In accordance with the obligation to inform data subject about the personal data processing the non – profit organization
EDYN, n.o.
Seated: Palisády 29, 811 06 Bratislava – Old Town, Slovak Republic
ID: 53493923
Email: [email protected]
Phone number: +421 944 209 195
as a controller would like to inform you that based on the Regulation EU 2016/679 of European parliament and the Council of 27 April 2016 on the protection of natural persons with to the processing of the personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the „Regulation“), as well on the Act no. 18/2018 Coll. on the personal data protection (hereinafter referred to as the „Act“) the GDPR EDYN Handbook was issued (hereinafter referred to as the „GDPR Handbook“).
Personal data is defined in the art. 4 of the Regulation and in § 2 of the Act and means any information relating to an identified and identifiable natural person, who can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing of personal data is defined in the art. 4 of the Regulation and in § 5 letter e) of the Act and means operation or set of operations which is performed on the personal data, such as collection, recording, organization, adaptation, searching, deleting, liquidation, whether or not by automated means.
Personal data processing is related to the data subject, i. e., the person whose personal data are processed. EDYN pays attention to the privacy protection when processing the personal data with the due care and in accordance with obligation under applicable laws. Access to the personal data is granted only to persons authorized by the controller which process the personal data on the basis of the controller’s instructions.
EDYN defined the following data subjects whose personal data are processed:
The Controller prepared and issued the internal documentation on the processing and protecting the personal data which is available to employees, members of institutions and the EDYN members. Further EDYN alerted the employees with the access to the personal data to process the personal data in accordance with principles, personal data protection policy, instructions, and with the security, organizational, personnel and technical measures of the Controller.
The ControlLer hereby informs data subjects on the process of the personal data:
| Purpose | Legal basis | Explanation |
| Personnel purposes – keeping records of the persons in the contractual relationship | Legitimate interest pursuant to Art. 6 sect. 1 let. b) of the Regulation | Personal data are necessary for proper and valid conclusion of the contract |
| Control mechanisms of the business partners and their employees | Legitimate interest pursuant to Art. 6 sect. 1 let. f) of the Regulation | In some case Contractual partners and their employees may be subject to a control mechanism in order to ensure the proper and efficient performance of the contract, e. g. the confirmation the goods or services delivery by relevant business partner employee. |
| Business communication with contractual partner employees and members and/ or other persons in the similar position | Legitimate interest pursuant to Art. 6 sect. 1 let. f) of the Regulation | Legitimate interest on the efficient communication with the EDYN contractual partners and other persons in the similar relationship with EDYN, as well as on the conclusion of the contract and efficient performance hereof. |
| Fulfillment of the EDYN contractual obligations towards the third subject | Legitimate interest pursuant to Art. 6 sect. 1 let. f) of the Regulation | EDYN has concluded contracts with the international organizations which support the EDYN activities financially and further to work to develop the EDYN’s purposes fulfillment. In order to comply with its contractual obligation, EDYN is obliged to inform these organizations on its activities and among other things on the contractual partners. |
| Photos and audiovisual records | Express and proven consent pursuant to Art. 6 sect. 1 let. a) of the Regulation | Legitimate interests are EDYN promotion, marketing, advertising not only within internal working environment, but also to the public. |
| Demonstrating, asserting defending the legal claims (legal agenda) | Legitimate interest pursuant to Art. 6 sect. 1 let. f) of the Regulation | EDYN may turn to the relevant public authorities, law enforcement bodies and/ or courts in order to protect its property, rights and legally protected interests. |
Registered data: basic personal data – title, name, surname, permanent residence address (delivery address), sex, citizenship, date of birth, bank account, alternatively: business name, registered seat, ID, registration, name and surname of the representative, job position, email address, phone number, special categories: political opinions, belonging to a national, ethnic, and racial minority are processed in accordance with § 16 sect. 2 letter d) of the Act and the article 9 sect. 2 letter d) of the Regulation.
Recipients’ category and transfer to the third countries: In special cases the transfer of the personal data may take place, EDYN carries out international transfer on the basis of an exception for the specific situation in accordance of the Art. 49 of the Regulation in compliance with all legal conditions.
The international personal data transfer to the third countries that do not guarantee an adequate level of the personal data protection in the use of services of various recipients of personal data occurs mainly from the following categories i) social networks operators (Facebook, Instagram, LinkedIn, etc.), ii) security services (Windows defender), iii) web analytics and implementation in EDYN websites iv) contractual performance of EDYN’s obligations in relation to international organizations.
The international personal data transfer may occur on the basis of the standards contractual clauses approved by the European Commission, or in other special events the international personal data transfer occurs on the basis of the exception for special situation within of the Art. 49 of the Regulation.
Time of processing the personal data: Duration he contractual relationship and 4 years after its termination, for accounting and tax office requirements 10 years,
Purpose of the processing: protection of the EDYN property, operation of the functional website its content and services
Legal basis:
Registered data: basic personal data and ID document to view, video recording of movement around the EDYN seat, IP address, date and time of the access to the website, the browser or operating system used
Recipient’s category: in case of criminal offense or other application of rights protection and EDYN legally protected interests – police of the Slovak Republic, prosecutor’s office, lawyers, executors, courts of the Slovak Republic, other public authorities
Transfer to the third countries: may happen to the USA
Time of processing the personal data: personal data will be deleted or blocked immediately the purpose of their processing is met, max. 15 days.
Purpose of the processing: keeping the records of the jobseekers and candidate of the membership
Legal basis:
Registered data: basic personal data contained in curriculum vitae, motivation letter and application, special categories of personal data: political opinions, belonging to a national, ethnic, and racial minority are processed in accordance with § 16 sect. 2 letter d) of the Act and the article 9 sect. 2 letter d) of the Regulation.
Recipient’s category: The authorized employees or with verified third party
Transfer to the third countries: may happen to the USA
Time of processing the personal data: until the selection procedure is ended, or in accordance with the Consent.
COOKIES POLICY OF EDYN WEBSITE: All information about the EDYN cookies policy can be found at https://edyn.eu/cookie-policy/
EDYN Social networks:
Meta Platforms Ireland Limited., seated: 1601 South California Avenue, Palo Alto, CA 94304, USA (hereinafter referred to as „Facebook“). Facebook may associate your website visit with your user account. Facebook stores the information obtained about you as user profiles and uses it for its own advertising purposes, market research and / or customization of its services and tools for registered users. Such evaluations are carried out in particular to inform other Facebook users about your activities on EDYN website.
You have the right to object to the creation of such user profiles but you must contact Facebook. For more information on the purpose, scope of data collection and processing through Facebook, please refer to the Facebook Privacy Statement at the following link: https://www.facebook.com/policy.php.
The company LinkedIn Corporation, seated: 1000 W Maude Ave Sunnyvale (HQ), California, USA, may processed your personal data. More information about can be found in the privacy policy LinkedIn as well as in the essential parts of the joint operators’ agreement available at this link: https://legal.linkedin.com/pages-joint-controller-addendum.
It’s part of Facebook. See the Instagram privacy policy available at this link for more information https://help.instagram.com/519522125107875/?maybe_redirect_pol=0.
Social network Twitter, Inc., seated: 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. EDYN has no influence or control over the personal data processing by the Twitter. For more information see the privacy policy on the personal data processing at this link: https://twitter.com/privacy?lang=en
Data subject rights:
Right to information:
The data subject has the right to be informed about the purposes of the personal data processing, the categories of personal data processed, the recipients of such personal data, the retention period of personal data, the rights of the data subject, the origin of personal data as well as automated decision-making.
Right to access of personal data:
The data subject has the right to provide copies of the personal data EDYN has about him/her, as well as information on how EDYN uses personal data. Personal data will be provided to the data subject in writing, if the data subject does not request another method of providing. In the case the data subject requested to provide such data in electronic form, EDYN will provide this data electronically.
Right to rectification:
As the Controller, EDYN takes appropriate technical and organizational measures to ensure the accuracy, completeness and timeliness of the data EDYN processes. In case you think that the personal data are inaccurate, incomplete or out of date, you have the right to modify, supplement or update them.
Right of erasure (right to be forgotten):
The data subject has the right to request the deletion of personal data in the case the personal data processed by EDYN, have no longer been necessary for the mainly purpose. This right is not absolute and needs to be assessed in the light of the relevant circumstances. In the event EDYN still has legal and regulatory obligations to retain personal data, EDYN will not be able to comply with the request.
Right to restrict processing:
In certain circumstances, the data subject is entitled to require EDYN to stop processing his or her personal data, for example if you think that the personal data processed by the Controller may be incorrect, inaccurate or no longer need to be processed.
Right to data portability:
The data subject has the right to request the transfer of provided personal data to the third party of his/her choice. This right applies only to personal data that EDYN has processed on the basis of the consent or on the basis of the contract.
Right to object the processing:
The data subject has the right to object to the processing of personal data. If you think that EDYN has no legitimate reason to process personal data and you object the processing, EDYN will not further process your personal data unless there are compelling reasons that outweigh your interests, rights and freedoms, or in the case the personal data processing serves to assert, enforce or defend legal claims.
Right to file a complaint to the supervisory authority (personal data protection):
In case, you believe that your rights regarding the personal data protection ohave been violated, you can file a complaint to the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, phone number: +421/2/3231 3214, e-mail: [email protected], https://dataprotection.gov.sk.
Right to withdraw the consent:
In cases EDYN processes personal data on the basis of the consent, the data subject has the right to revoke the consent anytime. The consent may be revoked electronically by e-mail address, in writing by notice of the consent revocation or in another manner equivalent to the consent.
Right to compensation:
In the event you think that EDYN action is in the conflict of the Act and therefore you have suffered material or non-material damage, you have the right to compensation for damages against the Controller in accordance with the provisions of the Civil Procedure Code.
In accordance with the principle of minimizing the personal data retention within the meaning of § 10 of the Act 18/2018, all provided personal data are a necessary legal or contractual requirement to fulfill the purpose of their processing. Failure to provide the mandatory data necessary to conclude the contract with the Controller may result in the non-conclusion of the contractual relationship.
The personal data protection is EDYN duty. EDYN is obliged to protect personal data in an appropriate manner and therefore EDYN pay due attention to such protection. EDYN has implemented generally accepted technical and organizational standards in order to maintain the security of personal data processed, mainly against its lost, misuse, unauthorized modification or other impact on the rights and freedoms of data subject.
The personal data protection is very important for EDYN. Information EDYN are required to provide you with respect to personal data processing may modify and become out of date. EDYN reserve the right to modify and change conditions of the personal data protection to any extent and at any time. In the event EDYN change these conditions in a significant way, EDYN will bring such change to your attention, e. g. by general notice on EDYN website or by special notice by email. If you have any queries or requests contact EDYN by email: [email protected].
GDPR Information_ business partners and other subject in the contractual relationship