Personal data processing principles
The company ................, with registered office ..................., .................., ID no: ............, registered in the Commercial Register maintained by the Regional Court in ............... section ...., insert ......... (hereinafter referred to as the "Controller ") hereby, in accordance with the provisions of Article 12 et seq. Regulation (EU) 2016/679 of the European Parliament and of the Council effective from 25.5.2018, informs its customers about the processing of their personal data in case they use its services.
Personal data
The following personal data will be processed by the controller:
- Name and surname,
- Address,
- Your name, surname, first name, last name and surname, telephone number,
- e-mail,
- in the case of business entities, ID number, VAT number (hereinafter referred to as "personal data")
Purpose of processing
The purpose of the processing of personal data is the fulfilment of the legal obligations of the controller arising from the content of the contract concluded between you as the buyer and the controller as the seller, and the fulfilment of the legal obligations of the controller arising from generally binding legal regulations.
Recipients of personal data
Personal data processed for the performance of obligations arising from special legal regulations may be transferred by the controller to law enforcement authorities in justified cases. The controller may also disclose the personal data you provide to the following entities:
- Fill in the list of processors, we have prepared a list of the most frequently used services here: http://napoveda.wpj.cz/marketing/gdpr/
The legal basis here is the fulfilment of obligations under a contract concluded with the data subject and also the legitimate interests of the controller or a third party. Personal data belonging to special categories of personal data are not transferred.
Obligation to provide personal data
It is necessary to provide personal data to the controller in order to fulfil the rights and obligations arising from the content of the concluded contract.
Processing period
Personal data may be processed by the controller for as long as necessary for the performance of the rights and obligations arising from the concluded contract or for as long as necessary to resolve disputes arising from the concluded contract.
Instructions to the data subject
................. informs its customers that they have the right to:
- to obtain confirmation from the Controller as to whether or not the personal data concerning them are being processed and, if so, to have access to such personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations, the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data relating to the data subject or the restriction of their processing or to object to such processing, the right to lodge a complaint with a supervisory authority.
- the Controller to rectify inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, they have the right to have incomplete personal data completed, including by providing an additional declaration.
- the Controller to erase the personal data relating to them without undue delay, and the Controller is obliged to erase the personal data without undue delay if one of the following reasons applies: the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, the customer withdraws consent and there is no other lawful basis for processing it, the personal data has been unlawfully processed, the personal data must be erased to comply with a legal obligation under Union or Member State law to which the Controller is subject.
- to restrict the processing of their personal data by the Controller if they deny its accuracy for the period of verification of this fact by the Controller, the processing is unlawful and they request the Controller to restrict the processing instead of erasing it, the data is no longer necessary for the purpose of the processing but is needed for the establishment, exercise or defence of legal claims.
- the Controller, at their request, to transfer their personal data to another Controller designated by them.
- object to the processing of my personal data by the Controller.
- in case of doubt as to whether their personal data is processed by the Controller within the meaning of the above legal provisions, to contact both the Controller and the Office for Personal Data Protection
At ................... on ...................