U. S. Steel Košice, s.r.o. pays a maximum attention to the processing and the protection of personal data of its employees, the employees of its subsidiaries, affiliates, and other data subjects, with an emphasis on the prevention of unauthorized interference with the privacy of natural persons and the respect for the principles of lawful processing.

U. S. Steel Košice, s.r.o. processes personal data in accordance with applicable laws, in particular, with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Act No. 18/2018 on the protection of personal data, amending certain acts.

The company processes personal data for compliance with legal obligations, protection of the controller's legitimate interests, where the processing is necessary for the performance of a contract and, in certain cases, on the basis of the consent of the data subject. The information on processing is provided to the data subjects. It is also available at any time on the company's website the www.usske.sk and/or on the USSK intranet.

1. processed lawfully, fairly and in a transparent manner in relation to the data subject ("lawfulness, fairness and transparency");

2. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; ("purpose limitation");

3. adequate, relevant and limited to what is necessary in relation to the initial purposes ("data minimization");

4. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay ("accuracy");

5. kept in the form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; ("storage limitation");

6. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures ("integrity and confidentiality").

Prior to any new systematic processing or change of processing of personal data, the manager concerned shall consult such processing with the Data Protection Officer - personal data protection process manager.

Persons having access to personal data are required to strictly adhere to the rule of strict confidentiality of such information, and this obligation shall survive the termination of their employment.

The protection of personal data is a matter of concern for all of us. Every employee is required to report any personal data breach without any undue delay via the RSD Portal, by telephone at HELP DESK - 3-4400, or at the email address dataprotection@sk.uss.com.