Privacy policy

We take the protection of your personal data responsibly and with an emphasis on its security, confidentiality, and transparent processing. At the same time, we ensure that you have all the necessary information about how and for what purposes we process your personal data.

When processing personal data, we adhere to the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.

The processing of personal data is governed primarily by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the „GDPR“) and Act No 18/2018 Coll. on the protection of personal data and on amendments to certain acts.

In accordance with Articles 13 and 14 of the GDPR and relevant provisions of the Data Protection Act, the company Topservices.sk, s. r. o. provides the following information.

1. Contact details of the controller

The data controller is:

Topservices.sk, s. r. o.
Nitrianska 3342/99
920 01 Hlohovec
Slovak Republic

Company Registration Number: 55 687 156
VAT reg. no.: SK2122071006

hereinafter referred to as the „company“ or the „controller“.

2. Purposes of processing personal data

The company processes personal data to the extent necessary for the proper provision of its services, the fulfilment of contractual and legal obligations, and the ensuring of its business activities.

Personal data may be processed in particular for the following purposes:

  • concluding and performance of contractual and pre-contractual relationships,
  • communication with customers, business partners, job applicants and other data subjects,
  • processing of personnel and payroll administration,
  • management of accounting and tax records,
  • compliance with the company's legal obligations,
  • protection of the rights and legitimate interests of the company,
  • management and processing of job seekers and job offers.

3. Legal basis for processing personal data

The company processes personal data only if there is a relevant legal basis for their processing under the GDPR.

The legal basis may be, in particular:

  • performance of a contract or taking steps prior to entering into a contract, if the processing of personal data is necessary for the conclusion or performance of a contractual relationship,
  • fulfilment of a statutory obligation, which applies to the company,
  • legitimate interest of the company or a third party, unless these interests are overridden by the interests or fundamental rights and freedoms of the data subject,
  • data subject consent, if required for a specific processing purpose,
  • vital interests of the data subject or another natural person, if such a legal basis is applicable given the circumstances.

The company processes personal data in accordance with relevant legislation, in particular regulations governing employment relationships, social and health insurance, accounting, tax, commercial and civil law relationships, occupational health and safety, and other obligations arising from applicable legislation.

If the legal basis for processing is the data subject's consent, the data subject has the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

4. Recipients of personal data

Personal data may be made accessible to employees and authorised persons of the company, to the strictly necessary extent, who require them for the fulfilment of their work or contractual obligations.

In justified cases, personal data may also be provided to other recipients, in particular:

  • providers of accounting, payroll or administrative services,
  • provider of IT, hosting and technical services,
  • provider of legal and advisory services,
  • to a public authority, if the company is placed under such an obligation by law,
  • other contracting partners, if the provision of data is necessary for the fulfilment of a specific processing purpose.

The company ensures that personal data is provided only to the necessary extent and that recipients ensure their adequate protection.

5. Transfer of personal data to third countries

As a standard practice, the company does not transfer personal data to third countries outside the European Economic Area or to international organisations.

If such a transfer were to take place in connection with the use of a specific service or provider, the company will ensure that it is carried out in accordance with GDPR requirements and that an adequate level of personal data protection is guaranteed.

6. Retention period of personal data

We retain personal data only for the period necessary to achieve the purpose for which it was obtained, or for the period stipulated by applicable legal regulations.

The retention period depends primarily on the specific processing purpose, the legal basis, and any statutory archiving periods.

Upon the termination of the processing purpose and the expiry of the relevant retention period, the company shall securely delete, dispose of or anonymise the personal data, unless there is another legal basis for their further retention.

The company ensures that personal data are not kept in a form which permits identification of the data subject for longer than is necessary for the purposes for which they are processed.

7. Your rights as the data subject

In connection with the processing of your personal data, under the conditions laid down in the GDPR, you have in particular:

  • Right of access to personal data – you have the right to obtain confirmation as to whether the company is processing your personal data, and if so, you have the right to access this data and information regarding its processing.
  • Right to repair – you have the right to request the rectification of incorrect personal data or the completion of incomplete personal data.
  • Right to erasure – under the conditions set out in the GDPR, you may request the erasure of your personal data, for example if they are no longer necessary for the purposes for which they were collected.
  • Right to restriction of processing – in cases specified by the GDPR, you may request the temporary restriction of the processing of your personal data.
  • Right to object to processing – if the company processes your personal data on the basis of a legitimate interest, you have the right to object to such processing on grounds relating to your particular situation.
  • Right to data portability – under the conditions laid down in the GDPR, you have the right to receive the personal data you have provided to the company in a structured, commonly used and machine-readable format and, where applicable, to transmit those data to another controller.
  • Right to withdraw consent – if personal data is processed on the basis of your consent, you may withdraw it at any time.
  • Right to lodge a complaint with a supervisory authority – if you believe that the processing of your personal data has infringed legal regulations, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

The exercise of your rights is generally free of charge. In the case of manifestly unfounded or excessive, particularly repetitive requests, the company may proceed in accordance with the GDPR.

The company will process the data subject's request without undue delay, as a rule no later than one month from its receipt. In cases stipulated by the GDPR, this period may be extended by a further two months, taking into account the complexity and number of requests.

8. How can you exercise your rights?

You can exercise your rights directly with the controller – the company Topservices.sk, s. r. o., and that in writing or electronically via the company's contact details.

When processing the request, the company may, in justified cases, request the provision of additional information necessary to verify the identity of the applicant.

9. What personal data we may process

The scope of personal data processed depends on the specific purpose and the data subject's relationship with the company.

In the case of job applicants, the data processed may notably include:

  • first name and surname,
  • date of birth, if required for the purpose,
  • residential address or contact address,
  • telephone number,
  • email address,
  • the information provided in the CV,
  • information on attained education and relevant documents,
  • information regarding qualifications, professional competence and authorisations,
  • information on previous work experience,
  • further data provided by the data subject in connection with a job application or the provision of services to the company.

In the case of other data subjects, the company processes only such personal data that are adequate and necessary with regard to the specific purpose of processing.

10. Final information

Company Topservices.sk, s. r. o. it adopts appropriate technical and organisational measures to protect the processed personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

This privacy information may be updated from time to time, particularly in the event of changes in legislation, the manner in which personal data is processed, or the services used.

Topservices.sk, s. r. o. hereby informs you about the manner of processing and protection of your personal data and about the rights to which you are entitled in connection with the processing of personal data.