This article deals with the law of the Slovak Republic and its application by Slovak courts and authorities.
Every employer works with the personal data of its employees – from names and addresses through bank account numbers to information about health status or attendance. GDPR sets clear rules on how to handle this information so that it is protected and processed only for legitimate purposes. Failure to follow these rules can lead to high fines and a loss of employee trust.
The basic principle is that personal data may be processed only for a specific, predefined purpose and to the necessary extent. The employer processes most employee data based on the performance of the employment contract or legal obligations – for example, for contributions, payroll administration, or attendance records. Employee consent is required only exceptionally in an employment relationship, as it is not considered fully free.
The employer must transparently inform employees about what data it collects about them, for what purpose, how long it retains it, and to whom it may provide it. This information obligation is most often fulfilled through an internal document or notice available to the employee. Data should not be kept longer than necessary.
Special attention is required for sensitive data, such as information about health status, as well as employee monitoring – for example via a camera system, email monitoring, or GPS in company vehicles. Such processing is permissible only under stricter conditions, and employees must be informed about it in advance. Unauthorized monitoring is among the most common mistakes.
In practice, we recommend having clear internal rules in place, well-informed employees, and adequate technical and organizational measures to protect data. It is also important to know how to correctly respond to employee requests for access to their data or to a potential security incident. Good preparation significantly reduces the risk of sanctions.
If you are not sure whether your company processes employee personal data in compliance with GDPR, we will be happy to help. At the Kohút & Partners law firm in Zvolen, we offer a consultation at a fixed price with a response within 24 hours. Get in touch with us and gain the certainty that you have everything set up correctly.