Information on personal data processing

In connection with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) and Act no. 18/2018 on personal data protection, we hereby fulfil our obligation to notify you regarding the processing of your personal data.

Please read the following information on how we process your personal data.

Who is the controller of your personal data?

The controller of your personal data is Rohrer-Impera s.r.o., Nová Rožňavská 136, 831 04 Bratislava, district Nové Mesto, company reg. no.: 50696319, VAT no.: 2120438265.

For what purposes do we process your personal information and what is the legal basis for their processing?

Processing based on contractual and pre-contractual relations:

In connection with publication of job offers and the receipt of applications for employment, including CVs and other related documents, we process your personal data as part of a pre-contractual arrangement at the request of the data subject and we are authorized to process such data without your consent.

 Consent-based processing:

Your personal data for marketing purposes allowing us to inform you about news and changes regarding our products and services as well as in order to contact our company by means of the contact form available on the website, can be processed only with your consent. You have the right to revoke such consent at any time by clicking on the disclaimer link included in our request for processing your personal data for marketing purposes, or by sending an e-mail request to:

 Processing based on a legitimate interest of the controller:

Based on our legitimate interest, we are authorized to process personal data to identify and verify the identity of persons accessing the premises of the controller a single time, or to use the CCTV to protect our property. On this legal basis, we may also process personal data in the recovery of claims or in litigation.

Which entities have access to your personal data?

We use outsourced processors and third parties, e.g. for IT management, camera information system management, debt recovery, legal representation in legal disputes, selection procedures. We ensure that all suppliers comply with applicable laws, are bound by the obligation of confidentiality, and process your data solely within the scope of the contracts and adequately protect personal data in accordance with GDPR and international standards.

How long will we keep your personal data?

We will keep your personal data during the term of the contract and during the statutory archiving period, or for the period required to achieve the defined purpose.

Personal data processed for purposes of legitimate interest are processed only to the extent necessary for the fulfillment of the purpose.

What rights do you have with relation to the processing of your personal data?

Right to access your personal data:

The controller is obliged to provide the data subject (the person whose personal data the controller processes) with a confirmation that the controller is processing personal data concerning the data subject and the data subject has the right to access his / her personal data within the scope of Article 15 of the GDPR.

Right to rectification of personal data:

Data subjects have the right to rectify their personal data if they are inaccurate or incomplete. The controller must comply with the requests for the rectification of personal data without undue delay.

Right to erasure (right to be forgotten): 

The controller is obliged to erase the personal data of the data subject without undue delay, if:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the processing is based,
  • there is no other legal ground for the processing,
  • the data subject objects to the processing and there are no overriding legitimate grounds for the processing,
  • the data subject objects to the processing and the personal data have been processed unlawfully,
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject,
  • the personal data have been collected in relation to the offer of information society services.

The data subject may also reqest erasure if his / her data are processed unlawfully and illegally in connection with GDPR.

The request for erasure will not be satisfied to the extent that the processing is necessary:

  • for exercising the right of freedom of expression and information,
  • for compliance with a legal obligation,
  • for peformance of a task carried out in the public interest,
  • for reasons of public interest in the area of public health,
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes,
  • for the establishment, exercise or defence of legal claims.

Right to restriction of personal data processing:

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims,
  • The data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed:

  • with data subject’s consent,
  • for the establishment, exercise or defence of legal claims,
  • for the protection of the rights of another natural or legal person,
  • for reasons of important public interest of the Union or of a Member State.

Right to portability of personal data:

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller and have the right to transmit those data to another controller (e.g. in case of replacement of a service provider). Upon request, the controller is obliged to allow transfer of data in a structured, commonly used and machine-readable format (e.g. XML or CSV).

Who can you contact in connection with processing of your personal data?

If you have any questions or suggestions regarding the processing of your personal data, please first write to us at: You have the right to file a complaint with the data protection authority if you suspect that your rights have been infringed.