Gumárny Zubří, joint stock company
756 54 Zubří
Registered in the Commercial Register maintained by the Regional Court in Ostrava, Section B, Insert 111
(hereinafter referred to as the “Company”) in accordance with Regulation (EC) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), within the meaning of Art. 13 et seq. shall inform the subjects concerned of the data protection principles governing its activities.
The company processes personal data manually, in paper and electronic form as a data controller and handles them in accordance with the applicable legal regulations of the Czech Republic, in particular. then in accordance with the GDPR.
PURPOSE OF PROCESSING
The Company processes the personal data of its clients and business partners, if they are natural persons (“data subjects”), solely for the purposes set out below, on the basis of the legal titles set out in the GDPR and to the extent necessary to fulfil the purpose for which they were collected, namely:
– Contract performance – in particular contracts for the provision of legal services and the fulfilment of client requirements, i.e. performance according to applicable law;
– Compliance with legal obligations – in particular, the obligations set out in accounting and tax regulations and the related transmission of personal data to public authorities;
– Protection of legitimate interest – protection of the rights and legally protected interests of the company, third parties and clients;
– Sending commercial communications and offering services via e-mail The company sends commercial communications or newsletters on the basis of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services), as amended, and always only with the consent of the data subject;
PERSONAL DATA PROCESSED
In particular, the company processes the following categories of personal data:
– identification data – name, surname, title, date of birth, ID number, VAT number, ID number;
– contact details – address, telephone number, e-mail address;
– financial details – bank account number;
– information about the relationship between the data subject and the company;
– data necessary for the fulfilment of the company’s record-keeping and reporting obligations as an employer;
– data on the qualifications and work experience of the data subject as a job applicant with the company;
– data provided to the company by clients or their legal representatives in the performance of the contract for the provision of legal services and in the performance of activities directly related to this.
PERIOD OF PROCESSING OF PERSONAL DATA
Personal data are processed by the company for the duration of the contract with the data subject, respectively. for the duration of the binding legal relationship in connection with which the personal data of the data subject is processed. Personal data are processed for longer periods only if this is provided for by law or if such processing is justified by the need or potential for full settlement of claims arising from the legal relationship concluded between the company as the controller and the data subject, respectively. by a third party where personal data of data subjects are processed in this context.
RECIPIENTS OF PERSONAL DATA
The Company only discloses personal data to authorised employees and cooperating companies or individual contractual processors of personal data or other controllers, but only to the extent necessary for the fulfilment of the individual purposes of processing and on the basis of the corresponding legal title for processing personal data.
The Company is entitled in the cases provided for by law to, respectively. is obliged to transfer certain personal data to public authorities on the basis of applicable legal regulations, respectively. entities entrusted with tasks in the public interest.
In the event that the transfer of personal data is strictly necessary for the provision of services by another service provider, the company shall proceed in accordance with the law, according to which the company is bound by the duty of confidentiality when providing legal services.
RIGHTS OF DATA SUBJECTS
Data subjects have the following rights under data protection legislation:
– right of access – the data subject has the right to obtain information about whether the company processes his or her personal data and, if so, what data is processed and how it is processed;
– the right to rectification – the data subject has the right to have inaccurate personal data concerning him or her rectified by the company without undue delay at his or her request;
– the right to erasure (right to be forgotten) – the data subject has the right to have the company erase the personal data it processes about the data subject if the specified conditions are met and the data subject so requests;
– the right to restriction of processing – the data subject has the right to have the company restrict the processing of their personal data in certain cases;
– the right to data portability – the data subject has the right, provided that the conditions set out are met, to obtain from the company the personal data he or she has provided to the company and to transmit it to another controller or, where technically feasible, to request that the controllers transfer the personal data between themselves;
– the right to object to processing – the data subject has the right to object at any time to processing which is based on the legitimate interests of the company, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
– the right to withdraw consent – if the company processes the personal data of the data subject on the basis of his/her voluntary consent, the data subject has the right to withdraw his/her consent at any time.
In case of any questions or complaints regarding the processing of personal data carried out by the company, you can contact the company directly in writing at its registered office or by e-mail at firstname.lastname@example.org, or contact the Office for Personal Data Protection.