Dear Madam, Sir,
our companies from the Daha recruitment Group, namely the companies:
Zudax s.r.o. , Daha Recruitment., s.r.o.
(all companies together hereinafter referred to as the “Operators” or “Companies”)
process personal data as joint controllers of personal data in connection with the operation of the website www.zudax.sk (hereinafter referred to as the “Website”) and the provision of services. We would like to inform you of the following facts related to the processing of personal data.
1. Who is the controller of personal data and how can you contact us?
The controllers of personal data are all the Companies, which you can contact at the details below:
Company name: zudax s.r.o.
Tel. number: +421 910 600 610
E-mail: info@zudax.sk
Company name:Daha recruitment, s.r.o.
Tel. number: +421 911 426 426
E-mail: info@daharecruitment.com
2. For what purpose and on what legal basis do we process your personal data?
We process your personal data in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “GDPR Regulation”) and Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts. The purpose of processing your personal data is mainly:
access to and use of the Websites,
communication with the Companies,
provision of services by the Companies to job seekers, employers and other entities,
use of services for job seekers (e.g. notifications of job offers).
The legal bases on which we process your personal data are as follows:
a) Conclusion and performance of the contract you conclude with us.
b) Processing of your personal data based on your explicit consent
In such a case, we process your personal data only for the purposes and to the extent specified in the consent.
These are purposes for which we cannot process your personal data based on any other legal basis.
This includes, for example, the processing of personal data for the purpose of possible future contact with another job offer after the end of the selection procedure or other contact with a relevant job offer.
c) Without your consent, we may process personal data in the following cases:
fulfillment of reporting obligations to public authorities,
fulfillment of obligations related to the enforcement of decisions,
fulfillment of archiving obligations,
existing legitimate interest of the Companies, e.g.:
protection of the rights and legally protected interests of the Companies,
resolution of the dispute agenda, in particular for the purposes of conducting legal or other disputes.
4. To what extent will your personal data be processed?
The Companies will process your personal data only to the extent necessary to provide services, in particular the following personal data:
Data collected when sending the applicant's CV: surname, first name, e-mail address, telephone number, CV and all personal or work information that the CV contains. Some of this data is marked as mandatory. If the applicant refuses to provide them, he/she will not have access to the services offered.
Data collected when sending a request for a quote: surname, first name, job title, company name, telephone number, e-mail address. Some of this data is marked as mandatory. If the Website user refuses to provide it, he will not have access to the services offered.
Data collected when sending a contact form: surname, first name, e-mail address, telephone number. Some of this data is marked as mandatory. If the Website user refuses to provide it, he will not have access to the services offered.
Login data collected when logging in and using the Website.
The provision of personal data is not mandatory, however, the absence of some personal data (in particular those enabling proper identification of the acting person) may result in the non-conclusion of a contract or the non-provision of other services requiring proper identification of the person on the Website. When processing personal data, there is no automated processing of personal data within the meaning of Art. 22 of the GDPR Regulation.
5. To whom do we provide personal data?
Your personal data may be provided to external companies that assist us with various activities that involve the processing of personal data (accounting, IT services, marketing services, legal services, etc.). Your personal data may also be provided to potential employers.
Personal data is always provided to third parties only when all requirements of legal regulations regarding the protection of personal data are met. Your personal data may be provided to entities within the European Union and to countries outside the European Union. In any case of such provision of personal data, appropriate measures will be taken to ensure the protection of your personal data.
6. How long do we store personal data?
We process personal data only for the period that is necessary for the purposes of their processing. We continuously assess whether there is still a need to process certain personal data necessary for a specific purpose. If we determine that they are no longer necessary for any of the purposes for which they were processed, we will destroy the data.
Personal data processed for the purpose of fulfilling a contract and for taking measures prior to concluding a contract at the request of the data subject are processed for the duration of the contractual relationship with the data subject.
For the purpose of fulfilling a legal obligation, personal data are processed for the period specified in the relevant legal regulation (we process accounting documents for a period of 10 years, other documents for their statutory archiving period).
In order to protect the legitimate interests of the Companies, we process personal data for the duration of the legitimate interest, unless there is a fact that results in an earlier termination of the processing (e.g. an objection to processing for direct marketing purposes); in order to protect rights in potential litigation, we generally store personal data for a period of 4 years from the moment of the possible first application of the dispute in court.
Based on your consent, we process personal data for the period for which the consent was granted or until you revoke the consent. The validity of the consent, if it is not renewed, is 3 years from the date of its granting.
7. Security of personal data
The Companies have taken all appropriate technical and organizational measures to secure personal data, and have also taken technical measures to secure data repositories and repositories of personal data in paper form.
The companies declare that only verified and authorized persons committed to the protection of personal data have access to personal data.
8. What rights do you have in connection with the processing of your personal data?
As a data subject, you have the following rights:
The right to access your personal data pursuant to Art. 15 of the GDPR, i.e. in particular the right to request that we inform you of what personal data we process about you and provide you with copies of the documents on which your personal data are located and at the same time inform you of appropriate safeguards if personal data are transferred to third countries or an international organization.
The right to request that we correct inaccurate personal data pursuant to Art. 16 of the GDPR, i.e. the right to request that personal data be corrected if incomplete or incorrect personal data are processed.
The right to request that your personal data be erased or that their processing be restricted pursuant to Art. 17 GDPR, i.e. erasure of personal data if (i) they are no longer necessary for the purposes for which they were collected, (ii) consent has been withdrawn and there is no longer any other legal basis for the processing of personal data, (iii) as the data subject you object to processing based on legitimate interest and your interests, rights and freedoms are not overridden by the legitimate interests of the Controller or you object to processing for direct marketing purposes, (iv) personal data have been processed unlawfully.
Right to restriction of processing pursuant to Art. 18 GDPR, i.e. if you as a data subject believe that (i) we are processing incorrect personal data, we will restrict their processing until their accuracy is verified, (ii) the processing of personal data is unlawful and as a data subject you request restriction of processing instead of erasure of personal data, (iii) as Controllers we no longer need the personal data, but you as a data subject need them to establish, exercise and defend your legal claims, (iv) if as a data subject you object to the processing, we will restrict the processing of personal data until it is verified whether the legitimate interests of the Controllers override your interests, rights and freedoms.
Right to data portability pursuant to Art. 20 GDPR, i.e. the right to request the transmission of personal data in a structured, commonly used and machine-readable format to another controller of personal data, where the personal data are processed on the basis of consent and/or a contract and the processing of personal data is carried out by automated means.
The right to object to the processing of personal data pursuant to Art. 21 of the GDPR, i.e. (i) as a data subject you have the right to object to the processing of personal data for direct marketing purposes. If you object, we will no longer process your personal data for this purpose, (ii) where we process personal data for the purposes of our legitimate interests or the legitimate interests of other persons, you as a data subject may object to such processing on grounds relating to your particular situation. In such a case, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms, or for the establishment, exercise or defence of legal claims.
The right to withdraw your consent to the processing of your personal data, and either in the same way as it was granted by you or in the ways specified in the last paragraph of this article; the withdrawal of consent does not affect the lawfulness of processing based on consent granted before its withdrawal.
The right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR Regulation, which is the Office for Personal Data Protection of the Slovak Republic, which is the lead supervisory authority, if you believe that your rights to the protection of personal data have been violated.
9. Cookies
The Website uses cookies. Detailed information on the use of cookies can be found further in this article of the Policy and in the cookies bar when viewing the Website. A cookie is a small text file that is stored on the user's computer for recording purposes. The cookie itself helps to maintain the key functions of the Website. For this purpose, however, cookies collect and store data about you and may be used to identify you. For this reason, they may be considered personal data.
Cookies can be used for various purposes. Below you will find the most common types:
Essential cookies – these are essential for browsing the Website and using its features, for example, to access secure areas of the website. Without these cookies, you would not be able to use our Website properly.
Preference cookies – these cookies allow the Website to remember information that changes how the Website behaves or looks. This is for example your preferred language or the region you are in.
Statistical cookies – these cookies generally collect information about how users use the Website. For example, they allow the Website to track sessions, the number of visiting users. They may also be third-party cookies from analytics services.
Advertising (marketing) cookies – their purpose is to help advertisers provide more relevant advertising by tracking your online activity (e.g. how many times you have clicked on an advertisement). These cookies may share this information with other entities, especially with third-party cookies.
As a user of the Website, you can accept or reject the use of individual types of cookies (except for essential cookies) through the cookie information bar that appears when you enter the Website. In this information bar, you can also find an explanation of the individual types of cookies.
Information about the use of cookies is available directly in the Internet browser. Information about the use of cookies by the following Internet browsers can be obtained on the following pages:
Chrome (Google): Deleting, enabling and managing cookies in Chrome
Safari (Apple): Clearing cookies in Safari on Mac, Deleting history and cookies from Safari on iPhone, iPad or iPod touch
Edge (Microsoft): Deleting cookies in Microsoft Edge
Firefox (Mozilla): Cookies - data that websites store on your computer
10. Supervisory authority
If you believe that the processing of your personal data has violated the privacy rules, you have the right to file a complaint with the lead supervisory authority. The lead supervisory authority is:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Phone: +421 2 3231 3214
Website: https://dataprotection.gov.sk/
E-mail: statny.dozor@pdp.gov.sk
This Personal Data Processing Policy was updated on January 13, 2025.
The Companies reserve the right to change it at any time, effective from the moment of its publication on the Website.