Principles of personal data processing and protection
Principles of processing and protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46 /EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation").
1. Personal data manager
U1 s.r.o., with registered office at Nejedlého 373/1, 638 00 Brno – Lesná, registered in the commercial register maintained by the Regional Court in Brno, section C, insert 41126, as the data controller (hereinafter referred to as the “Controller”) hereby informs you of the processing Your personal data and your rights.
2. The purpose of personal data processing
- fulfilment of legal obligations (mainly accounting, tax, archival and employment law)
- fulfilment of the contract and negotiation of its conclusion
- asserting claims from contractual relations after the termination of the contract (legitimate interest of the administrator)
- dissemination of business communications in the form of professional information and reports, marketing materials, offers of our goods and services (in the case of contacting our customers, this is a legitimate interest of the administrator)
- selection procedures for vacancies
- other purposes contained within the consent of the data subject
- other purposes within the administrator's legitimate interest
3. Category of data subjects
- customers
- employees
- suppliers of goods and services
- visitors and other persons moving around the administrator's premises
- visitors to the administrator's website
- job seekers
- other persons who are or are not in a contractual relationship with the administrator
4. Sources and categories of personal data that are processed
Sources of personal data:
- directly from data subjects
- publicly accessible registers, lists and records
- category of personal data:
address and identification data used for unambiguous and unmistakable identification of the data subject (e.g. first name, surname, title, or social security number, date of birth, address of permanent residence, social security number, bank account numbers) and data enabling contact with the data subject ( contact details – e.g. contact address, telephone number, fax number, e-mail address, etc.)
- other data necessary for the performance of the contract
- data provided beyond the scope of relevant laws processed within the framework of consent granted by the data subject (photo processing, etc.)
5. Category of recipients of personal data
- state and other authorities within the framework of the fulfillment of legal obligations established by relevant legal regulations
6. Method and period of processing and protection of personal data
The processing of personal data is carried out by the administrator. Processing is carried out at the administrator's headquarters by individual authorized employees of the administrator, or by an authorized processor. The processing takes place through computer technology, and possibly also manually for personal data in paper form, subject to compliance with all security principles for the management and processing of personal data. When processing personal data, there is no automated individual decision-making, not even on the basis of profiling. Time of processing and protection of personal data:
- in order to fulfill the contract, the data may be processed for the duration of the contractual relationship and warranty
- in order to exercise claims from contractual relationships after the termination of the contract, personal data may be processed for a period of 4 years from the termination of the contractual relationship, in the case of court proceedings for the entire duration of the proceedings
- in order to fulfill obligations in the field of accounting and taxation resulting from contractual relations with customers, personal data may be processed for a period of up to 10 years from the end of the tax period in which the performance provided to the customer took place
- in order to fulfill the obligation in the field of personnel management resulting from contractual relations with employees, personal data may be processed for up to 30 years from the end of the employment legal relationship
- in order to send commercial messages, marketing materials and offers of goods and services based on the provision of consent, personal data may be processed until consent is revoked
- to process personal data based on consent, personal data may be processed for the given purpose until consent is withdrawn
- for the purpose of the selection procedure, personal data may be processed until the end of the selection procedure, and then only on the basis of consent until it is revoked.
- in order to answer a data subject's question asked by the administrator (from the website, by email, etc.), personal data may be processed until the question is resolved, but no longer than for a period of 30 days after the question is resolved (for follow-up communication)
7. Personal data processing policy
- Legality
We process your personal data in accordance with applicable legal regulations, in particular GDPR.
- Consent of the data subject
We process personal data only in the manner and to the extent to which you have given us consent, if consent is the title of processing.
- Minimizing and limiting the processing of personal data
We process personal data only to the extent necessary to achieve the purpose of their processing and for no longer than is necessary to achieve the purpose of their processing.
- Accuracy of processed personal data
We process personal data with an emphasis on their accuracy using available measures. And using reasonable means we process personal data updated.
- Transparency
Through this Policy and the contact person, you have the opportunity to familiarize yourself with the way in which we process your personal data, as well as with their scope and content.
- Purpose Limitation
We process personal data only to the extent necessary to fulfill the stated purpose and in accordance with this purpose.
- Security
We process personal data in a way that ensures their proper security, including their protection using appropriate technical or organizational measures against unauthorized or unlawful processing and against accidental loss, destruction or damage.
8. Personal data processing time
In accordance with the periods specified in the relevant contracts, this is the time absolutely necessary to ensure the rights and obligations arising both from the contractual relationship and from the relevant legal regulations.
9. Your rights
- you have the right to access your personal data. the data controller will provide you with a free copy of the personal data being processed together with other related information. for any additional copies requested by you, the data controller has the right to charge a reasonable fee
- you have the right to correct inaccurate personal data and to supplement incomplete personal data
- if you exercise the right to erasure of personal data, the personal data controller is obliged to delete the relevant personal data if it does not process and store specific data for the fulfillment of its obligations arising from legal titles</li >
- you have the right to request from the personal data administrator restriction of the processing of personal data, i.e. for their simple storage and clear differentiation from other processed persons
- if we process your personal data based on your consent, you can exercise your right to withdraw consent. once we receive your withdrawal of consent, we will no longer process your personal data for the given purposes. in the paragraph "exercising your rights" you will find procedures for withdrawing consent (see below)
- if we process your personal data based on your consent or because it is necessary to fulfill the contract concluded between us, you have the right to data portability, i.e. the right to receive from us the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format, if the personal data is processed by us in this way. you have the right to transfer this data to another data controller or to request that we provide this data directly to another data controller if technically feasible. you can obtain your personal information through your user account or the contacts listed in this policy
- if a breach of our security is likely to result in a high risk to your rights and freedoms, we will notify you of the breach without undue delay, as you have a right to receive information about a security breach of your personal data; if appropriate technical or organizational measures have been used to process your personal data ensuring, for example, that it is not comprehensible to an unauthorized person, or we have taken additional measures to ensure that a high risk does not manifest itself, we do not need to pass on information about the breach to you
- you have the right to object to the processing of your personal data:
In the event that personal data is processed for the reason that the processing is necessary for the fulfillment of a task carried out in the public interest, or for the purposes of our legitimate interests, and you object to the processing, we cannot process the personal data further, unless we prove serious legitimate reasons for processing that override your interests, rights and freedoms, or for the determination, exercise or defense of our legal claims.
If personal data is processed for direct marketing purposes and you object to the processing, we will no longer process the personal data for these purposes.
- you have the right to file a complaint with the supervisory authority, i.e. the Office for the Protection of Personal Data (ÚOOÚ), if you believe that the processing of your personal data violates the legal regulations governing the protection of personal data</ li>
10. Exercising Your Rights
- to exercise your rights, you can contact us at any of the contacts below
- telephone contact: +420 603 165 020
- e-mail: zizka@u1.cz
- website: u1.cz
This Privacy Policy is effective as of 5/25/2018
