Політика конфіденційності
Information for customers, business partners, and website visitors pursuant to Articles 13 and 14 of the GDPR
1. DATA CONTROLLER
The controller responsible for processing your personal data is glocco s.r.o. (registered office: Zámocká 36, 811 01 Bratislava; company identification number: 47588292). If you have any questions about the processing of your personal data, please email us at [email protected].
Processing personal data in documents being translated (our role as processor):
If you entrust us with documents and other materials containing third parties’ personal data for translation, proofreading, localisation, or interpreting, glocco s.r.o. acts as a processor under Article 28 of the GDPR. As our client, you remain the controller of the personal data concerned. We process the personal data concerned solely to provide the services you have ordered, in accordance with your documented instructions and either a data processing agreement (DPA) entered into with you or the general terms and conditions.
2. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process your personal data for the following purposes and on the following legal bases:
A) Handling an enquiry (Article 6(1)(b) and (f) of the GDPR)
Purpose: Handling an enquiry submitted via a web form or email and preparing an offer.
Data processed:
– First name, surname, email address, telephone number
– Company name and position
– Content of the message and attachments
Legal basis: taking steps prior to entering into a contract; for general questions, the controller’s legitimate interests in responding to your message.
B) Business communication, order management, and maintenance of contact records (Article 6(1)(b) and (f) of the GDPR)
Purpose: Managing business relationships, overseeing and coordinating translation and interpreting orders, communicating with customers, suppliers, and business partners, and protecting legal claims.
Data processed:
– First name, surname, position or role, company name
– Work contact details
– History of communication, enquiries, orders, and business opportunities
Legal basis: performance of a contract (if you are a self-employed individual); for representatives and contact persons of legal entities, the controller’s legitimate interests.
Legitimate interests: managing business relationships, ensuring that orders are managed and coordinated effectively, communicating with customer and supplier contacts, and protecting legal claims.
C) Order fulfilment and invoicing (Article 6(1)(b) and (c) of the GDPR)
Purpose: Providing the services ordered, preparing contractual documentation, invoicing, and keeping accounts.
Data processed:
– Data from orders, contracts, acceptance certificates, and invoices
– Payment details
Legal basis: performance of a contract and compliance with legal obligations under Act No 431/2002 on accounting and Act No 222/2004 on value added tax.
D) Direct marketing (Article 6(1)(a) and (f) of the GDPR)
Purpose: Sending commercial offers and updates by email.
Data processed:
– First name, last name, email address, company name
– Responses to our emails
– Data from B2B forms
Legal basis: your consent; for existing customers and published B2B contacts, the controller’s legitimate interests in accordance with Section 116 of Act No 452/2021 on electronic communications.
Legitimate interests: informing existing customers and B2B partners about similar services.
E) Cookies and website traffic measurement (Article 6(1)(a) of the GDPR)
Purpose: Ensuring the website functions properly, measuring website traffic, and running and evaluating marketing campaigns.
Data processed:
– Cookie identifiers, IP address
– Device and browser data
– Pages visited and website interactions
Legal basis: strictly necessary cookies under Section 109 (8) of Act No 452/2021 on electronic communications; other cookies are used only with your consent given via the cookie banner, which you can change or withdraw at any time.
If you entrust us with documents containing personal data for translation, we process that personal data as a processor in accordance with your instructions and the data processing agreement. You are the controller of the personal data concerned.
3. RECIPIENTS OF PERSONAL DATA
We may disclose your personal data to the following categories of recipients:
Contracted processors:
– CRM and email campaign tool provider
– external collaborators (suppliers of translation, interpreting, proofreading, and linguistic services)
– cloud-based office services provider
– web hosting provider
– newsletter distribution service
– invoicing system provider
– external accounting firm
– external IT support
– providers of analytics tools listed in the cookie banner
Other recipients:
– social media platform operators involved in advertising campaigns
– public authorities, where required by law
All processors are contractually obliged to process personal data only on our instructions and in accordance with the GDPR. We will provide you with a current list of processors upon request.
4. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
We store your personal data primarily on servers in the European Union (EU) and the European Economic Area (EEA).
Personal data are transferred to third countries outside the EU/EEA only to a limited extent:
· Cloud and IT service providers: Some of our providers of IT services, cloud solutions, CRM systems, newsletter tools, and social media services are based in the United States (US) or provide technical support from there.
· External collaborators (linguists): In exceptional cases, where required by the assignment specifications (e.g. where a native speaker is needed for translation or interpreting into or from a foreign language), an assignment may be allocated to a linguist based outside the EU/EEA.
Such transfers take place only in compliance with the requirements of Chapter V of the GDPR, in particular on the basis of:
· Adequacy decisions: EU–US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) for certified providers in the United States, or other adequacy decisions for specific countries;
· Standard contractual clauses (SCCs): those set out in Commission Implementing Decision (EU) 2021/914 and entered into with the relevant supplier or external collaborator.
We will provide you with a copy of the safeguards for transfers to third countries on request. Please email [email protected].
5. RETENTION PERIODS
We retain your personal data only for as long as necessary for the relevant purpose, in particular:
– Website and email enquiries: one year from receipt
– Business communications and contact details: during our cooperation and for four years after it ends; if we do not begin working together, for one year after the last contact
– Invoices and accounting documents: 10 years following the year to which they relate
– Contracts: 10 years following the year in which they ended
– Direct marketing: until you withdraw your consent, unsubscribe, or object to the processing; we then retain only your email address and the date you unsubscribed or objected, so that we do not contact you again
– Cookies: in accordance with your cookie banner settings; we ask you to renew your consent at least once every 12 months and retain analytics data for no longer than 14 months
After the retention period expires, we will delete or anonymise personal data.
6. YOUR RIGHTS AS A DATA SUBJECT
You have the following rights in relation to the processing of your personal data:
Right of access to personal data (Article 15 of the GDPR)
You have the right to obtain confirmation from us as to whether we process your personal data and, if so, to access your personal data and obtain a copy.
Right to rectification (Article 16 of the GDPR)
You have the right to have inaccurate personal data rectified and incomplete personal data completed.
Right to erasure (Article 17 of the GDPR)
You have the right to have your personal data erased, in particular if:
– they are no longer necessary for the purposes for which they were obtained,
– you withdraw your consent and there is no other legal basis,
– they were processed unlawfully.
This right is limited if we are obliged to retain the data by law.
Right to restriction of processing (Article 18 of the GDPR)
You have the right to restrict processing, for example if you contest the accuracy of the data or if you have objected to the processing.
Right to data portability (Article 20 of the GDPR)
You have the right to receive, in a structured, commonly used, and machine-readable format, the personal data you have provided to us under a contract or with your consent.
Right to object (Article 21 of the GDPR)
You can object to receiving marketing emails at any time without giving a reason by clicking the unsubscribe link in the email or emailing [email protected]. You may object to other processing based on legitimate interests on grounds relating to your particular situation.
Right to withdraw consent (Article 7 (3) of the GDPR)
If the processing is based on consent (marketing, cookies), you can withdraw your consent at any time as easily as you granted it. The withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.
Right to lodge a complaint (Article 77 of the GDPR)
If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint (an application to initiate personal data protection proceedings) with the supervisory authority:
Personal Data Protection Office of the Slovak Republic
Email: [email protected]
Website: www.dataprotection.gov.sk
7. HOW TO EXERCISE YOUR RIGHTS
You can exercise your rights by sending a request:
– by email: [email protected]
– by post: glocco s.r.o., Zámocká 36, 811 01 Bratislava
We will respond to your request free of charge and without undue delay, and in any event within one month of receiving it. In justified cases, we may extend this period by a further two months, and we will inform you of any such extension. If we have doubts about your identity, we may ask you to verify it.
8. AUTOMATED DECISION-MAKING AND PROFILING
We do not use your personal data for automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
9. SOURCES OF PERSONAL DATA
We collect most of your personal data directly from you. We also obtain some data from other sources:
– from your employer or business partner: the contact details (first name, surname, work email address, telephone number, and position or role) of individuals acting on behalf of a legal entity or designated as contacts for communication concerning enquiries, orders, or the performance of contracts
– data from advertising forms on the social media platform where the advert appeared
10. REQUIREMENT TO PROVIDE PERSONAL DATA
Providing personal data is voluntary. However, without your contact details, we cannot handle your enquiry or fulfil your order. Billing information is required by law.
11. FINAL PROVISIONS
This privacy notice is published on glocco.com, where its current version is always available.
Version: 2.0, effective date: 26 October 2026
Information for job applicants pursuant to Article 13 of the GDPR
1. DATA CONTROLLER
The controller responsible for processing your personal data is glocco s.r.o. (registered office: Zámocká 36, 811 01 Bratislava; company identification number: 47588292).
If you have any questions about the processing of your personal data, please email us at [email protected].
2. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process your personal data for the following purposes and on the following legal bases:
A) Selection process (Article 6(1)(b) of the GDPR)
Purpose: Assessing your application, communicating with you, and conducting the selection process for the position you are applying for.
Data processed:
– Identification and contact details: first name, surname, email address, telephone number
– Curriculum vitae and cover letter
– Education, work experience, language skills, and professional skills
– Interview notes and results
– References from people you have named as referees
Legal basis: Taking steps at your request prior to entering into an employment contract.
B) Candidate database – talent pool (Article 6(1)(a) of the GDPR)
Purpose: Including you in our internal database of job applicants, retaining your CV (whether submitted as part of a specific selection process and retained after it ends, or submitted separately without reference to an open position), and contacting you about suitable future job opportunities at glocco s.r.o.
Data processed:
– Identification and contact data (first name, surname, email address, phone number), CV, cover letter, information about education, work experience, skills, and preferences.
– Interview notes and results (if an interview took place)
– References from people you have named as referees
Legal basis: Your separate consent. Consent is voluntary. Choosing not to give it will not affect the selection process, and you can withdraw it at any time by emailing [email protected].
3. RECIPIENTS OF PERSONAL DATA
We may disclose your personal data to the following categories of recipients:
Internally:
– the HR department and the head of the unit seeking to fill the vacancy
Contracted processors and external service providers:
– Recruitment (HR) system provider
– Job boards and advertising portals
– Cloud-based office services provider (email)
– Web hosting provider (web form)
All processors are contractually obliged to process personal data only on our instructions and in accordance with the GDPR. We will provide you with a current list of processors upon request.
4. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
We store your personal data primarily on servers in the European Union (EU) or European Economic Area (EEA).
In connection with our use of supporting cloud services, recruitment management software, and IT infrastructure, your personal data may be transferred to third countries outside the EU/EEA (particularly the United States) or accessed remotely from those countries, but only to a limited extent and solely for the purposes of technical support, maintenance, and ensuring the security of these services.
Such transfers are carried out on the basis of the European Commission’s adequacy decision under the EU–US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) or standard contractual clauses adopted by the European Commission (Commission Implementing Decision (EU) 2021/914). We will provide you with a copy of these safeguards on request. Please email [email protected].
5. RETENTION PERIODS
We retain your personal data only for as long as necessary for the relevant purpose, in particular:
– Selection process: for its duration, with the data deleted no later than three months after it ends
– Talent pool: 36 months from the date consent is given or until it is withdrawn, whichever is earlier, after which the data will be automatically deleted or anonymised
– If you are hired, your personal data will be transferred to your personnel file and will thereafter be subject to the employee privacy notice
After the retention period expires, we will delete or anonymise personal data.
6. YOUR RIGHTS AS A DATA SUBJECT
You have the following rights in relation to the processing of your personal data:
Right of access to personal data (Article 15 of the GDPR)
You have the right to obtain confirmation from us as to whether we process your personal data and, if so, to access your personal data and obtain a copy.
Right to rectification (Article 16 of the GDPR)
You have the right to have inaccurate personal data rectified and incomplete personal data completed.
Right to erasure (Article 17 of the GDPR)
You have the right to have your personal data erased, in particular if:
– they are no longer necessary for the purposes for which they were obtained;
– you withdraw your consent and there is no other legal basis;
– they were processed unlawfully.
This right is limited if we are obliged to retain the data under applicable legislation.
Right to restriction of processing (Article 18 of the GDPR)
You have the right to restrict processing, for example if you contest the accuracy of the data or if you have objected to the processing.
Right to data portability (Article 20 of the GDPR)
You have the right to receive, in a structured, commonly used, and machine-readable format, the personal data you have provided to us under a contract or with your consent.
Right to object (Article 21 of the GDPR)
You have the right to object at any time to processing based on legitimate interests. We do not rely on legitimate interests for either the selection process or the talent pool.
Right to withdraw consent (Article 7(3) of the GDPR)
You can withdraw your consent to be included in the talent pool at any time; we will then delete your data. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint (Article 77 of the GDPR)
If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint (an application to initiate personal data protection proceedings) with the supervisory authority:
Personal Data Protection Office of the Slovak Republic
Email: [email protected] Website: www.dataprotection.gov.sk
7. HOW TO EXERCISE YOUR RIGHTS
You can exercise your rights by sending a request:
– by email: [email protected]
– by post: glocco s.r.o., Zámocká 36, 811 01 Bratislava
We will respond to your request free of charge and without undue delay, and in any event within one month of receiving it. In justified cases, we may extend this period by a further two months, and we will inform you of any such extension. If we have any doubts about your identity, we may ask you to verify it.
8. AUTOMATED DECISION-MAKING AND PROFILING
We do not use your personal data for automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
9. SOURCES OF PERSONAL DATA
We collect personal data directly from you, in particular through:
– responses to a job advert on a job board
– a web form or email
– interviews and other communication with you – unsolicited submission of a CV or job application via our web form (https://glocco.com/sk/o-nas/#karierny-formular) or by email
– communication with you, interviews, and completed assignments or tests
– your publicly available profile on professional networking sites (e.g. LinkedIn), if you contact us through your profile or respond to a job opportunity
We only obtain references from people you have named as referees.
10. REQUIREMENT TO PROVIDE PERSONAL DATA
The provision of personal data is voluntary. However, without a CV and contact details, we cannot assess your application.
11. FINAL PROVISIONS
This job applicant privacy notice is published on glocco.com, where the current version is always freely available.
Version: 2.0, effective date: 26 October 2026
Information for external translators, interpreters, and experts pursuant to Articles 13 and 14 of the GDPR
1. DATA CONTROLLER
The controller responsible for processing your personal data is glocco s.r.o. (registered office: Zámocká 36, 811 01 Bratislava; company identification number: 47588292).
If you have any questions about the processing of your personal data, please email us at [email protected].
2. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process your personal data for the following purposes and on the following legal bases:
A) Selection and engagement of external collaborators (Article 6(1)(b) of the GDPR)
Purpose: Selecting and keeping records of external collaborators, verifying your professional qualifications, and assessing your suitability for working with us and entering into a cooperation agreement.
Data processed:
– Identification and contact details: first name, surname, title, address, email address, telephone number
– Curriculum vitae, details of education and professional experience, certificates, language combinations, references
– Results of initial tests and sample translations
Legal basis: taking steps at your request prior to entering into a contract.
B) Performance of the cooperation agreement and management of assignments (Article 6(1)(b) of the GDPR)
Purpose: Performance of the cooperation agreement, allocation and execution of assignments, communication with you, and access to work systems.
Data processed:
– Identification data (first name, surname, address, company identification number, tax identification number/VAT number, signature)
– Contract documentation
– Assignment history
– Login credentials and user accounts in work systems
Legal basis: performance of a contract to which you are a party.
C) Collection and provision to clients of copies of identity documents and criminal record extracts (Article 6(1)(a) of the GDPR — CONSENT)
Purpose: Collecting copies of identity documents and either copies of criminal record extracts (Criminal Background Check) or information from those extracts, and subsequently providing them to specific clients of the controller who contractually require these documents to be prepared and submitted as a condition for assigning linguists to work involving sensitive, confidential, or classified material (e.g. court, police, financial, or security files) or for audit purposes.
Data processed:
– Copy of an identity document (identity card or passport), collected and retained where contractually required by the client or for the purposes of a client audit
– Information contained in, and a copy of, a criminal record extract or equivalent document confirming integrity, where contractually required by the client
Legal basis: your explicit and voluntary consent (Article 6(1)(a) of the GDPR). You give this consent before being allocated a particular assignment or in relation to a category of assignments requiring verification. You can withdraw your consent at any time free of charge.
D) Compliance with legal obligations and accounting (Article 6(1)(c) of the GDPR)
Purpose: Processing invoices, making payments, keeping accounts, complying with tax obligations, and providing assistance to public authorities.
Data processed:
– Billing details, bank details (IBAN/SWIFT), tax identifiers, summary of remuneration paid
Legal basis: Act No 431/2002 on accounting, Act No 222/2004 on value added tax, and Act No 595/2003 on income tax.
E) Legitimate interests of the controller (Article 6(1)(f) of the GDPR)
Purpose: Assessing the quality of our cooperation, maintaining internal records of supplier capacity, retaining the option of contacting you again about future projects, presenting your professional profile to clients in response to enquiries, inviting you to professional training courses, ensuring the security of IT systems, and protecting legal claims.
Data processed:
– Translation quality assessments, results of quality audits and mentoring
– Evaluations of our cooperation, and results of assessments, mentoring, and quality assessments provided by clients
– Professional profile: name, language combinations, specialisation, professional experience
– Contact details for sending invitations
– Login and security records
Legal basis: the controller’s legitimate interests in efficiently managing external capacity, ensuring the quality of services, and protecting legal claims.
Special note on clients’ tools:
The client records assessments and their results in its own system; glocco s.r.o. has access to the results and uses them to assess the quality of its collaboration with you. The client, acting as a separate controller, uses its own systems to record calls, carry out monitoring, and verify identity using a camera during interpreting assignments; glocco s.r.o. does not have access to these records.
3. RECIPIENTS OF PERSONAL DATA
We may disclose your personal data to the following categories of recipients:
The company’s clients:
– your professional profile and the results of the checks to the extent necessary for the specific assignment
– copies of identity documents and copies of criminal record extracts are provided to clients ONLY on the basis of your explicit consent, where contractually required by the client for a specific assignment
Contracted processors:
– provider of CRM software and a system for managing suppliers and assignments
– provider of translation software and CAT tools
– provider of cloud storage and office services
– provider of an invoicing system and payment management services
– external accounting firm
– external IT support
Public authorities:
– where required by law (e.g. the Financial Administration of the Slovak Republic)
All processors are contractually obliged to process personal data only on our instructions and in accordance with the GDPR. We will provide you with a current list of processors upon request.
4. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
We store your personal data primarily on servers in the European Union (EU) and the European Economic Area (EEA).
If a client to whom we provide copies of identity documents or criminal record extracts with your consent is based in a third country outside the EU/EEA, the transfer will take place only on the basis of your explicit consent or appropriate safeguards under the GDPR (an adequacy decision or standard contractual clauses – SCCs).
If you are located or work in a third country outside the EU/EEA, the transfer of personal data necessary for the performance of the contract is carried out on the basis of standard contractual clauses (SCCs) adopted by the European Commission (Commission Implementing Decision (EU) 2021/914) and entered into between you and glocco s.r.o.
Where we use cloud and support systems with technical support based in the United States, personal data are transferred on the basis of the European Commission’s adequacy decision under the EU–US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) or standard contractual clauses (SCCs). We will provide you with a copy of the safeguards on request.
5. RETENTION PERIODS
We retain your personal data only for as long as necessary for the relevant purpose, in particular:
– If we do not begin working together, we will delete the data collected during the selection process no later than six months after that process ends
– Cooperation agreement: 10 years following the year in which it ended
– Invoices and accounting documents: 10 years following the year to which they relate
– Supplier profile, evaluations, and contact details held in the database: throughout our cooperation and for four years after completion of the most recent assignment (to enable us to contact you about new projects), after which inactive contacts will be deleted or anonymised.
– Copies of identity documents and extracts from criminal records (processed on the basis of consent): They are retained for the duration of the assignment or cooperation for which consent was given, or until that consent is withdrawn. If consent is withdrawn or the assignment in question ends, copies of these documents will be deleted and destroyed without delay.
– User accounts in work systems will be deactivated or closed without delay when our cooperation ends.
After the retention period expires, we will delete or anonymise personal data.
6. YOUR RIGHTS AS A DATA SUBJECT
You have the following rights in relation to the processing of your personal data:
Right of access to personal data (Article 15 of the GDPR)
You have the right to obtain confirmation from us as to whether we process your personal data and, if so, to access your personal data and obtain a copy.
Right to rectification (Article 16 of the GDPR)
You have the right to have inaccurate personal data rectified and incomplete personal data completed.
Right to erasure (Article 17 of the GDPR)
You have the right to have your personal data erased, in particular if:
– they are no longer necessary for the purposes for which they were obtained,
– you withdraw consent and there is no other legal basis,
– they were processed unlawfully.
This right is limited if we are required to retain the data by law.
Right to restriction of processing (Article 18 of the GDPR)
You have the right to restrict processing, for example if you contest the accuracy of the data or if you have objected to the processing.
Right to data portability (Article 20 of the GDPR)
You have the right to receive, in a structured, commonly used, and machine-readable format, the personal data you have provided to us under a contract or with your consent.
Right to object (Article 21 of the GDPR)
You have the right to object at any time to the processing of your personal data on the basis of legitimate interests (point 2E), particularly the presentation of your profile to clients and the sending of invitations to training courses. You can do so by emailing [email protected] or [email protected].
Right to lodge a complaint (Article 77 of the GDPR)
If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint (an application to initiate personal data protection proceedings) with the supervisory authority:
Personal Data Protection Office of the Slovak Republic
Email: [email protected] Website: www.dataprotection.gov.sk
7. HOW TO EXERCISE YOUR RIGHTS
You can exercise your rights by sending a request: – by email: [email protected]
– by post: glocco s.r.o., Zámocká 36, 811 01 Bratislava
We will respond to your request free of charge and without undue delay, and in any event within one month of receiving it. In justified cases, we may extend this period by a further two months, and we will inform you of any such extension. If we have doubts about your identity, we may ask you to verify it.
8. AUTOMATED DECISION-MAKING AND PROFILING
We do not use your personal data for automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
9. SOURCES OF PERSONAL DATA
We collect most of your personal data directly from you (through your CV, communications with you, initial forms, and certificates). We may also obtain some personal data from third parties, namely our clients: the results of assessments of translation and interpreting quality, feedback, and the results of quality audits carried out for specific assignments.
10. REQUIREMENT TO PROVIDE PERSONAL DATA
Providing a copy of an identity document and a criminal record extract (and consenting to their disclosure to the client) is voluntary. Please note, however, that unless you give your consent and provide these documents, we will be unable to allocate you to particular assignments for which the client contractually requires them.
11. FINAL PROVISIONS
This privacy notice for external collaborators is published and freely available on glocco.com. It is also provided as an annex to the cooperation agreement or via a link in that agreement, and is available on request.
Version: 2.0
Effective date: 26 October 2026
