The operator when processing your personal data through the website is the company noorX s. r. o., with registered office at Zeleninová 719/51, 851 10 Bratislava – Jarovce district, ID number: 56 448 791, VAT number: 2122313358, VAT number: SK2122313358, registered in the Commercial Register of the Municipal Court of Bratislava III, section: Sro, file no.: 180720/B.
If necessary, you can contact the operator in matters related to the processing and protection of personal data in writing at the address Zeleninová 719/51, 851 10 Bratislava – Jarovce district, or by e-mail at the address: recepcia@soumee.sk
The operator is obliged to designate a responsible person if:
- a) the processing of personal data is carried out by a public authority or a public institution, except for courts in the exercise of their judicial authority,
- b) the main activities of the operator or intermediary are processing operations which, due to their nature, scope or purpose, require regular and systematic monitoring of the data subject on a large scale, or
- c) the main activities of the operator or intermediary are the processing of special categories of personal data according to Article 9 of the GDPR on a large scale or the processing of personal data related to the recognition of guilt for committing a crime or misdemeanor according to Article 10 of the GDPR on a large scale.
Since the company noorX s. r. o. does not meet any of the mentioned conditions, does not designate a responsible person.
In this way, noorX s. r. o. as the operator allows you to inform about how your personal data is processed through the website www.soumee.sk and other communication channels.
Through this document, the operator mainly provides you with information about:
- why your personal data is processed,
- how they are processed,
- how long the operator keeps them,
- what are your rights in connection with the processing of personal data,
- to whom your personal data may be provided.
The processing of personal data takes place in accordance with Regulation 2016/679 of the European Parliament and of the Council of the European Union on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC, i.e. the General Data Protection Regulation, hereinafter referred to as the "Regulation", Act No. 18/2018 Coll. on the protection of personal data and other relevant legal regulations.
Obtaining your personal data
Your personal data is mainly obtained by the operator directly from you as the person concerned, especially in cases where you provide them yourself, for example when contacting via website, e-mail, telephone, contact form, social networks or during business communication.
In some cases, the source of your personal data may also be a business company, organization or other entity of which you are a representative, employee, contact person or co-worker.
In some cases, the provision of personal data is necessary to fulfill your request, establish business communication, prepare an offer, conclude a contract or fulfill legal obligations. In other cases, the provision of personal data is voluntary.
Principles of personal data processing
The operator processes only such personal data as are necessary to achieve the specific purpose of processing.
When processing personal data, it mainly observes the following principles:
- the principle of legality, justice and transparency,
- purpose limitation principle,
- data minimization principle,
- the principle of correctness of data,
- retention minimization principle,
- the principle of integrity and confidentiality,
- the principle of responsibility.
If personal data is processed on the basis of your consent, the scope of the processed data is always stated in the relevant consent and the data is processed only for the purpose for which the consent was granted.
Purposes, legal basis and period of personal data processing
1. Dealing with inquiries and business communication
The operator processes your personal data if you contact them via the website, e-mail, telephone, social networks or in another way.
Purpose of processing: processing your message, question, request, inquiry, business communication or preparing a response.
Legal basis: legitimate interest of the operator according to Art. 6 par. 1 letter f) Regulations, or implementation of measures before the conclusion of the contract according to Art. 6 par. 1 letter b) Regulations.
Scope of processed data: name, surname, e-mail address, telephone number, company name, job position, content of the message and other data that you provide in your communication.
Retention period: for the time necessary to process your request, but no longer than 120 days from the delivery of the message, unless there is another legal reason for further storage of data.
2. Preparation, conclusion and fulfillment of the contract
The operator may process personal data in connection with the preparation of business cooperation, the conclusion of a contract or the fulfillment of contractual obligations.
Purpose of processing: preparation of an offer, negotiation of terms of cooperation, conclusion of a contract, provision of services, delivery of outputs, communication with the client or business partner.
Legal basis: fulfillment of the contract or execution of measures before the conclusion of the contract according to Art. 6 par. 1 letter b) Regulations.
Scope of processed data: name, surname, e-mail address, telephone number, company name, invoicing data, job position, data specified in the contract, order or business communication.
Retention period: during the duration of the contractual relationship and subsequently for the time necessary to fulfill legal obligations or protect the operator's legal claims.
3. Fulfillment of legal obligations
The operator also processes personal data in cases where it follows from legal regulations.
Purpose of processing: fulfillment of accounting, tax, archiving and other legal obligations, keeping accounting and contractual documentation, handling requests of affected persons.
Legal basis: fulfillment of the legal obligation according to Art. 6 par. 1 letter c) Regulations.
Scope of processed data: data provided in contracts, invoices, accounting documents, applications and related documentation.
Retention period: for the period required by the relevant legal regulations.
4. Selection procedures and cooperation with applicants
If you are applying for a job position, external cooperation or business cooperation, the operator may process personal data listed in your CV, cover letter, portfolio or other documents that you provide.
Purpose of processing: assessment of the candidate's suitability, communication within the selection procedure, selection of an employee, co-worker or business partner.
Legal basis: execution of measures before the conclusion of the contract according to Art. 6 par. 1 letter b) Regulations, or legitimate interest according to Art. 6 par. 1 letter f) Regulations.
Scope of processed data: name, surname, contact information, information on education, work experience, skills, portfolio, work history and other information provided in the documents provided by the applicant.
Retention period: during the duration of the selection procedure, no longer than 90 days from the delivery of the documents, unless you consent to longer storage of data.
5. Records of applicants for future contact
If you give your consent, the operator can keep your data even after the end of the selection procedure for the purpose of future contact.
Purpose of processing: inclusion in the register of applicants and the possibility of future contact.
Legal basis: consent according to Art. 6 par. 1 letter a) Regulations.
Scope of processed data: data provided in the CV, cover letter, portfolio or other documents.
Retention period: 1 year from the granting of consent or until its revocation, whichever occurs first.
6. Publication of references, photographs and presentation materials
The operator may process and publish personal data in the context of references, case studies, photos, videos, presentation materials or communication on the website and social networks, if the data subject gives consent.
Purpose of processing: presentation of services, projects, collaborations, references, case studies or marketing communication of the operator.
Legal basis: consent according to Art. 6 par. 1 letter a) Regulations.
Scope of processed data: name, surname, job title, company name, photo, video, statement, reference or other approved content.
Retention period: 5 years from the granting of consent or until its revocation, whichever occurs first.
7. Marketing communication
The operator may process personal data for the purpose of sending marketing communications, if you give your consent or if such communication is permissible based on a legitimate interest.
Purpose of processing: sending news, information about services, invitations, professional content or other marketing communication.
Legal basis: consent according to Art. 6 par. 1 letter a) Regulations or legitimate interest according to Art. 6 par. 1 letter f) Regulations.
Scope of processed data: first name, last name, e-mail address, possibly company name and communication preferences.
Retention period: until withdrawal of consent or objection to processing.
8. Cookies, analytics and online advertising
The website may use cookies and similar technologies that enable the website to function properly, measure traffic, analyze website usage or target online advertising.
Purpose of processing: technical functioning of the website, traffic analytics, improving the user experience, online marketing and advertising campaigns.
Legal basis: in case of necessary cookies, the legitimate interest of the operator according to Art. 6 par. 1 letter f) Regulations; for analytical and marketing cookies, consent according to Art. 6 par. 1 letter a) Regulations.
Scope of processed data: IP address, device identifiers, website activity data, online preferences, browser and device technical data.
Retention period: according to the type of specific cookie file and its expiration time.
Detailed information about the cookies used should be provided in a separate Cookies policy or in the cookie bar settings on the website.
Provision of personal data to third parties
In certain cases, the operator may provide your personal data to third parties if it is necessary to fulfill the purpose of processing or if such an obligation arises from legal regulations.
Recipients of personal data can be, in particular:
- public authorities, courts, law enforcement authorities, tax and control authorities,
- accounting, tax, legal and other professional advisors,
- providers of IT services, hosting, web infrastructure and website management,
- providers of analytical and marketing tools,
- e-mail, cloud and communication service providers,
- business partners and suppliers, if necessary to fulfill the contract,
- operators of social networks and online platforms, if the user communicates with them or if content is published on them with the consent of the person concerned.
The operator also provides personal data to its intermediaries, i.e. external entities that process personal data on behalf of the operator. These intermediaries process personal data on the basis of a contract and are obliged to take adequate technical and organizational measures to protect personal data.
If personal data is processed through social networks, the operators of these social networks may act as separate or joint operators according to the rules of use of a specific service.
Transfer of personal data to third countries
The operator tries to process personal data mainly within the European Union or the European Economic Area.
However, in the case of using some technological, analytical, marketing or cloud services, personal data may be transferred to third countries. In such a case, the operator ensures that the transfer is carried out in accordance with the Regulation, especially on the basis of adequate guarantees, standard contractual clauses or other legal mechanism.
Security of personal data
The operator takes appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, disclosure, alteration or destruction.
Only persons who need it to fulfill their work or contractual obligations have access to personal data, and only to the extent necessary to achieve the relevant processing purpose.
Your rights in connection with the processing of personal data
As a data subject, you have the following rights in relation to the processing of personal data:
Right of access
You have the right to obtain confirmation from the operator as to whether it is processing your personal data. If it processes them, you have the right to access this data and information according to Article 15 of the Regulation.
Right to rectification
You have the right to have the operator correct incorrect personal data or supplement incomplete personal data without undue delay.
Right to erasure
You have the right to request the deletion of personal data if the conditions according to the Regulation are met, for example if the personal data are no longer necessary for the purposes for which they were obtained or processed.
This right is assessed individually, because in some cases the operator may be prevented from erasure by a legal obligation or the need to protect legal claims.
Right to restriction of processing
You have the right to request the restriction of the processing of personal data, for example if you object to their correctness, the processing is illegal or the operator no longer needs the data, but you need it to prove, exercise or defend legal claims.
Right to data portability
In certain circumstances, you have the right to receive the personal data that you have provided to the operator in a structured, commonly used and machine-readable format, and the right to transfer this data to another operator.
The right to object
You have the right to object to the processing of personal data, which is based on the legitimate interest of the operator. If you file an objection, the operator will not process your personal data further, unless it proves the necessary legitimate reasons for further processing.
Right to withdraw consent
If the operator processes your personal data based on consent, you have the right to revoke this consent at any time. The withdrawal of consent does not affect the legality of the processing carried out before its withdrawal.
The right to file a complaint or initiative
If you believe that your personal data is being processed in violation of legal regulations, you have the right to file a complaint with the supervisory authority:
Personal Data Protection Office of the Slovak Republic Hraničná 12 820 07 Bratislava 27 Web: dataprotection.gov.sk Phone: 02 3231 3214 E-mail: statny.dozor@pdp.gov.sk
Exercising the rights of the person concerned
You can exercise your rights by contacting the operator at:
noorX p. r. o. Zeleninová 719/51 851 10 Bratislava – Jarovce district E-mail: recepcia@soumee.sk
The operator will provide you with an answer free of charge, usually within 1 month from the date of delivery of the request. In justified cases, especially in the case of complexity or a high number of requests, this period can be extended by a maximum of another 2 months. The operator will inform you about the extension of the deadline.
In case of a repeated, unjustified or unreasonable request, the operator is entitled to charge a reasonable fee or refuse to act in accordance with the Regulation.
Media, social networks and the Internet
The website of the operator may contain links to social networks or other external websites. After clicking on such a link and switching to an external service, the processing of personal data is governed by the personal data protection rules of the relevant operator of this service.
If you contact the operator via a social network, the processing of your personal data is also governed by these principles, to the extent that the operator processes your data.
You can find more detailed information about the processing of personal data by social network operators in the personal data protection principles of specific platforms.
Validity and effectiveness of the personal data protection policy
This personal data protection policy is valid and effective from June 1, 2026.
The operator is entitled to update these principles at any time, especially in the event of a change in legislation, the method of processing personal data, the tools used or the range of services provided. The updated wording of the policy will be published on the operator's website.