Data Security

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - hereinafter referred to as "GDPR"), we inform you that we process personal data as follows:

Personal data processed on the basis of consent Legal basis: Art. 6(1)(a) of the GDPR

Source of collected data: Personal data is obtained directly from the person whose data is being processed.

Purpose of processing: To carry out the purpose specified directly in the terms of the granted consent (as stated in the notice).

Scope of processed data: The scope of the processed data is specified directly in the terms of the granted consent (as stated in the notice).

Voluntary provision of data: Providing data is voluntary, but necessary to achieve the purpose specified in the terms of the consent expressed. Consent may be given by clicking a checkbox containing the terms of the granted consent or by clicking a button indicating agreement to the terms of the given consent.

Right to withdraw consent: Consent may be withdrawn at any time. In the case of a newsletter subscription, this can be done by clicking a button in the email footer, and in other cases it can be done by sending us an email.

Retention period: We process personal data from the moment you give your consent until you withdraw it (primary purpose), subject to our right to process information such as:

identifying data regarding the granted consent (IP address, email or phone number, name and surname), date of consent, date of withdrawal of consent, information about the way the purpose was achieved during the granted consent (e.g. information about sent messages).

This information is stored for the so-called secondary purpose, which allows for the possibility of reviewing complaints and processing this information for the time necessary to establish, pursue or defend legal claims under Czech law. Please note that after you withdraw your consent, we will not process your data in any other way.

Data recipients: Access to data may be granted to entities cooperating with us to pursue the purpose specified in the terms of the granted consent (including, but not limited to:

IT service providers, marketing agencies, research and consulting agencies). Data may also be made available to public authorities, if required by law.

Personal data processed in connection with the performance of a contract or taking actions at the request of the person whose data concerns, prior to the conclusion of the contract

Legal basis: Article 6(1)(c) GDPR

Source of collected data: personal data is obtained directly from the person whose data concerns or from another person in the company (e.g. a supervisor invites employees to create an account).

Purpose of processing: performing a contract for the provision of services or taking actions to begin the provision of services.

Scope of processed data: the scope of processed data includes name, surname, place of work, email address or other data provided in connection with the performance of the contract, which is necessary to provide the service.

Voluntary provision of data: providing data such as name, surname, email address, place of work is necessary for the service to be provided. In addition, providing data at the stage of concluding the contract is necessary to start providing the service and later to perform the contract.

Retention period: We process personal data from the moment of cooperation in order to start providing the service. If the contract is not concluded and there is no further communication with the Client, the data is deleted within 30 days. If the contract is concluded, the data is processed for the entire duration of the contract and after its completion for the period specified by Czech law for determining, pursuing or defending legal claims. Data processed after the contract has ended includes information on how our services have been used.

Data recipients: Our employees, associates, and external companies that are implementing a specific process related to the achievement of the purpose for which consent is granted have access to the data. Information about the recipients can be found in the conditions of the consent given and additional information can also be found in section 3 and 4 of the Privacy Policy.

Personal data processed in connection with a customer satisfaction survey

Legal basis: Article 6(1)(f) GDPR.

Source of collected data: personal data is obtained directly from the person whose data concerns.

Purpose of processing: the legitimate interest consists in studying customer satisfaction and collecting feedback in connection with the performance of the contract.

Scope of processed data: the scope of processed data includes name, surname, place of work, email address.

Voluntary provision of data: providing data is voluntary. Participation in the survey is not mandatory.

Retention period: We process personal data from the moment we receive the survey. If the survey is not completed, the data is deleted within 30 days. If the survey is completed and we receive answers, we process them for a period of 2 years.

Personal data processed for the purpose of reviewing requests, complaints or claims

Legal basis: Article 6(1)(f) GDPR.

Source of collected data: personal data is obtained directly from the person whose data concerns.

Purpose of processing: the legitimate interest of examining a complaint, request or complaint and providing an answer.

Scope of processed data: the scope of processed data includes data provided on the complaint/complaint/request form.

Voluntary provision of data: Providing data is voluntary, although we have the right to require the provision of identifying data for the possibility of resolving the complaint/complaint/request when it concerns the service provided. Retention period: We process personal data from the moment the complaint/complaint/request is sent. After resolving the complaint/complaint/request, we have the right to retain information on the way the complaint/complaint/request was resolved and the complaint/complaint/request was made for the period specified by Czech law for determining, pursuing or defending legal claims.

Personal data processed in connection with the storage of documentation andthe fulfilment of legal obligations incumbent on us:

Legal basis: Article 6(1)(b) of the GDPR.

Source of collected data: personal data is obtained directly from the person concerned.

Purpose of processing: fulfillment of legal obligations as specified in the law (e.g. tax regulations, labor laws, etc.).

Scope of processed data: the scope of processed data includes financial data or other data whose collection and storage requirements are specified in the law (e.g. on employment) Voluntary provision of data: the provision of data is necessary to fulfil legal obligations.

Processing time: we process personal data from the moment of their acquisition for the purpose of fulfilling the legal obligations until the legal obligations are fulfilled. The laws specify the periods for which certain data must be stored.

Data recipients: access to data is granted to our employees, co-workers, and external companies that carry out a given process related to the fulfilment of the purpose for which consent is given. Information about recipients can be found in the conditions of the consent granted and you can also find additional information in section 3 and 4 of the Privacy Policy.