The protection of personal data entrusted to us is very important. We do everything we can to make you feel safe with us. These Personal Data Processing Principles (hereinafter referred to as the „Principles“) are intended to explain how your personal data, which you provide to us when using our website www.trigon-consulting.sk (hereinafter referred to as the „website“), processed and protected. We also inform you about your rights regarding the processing of your personal data.
These Policies provide you with information about the general rules for processing personal data when using our website. Please note that the specific terms for processing your personal data depend on the purpose of processing. As the Operator, we process your personal data strictly in accordance with the principle of minimization, which means we do not require personal data from you that is not necessary for a specific and justified purpose of processing. We process your personal data only if there is a legal basis for their processing, and therefore they are processed in accordance with the principle of lawfulness.
1. Who we are and how you can contact us:
Our company TRIGON Consulting s.r.o., with its registered office at Kapitulská 12, 97401, Banská Bystrica, company ID: 43 932 282, registered in the Commercial Register kept by the District Court Banská Bystrica, Section Sro, Insert 14201/S. (hereinafter referred to as the „Operator“) operates a website.
When processing personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as „GDPR“) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts as amended (hereinafter referred to as the „Personal Data Protection Act“).
Operator's contact details are:
- Phone number: +421 947 901 800
- Email address: trigon@trigon-consulting.sk
- Address: Kapitulská 12, 97401 | Banská Bystrica
2. For what purposes do we process your personal data?
The specific purposes for processing your personal data, including the legal bases and retention periods, are listed in the table below.
| Purpose of Processing | Responding to messages and handling inquiries/requests from messages received by the operator via the contact form on the website, email communication, or by phone |
| Legal basis | Article 6(1)(f) of the Regulation |
| Categories of personal data | Name, surname, email, phone number, other details provided in the message |
| Retention period | 60 days from the date of receipt of the request or until the request is fulfilled (the purpose is met), whichever occurs first |
| Purpose of Processing | Selection process implementation (securing the selection of new employees) |
| Legal basis | Article 6(1)(b) of the Regulation |
| Categories of personal data | name, surname, email, work experience details, other personal data provided in the resume and/or cover letter |
| Retention period | during the selection process (i.e., no later than 90 days from the date of receipt of the resume and/or cover letter, if no employment or similar employment relationship is established) |
| Purpose of Processing | Handling of data subject rights requests |
| Legal basis | Article 6(1)(c) of the Regulation – processing of personal data is carried out in fulfillment of legal obligations |
| Categories of personal data | Standard personal data included in the data subject's request and necessary for its processing in accordance with applicable legal regulations |
| Retention period | For the exercise of the rights exercised within the meaning of the relevant provisions of the Regulation (maximum 120 days) |
| Purpose of Processing | Evidence of exercised rights of data subjects |
| Legal basis | Art. 6(1)(f) of the Regulation – processing of personal data is carried out on the basis of the legitimate interest of the Controller, which is the registration of the rights exercised by data subjects in order to demonstrate compliance with obligations arising from legal regulations |
| Categories of personal data | Standard personal data included in the data subject's request and necessary for its processing in accordance with applicable legal regulations |
| Retention period | 5 years following the day the right was exercised or the data subject's request was processed |
| Purpose of Processing | Processing of personal data for the purpose of website traffic measurement and advertiser targeting (through cookies) |
| Legal basis | Article 6(1)(a) of the Regulation |
| Categories of personal data | IP address, data about activity on the operator's website, data about online preferences, data about the type of browser and device used, data about the device's operating system, data about the network and subnet used |
| Retention period | For a maximum of 2 years from the date of consent or until revoked, whichever occurs first |
3. To whom does the Operator provide your personal data?
As the Operator, in certain cases, we are obligated to provide your personal data to public authorities that are authorized to process your personal data, e.g., courts, law enforcement agencies, as well as supervisory and inspection authorities (e.g., the Office for Personal Data Protection in the event of an inspection) (third parties).
We also provide your personal data to our processors, i.e. external entities that process your personal data on our behalf, as the Controller. Processors process personal data based on a contract concluded with us, as the Controller, in which they have undertaken to take adequate technical and security measures for the purpose of securely processing your personal data. Our processors include:
- Accounting, HR, and payroll service provider
- subject providing OSH and fire safety services,
- subject, a company providing services in the field of web development, programming, creation and modification of websites, and related IT services and online marketing services,
- Hosting service provider (including mail hosting services).
Recipients of your personal data also include Google Ireland Limited, which provides analytical and marketing services through cookies, which the website saves to your device if you consent to the saving of these files by the Operator. You can find information about cookies in the cookies section.
The specified company acts as a joint controller with the Operator in the processing of personal data, and the processing of personal data in this case is governed by a joint controllers' agreement pursuant to Article 26 of the Regulation, according to which the Operator is the contact point for handling your requests concerning the processing of personal data.
Transfer to Third Countries and International Organizations
If you give us your consent to store analytical and marketing cookies, your personal data may be transferred to the USA to Google LLC.
Your personal data transfer is secured using adequate measures for transferring personal data to third countries in accordance with Data Protection Regulations, particularly through the use of standard contractual clauses that are part of the terms of service for the aforementioned services, as well as through additional transfer safeguards that the providers of the aforementioned services implement. Transfers may occur only exceptionally, based on the relevant legal regulations applicable in the aforementioned third country (USA) that apply to the aforementioned service providers. Foreign Intelligence Surveillance Act.
In all cases mentioned, the transfer of your personal data is secured through standard contractual clauses, which, in accordance with the terms of use of the services mentioned, are part of data processing agreements concluded with the aforementioned entities.
4. Links to other pages
The website may contain links to our partners' websites and other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
5. How long do we keep data?
Your personal data is processed in accordance with legal requirements, meaning we do not store personal data longer than necessary for the purpose of processing.
If we process your personal data based on your consent, we process personal data for the period for which you have granted us consent to process your personal data or for the period necessary for the specific processing purpose.
If we process your personal data on the legal basis of contract fulfillment, we process personal data for the entire duration of the contractual relationship between us and you or for the period necessary for the respective processing purpose. If the contract is terminated, we proceed with the deletion of your personal data by default, unless your personal data can be processed on another legal basis.
If we process your personal data on the legal basis of fulfilling legal obligations, then we process personal data for the period specified by legal regulations.
If we process your personal data on the legal basis of our legitimate interest or the legitimate interest of third parties, we process personal data for the duration of the legitimate interest.
When processing personal data for participation in a competition organized by us to promote our products or services, this period is specified in the specific contest statute or competition terms and conditions.
6. What are your rights regarding the processing of personal data?
In relation to the personal data we process about you, you have several rights that you can exercise.
a) Right to access personal data
You have the right to access your personal data and obtain a copy of it. If we process your personal data, we will provide you with information about what data we process about you, for what purpose, to whom we have provided your personal data, whether it has been transferred to a third country, and how long we will retain this data. If you request a copy by electronic means, we will provide you with the information in a commonly used electronic format, unless you request otherwise.
b) Right to rectification of personal data
If your personal data is incorrect, you have the right to have it corrected. If it is incomplete, you have the right to have it completed. You can correct or complete your personal data in your Profile settings, or you can ask us to correct it.
c) The right to restrict processing of personal data
You have the right to restrict the processing of your personal data in cases specified by the GDPR, for example, until their correction (or verification of their accuracy), or if the processing of personal data is unlawful and you request restriction of their use instead of erasure. This also applies if we no longer need your personal data for the purpose of processing, but you need them to establish, exercise, or defend legal claims.
d) Right to erasure of personal data (right to be forgotten)
You have the right to have your data erased in cases specified by the Personal Data Protection Act, unless this right is restricted by legal regulations. The right to erasure shall apply, for example, if your personal data are no longer necessary for the purposes for which they were collected, or if you withdraw your consent to the processing of your personal data and there is no other legal basis for their processing.
e) Right to data portability
If we process your data based on your consent or a contract and the processing of personal data is carried out by automated means, you have the right to data portability (the right to obtain data in a structured, commonly used, machine-readable format and the right to transfer it to another controller).
f) The right to withdraw consent
If we process your personal data based on your consent, you have the right to withdraw your consent to the processing of personal data at any time.
g) The right to file a data protection proceeding
If you feel your rights have been violated, you can file a proposal for personal data protection proceedings with the Office for Personal Data Protection of the Slovak Republic, under Section 100 et seq. of the Personal Data Protection Act.
h) The right to object to the processing of personal data
In accordance with Section 27(3) of the GDPR, we expressly inform you of your right to object to the processing of your personal data, (i) on grounds relating to your particular situation, carried out pursuant to Section 13(1)(e) (processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller) or (f) (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party) of the GDPR, including profiling based on these provisions, and (ii) for direct marketing purposes, including profiling, insofar as it relates to direct marketing.
Regarding the purpose of personal data processing, we will inform you in more detail about your rights related to such processing.
7. Children's Privacy
Our services are not intended for persons under 16 years of age. If you are under 16, please ask your legal guardian (parent) for consent to process personal data. If we discover that we have obtained personal data from persons under 16 years of age without parental consent verification, we will take steps to delete such information from our servers and databases.
8. How can you contact us?
If you have any questions regarding the processing of your personal data, you can contact us at the above-mentioned email address, or by mail at Dravce 224, 98532 Panické, Slovak Republic. We respond to requests in written or electronic form, generally in the same form in which the request was submitted.
Information on measures taken based on your request under Sections 21 to 28 of the Protection of Personal Data Act will be provided to you within one month of the application's delivery. However, in justified cases, we may extend this period by another two months due to the complexity and number of requests, and this may be repeated. We will inform you of each such extension within one month of the application's delivery, along with the reasons for the extension.
Information according to § 19 and 20 of the Protection of Personal Data Act and notifications and measures taken according to § 21 to 28 and 41 of the Protection of Personal Data Act are generally provided free of charge. However, if your request is manifestly unfounded or excessive, particularly due to its repetitive character, we may:
- to request an adequate fee considering the administrative costs of providing the information, making the notification, or carrying out the requested measure; or
- Refuse to act on a request.
9. Change of Personal Data Processing Terms
We may change these Terms from time to time (especially in the event of technological changes, if we have added new website features or changed existing ones, or in the event of changes in legislation). The latest and current version of the Terms will always be published on the website, including its effective date.
By using the website after the effective date of such changes, we consider you to have familiarized yourself with the change in Terms and their current version valid at the time of using the website.
10. Validity
These Terms are valid and effective as of 10/07/2024. Given that updating the personal data processing information contained in these Terms may be required in the future, we are entitled to update these Terms at any time. However, in such a case, we will inform you accordingly.
Slovenčina 
English