In alignment with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of natural persons with regards to the processing of personal data and on the free movement of such data (referred to as the General Data Protection Regulation, or GDPR) and Act No. 18/2018 Coll. on Personal Data Protection and Amendments to Some Acts (hereafter referred to as the “Personal Data Protection Act”), the following outlines the data handling practices of Steehatch Defense, s. r. o.

Identification and Contact Information of Steehatch Defense, s. r. o.

Steehatch Defense, s. r. o., processes personal data of individuals within its operations, located at Stare Grunty 3546/7A, 841 04 Bratislava, Slovakia, Europe, with Business ID: 55768474, serving as the data controller.

Contact Information for the Data Protection Officer

Committed to safeguarding your privacy, Steehatch Defense, s. r. o., has appointed a Data Protection Officer (DPO). For any inquiries or concerns regarding data handling, you can reach the DPO:

• Via email at info@steehatch.com

Personal Data Processing Overview

In compliance with GDPR and the Personal Data Protection Act, we process personal data for various objectives, each defined by:

• Specific processing activities aimed at fulfilling these objectives
• A legal basis justifying these activities
• The categories of recipients to whom the data may be disclosed
• Retention periods for personal data

Below are detailed descriptions for each processing purpose:

Supplier-Customer Relationship Management

To effectively manage interactions with business partners, clients, and prospects, we process necessary details such as names, organizational affiliations, contact numbers, and email addresses, along with the content of communications.

• Activities: Registration in our system, inquiry and communication management, contract administration, and customer satisfaction assessment.
• Legal Basis: Complies with legal obligations under specific laws (e.g., tax, accounting, and income tax regulations) and our legitimate interests in effective partner and client communication.
• Recipients: Data is not shared beyond necessary business communication.
• Retention: Personal data is retained as per our record management policy: 10 years for contracts and agreements, and 5 years for inquiries and communications.

Accounting and Tax Compliance

For accounting purposes, necessary personal details such as names, organizational titles, and contact information are processed.

• Activities: Invoice management and accounting documentation processing.
• Legal Basis: Compliance with legal obligations under various fiscal and accounting laws.
• Recipients: No external disclosure except for legal compliance.
• Retention: Data is kept for 10 years in alignment with our record management practices.

Promotional Activities

For organizational promotion, we process personal details including audiovisual content, names, job titles, photographs, and contact information.

• Activities: Presentation of company activities through various media.
• Legal Basis: Consent-based processing, with the option for withdrawal at any time.
• Recipients: Shared with partners for promotional material distribution, including web hosting and social media platforms.
• Retention: Until consent is withdrawn.

Recruitment

We process applicant data solely for employment selection purposes, subject to consent.

• Activities: Application and interview process documentation.
• Legal Basis: Compliance with labor laws and consent for potential employment consideration.
• Recipients: No external sharing.
• Retention: Throughout the recruitment process, extendable with consent.

Fan Page and Facebook Tools Operation

Our Facebook fan page, co-managed with Facebook Ireland Limited, uses cookies for analytics and functionality, potentially involving data transfers outside the EU.

Your Rights

You possess rights regarding data access, correction, deletion, processing restriction, objection, and data portability. For any requests or complaints, please contact us using the aforementioned details.

If concerns about data processing legality arise, complaints can be directed to the Office for Personal Data Protection at Stare Grunty 3546/7A 841 04 Bratislava.

This document is adapted for Steehatch Defense, s. r. o., reflecting our dedication to privacy and compliance with data protection regulations.