Privacy Policy

Giving the consent to the processing of personal data

If I tick the box “I accept the Privacy policy” then I, such as the Data Subject, give my consent to the processing of my personal data to the following extent:

You, such as the Data Subject, will provide your personal data through your resume, questionnaire, or other means (for example, filling in an electronic form).
In this case, the Controller is authorized to process the following personal data (depending on which personal data I entered in the questionnaire or other document):
a) First name, last name, title;
b) Date of birth and permanent residence address;
c) Temporary residence address (if relevant);
d) The highest education and practice;
e) Experience gained (information of previous employers, previous working positions I have worked on, length of employment);
f) Information about my authorizations (forklift license, welding card, etc.);
g) Phone number and e-mail address;
h) IP address;
i) The other data I mentioned in the questionnaire, respectively in the resume, e.g. the photo;
(hereinafter referred to as the “personal data”).
Information for data subject who is a job seeker
Dear Data subject, i.e. the person whose personal data are processed by us.
We hereby provide you with basic information on the processing of your personal data as well as your rights relating to the processing of your personal data.
Definitions:
Recipient
Personal data recipient means any entity, to which our company discloses the personal data, i.e. any person who will have the access to your personal data by means of our company.

Data Protection Officer
The data protection officer is the person who oversees the protection of personal data of the individual data subjects (including also your personal data) in the company that processes your personal data. You, such as the Data Subject, may contact the Data Protection Officer with any questions concerning the processing of your personal data and the exercising your rights under the Data Protection Regulation. Your rights under the Data Protection Regulation are described in detail below.

Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, to analyze aspects concerning a natural person. The result of profiling is mainly to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
Substantially, it is the way of processing personal data, based on which the processed personal data are used to create the data subject´s profile by means to predict behavior or personal preferences of data subject.

Automated individual decision-making
Automated individual decision-making is the way in which a certain computer program decides on the rights and obligations of the data subjects, basically decision is made without a human factor, respectively the human factor only sets the rules on which the programmed computer program then decides.

Legitimate ground
The legitimate ground for the processing means the legitimate reason on which is our company, such as the Controller, authorized to process your personal data.

Controller´s identity
The Controller, it means the company processing your personal data, is as the Joint controllers under Art. 26 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
The Main Controller is company Cassa Game Industry s.r.o., with registered Head Office at: Ružová 14, 044 20 Malá Ida, Slovak Republic.
The following companies are Auxiliary Controllers:

Main Controller´s contact data:
You can contact our company in writing both, by a postal correspondence sent to the address of company´s Head Office at Ružová 14, 044 20 Malá Ida, Slovak Republic. or by an e-mail addressed to our company e-mail: info@cassagi.com
We will inform you of any change in contact data by e-mail sent to your e-mail address that you entered when providing your personal data. Current contact data can be found on web page https://cassagi.com/privacy-policy/.

Data Protection Officer´s contact data:
The Data Protection Officer is a legal department of the company Cassa Game Industry s.r.o.. You can contact the Data Protection Officer in writing both, by a postal correspondence sent to the address: Ružová 14, 044 20 Malá Ida, Slovak Republic, with a note that shipment is addressed to the Data Protection Officer or by an e-mail addressed to e-mail: info@cassagi.com
We will inform you of any change in contact data by e-mail sent to your e-mail address that you entered when providing your personal data. Current contact data can be seen at website https://cassagi.com/privacy-policy/

The purposes of the processing for which the personal data are intended:
Searching and offering various job opportunities for the data subject, consisting of in particular:
a) Recruitment for potential employers in the form of paid employment (i.e. employment directly in the staff status of a potential employer);
b) Recruitment for potential employers in the form of temporary staff;
c) Recruitment for potential employers in the form of seasonal work or part time jobs;

Legitimate ground of processing:
We process your personal data based on the following legitimate ground:
a) The consent of Data Subject, which means that we process your personal data based on the consent you provided to our company, such as the Controller.

Personal data recipients or category of recipients:
The categories of recipients are, in particular:
a) The business partners of the Controller looking for workforce, which from your point of view, such as the Data Subject means, the potential employers or user employers.
The current list of recipients respectively category of recipients is disclosed at website https://cassagi.com/privacy-policy/

Information on whether our company intends to transfer your personal data to third countries or to an international organization:
Our company does not intend to transfer your personal data to third countries (i.e. countries outside the European Union) or to an international organization.

Duration of personal data storage:
120 months

Information on whether the collection of personal data is a legitimate or contractual requirement or a requirement necessary to conclude the contract, whether the data subject is obliged to provide personal data, and the possible consequences of not providing such data.
You, such as the Data subject, are not obliged to provide us with our personal data, but since the purpose of processing your personal data is especially the provision of job offers for your person, without providing your personal data, our company would not really be able to fulfill this purpose, and that way would not offer you any job.

Information on the existence of automated individual decision-making, including profiling + information on the procedure used, the significance and the expected consequences of such processing for the data subject.
Our company, such as the Controller, does not use your personal data for profiling. Our company, such as the Controller, does not use automated individual decision-making.

Your rights as the Data Subject related to personal data protection

1. The right of access to personal data:

1.1. You, such as the Data subject, shall have the right to obtain from the Controller (it means our company) confirmation as to whether personal data concerning you are being processed.
1.2. If we process your personal data, you shall have the right to obtain the access to the processed personal data concerning you and you shall have the right to our company provide you with the following information of data process concerning you:
a) Information on the purpose for which we process your personal data;
b) Information on the categories of personal data concerned;
c) Information on the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) Where possible, information on the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) Information on the existence of your right to request from the Controller (it means our company) rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) Information on the right to lodge a complaint with a supervisory authority;
g) Information, where your personal data are not collected from you, you shall have the right to any available information as to their source;
h) Information on whether we use automated decision-making, including profiling, and if we use automated decision-making, we shall provide you at least meaningful information about the procedure used, as well as the significance and predicted consequences of such processing.
1.3. If we transfer your personal data to a third country or to an international organization, you shall have the right to be informed of the appropriate safeguards relating to the transfer (it means the way of your personal data protection in the third countries).
1.4. Our company, such as the Controller, is obliged to provide you a copy of your personal data undergoing processing. For any further copies requested by you, such as the Data Subject, our company, such as the Controller, may charge a reasonable fee based on administrative costs. Where you, such as the Data Subject, make the request by electronic means, and unless otherwise requested by you, such as the Data Subject, the information shall be provided in a commonly used electronic form (it means we will provide you information by e-mail sent to your e-mail address that you provided in your application).

2. The right to rectification of personal data:

2.1. You, such as the Data Subject, shall have the right to obtain from our company, such as the Controller, without undue delay the rectification of inaccurate personal data concerning you. Considering the purposes of the processing, you, such as the Data Subject, shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
2.2. Our company, such as the Controller, is obliged to notify every recipient to whom the personal data were disclosed of each rectification of personal data, unless this is shown to be impossible or requires excessive effort. If you, such as the Data Subject, request such information, our company, such as the Controller, will provide you with information of recipients that our company is required to inform.

3. The right to erasure of personal data (“right to be forgotten”):

3.1. You, such as the Data Subject, shall have the right to obtain from our company, such as the Controller, the erasure of personal data concerning you without undue delay. Our company, such as the Controller, shall have the obligation to erase your personal data without undue delay where one of the following grounds applies:
a) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) If processing of your personal data is based on the legitimate ground of your consent and you, such as the Data Subject withdraw consent on which the processing is based, and where there is no other legal ground for the processing;
c) Exercise as the Data Subject your right to objects to the processing of personal data pursuant to Point 5;
d) Your personal data have been unlawfully processed;
e) Your personal data must be erased for compliance with a legal obligation in the European Union or Slovak law;
f) The personal data have been collected in relation to the offer of information society services, whereby the personal data of a child are processed.
3.2. Where our company, such as the Controller has made your personal data public and we are obliged to erase your personal data, we shall inform controllers which are processing your personal data that you, such as the Data Subject, has requested the erasure by such controllers of any links to, or copy or replication of, those personal data. We will proceed with those steps considering of available technology and the cost by taking reasonable steps, including technical measures.
3.3. Our company, such as the Controller, is obliged to notify every recipient to whom the personal data were disclosed of each erasure of personal data, unless this is shown to be impossible or requires excessive effort. If you, such as the Data Subject, request such information, our company, such as the Controller will provide you with information of recipients that our company is required to inform.

4. The right to restriction of personal data processing:

4.1. You, such as the Data Subject, shall have the right to obtain from our company, such as the Controller, restriction of processing where one of the following applies:
a) When the accuracy of your personal data is contested by you, such as the Data Subject, you shall have the right to restriction of your personal data processing for a period enabling our company, such as the Controller, to verify the accuracy of your personal data;
b) When the processing of your personal data is unlawful and you, such as the Data Subject, oppose the erasure of your personal data and request the restriction of their use instead;
c) When our company, such as the Controller, no longer needs your personal data for the purposes of the processing, but it is required by you, such as the Data Subject, for the establishment, exercise or defense of your legal claims;
d) When you, such as the Data Subject, object against automated decision-making, including the profiling that our company, such as the Controller, can use to process your personal data, you have the right to restriction of your personal data processing during a period that is allowing our company, such as the Controller, to verify whether our company, such as the Controller, has the eligible reasons sufficient for this method of personal data processing.
4.2. Our company, such as the Controller, is authorized only to store your personal information during the period in which our company, such as the Controller, has restricted the processing of your personal data. Our company, such as the Controller, is authorized to only perform any other processing operations:
a) Based on your given consent;
b) It is necessary for the establishment, exercise or defense of legal claims;
c) It is necessary to protect the rights of another natural or legal person;
d) It is necessary for a reason of an important public interest of the European Union or the Slovak Republic.
4.3. Our company, such as the Controller, is required to inform you of this fact prior to the restriction of processing is revoked.
4.4. Our company, such as the Controller, is obliged to notify every recipient to whom the personal data were disclosed of each restriction to processing, unless this is shown to be impossible or requires excessive effort. If you, such as the Data Subject, request such information, our company, such as the Controller, will provide you with information of recipients that our company is required to inform.

5. The right to object to processing of personal data:

5.1. You, such as the Data Subject, shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on following legitimate ground:
a) Where the processing of your personal data is necessary for the performance of a public-service task or in the exercise of public authority entrusted to the controller
b) Where the processing of your personal data is necessary for the purposes of the legitimate interests pursued by the controller or a third party
Also, you, such as the Data Subject, shall have the right at any time to object to profiling carried out based on the legitimate grounds mentioned in the previous sentence. After you exercise your right to object in accordance to this Point, our company, such as the Controller, shall no longer process your personal data unless our company demonstrates compelling legitimate grounds for the processing of your personal data, which override your interests, rights and freedoms, or unless our company, such as the Controller, demonstrates that the reason for the processing is the establishment, exercise or defense of legal claims.
5.2. Also, you, such as the Data Subject, shall have the right to object at any time to processing of personal data concerning you for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. After you exercise your right in accordance to this Point, our company, such as the Controller, shall no longer process your personal data for direct marketing purposes.
5.3. You, such as the Data Subject, may exercise your right to object by automated means using technical specifications.

6. The right to data portability:

6.1. You, such as the Data Subject, shall have the right to receive the personal data concerning you and which you have provided to our company, such as the Controller. Our company, such as the Controller, is obliged to provide you with such data in a structured, commonly used and machine-readable format.
6.2. You, such as the Data Subject, have also the right to require our company to transmit your personal data to another controller.
6.3. Our company is obliged to transmit your personal data under the circumstances, if our company carries out the processing of your personal data by automated means (i.e. we hold your personal data in our internal computer database) and if your personal data is processed by our company on one of the following legitimate grounds:
a) Based on your consent;
b) Or our company processes your personal data based on a contractual agreement between you and our company, where complying of which we are required to process your personal information (for example, recruitment contract, when to find the right job for you, we need to process some of your personal data);
6.4. In exercising your right to data portability, you shall have the right to have your personal data transmitted directly from our company to another controller, where technically feasible.

7. The right to withdraw consent at any time without affecting the lawfulness of processing prior to the date of consent withdrawal:

7.1. If our company processes your personal data on the legitimate ground of your consent, it means you have provided a statement to our company either in writing or electronically (e.g. by completing the form on the Internet) that you agree with the processing of your personal data by our company, you shall have the right to withdraw your consent at any time.
7.2. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Our company, such as the Controller, is required to ensure that the withdrawal of consent to the processing of personal data shall be, from your side as the Data Subject, as easy as to give consent.
7.3. In the purpose to withdraw the consent you can use the electronic form available on the website https://cassagi.com/privacy-policy/
7.4. You can withdraw your consent also by an e-mail sent to our company e-mail address: info@cassagi.com. In the e-mail message, you must provide your identifying information, so that we know who is interested in withdrawal of the consent, and you must include text within the message indicating that you are interested in withdrawing your consent to the processing of your personal data (As the example: I, Jožko Mrkvička, born in December 32, 1898, withdraw my consent to the processing of personal data I have given to your company.”).
7.5. You can also withdraw your consent by a postal correspondence sent to the address of our company, which is Plynárenská 7/A, Bratislava – district Ružinov 821 09, Slovak Republic. In the letter, you must provide your identifying information (first name, last name, date of birth), so that we know who is interested in withdrawal of the consent, and you must include text in the letter indicating that you are interested in withdrawing your consent to the processing of your personal data (As the example: I, Jožko Mrkvička, born in December 32, 1898, withdraw my consent to the processing of personal data I have given to your company.”). It is also appropriate to sign the withdrawal.
7.6. You can also withdraw your consent in person at any branch of our company.
7.7. Our company can contact you, such as the Data Subject, (e.g. by phone) after we have received your withdrawal (especially if you withdraw consent by e-mail or completing the electronic form) to verify that the withdrawal was done by your person.

8. The right to lodge a complaint with a supervisory authority

8.1. In case you have any doubts as to the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, i.e. a state authority, which supervises the correctness and legality of the processing of the personal data of the data subjects.
8.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic with the registered office: Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Company number: 36064220.
8.3. The Office for Personal Data Protection of the Slovak Republic contact data can be seen at website https://dataprotection.gov.sk/uoou/node/148
8.4. You can find more useful information relating to the data subjects at the following reference: https://dataprotection.gov.sk/uoou/sk/content/dotknute-osoby