INFORMATION ON PERSONAL DATA PROCESSING
provided under Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data
(hereinafter referred to as the “Regulation”)
We, Ugav s.r.o., with the registered office at Lihovarská 1060/12, Libeň, 190 00 Prague 9, Company ID No.: 27139069, a company registered in the Commercial Register under File No. C99228, maintained by the Municipal Court in Prague, in our capacity as personal data controller, hereby provide the following information concerning personal data processing in compliance with Article 12(1) of the Regulation.
PERSONAL DATA CONTROLLER:
Company: Ugav s.r.o.
Registered office: Lihovarská 1060/12, Libeň, 190 00 Prague 9
Contact details: marketing@sendeveloment.cz
PURPOSES OF PERSONAL DATA PROCESSING
The purpose of the personal data processing reflects the reason why your personal data are processed. We process your personal data exclusively and solely for the specific reason which involves fulfilment of our statutory or contractual obligations and/or enforcement of fulfilment of duties from third parties, including you, or exercising rights in relation to third parties, including you. Only in case of the personal data in respect of which you will give us your explicit personal consent the data will also be processed for purposes other than those specified below.
Your personal data are processed solely for the following purposes:
- fulfilment of the statutory obligations that our company is to fulfil under relevant legal regulations;
- performance of a contract that we have concluded with you (if any) and undertaking any acts necessary for the conclusion of the contract and, furthermore, any acts aimed at conclusion of the contract, such purposes of processing being applicable even in case of processing the personal data of the persons with whom we are in contact on the grounds that they act on behalf of or otherwise represent the party with whom we intend to conclude the contract or with whom we have already concluded the contract;
- protection of our assets against fraudulent or other unlawful acts, transfer of personal data within the group of companies to which the data controller belongs, specifically for administrative purposes, enforcement of legal obligations and protection of rights or for direct marketing which constitutes a legitimate interest in promoting our products and services;
- if your personal data are involved to the processing of which you have given us your explicit consent, we process them for purposes of their future use to offer goods and services of our Group as defined below.
LEGAL BASIS OF PERSONAL DATA PROCESSING
Legal basis for personal data processing is deemed to be the reason that the Regulation attaches to our right to process your personal data in our capacity as data controller. Our company processes your personal data exclusively by virtue of the following statutory reasons which include a concluded contract or legal regulation or a measure that is required to be taken prior to the conclusion of the contract or if the processing is required for our legitimate interests specified above. We do not envisage processing on any other legal grounds, however, cannot exclude the same. Nevertheless, we confirm that if we carry out the processing on other legal grounds, we will do so exclusively in compliance with the Regulation and other legal regulations. The personal data we process partially include the details you are obliged to give us under the contract or they involve data necessary for performance of the contract or fulfilment of a statutory obligation and without provision of such data the relevant contract could not be concluded with you.
WHOSE DATA DO WE PROCESS
Our company processes personal data of the following categories of persons:
- our company's customers, suppliers, partners and associates and their representatives;
- our company's employees;
- our company' bodies or members of its bodies;
- state administration and self-governing authorities;
- other parties solely on the basis of specific consent.
The personal data of the above parties are processed to the extent they are supplied to us as a result of conclusion of the contract or during negotiations on conclusion of the contract and/or from publicly accessible databases as we request only the data and to such minimum extent allowing efficient fulfilment of the contractual obligations and statutory duties. An employee is deemed to be a person cooperating with us in compliance with the Labour Code. A customer is deemed to be a person making use of our services provided via the website www.balabenka-point.cz.
MINIMIZATION OF PERSONAL DATA PROCESSING
Guided by the rule of minimization of the personal data processed, our company processes exclusively the data it needs for an efficient fulfilment of its contractual and statutory duties.
In case of the company's employees and bodies, the following personal data are involved: the name and surname, date of birth, birth ID number, permanent residence address or any other contact address, telephone number, e-mail address, bank account number and other data.
As regards suppliers, partners and associates and their representatives, the data include the name, surname, telephone number and e-mail address, bank details, ID number, taxpayer ID number and other data.
With regard to customers, we process only the data necessary for conclusion of a lease agreement or property ownership transfer agreement. Concerning customers who have given consent to the personal data processing via the interface on the website www.balabenka-point.cz, i.e. send a contact form via www.balabenka-point.cz to have a receive information or subscribed to a newsletter (provided that such functionality is active on www.balabenka-point.cz), only the following data are processed: the name and surname, telephone number, e-mail address.
In case of employees of state administration and self-governing authorities, the data include only the name and surname and contact details for the purpose of fulfilling statutory duties of our company handled by such employees.
CATEGORIES OF RECIPIENTS OF YOUR PERSONAL DATA
Personal data are processed by our personnel, namely exclusively by those who necessarily need the relevant data for carrying out their activities.
They may be our employees or third parties engaged to perform our activities.
We provide your personal data to several categories of processors who perform specialized activities for our company to particularly fulfil the statutory duties. Such categories include accountants, lawyers, tax advisors, auditors, IT specialists and other entities, however, always processing your personal data to fulfil our contractual or statutory obligations or, as the case may be, to protect our interests.
If your personal data are involved to the processing of which you have given us your explicit consent, we can process them, based on your consent, for the purpose of their future use to offer our Group's goods and services and disclose them to our Group companies; however, always for the purpose of offering future services or goods (products) of such companies. The Group is deemed to include any company controlled by the same party controlling the company Rakevet s.r.o. and also the company Maloja Investment SICAV a.s., Company ID No: 052 59 797, and the companies under its control.
PERIOD OF PERSONAL DATA PROCESSING
Your personal data are processed only for a necessary period to accomplish the purpose of processing and, concurrently, fulfil any statutory and contractual obligations that we have. Personal data processed in connection with the contract or in connection with the fulfilment of the statutory obligation are processed for the period of existence of the contract or the fulfilment of the statutory obligation; furthermore, over the period required by a legal regulation for archiving your personal data, and if the archiving duty does not apply to your personal data, then for a period of 3 years after the date of accomplishment of the purpose of the personal data processing.
If the personal data involved concern you and you have given us your explicit consent to process them, such data, based on your consent, can be processed for the purpose of its future use to offer goods and services of our Group and disclose them to the Group companies for a period of 10 years, however, no later than the point when your consent is withdrawn.
REGULATION PROVIDES YOU WITH SIGNIFICANT RIGHTS IN RELATION TO YOUR PERSONAL DATA
The Regulation sets out fundamental rights whereby you can affect the processing of your personal data, however, always within the limits of the Regulation. One of such rights is the right to be informed of the facts, rights and information specified in this document. Further major rights that we have to bring to you attention are as follows:
(A) RIGHT OF ACCESS
Your have the right of access to your personal data that we process concerning you, including the information on the purpose of the processing, the categories of the personal data concerned, the recipients of such personal data, the envisaged period of processing and your rights in connection with the personal data processing.
(B) RIGHT TO WITHDRAW CONSENT
If you have given us consent to the processing of personal data, you have the right to withdraw it at any time. You can do so by e-mail using the contact e-mail address specified above or by mail sent to our registered office address or by way of a form available at our registered office.
(C) RIGHT TO OBJECT
You have the right to object at any time to processing of your personal data. If the objection is rightful, we will discontinue the processing of your personal data without delay.
(D) RIGHT TO RECTIFICATION
You have the right to obtain rectification of any inaccurate personal data concerning you and to have incomplete personal data completed.
(E) RIGHT TO ERASURE
You have the right to request discontinuation of the processing (erasure) of your personal data and the right to be forgotten. The right to obtain discontinuation can be exercised if:
- the purpose does not exist any longer,
- the consent to personal data processing has been withdrawn and there is no other legal ground for the processing,
- you object to the processing, with the objection being reasonable,
- the personal data are processed unlawfully,
- the erasure is required to fulfil a statutory duty, or
- the personal data have been collected in connection with an offer of information society services to a child younger than 16 years.
(F) RIGHT TO RESTRICTION OF PROCESSING
You have the right to obtain restriction of your personal data. The right to restriction of the processing can be exercised if:
- the processed personal data are inaccurate, for a period necessary to verify the accuracy of such personal data,
- the processing is unlawful and you oppose erasure of the personal data and request the restriction of their use instead,
- we do not need your personal data for the purposes of the processing any longer, but request them for the establishment, exercise or defence of legal claims, or
- you have objected to the processing pending verification whether our legitimate grounds override your legitimate grounds.
(G) RIGHT TO DATA PORTABILITY
You have the right to portability of your personal data processed by virtue of your consent or for the purpose of performing the contract. You have the right to receive personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and the right to transmit such data to another controller, or rather the right to have such data transmitted directly by us to another controller (selected by you), where technically feasible.
(H) RIGHT TO LODGE COMPLAINT
You have the right to lodge a complaint about our processing of your personal data with the Office for Personal Data Protection, with its seat at Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
Further information concerning your rights in connection with the protection of your personal data can be found on the website of the Office for Personal Data Protection at https://www.uoou.cz/6-prava-subjektu-udaj/d-27276.
