Data controller´s data:
The company Trnavská NAD, a.s. (TNAD) with its registered office at Nitrianska 5, 917 54 Trnava, CIN: 34 127 844, registered in the Commercial Register of the District Court Trnava, Section: Sa, Insert No: 130/T, which determines the purposes and means of personal data processing, is the data controller under the Regulation (EU) 2016/679 on the Protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements of certain other Acts.
Contact details of the data controller for further questions concerning the processing of your personal data or the exercise of your following rights: firstname.lastname@example.org or the registered office of the company: Trnavská NAD, a.s., Nitrianska 5, 917 54 Trnava.
The purposes of the processing and the legal basis:
Your common personal data (name, surname, driving licence number, photograph, etc.), obtained by TNAD from its business partners – your employers, are processed by TNAD for the purpose of allowing entry and identification of drivers when entering private premises to load and unload goods.
The legal basis for such processing of your personal data is the legitimate interest of the data controller and a third party (business partner) in protecting transported goods and performing contractual obligations (liability for damages) towards TNAD’s business partners.
At the same time, the data controller processes your personal data – your visual image and figure, using a camera system located in the private premises of the data controller, which are also used by other persons than the data controller and its employees. The purpose of processing such data is to detect crime, security breach, property or health protection in the data controller´s private premises.
The legal basis for the processing is the legitimate interest of the data controller in ensuring safety, protecting business secrets and protecting the property of the data controller and its employees.
Who may be the recipient of your personal data
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed. However, public authorities (e.g. tax authorities, courts, law enforcement authorities) which may receive personal data in the framework of a particular inquiry in accordance with Slovak law shall not be regarded as recipients.
The recipients of your personal data are the data controller´s clients or business partners for whom TNAD provides goods transportation.
TNAD does not transfer personal data to third countries or international organisations.
Data storage period
TNAD stores your personal data in a form that allows your identification as long as it is necessary to fulfill the individual processing purposes. Your personal data are stored for the period specified in the relevant legislation and for the period specified in TNAD’s registry. Personal data will be discarded when they are no longer needed for processing and after the necessary time for their storage.
If TNAD as a data controller already processes your personal data, in accordance with the GDPR and the Personal Data Protection Act, you as the data subject have the following rights:
As the data subject you shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you.
If the processing of your personal data is based on your consent with the processing, you shall have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
You may exercise your abovementioned rights as well as withdrawal of consent in writing, by sending an application to the registered office of TNAD, or electronically, by sending your application to the responsible person to the e-mail address: email@example.com
In the case of a personal data breach at TNAD, which is likely to result in a high risk to the rights and freedoms of natural persons, TNAD shall communicate the personal data breach to the data subject without undue delay. For this purpose, the company has adopted an internal regulation regulating the procedure and measures for breaching the protection of personal data as well as the formalities for notifying the authority and the data subject.
At the same time, you have the right to file a complaint to the Office for Personal Data Protection if TNAD does not properly comply with the rights of the data subject or the processing of personal data will not be in accordance with the GDPR processing principles.
Your personal data, which TNAD processes for these purposes, come from your employers.
TNAD will not make decisions with legal effects relating to the data subjects based solely on automated processing (including profiling).