INFORMATION ON THE PROCESSING OF PERSONAL DATA OF EMPLOYEES
The company ARIDEON s.r.o., ID 24264938, with registered office in Prague 7 – Holešovice, Ortenovo náměstí 1310/18,
Postcode 17000, acting by Mr. Lukáš Rieger, Managing Director (hereinafter referred to as the “Employer“), as
the data controller, hereby takes the liberty to inform its employees and collaborators (hereinafter referred to as
also referred to as “data subjects“) about the manner and extent of the employer’s processing of personal data,
including the scope of data subjects’ rights in relation to the processing of their personal data by
employers.
1. What personal data does your employer process about you?
The employer processes in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of
on 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on
the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)
data; hereinafter referred to as “theRegulation“) and in accordance with the relevant national legislation in the field of
protection of personal data and other legal regulations relating to the status of data subjects
as employees of the employer, in particular those listed below, the following personal data:
- address and identification data (surname, first name, all former surnames, date and place
birth, birth number, ID number, email address, phone number and, if applicable
other data, listed below); - descriptive data (CCTV footage and, where applicable, other data listed below);
- information about another person (or the information listed below).
The Employer shall process the personal data of employees only in accordance with the purposes set out below and to the extent and for the period necessary to fulfil these stated purposes. Personal data is processed by lawful means. The employer shall process personal data accurately and only to the extent necessary to fulfil the purpose for which the personal data are processed. Employees’ personal data is protected and processed in a manner that prevents any unauthorized or accidental access to, alteration, destruction, loss or other unauthorized processing of such personal data. For these purposes, appropriate technical and organizational measures are observed and all persons who come into contact with personal data are obliged to maintain confidentiality of information obtained in connection with the processing of personal data and to comply with other obligations related to the protection of personal data.
2. For what purposes and on the basis of which legal titles your employer uses your personal data
processing?
a) For the performance of obligations and the exercise of claims under employment law and
commercial relationship
- For this purpose, the employer processes the above personal data for the purposes of
performance of the subject matter of the contractual relationship established between the employer and
by the employee in accordance with Act 262/2006 Coll., the Labour Code, or Act No.
89/2012 Coll., Civil Code, as amended. - If the employee consents, the employer also processes the bank account
the employee for the purpose of payment of wages (consent is not required if there is an agreement
the contract agrees to send the earnings or agreed benefits to the workers’ bank account),
telephone and, where appropriate, e-mail connection to facilitate communication between
by the employee and the employer (consent is not required in the case of service
telephone and e-mail used exclusively for work purposes).
(b) For the purposes of fulfilling the employer’s objects in relation to its clients
- For this purpose, the employer processes personal data to the extent necessary
the name, telephone number and email address of the staff.
(c) For pension insurance records sent to the Social Insurance Institution
- For this purpose, the employer processes the above personal data for the purposes of
the fulfilment of obligations under Act No. 582/1991 Coll., on the organisation and implementation of social
security, as amended.
d) For the correct calculation of the wage
- For this purpose, the employer may also process personal data relating to
education or length of experience.
e) For the correct calculation of monthly tax payments
- For this purpose, the employer may also process personal data relating to
to the type of pension received.
f) For payment of health insurance
- For this purpose, the employer processes, in accordance with the provisions of Act no. 48/1997
Coll., on public health insurance, also data on the health insurance company
Staff.
(g) For the purpose of reporting the employment of foreigners
- For this purpose, the employer shall also process information on the state
citizenship of employees.
(h) For the purposes of the income taxpayer’s declaration
- If the employee claims the tax benefit and the spouse is
employed, the employer also processes the surname and first name of the spouse or
the name and address of the employer. - If the employee claims the dependent child benefit, the employee processes
the employer, and the child’s name, surname and birth number.
i) Protection of persons and property on the employer’s premises and ensuring work safety
- The processing of personal data is necessary for the purposes of legitimate interests
of the employer, consisting in ensuring the protection of persons and property on the premises
the workplace and ensuring the conditions of work safety, in the form of a video recording.
3. Who all will have access to your personal data?
Personal data are processed for the purposes described above only by the employer, except for
data provided to an external supplier of payroll accounting services and to entities,
for whose benefit the employer carries out his business activities, all only to the extent
necessary to fulfil this purpose. External partners who, as processors, may process your
personal data, the employer shall carefully select and entrust personal data only to those who provide
sufficient guarantees to ensure that appropriate technical and organisational measures are in place so that it cannot, in particular
accidental or unlawful destruction, loss, alteration, unauthorized disclosure
personal data transmitted, stored or otherwise processed, or unauthorised access
to them.
Other entities that may have access to your personal data
The employer is also obliged to transfer some of your personal data on the basis of applicable law.
regulations, e.g. to public authorities, courts, law enforcement authorities in connection with
possible administrative, criminal and civil court proceedings.
4. For how long do we process your personal data?
- The employer processes your personal data for the duration of the contractual relationship and for
the time necessary to ensure mutual rights and obligations under the contract; and
generally binding legal regulations (see above). - In the case of compliance with legal obligations, the employer processes personal data for the period of
provided for in the relevant legislation. - When processing personal data through a CCTV system, the CCTV
records kept for a maximum of 30 calendar days. In case your personal
the data is captured on the CCTV footage, which is necessary to solve
of an infringement or other security incident, the personal data will be stored together with
processed until the record is handed over to the competent state authorities. - If the employer processes personal data on the basis of your consent, the personal
the data will be processed for the period specified in the consent.
5. What rights do you have in relation to the processing of personal data by your employer?
You have the following rights as a data subject in relation to your personal data:
The right to withdraw your consent to the processing of personal data at any time (if the processing is based on
consent based);
The right of access to personal data (the right to request information as to whether personal data relating to
relate to you, are or are not processed by your employer and, if so, you have the right to
to access this personal data and other information in accordance with Art. 15 Regulation);
The right to data portability (the right to receive personal data relating to you in a structured format,
in a commonly used and machine-readable format, and the right to transmit that data to another controller; and
furthermore, the right to have personal data transmitted directly from one controller to another controller, if technically feasible);
The right to rectification (the right to demand that the employer rectify without undue delay
inaccurate personal data concerning you);
The right to restriction of processing (the right to request that the employer restrict processing, inter alia.
if the right to rectification is exercised, or if the employer’s personal
the data is processed unlawfully but you do not want to delete it);
The right to erasure (the right to request that your employer erase your personal data without undue
of deferment deleted, among other things. if the personal data are no longer necessary for the purposes for which they were
collected, or you have withdrawn the consent on the basis of which the personal data was
processed by the employer and there is no other legal title for the processing, or
if the employer processes personal data unlawfully);
Right to object;
The right to address your complaint to the Office for Personal Data Protection. (the address of the office is
Colonel. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, website
www.uoou.cz).
6. How can you contact the employer?
If you have any questions about the processing of your personal data or exercise the above rights, please contact
you can contact the employer directly at its headquarters or by e-mail: arideon@arideon.cz.
7. Internal regulations of the employer
The employer also has in place an internal directive governing the protection of employees’ personal data,
which is available at the headquarters and can also be requested by email at the email address mentioned in Art. 6. of this Information on
processing of personal data of employees.
