The PERSONALITY Group provides personal data of applicants and candidates to third parties, which are natural or legal persons or institutions established in the European Union that search for or recruit employees or workers for vacancies or similar positions (hereinafter referred to as the "Employer"). The Employer is an independent controller within the meaning of the GDPR.

In addition, the PERSONALITY Group provides personal data of applicants and candidates to data processors who provide the PERSONALITY Group with services and activities related to the processing of personal data, which are in particular:

External personnel and contractors: Natural or legal persons established in the EU who provide the PERSONALITY Group with work or services related to its core business where personal data is or may be provided or processed, in particular external consultants and coordinators of the recruitment process, lectors, other persons coordinating the recruitments process or processing its results for the PERSONALITY Group.

Accounting, tax and legal advisors: natural or legal persons established in the EU who provide accounting, tax or legal advice to the PERSONALITY Group.

IT Services and IT Platforms: Individuals and legal entities usually based in the EU who are the authors, operators or administrators of electronic platforms or social networks through which PERSONALITY communicates with employers, applicants or candidates, conducts online seminars, online interviews or transmits or stores information are recipients of applicants' or candidates' personal data. Main contractual data processors for PERSONALITY Group are:

The operator of the RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610
The operator of the mailing server for email communication Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava, registered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 63270/B
Separate controllers whose conditions for the collection and processing of personal data are governed by their specific rules, such as in particular –
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google")
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (hereinafter referred to as "Hotjar")
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn")
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (hereinafter referred to as "Microsoft")
The Rocket Science Group LLC d/b/a Mailchimp, 512 Means St., Suite 404, Atlanta, Georgia, USA (hereinafter referred to as "Mailchimp")

Data Transfers

We do not transfer personal data outside of European Union member countries or to international organisation.

Consent Withdrawal

If we process data on the basis of consent, you have the right to withdraw this consent at any time. You may withdraw your consent by email to data@personalityhr.com or by sending a notice by post to the Company's address. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal.

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

D. Recipients of newsletters, recipient of marketing communication and notices

Data Subjects: Data subjects are persons that have consented to be included in the database for sending the newsletters, marketing communication and notices

What data we process, for what purpose on what legal basis and for how long:

Categories of personal data: provided by data subjects are first name, surname, email address, telephone number, or address, as the case may be.

Purpose is delivery of advertising and marketing notifications, offers and information and important notices of PERSONALITY Group

Legal basis for sending the marketing and advertising notification is data subject´s consent in accordance with Section 6 (1) a) of the GDPR.

Processing period is determined in the consent, usually 5 years unless withdrawn earlier.

Categories of processors or other recipients of data:

We operate marketing database with the cooperation of data processor: RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610

We may also process them with assistance of our external co-operators or provide them to our tax, accounting or legal advisors.

Consent withdrawal:

You have the right to withdraw the consent by email to data@personalityhr.com with the wording “I hereby withdraw the consent for marketing purposes.” Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal. The consent may be withdrawn also on the link provided in the advertisement or marketing notice.

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

E. Contractual partners of PERSONALITY Group, members of their statutory bodies or their contact persons

Data Subjects: Data subjects are individuals, that are the contractual partners of PERSONALITY Group or members of statutory bodies or contact persons of contractual partners of PERSONALITY Group.

What data we process, on what legal basis, for what purpose and for how long.

Purpose

We process the personal data of the contractual partners - individuals as well as members of the statutory bodies of the contractual partners and their contact persons for the following purposes:

1. For the purposes of preparation, conclusion and performance of the contract with the contractual partner;

2. For the performance of legal obligations (in particular under the Accountancy Act, the Income Tax Act and the Archives Act and other legislation)

3. Verifying the authorisation to act on behalf of the contractual partner and contacting the contractual partner with respect to individuals acting and communicating on behalf of the contractual partners (statutory officers, employees or contact persons under the contract) for the purposes of fulfilling contractual obligations under our contracts, contacting the contractual partners and registering the documents on which their data is stated in accordance with the law.

4. Establishment, exercise or defence of legal claims of the PERSONALITY Group (company from the group)

The legal basis for processing is for point:

Article 6(1)(b) of the GDPR, i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract with the contractual partner;

2. Article 6(1)(c) the legal obligation of the controller in cases where the law imposes an obligation to record or report the documents on which their personal data are contained, in particular the Income Tax Act and the Accountancy Act

3. Article 6(1)(f) of the GDPR the legitimate interest of the Personality Group in performing its contractual or legal obligations with respect to contractual partner or contacting the partner via its contact person with respect to personal data of contact partners

4. Article 6(1)(f) of the GDPR the legitimate interest of the Personality Group with respect to establishment, exercise or defence of legal claims.

Categories of data:

We process personal data in the scope of title, name, surname, function (position), telephone, email, or other contact data specified in the contract.

Processing period:

We process personal data for the duration of the contract in which it is included or for the performance of which it is used. After termination of the contract, we still process the personal data during the limitation period for claims (generally 4 years) in order to establish, exercise or defend legal claims or, if during such period proceedings have been commenced or are threatened, until such proceedings have been concluded and all claims have been fully resolved. Personal data on documents and papers subject to mandatory filing or archiving shall continue to be retained for the duration of the filing or archiving period.

Categories of data processors or other data recipients

We may process data with assistance of our external co-operators or provide them to our tax, accounting or legal advisors.

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

F. Website visitor - information about cookies

Data Subjects: Individuals – owners and/or users of computers and other electronic devices used for access to the websites of the Personality Group

https://www.personalityhr.com/

https://topheads.sk/

https://www.topheads.com/

https://techitpeople.com/

What data we process, for what purposes, on what legal basis and for how long

When you visit our website, small files - cookies - may be stored on your device. These serve either to ensure that the website functions correctly and optimally on your device (so-called essential cookies) or to enable the Personality Group to make statistical and analytical surveys about visitors to the website and their behaviour on the website (so-called optional cookies).

Legal Basis for essential basis is the legitimate interest of the Personality Group on proper functioning of the information website. For optional cookies it is the consent granted by the website visitor.

Categories of personal data, purposes in detail and data processors and recipients (other than Personality Group) and time of processing with respect to cookies are in this chart

Consent wording:

By clicking on the link or button “Accept all cookies“ the user of the electronic devices issues a consent to the joint controllers, companies of PERSONALITY Group: 1. Personality, s.r.o. with its registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID. No. 44 549 733, 2. Personality Leasing Services, s.r.o., with its registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID.NO.: 45 275 742 and 3. Personality HR Consulting, s.r.o., with its registered office in Rybná 716/24, 110 00 Prague 1, Czech Republic, ID.No 021 55 982 (hereinafter together referred to as the “Personality Group” or “we” with storage of cookies on its devices, by means of which Personality Group and other recipients listed in the chart below obtain and process data for the purposes and for the period of time set out in the chart below. Consent can be withdrawn at any time, to withdraw consent contact us by email at data@personalityhr.com or adjust the settings on your device. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal.

Not granting the consent/withdrawal of consent

If you do not wish to grant the consent, click the button “Show preferences“ and you can adjust storage of cookies individually. If you have granted the consent and wish to withdraw if, you can contact us by email on data@personalityhr.com

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

G. Other data subjects

If you do not belong into any of above categories or you are not sure, to which category you belong, but you assume that we process your personal data, please contact us by email on data@personalityhr.com

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company's address.

Your other rights

Right of access

You have the right to know which of your personal data we process, for what purposes and to whom we disclose it, as well as other information according to GDPR (right of access). If you would like this information or would like to obtain a copy of your personal data we process, please contact us at the address below. We may ask you to verify your identity and provide further information about your request before responding to your request. We will endeavour to respond within a reasonable period of time and in any event within the time limits set by law.

Right to request rectification and completion of your incomplete data

It is your responsibility to provide true, accurate and complete data that are up to date. You can also update your personal data by contacting us using the contact details below. You have the right to request that we correct your information if it is incorrect or to complete it if it is incomplete. Please remember to include your name, username (if it is an account) and postcode, or first name, last name and date of birth if it is data we process for the purposes of providing services, in your initial correspondence for such a case; this will help us to protect the details and preferences relating to your data from unauthorised access.

Right to restriction of processing

You have the right to restrict processing in cases determined by regulations, for example pending rectification or during an objection procedure, or in cases where data controller no longer needs the personal data but you need it to exercise your rights.

Right to erasure and right to be forgotten

You have the right to erasure in cases determined by the regulations, in particular in cases where the period or purpose for which we processed it has expired or the processing is unlawful, or you have successfully objected to the processing, unless this right is restricted by law.

Right to data transfer

If we process data by automated means on the basis of consent or contract, you have the right to data transfer (the right to obtain the data in a structured, commonly used, machine-readable format and the right to transfer it to another controller). If technically feasible, you can request that we transfer the data directly to the new controller.

Right to file a complaint

If you are dissatisfied with the way we have responded to the exercise of your rights or if you believe that we are processing your data in breach of the regulations, you have the right to File a complaint with the Office for Personal Data Protection of the Slovak Republic or with the competent authority of your usual place of residence or work.

Exercise of rights

You can exercise your rights at any time by emailing us at data@personalityhr.com , or by sending a notice by post to our address.

H: Provision of personal data electronically by persons under 16 years of age

If you are under the age of 16, please obtain your parent/legal guardian's permission before providing information to us through our website. Users without this permission are not authorised to provide us with personal data and if they do, we will stop processing their personal data as soon as we become aware of it.

1. Data Controllers.

2. Basic Data from the Joint Controllers’ Contract.

3. Information for different categories of data subjects and purposes of processing