Access to Safe4Entry/training of employees of external companies and protection of personal data
Data Controller:
Cement Hranice, akciová společnost, ID: 155 04 077, VAT No.: CZ15504077, Registered Office at Bělotínská 288, Hranice I – Město, 753 01 Hranice
Registered in the Commercial Register: Regional Court in Ostrava, Section B, Insert 140
Data box ID: wnbcdh8
Tel.: +420 581 829 111, email: Protection.Data@cement.cz
Information on the Processing of Personal Data
Compliance with the information obligation of the controller pursuant to Articles 12 – 14, 15 – 22 and 34 of the GDPR
When processing personal data, we adhere to applicable legal regulations, particularly Regulation (EU) 2016/679of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR) and Act No. 110/2019 Sb., on the processing of personal data.
We process only personal data that we have obtained directly from you and/or your employer, specifically: name and surname, phone number, email address, professional and other certifications, and qualifications necessary for performing work.
The processing of your personal data is carried out to ensure all our and your rights and obligations related thereto. This constitutes lawful processing:
- pursuant to Article 6 (1)(c) – Processing is necessary for compliance with a legal obligation to which the controller is subject under generally binding regulations, particularly in the areas of labour law and occupational health and safety,
- pursuant to Article 6 (1)(f) – Processing for the purpose of protecting our legitimate interests and those of third parties, specifically for protecting business partners, safeguarding life and health, and demonstrating compliance with occupational health and safety requirements.
Providing personal data is an obligation arising from applicable legal regulations for the data subject.
Purpose of processing:
- Training employees of external companies and ensuring OHS conditions, maintaining records of completed training sessions, accessing the web application https://cement.safe4entry.com/
Recipients of personal data:
- management at the controller’s organization, OHS and fire safety technician, workplace managers, data controller, coordinators for work at workplaces, public authorities (e.g., administrative bodies or courts) if necessary, Maintenance provider for the Safe4Entry information system: QC Solutions s.r.o., Lonkova 490, 530 09 Pardubice, ID: 10876545.
Personal data will be processed during your or your employer's activity at the controller’s organization. After this period ends, data will be handled in accordance with applicable legal regulations, particularly Act No. 262/2006 Sb., the Labour Code; Act No. 499/2004 Sb., on Archiving and Records Management and on Law Amendments and GDPR. Data no longer required for fulfilling legal obligations (e.g., demonstrating compliance with OHS requirements) will be deleted.
No automated decision-making or profiling occurs during this processing.
You can be assured that your personal data is handled with due care and in compliance with applicable legal regulations. We protect your personal data to the maximum extent possible using available technical means. No personal data will be transferred to third countries.
If conditions stipulated by legal regulations are met, you may exercise the following rights concerning your personal data processed by us as a controller:
- Right to confirmation regarding whether your personal data is being processed and access to such data (Article 15 GDPR;
- Right to rectification or completion of inaccurate or incomplete personal data (Article 16 GDPR);
- Right to erasure (right to be forgotten), requiring the controller to delete personal data if certain conditions are met (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR),
- Right to object to processing (Article 21 GDPR),
- Right to data portability, allowing you to obtain personal data you provided in a commonly used machine-readable format or request its transfer between controllers where technically feasible (Article 20 GDPR),
Right to contact supervisory authorities, specifically the Office for Personal Data Protection in matters concerning your rights under applicable laws)