CONSENT OF THE DATA SUBJECT TO THE PROCESSING OF PERSONAL DATA
under Articles 4(11), 6(1)(a), 7, 8, 9(2)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the GDPR) and Act No. 18/2018 on the processing of personal data, as amended
By registering to The X App Košice (hereinafter referred to as the Application), the data subject gives, in accordance with the applicable personal data protection legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “the Regulation”), consent to the processing of his or her personal data for the purpose of access to and use of the Application to the controller, U. S. Steel Košice, s.r.o., registered office: U. S. Steel, 044 54 Košice, Slovak Republic, identification number (IČO): 36 199 222, registered in the Companies Register of the District Court Košice I, incorporation number: Section: Sro, File No. 11711/V (hereinafter referred to as the controller).
Scope of processed data – common personal data necessary for the data subject to log in to the Application as well as for verification of his or her status as an employee of the USSK Group (name, surname, ID badge, AD, email, or personal data disclosed by the data subject in the Application by himself or herself).
The data disclosed by the data subject may be processed electronically.
The controller may entrust the processor, OneClick.Systems s.r.o., registered office: Strojárenská 3, 040 01 Košice, Slovak Republic, identification number (IČO): 50345842, registered in the Companies Register of the District Court Košice I, Section: Sro, File No. 14185/V, with processing the personal data of competitors under the Contract on the Processing of Personal Data by the Processor.
The personal data disclosed shall be processed for the period of operation of the Application by the controller, or for the duration of the data subject’s employment with the controller or one of its subsidiaries, or until the data subject withdraws consent to the processing of his or her personal data in the Application, after which the personal data shall be erased within 30 days at the latest.
The disclosure of personal data by the data subject is voluntary. The data subject who has disclosed the personal data is responsible for ensuring that the personal data disclosed are correct, complete, up-to-date and true and is entitled to disclose them to the controller for processing in accordance with the Regulation.
The data subject acknowledges that he or she is aware of all the necessary information under the Regulation, in particular the identification data of the controller and/or the processor, the purpose of the processing of the personal data, the list of personal data processed, the voluntary disclosure of the personal data, and the period of validity of the consent given.
The data subjects shall have the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed, and, whether that is the case, the right to access to the personal data, to have inaccurate, incomplete or outdated personal data rectified or completed, to have the personal data destructed or erased, to obtain from the controller the restriction of the processing of the personal data, to have the personal data transmitted, and to object, on grounds relating to their particular situation, to the processing of the personal data. Further details are set out in the Privacy Notice of Personal Data Processing published on the intranet and internet of the controller, or in USM/192 Personal Data Protection.
In the event of any questions relating to the protection of personal data, the data subject may at any time contact the Data Protection Process Manager (the so-called Data Protection Officer within the meaning of the GDPR), who shall answer any questions relating to the processing of the data subject’s personal data or obligations arising from the applicable personal data protection legislation.
Email: dataprotection@sk.uss.com
or in writing at the following address:
manažér procesu ochrany osobných údajov
Vstupný areál U. S. Steel
044 54 Košice
If the data subject suspects that his or her personal data are being unlawfully processed, he or she may lodge a complaint with the supervisory authority – the Office for Personal Data Protection of the Slovak Republic.