Principles of personal data processing

This text was translated by a machine. Please excuse any potential translation errors.

1. Principles of personal data processing

Our company ADOZ, s.r.o., ID number: 463 45 876, with its registered office at Výrobní 1441, 593 01 Bystřice nad Pernštejnem,registered at the Regional Court in Brno, Section C, File 5678, will process your personal data. This policy sets out the rules we will follow when processing your personal data in order to preserve the right to the protection of your personal data, your right to privacy and to prevent the misuse of your personal data. We will follow this policy for as long as we process any of your personal information.
The rules on the processing of personal data set out in this policy correspond to the obligations imposed on us by the processing of personal data by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. and repealing Directive 95/46 / EC - General Data Protection Regulation (hereinafter "GDPR").
Through these policies, we also inform you of the facts and your rights that you must be informed of in accordance with the GDPR, thus ensuring sufficient transparency and openness in the processing of your personal data.
These policies set out the procedures and principles on the basis of which we will process and handle your personal data. In case anything is unclear or you would like to ask anything about your personal data, use the contact details below.

2. Collection of personal data

2.1 Reasons for collecting personal data

We will collect and process personal data from you only if it is necessary for:
a) Fulfillment of the contract you have concluded or want to conclude with us.
b) Providing the service you want to use.
c) Compliance with the requirements of the law.
d) Protection of your vital interests.
e) The purposes of our legitimate interests, unless in such a case your interests or your fundamental rights and freedoms requiring the protection of personal data do not take precedence.

2.2 Shipping for direct marketing purposes

One of the legitimate interests may be the processing of your personal data for the purpose of direct marketing - sending business messages. This means that if you have already bought some goods from us or used the service we provide, we may occasionally send you an offer of similar products that might be of interest to you. However, you can cancel the sending of these business messages at any time via the link contained in the sent business message or via the contact email below, and then we will not send you anything.

2.3 Consent

In other cases, we may only collect and process your personal data with your express and free consent. You can revoke your consent at any time through the contact information provided in this policy. The specific conditions for the use of your personal data after granting consent are always stated in each individual consent.

2.4 Collection of personal data

We collect your personal data from you or from third parties who cooperate with us and have obtained personal data from you in accordance with the law and may pass it on to us. In any case, we will always follow these principles and the law when using your personal data, no matter how we obtain it.
We will either explicitly request your personal data from you, or we may obtain it if you register for our services, enter into a contract with us, or use a service. Alternatively, you can provide us with your personal data, for example, by filling out forms on the website, or by communicating with us via telephone, e-mail, internet discussion or otherwise. We further collect some of your personal data automatically with your consent, for example by using cookies when you visit our website.
We will always inform you about the specific reason for processing your personal data in each specific case. This information is either stated directly in the contract, in the terms of service provided or in this policy. Alternatively, you can ask us at any time about the reasons for processing your personal data through the contact details below.

3. Use of your personal data

We use your personal information primarily to provide you with our services, to be able to enter into the required contract, to fulfill the concluded contract, to comply with legal requirements, to notify you of changes in our services in order to improve our services or provide you with a better customer experience. We may also, with your consent, use this information to inform you of other services and products that we or selected third parties offer that may be of interest to or use you. We will always inform you about any further use of your personal data.

4. Transfer of your personal data to other persons

4.1 Transfer of personal data

We will not share your personal information with anyone except as described in this policy.
Your personal data will be accessible to employees of our company who will be authorized to work with this personal data. All employees who will have access to your personal data are bound by confidentiality in writing, so your personal data may not be disseminated anywhere. These employees are also responsibly selected, familiar with internal data protection rules, and also properly trained to know how to handle your personal data and under what conditions it may be processed. We strive to ensure the best possible protection of your personal data.
We will pass on your personal data to certain third parties if necessary. These people are called processors. Our company is responsible for ensuring that these processors provide appropriate guarantees for the processing of your personal data. We select all processors responsibly. At the same time, the processors will be contractually obliged to fulfill their obligations in the protection of your personal data, which will contractually ensure that your personal data will be sufficiently protected and the risk of their misuse will be minimized.

4.2 Third parties to whom personal data will be transferred

Here are the categories of persons (recipients), including the purpose of the transfer, to whom we can transfer your personal data and who can thus gain access to your personal data:

• Legal advisers, use of legal advice.
• Accounting consultants, use of accounting services.
• Tax advisors, use of tax advice.
• Marketing consultants, use of marketing consulting and services.
• IT service providers, IT administration and user application management.
• Website Administrator Manage our website.
• Providers of online tools, the use of these tools to improve the quality of our services and your customer experience.
• Providers of services for the distribution of messages, ensuring the distribution of business and other messages.
• Carriers, transport of ordered goods.
• Subcontractors, providing subcontracting for the service you ordered.

If you give us your consent, we may pass some information to selected third parties to inform you about services and products that we or selected third parties offer and that might be of interest to you.
We may also share your personal information with other third parties in order to prevent crime and reduce risks, if required by law and where we deem it appropriate, in response to litigation, or to protect the rights or property of our company, our partners or Your.

4.3 Transfer of personal data to Bisnode Česká Republika, a.s.

Data related to the payment of our invoices may be passed to Bisnode Česká republika, a.s., which may further process this data, including your personal data, in order to monitor and evaluate the payment discipline of specific business entities. You can exercise all the rights you have as a data subject under our personal data protection legislation against both our company and Bisnode. More information about Bisnode and its processing of personal data can be found at www.bisnode.cz/privacy.

4.4 Transfers outside the EU

Your personal data is not transferred to countries outside the European Union or to international organizations, except in situations where it is transferred there for better data backup and protection and situations explicitly stated in this policy.

5. Automatic individual decision-making and profiling

When processing your personal data, our company does not perform any automatic individual decisions or profiling that would have any legal effects for you or would otherwise significantly affect you. In the event that this changes, we will inform you immediately.

6. Time of personal data processing

We only process your personal data for as long as is strictly necessary. If your personal data is no longer needed for processing purposes, we will delete it immediately.

If we process your personal data on the basis of consent, the processing time is stated in this consent.
If we process your personal data as a result of legal provisions, we process them for the period required by law. In the event that the law requires the archiving of certain data, we archive this personal data of yours in accordance with the law for the required period.
In the event that we process your personal data as a result of concluding a contract or providing a service, we will process your personal data for the duration of this contract or providing the service and 20 years after the termination of the contract or provision of the service. In the event that court or other proceedings are initiated that require your personal data, we will process them throughout these proceedings, including any enforcement and other follow-up proceedings.

7. Your rights

7.1 The right to information

You can contact us at any time to send you a confirmation of our processing of your personal data, using the contact details below. If we process your personal data, you have the right to access this information:
a) For what purpose do we process your personal data and what are their categories.
b) Who are the recipients and processors of your personal data.
c) For how long your personal data will be stored and, if this period cannot be determined, the criteria used to determine this period.
d) For which personal data you may request their deletion or restriction of processing and raise an objection to such processing.
e) The right to lodge a complaint with the Supervisory Authority.
f) About sources of personal data, if they were not obtained from you.
g) Whether there is automatic individual decision-making or profiling.
If you ask us to do so, we will provide you with a copy of your personal data that we process. If you request additional copies, you may incur additional costs. If you request in electronic form, copies will be provided to you in electronic form, unless you request another form. However, we have the right to ask you to verify your identity to ensure that this information regarding your personal data does not reach an unauthorized person.
We will try to provide you with the information as soon as possible, depending on the scope you require. However, within 30 days at the latest.

7.2 Right of rectification

If you find that we have inaccurate, incorrect or incomplete information about your personal data, you have the right to have this personal data of yours without undue delay after you have communicated, corrected or supplemented it to us.

7.3 The right to be forgotten - the right to delete

You have the right to delete your personal data without undue delay if:
a) your personal data is no longer needed for the purposes for which they were collected.
b) you withdraw your consent.
c) object to the processing.
d) we have processed your personal data illegally.
e) deletion will fulfill the legal obligation under the law.
f) personal data has been collected in connection with the provision of information society services.
However, we will not delete your personal data for the above reasons, if there is one of the reasons under Article 17 (3) of the GDPR.
If your personal data has been disclosed or has been passed on to third parties, we will also ensure the deletion of this personal data, if this is technically possible and feasible.

7.4 The right to restrict processing

You have the right to restrict the processing of your personal data if:
a) you inform us that your personal data is inaccurate until we verify the accuracy of the personal data.
b) we process your personal data illegally, but instead of deleting you, you will ask us to limit their use.
c) we will no longer need your personal data, but you will request it to determine, enforce or defend legal claims.
(d) you have objected to the processing, pending a review of its legitimacy.
During the processing restriction, your personal data may only be stored, otherwise they may only be processed with your consent, for the purpose of determining, enforcing or defending legal claims or for reasons of public interest.

7.5 The right to object

You have the right to object to the processing of your personal data if we process it for direct marketing purposes. Objections must be sent to us in writing or by email, which is listed below. If you object to processing for direct marketing purposes, we will no longer process your personal data to this extent unless we demonstrate compelling legitimate reasons for processing that outweigh your interests or rights and freedoms, or for determining, enforcing or defending legal claims. .

7.6 Right of data portability

If you ask us to do so, we will pass on your personal data in a structured, commonly used format so that you can provide it to another administrator. However, if technically possible, you may want us to pass your personal data directly to the administrator you designate for us.

7.7 The right to file a complaint

You can make a complaint about the processing of your personal data or non-compliance with our obligations under the GDPR to the supervisory authority at any time. The supervisory authority in the Czech Republic is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 CZ-Prague 7, www.uoou.cz.

8. Measures in place

Our company has implemented personnel, organizational and technical measures to eliminate various serious risks to your rights and freedoms and to the protection of your personal data. To this end, we have trained all our employees who come into contact with personal data. Furthermore, all personal data in physical form is secured against unauthorized access. We then comply with security standards for personal data stored in electronic form and they are also secured against unauthorized access. At the same time, we have carried out a risk analysis in order to prevent risks and have taken appropriate measures to reduce the risks as much as possible.

9. Personal Data Protection Coordinator

Our company has no obligation to appoint or appoint a data protection officer within the meaning of the GDPR. However, she has appointed a data protection coordinator who is in charge of personal data protection in our company. You can contact the Data Protection Coordinator by email at oou@adoz.cz in any matter concerning your personal data and the exercise of your rights.

In case of any requests, requirements, comments or ambiguities, you can contact us via email oou@adoz.cz or in writing at the address of our registered office.

10. Conclusion

These policies were adopted on September 26, 2018. Our company may change these policies as long as they remain in accordance with the law and the GDPR. We will notify you of any changes to this policy on our website.

ADOZ18092601C