Data Subject Rights Notice

The data controller (GRAFOBAL, akciová spoločnosť, Mazúrova 2, 90901 Skalica), who processes your personal data, including name, surname, email, and phone number, emphasizes the importance of respecting the rights of data subjects. Your personal data will be processed for the purpose of providing feedback on the completed form on the GRAFOBAL company's website or for the purpose of including a job applicant in the internal database. The legal basis for processing your personal data is consent obtained through the completion of the relevant forms. The data retention period is 5 years from the inclusion in the database, and you have the right to revoke your consent at any time.

As a data subject, you have the following rights in relation to the data controller:

a) Right to Information: Every individual has the right to information as outlined by GDPR and personal data protection laws. The controller is obligated to take appropriate measures to provide this information to the data subject, either via email or in written form. Information must be concise, transparent, easily accessible, and formulated in a clear and simple manner.

b) Right to Access Data: Every individual has the right to confirm whether the controller processes their personal data. If so, they have the right to access this data and receive information about its processing as defined by law.

c) Right to Rectification: Every individual has the right for the controller to process only accurate and up-to-date data. If requested, the controller must correct inaccurate or outdated data.

d) Right to Erasure: In certain cases, a data subject has the right to have their personal data erased. If legal conditions are met, the controller is obliged to delete the data.

e) Right to Restriction of Processing: In certain cases, an individual has the right to restrict the processing of their personal data. During the restriction, the controller can only retain the data but cannot process it in any other way.

f) Right to Data Portability: If personal data is processed electronically based on the individual's consent, they can request the controller to provide their personal data in a format that allows transfer to another controller.

g) Right to Object: Under certain circumstances, a data subject has the right to object to the processing of their data.

h) Right to Refuse Profiling: A data subject has the right to refuse their personal data being subject to automated decision-making, including profiling, under certain conditions.

You can assert your rights either in person at the human resources department or in writing to the company's address. The controller will record and process each request promptly, but no later than within one month. Within this period, the data subject who submitted the request will be informed about the measures taken based on their request.