Privacy Policy

1. Who is this document for?

this document regulates the data protection policy of N+F Slovakia, s.r.o. , Vlčie hrdlo 1, 824 12 Bratislava, registered in the Commercial Register of the District Court Bratislava I, Entry No.: 89453/B, ID No.: 45 254 273 (hereinafter referred to as "N+F Slovakia, s.r.o." or the "Controller"), and in particular on the rules for the acquisition, collection, storage, dissemination, retention and security of personal data.

-Employees, former employees and their close relatives
-Jobseekers
-Suppliers
-Clients

The operator has a designated responsible person, which is Avris Consulting, s.r.o., Kutlíkova 17, Bratislava 851 02, ID No.: 35 962 844, gdpr@avris.sk. Questions, comments and requests regarding this document and the information contained herein are accepted by the controller at the email address nuf@nuf.eu or directly from the responsible person via the email address gdpr@avris.sk.

2. Which basic terms does the document use?

We would like to start by introducing you to the basic concepts contained in this document that will help you to better understand it. Personal data - any information relating to an identified or identifiable natural person, such as name, surname, date of birth, birth number, telephone number, email address, IP address, etc.
Data subject - the natural person to whom the personal data relates.
Processing of personal data - the activity that a controller or processor carries out with personal data.
Controller - the natural or legal person who determines the purpose and means of the processing of personal data; the controller may entrust the processing to a processor.
Processor - a natural or legal person, public authority, agency or other entity that processes personal data for the controller on the controller's behalf. Responsible person - a natural or legal person designated by the controller or processor to carry out activities related to the protection of personal data.
Purpose - the reason why the controller processes personal data.
Special categories of personal data - sensitive personal data that are specific in nature, such as health data or biometric data allowing the identification of a person.
Legitimate interest - an interest of the controller or also of another entity which gives rise to the need to process personal data where it overrides the interests of the data subject, for example where the data subject is a customer of the controller.
Profiling - any automated processing of personal data which is used to evaluate particular personal circumstances, for example, online behaviour and online shopping.
Cookies - small data files that are stored in a special browser clipboard on the user's computer and are essential for some website functions such as logging in and are often used to track user behaviour on the web, their use can be disabled in most web browsers.
Recipient - the natural person, legal entity, public authority or other entity to whom personal data is provided.
Product - any of the products we offer and sell.
Service - any of the services we offer to you, that is, our products and services offered online and their support.

3. What rights do data subjects have?

N+F Slovakia, s.r.o. emphasizes respect for the rights of the data subjects. Data subjects have the following rights:
Right to information
Every data subject has the right to information about the processing of his/her personal data. To this end, appropriate measures are taken to ensure that this information is duly provided to data subjects. N+F Slovakia, s.r.o. fulfils its information obligation by means of this document, which will be permanently published on https://www.nuf.eu/. Right of revocation of consent. If the data subject has given consent to the processing of his or her personal data, he or she may withdraw it at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal. Consent can only be given by a job applicant; all other processing activities are carried out on a legal basis other than a contract, law or legitimate interest.
Right of access to data
Upon the request of the data subject, N+F Slovakia, s.r.o. will issue a confirmation of the processing of his/her personal data, as well as all information required by applicable legislation.
Right to rectification
The data subject has the right to have his/her personal data processed correctly and up-to-date. N+F Slovakia, s.r.o. carries out the updating of the data at the request of the data subject or after verification of the data in communication with the data subject.
Right to erasure
The data subject may request the erasure of his or her personal data under certain conditions. N+F Slovakia, s.r.o. will comply with this request or inform the data subject why it cannot delete the data.
Right to restriction of processing
The data subject may request restriction of the processing of personal data under certain conditions.
N+F Slovakia, s.r.o.r.o. shall comply with this request or inform the data subject why it cannot restrict the processing of his or her data.
Right to data portability
N+F Slovakia, s.r.o. shall transfer the personal data to another controller only at the request of the data subject. Right to object
The data subject shall have the right to object to processing of his or her data in certain circumstances.
Right to lodge a complaint or lodge a complaint with the Office for Personal Data Protection
The data subject may, at any time, lodge a complaint or lodge a complaint regarding the processing of personal data with the supervisory authority, namely the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, ID No.: 36 064 220, tel. no.: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/.

4. How can data subjects exercise their rights with N+F Slovakia, s.r.o.?

The data subject may exercise his/her rights in writing:
-by postto the address of the controller: Vlčie hrdlo 1, 824 12 Bratislava
-by e-mailto the address: nuf@nuf.eu
The application for exercising the rights of data subjects is available HERE.
N+F Slovakia, s.r.o. will register and process each application without undue delay, within one month at the latest. Within this period, it shall inform the data subject who made the request of the measures taken on the basis of his/her request. That period may be extended by a further two months if necessary, taking into account the complexity of the request and the number of requests. The controller shall inform the data subject of the extension of the time limit within one month of the submission of the request, together with the reasons for missing the time limit.
The notification of the manner in which the request is handled shall be made in the same manner in which the request was submitted, unless the data subject has requested a different manner.
N+F Slovakia, s.r.o. shall handle requests from data subjects free of charge. However, if the data subject's request is manifestly unfounded or repetitive, the N+F Slovakia, s.r.o. may, for the processing of the request:
a reasonable fee taking into account the administrative costs, refuse to act.

5. Who can have access to personal data?

The personal data processed by N+F Slovakia, s.r.o. may be accessed in particular by:
external companies managing systems or other services ensuring the proper operation of N+F Slovakia, s.r.o., IT service providers, suppliers of accounting services, SLOVNAFT, a.s, Vlčie hrdlo 1, 824 12 Bratislava, ID no: 31 3222 832 - operator of the control system, the task of which is to ensure unambiguous registration, registration of authorised entries into the building and performance of works in the building, including the security literacy records required by the applicable legislation
, identification and verification as the only authentication method ensuring the non-repudiation of an individual entering a facility of special importance of an economic mobilisation entity and a facility with increased danger to life and health caused by the effects of petrochemical production, with the aim of reducing or completely eliminating the risk arising from possible unauthorised intrusion into the facility, and preventing the activities of unauthorised individuals and groups in the company's facility that could undesirably affect economic and organisational activities in the State in times of security.

6. How is personal data protected at N+F Slovakia, s.r.o.?

N+F Slovakia, s.r.o. consistently ensures the protection of personal data. To this end, it has adopted appropriate technical, organisational and security measures taking into account the risk involved, the nature of the processing, the state of the art and the cost of adopting these measures.
N+F Slovakia, s.r.o. protects personal data by appropriate and available means against misuse. In doing so, it primarily stores personal data in premises, locations, environments or systems to which access is restricted, predetermined and at all times
controlled by a limited, predefined circle of persons. N+F Slovakia, s.r.o. carries out an evaluation of the procedures for handling and processing personal data once a year. A brief record of the evaluation, the so-called evaluation report, shall be made. If any procedures are found to be outdated, unnecessary or unproven, they are corrected without delay.
N+F Slovakia, s.r.o. immediately addresses any security incident involving personal data. If the incident is likely to result in a high risk to the rights and freedoms of natural persons, it shall always inform the data subject and tell him or her what measures it has taken to remedy the situation. A record shall be kept of each incident. N+F Slovakia, s.r.o. shall inform the Office for Personal Data Protection of the Slovak Republic of any serious incident.

7. Further information for specific data subjects:

-Employees, former employees and their relatives
-Job seekers
-Suppliers
-Clients

8. Relevance of the document

This document is up to date as of 19.10.2020.
The owner of the document is N+F Slovakia, s.r.o. and at least once a year it checks its validity and up-to-dateness.