Notice to candidates on the protection of personal data
This Notice to candidates on the protection of personal data (hereinafter: Notice) applies to all candidates who send their job application with a CV and/or motivation letter or other personal data to the e-mail addresses: careers@pekauto.com or hr@pekauto.com, apply for a job vacancy or register in the database of job candidates at the web address: https://pekauto.com/, or otherwise provide your personal data to PEK AUTOMOTIVE d.o.o.
This Notice is issued on the basis of Article 13 of the General Regulation on the Protection of Personal Data (Regulation (EU) 2016/679 of the EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter: GDPR) regarding the processing of personal data provided by the candidate. Personal data is processed in accordance with the GDPR on the protection of personal data and with the applicable law governing the protection of personal data.
1) Controller
The controller of your personal data is: PeK Automotive d.o.o., Obrtniška ulica 17, 1370 Logatec
Registration number: 8451273000
Tax code: SI 41693744
Telephone: +386 30 777 050
E-mail: legal@pekauto.com
Contact details of the Data Protection Officer
The controller does not have a designated Data Protection Officer. If you have any questions regarding the processing of your personal data, you can contact us by telephone at +386 30 777 050 or by e-mail at the e-mail address hr@pekauto.com.
3) purposes of processing your personal data
We will use your personal data to verify eligibility for vacancies and the related process, to establish contact with the candidate regarding vacancies and to establish a candidate database if you gave consent.
4) Legal basis for processing personal data
We only process your personal data:
• based on your prior consent (Article 6 (1) (a) GDPR);
• when processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6 (1) (b) GDPR);
• when processing is necessary for compliance with a legal obligation (Article 6 (1) (c) GDPR).
5) Personal data that we process
We only process personal data that you voluntarily enter when filling out the form and attach it as an attachment or that you otherwise voluntarily provide to us. These personal data are, for example, but not exclusively: name, surname, e-mail, telephone number, CV.
6) Who processes you personal data
Authorized employees of the controller may access personal data in the candidate database, the job application process, or the employment process at the controller.
7) Transfers of personal data to third parties (users of personal data) and to third countries
Personal data is not transferred to third parties or to third countries, except when the provider of the employee’s email address is located in a third country. Personal data is not shared with other users. If the candidate withdraws their consent to the processing of personal data, it will no longer be processed for the specified purpose.
8) Retention period of personal data
Personal data:
• is processed in the job applicants register for two years from the given consent. After this period, the personal data will be deleted;
• of job applicants is retained until the end of selection process and for as long as necessary to protect rights and interests of the controler in the event of legal, administrative or other proceedings, in accordance with applicable law.
9) Information on the rights
The individual can request access to personal data concerning them, the right to correction, objection, deletion, or restriction of processing, provided that the conditions specified by the GDPR and the applicable law governing data protection are met.
The individual can exercise their rights via the email address: hr@pekauto.com. The individual has the right to withdraw their consent at any time if the processing of personal data is based on the individual’s consent, whereby the withdrawal of consent does not affect the processing that was lawfully carried out before the withdrawal.
Right to lodge a complaint with the supervisory authority: the individual can file a complaint with the Information Commissioner (address: Information Commissioner, Dunajska 22, 1000 Ljubljana, email: gp.ip@ip-rs.si, phone: 01 230 97 30, website: www.ip-rs.si).
10) Obligation to provide personal data
The provision of personal data is voluntary. The provision of personal data is neither a contractual nor a legal obligation of the individual. If the individual does not provide the personal data necessary to check the conditions for employment with the aim of concluding an employment relationship with the selected candidate, the individual cannot participate in the selection process for a vacant position.
11) Automated decision-making and profiling
Candidates personal data is not subject to automated decision-making, nor is it subject to profiling.
12) Changes to Notice
We reserve the right, at our sole discretion, to update, modify or replace any part of the Notice by posting the update or modified version on our website without prior notice. Any change will take effective from the date the revised Notice is publicly posted on our website.
Logatec, 11.02.2026
