PRIVACY STATEMENT
GENERAL PRINCIPLES OF PERSONAL DATA PROCESSING
The company McGrath & Arthur Ltd. (hereinafter: The Company) hereby declares that it adheres to the following principles when processing personal data:
In order to prevent violations of the fundamental rights of the data subjects, the Company processes personal data in accordance with the principle of lawfulness, as is prescribed by the General Data Protection Regulation - Regulation (EU) 2016/679 (hereinafter: General Data Protection Regulation) . Accordingly, the Company processes personal data by fulfilling at least one of the assumptions prescribed in Article 6. General Data Protection Regulation, when:
- the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- processing is necessary for compliance with a legal obligation to which the controller is subject;
- processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
All personal data is collected only for a specific purpose. The Company always explicitly states the purpose of collecting personal data and does not process personal data in a manner that is not in accordance with the established purpose of personal data processing.
The Company will inform the data subject about the purpose of the processing of personal data before their processing.
The Company processes personal data in a way that takes into account the proportionality of the need to process personal data for the purpose for which personal data are processed.
The Company conducts an analysis to determine the extent to which the data processed are necessary to achieve the purpose for which the personal data are processed. If the Company determines that personal data have been processed to a greater extent than necessary, the Company will limit such processing.
The Company processes personal data taking into account the accuracy of personal data and for this purpose updates personal data as needed. The Company will take appropriate measures to ensure that personal data that are inaccurate are corrected without undue delay, all in accordance with the established purpose of processing personal data.
In order to ensure the implementation of the principle of accuracy of personal data, the text of the consent of the data subjects to the processing of personal data should contain the following text:
'' The data subject is required to provide true and up-to-date personal information. In case of change of personal data, the data subject is obliged to inform the operator without delay. ''
The Company stores personal data in a form that allows the identification of data subjects for as long as necessary to achieve the purpose for which personal data are processed.
The Company processes personal data in a way that guarantees the data subjects adequate security of personal data protection, and in particular protection against unauthorized processing of personal data, illegal processing of personal data, accidental loss of personal data, deletion of personal data and damage to personal data.
The company is responsible for respecting the basic principles of personal data processing. At the request of the Croatian Personal Data Protection Agency as the competent supervisory body, the company is obliged to prove compliance with the principles of personal data processing.
ON THE PROCESSING OF SPECIAL CATEGORIES OF PERSONAL DATA
A special category of personal data in accordance with the General Data Protection Regulation is considered to be those personal data that reveal racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, trade union membership, genetic data, biometric data, health data or sexual data life or sexual orientation of the data subjects.
In accordance with Article 9, paragraph 2. of the General data protection regulation The Company may process special categories of personal data only with the explicit consent of the data subjects for the processing of each of the above special categories of personal data or for other reasons prescribed by Article 9, paragraph 2. of the General data protection regulation.
When processing special categories of personal data, the Company will keep records of processing activities.
The Company will not transfer personal data to a third country or international organization.
Pursuant to Article 45. of the General Data Protection Regulations the transfer of personal data to a third country or international organization may occur when the European Commission decides that a third country, territory, or one or more specific sectors within that third country, or the international organization in question provides an appropriate level of protection. Such transfer does not require special approval.
More about the transfer of personal data to a third country or international organization on the website of the Personal Data Protection Agency: https://azop.hr/transferi-osobnih-podataka-u-trece-zemlje/.
Data on the operator, responsible person, intermediaries and data subjects
Operator:
|
McGrath & Arthur Ltd. For services |
Zagreb, Zaharova 9, OIB: 60210520381; contact:
Responsible person:
Branislav Juráš, general director
Contact: +421 2 5464 1851, gdpr@mcga.sk
Possible intermediaries of personal data
MCGA legal Ltd. , Partizánska 2, 811 03 Bratislava, ID: 35 962 836,
MCGA accounting, Ltd. , Partizánska 2, 811 03 Bratislava, ID: 36 662 283,
SMART accounting, Ltd. , Landauova 22, 841 01 Bratislava, ID: 47 317 761,
Mcpower.sk, Ltd. , Partizánska 14, 811 03 Bratislava, ID: 35 840 421,
AVE Soft Ltd. , Dostálova 882/63, Heřmanice , 713 00 Ostrava, Češka, ID: 25 378 392,
AVE Soft Solutions Ltd. , Dostálova 882/63, Heřmanice , 713 00 Ostrava, Češka, ID: 01 808 061,
GRANDCOM, Ltd. , Odborárska 1372/7, Nové Mesto nad Váhom 915 01, ID: 46 972 048,
Edmund Krištof, Tomášikova 12573/50E, Bratislava-Nové Mesto 831 04, ID: 41 973 895,
Fitek Ltd. , Nová Rožňavská 136, Bratislava 831 04, ID: 46 950 095,
Law office Tomáš Petko Ltd. , Drotárska cesta 7, Bratislava 811 02, ID: 50 218 107,
Cromwell Inc. , Lamačská 22, Bratislava 841 03, ID: 31 353 746
Potential users of personal data:
MCGA legal Ltd. , Partizánska 2, 811 03 Bratislava, ID: 35 962 836,
MCGA accounting, Ltd. , Partizánska 2, 811 03 Bratislava, ID: 36 662 283,
SMART accounting, Ltd. , Landauova 22, 841 01 Bratislava, ID: 47 317 761,
Mcpower.sk, Ltd. , Partizánska 14, 811 03 Bratislava, ID: 35 840 421,
AVE Soft Ltd.. , Dostálova 882/63, Heřmanice , 713 00 Ostrava, Češka, ID: 25 378 392,
AVE Soft Solutions Ltd. , Dostálova 882/63, Heřmanice , 713 00 Ostrava, Češka, ID: 01 808 061,
GRANDCOM, Ltd. , Odborárska 1372/7, Nové Mesto nad Váhom 915 01, ID: 46 972 048,
Edmund Krištof, Tomášikova 12573/50E, Bratislava-Nové Mesto 831 04, ID: 41 973 895,
Fitek Ltd. , Nová Rožňavská 136, Bratislava 831 04, ID: 46 950 095,
Law office Tomáš Petko Ltd. , Drotárska cesta 7, Bratislava 811 02, ID: 50 218 107,
Cromwell Inc. , Lamačská 22, Bratislava 841 03, ID: 31 353 746 .
PURPOSE OF PROCESSED PERSONAL DATA:
The Company processes personal data to varying degrees depending on the type of person concerned.
• Clients personal information
• Personal data of debtors, other contracting parties, contractual partners of clients
• Personal data of employees and job candidates
• Personal data of family members of employees
• Personal data of persons recorded by the camera system at the workplace and at the Companys premises
• Personal data of the sender of the mail
• Personal data of the Company's contractual partners
• Personal data from non-data subjects
When the Company collects personal data about the data subjects from another person, the Company will provide information on the rights and obligations of the data subject, the time of personal data processing, the operator, intermediaries, responsible persons and potential users of personal data via the Company's website.
In case of obtaining personal data about the data subject from another person, the Company will inform the data subject directly in writing or in a recorded telephone conversation about the purpose, legal basis for processing personal data, category of personal data, source of personal data or information on whether they come from publicly available sources.
The above does not apply in the case where the acquisition or provision of such information is provided by a special regulation.