I. Operator:

ALSES Medical, Ltd.
Central 632/7
08901 Svidník
VAT number: 36697354
(hereinafter referred to as "Operator")

II. Responsible person:

Individuals concerned may direct their comments and requests regarding the processing of personal data to Bc. Alena Štefanisková, either in writing or in person at the following address:

III. The operator processes personal data for the following purposes:

• a. Sending job offers via email, through Facebook, or by phone, based on prior interest.
• b. Submitting a resume form to a potential employer
• c. Processing of personal data for the purpose of signing an employment contract or a placement contract, agreement for placement based on prior consent to the job offer

IV. Processing time of personal data:

a. 10 years of processing personal data for purposes according to section III letters a), b), c), d)

V. Legal requirements:

The processing of personal data according to section III letter d) is a legal requirement. Without granted consent, it is not possible to process the personal data of participants. The processing of personal data according to section III letter d) is necessary for the conclusion of a contract. If the affected person does not provide their personal data, it is not possible to conclude an employment contract, a mediation contract, or a brokerage agreement.

VI. Right to access data:

The data subject has the right to access their data. Upon request from the data subject, the operator shall provide confirmation as to whether personal data concerning the data subject is being processed. If the operator is processing this data, they shall provide a copy of the personal data concerning the data subject upon request.

VII. Fees for copies:

The issuance of the first copy according to paragraph VIII is free of charge. For any additional copies requested by the individual, the operator will charge a fee corresponding to the administrative costs incurred in issuing the copy. If the individual requests information via electronic means, it will be provided in a commonly used electronic format, namely via email, unless a different method is requested.

VIII. Right to rectification:

The data subject has the right to rectification of personal data if the operator holds incorrect personal data about them. The data subject also has the right to complete incomplete personal data. The operator will rectify or complete the personal data without undue delay after the data subject requests it.

IX. Right to Erasure:

The affected person has the right to request the deletion of personal data concerning them, provided that:

• a. personal data is no longer necessary for the purposes for which it was obtained or otherwise processed;
• b. the affected person withdraws consent on the basis of which the processing is carried out,
• c. the affected person objects to the processing of personal data according to section XVIII,
• d. personal data was processed unlawfully,
• e. is the reason for deletion the fulfillment of a legal obligation, a specific regulation, or an international treaty to which the Slovak Republic is bound, or
• f. Personal data was collected in connection with the provision of information society services to individuals under the age of 16.

X. Restrictions on the right to erasure:

The affected person shall not have the right to erasure of personal data provided that their processing is necessary:

• a. to exercise the right to freedom of expression and information;
• b. to fulfill the obligation under the law, a special regulation, or an international treaty to which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
• c. for reasons of public interest in the field of public health,
• d. for archival purposes in the public interest, for scientific or historical research, or for statistical purposes, provided that the right to erasure is likely to prevent or significantly hinder the achievement of the objectives of such processing, or
• e. for the assertion, application, or defense of legal claims.

XI. Execution of deletion:

The operator will delete the personal data of the affected individuals upon request, without undue delay, after evaluating that the request of the affected individual is justified.

XII. Right to restrict processing:

The affected person has the right to restrict the processing of personal data, provided that:

• a. the correctness of personal data is challenged according to paragraph XVIII, during a period allowing the operator to verify the correctness of personal data;
• b. Processing is unlawful, and the affected person requests a restriction on the use of their personal data instead of deletion.
• c. the operator no longer needs personal data for processing purposes, but the affected person needs it to demonstrate, assert, or defend legal claims;
• d. The affected person objected to the processing of personal data based on the legitimate interest of the operator, until it is verified whether the legitimate reasons of the operator outweigh the legitimate reasons of the affected person.

XIII. Limitation of processing operations:

If the data subject requests a restriction on the processing of their personal data, the operator will not carry out any processing operations with the affected data, except for storage, without the consent of the data subject.

XIV. Notification of the lifting of restrictions:

The affected person will be informed by the operator if the restriction on processing this data is lifted.

XV. Right to data portability:

The data subject has the right to data portability, which means obtaining personal data provided to the operator, with the right to transfer this data to another operator in a commonly used and machine-readable format, provided that the personal data was obtained based on the consent of the data subject or on the basis of a contract and that its processing is carried out by automated means.

XVI. Right to object:

The data subject has the right to object at any time to the processing of their personal data on grounds relating to their particular situation. The data subject may object to the processing of their personal data based on:

• a. legal title for the performance of tasks carried out in the public interest or in the exercise of public authority, or from the legal title of the legitimate interest of the operator,
• b. processing of personal data for direct marketing purposes,
• c. processing for scientific or historical research purposes or for statistical purposes.

XVII. Cessation of processing upon objection:

If the data subject objects to the processing of personal data for direct marketing purposes according to point XVIII letter b), the controller may not further process their personal data.

XVIII. Assessment of the objection:

The operator will assess the submitted objection in a timely manner. The operator must not further process personal data unless it demonstrates necessary legitimate interests in processing personal data that outweigh the rights or interests of the data subject, or reasons for asserting a legal claim.

XIX. Withdrawal of consent:

The affected person has the right to withdraw their consent to the processing of personal data at any time, provided that the processing of personal data was based on this legal title.

XX. Method of revocation of consent:

The affected person may withdraw their consent by contacting the responsible person with their request in any chosen manner.

XXI. Legality of processing:

The legality of processing personal data based on the granted consent is not affected by its withdrawal.

XXII. Right to complain:

The affected person has the right to file a proposal to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic if they believe that their rights in the area of personal data protection have been violated.