INFORMATION ON PERSONAL DATA PROCESSING

ELEKTROSVIT Svatobořice, a.s.
with registered office at Nádražní 1290/44, Svatobořice, 696 04 Svatobořice-Mistřín
ID No. 494 37 313

pays attention to the protection of personal data and declares that it will protect this data in accordance with transparency, ethical information practices and applicable personal data protection laws pursuant to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Purpose of personal data processing

The aim is to ensure maximum protection of the personal data of data subjects during their processing, whether processed on the basis of a contract, consent, law or other legal reason. In particular, we respect the following rules when processing:

  • minimize their necessary scope,
  • protect them and control access to them,
  • delete them when they are no longer current and necessary.

Principles and procedures for processing

1. Subject:

This document explains how personal data is collected and used. Personal data is any information relating to an identified or identifiable natural person, i.e. a person who can be identified directly or indirectly by reference to an identifier such as a name, identification number, location data, an on-line identifier or by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

We collect personal data in various ways. Data is collected in the course of our company’s business, e.g. when purchasing goods, ordering or providing services, when concluding contracts or communicating with contractual partners or third parties, or when visiting and using websites.

2. Personal data controller:

ELEKTROSVIT Svatobořice, a.s., with registered office at Nádražní 1290/44, Svatobořice, 696 04 Svatobořice-Mistřín, ID No.: 494 37 313

3. Categories of personal data:

The personal data that we may collect and process includes, but is not limited to:

  • Address and identification data
  • Data whose processing is required of us by law
  • Information you provide to us when you communicate with us
  • Information needed to ensure safety, health and property protection, such as camera recordings

For example:

Permanent residence address; Addresses of previous permanent residence addresses; Data box; Date of birth; Pension documents; Education certificates; Delivery address; Email; Disability, health disadvantage; First name, if applicable; First name, if applicable, surname, maiden name and birth number of the child; First name, if applicable, surname, maiden name and birth number of the spouse or partner; Place and district of birth; Place of residence; Wage assessment; Signature; Gender; Previous employer; Marital status; Birth number; Telephone; Title; Permanent address; Health insurance company; Medical examinations and other data.

5. Legal basis for the processing of personal data:

The processing of personal data is always based on a legal basis, which is:

  • processing is necessary for compliance with a legal obligation to which the controller is subject (in particular on the basis of Act No. 89/2012 Coll., Civil Code; Act No. 134/2016 Coll., on public procurement; Act No. 106/1999 Coll., on free access to information; Act No. 499/2004 Coll., on archiving and records management and on amendments to certain acts, Act No. 262/2006 Coll., Labour Code, Act No. 563/1991 Coll., on accounting),
  • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract,
  • the data subject has given consent to the processing of his or her personal data for one or more specific purposes,
  • processing is necessary to protect the vital interests of the data subject or of another natural person,
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, if such performance of tasks by the controller will occur,
  • processing is necessary for the purposes of the legitimate interests of the controller concerned or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

6. Purposes of processing:

  • fulfilment of obligations imposed on the company as a personal data controller by law, including the provision of information,
  • fulfilment of obligations in employment relationships with employees,
  • management of contractual obligations and ongoing contractual relationships, including negotiations with contractual parties,
  • ensuring the security of websites, networks, systems and buildings, as well as protecting the company in litigation and in asserting and enforcing claims out of court, managing day-to-day needs, such as processing payments and managing financial accounts, managing contracts, managing websites.

7. Recipients of personal data:

  • as required by law: we may disclose personal data relating to data subjects to public and judicial authorities, law enforcement agencies, to the extent required by law. Where permitted by law, we may also provide this data to third parties where necessary to establish, exercise or defend legal claims
  • third parties: all processing of this personal data will be carried out in accordance with our instructions and will be consistent with the original purposes.

8. Storage:

Personal data will only be kept for as long as is necessary for the purposes for which it was collected, usually for the period specified by the legal framework of the Czech Republic or specified by consent from the data subjects.

9. Personal data protection:

Security measures for the protection of personal data:

  • we implement appropriate technical and organisational measures that are reasonably designed to ensure the protection of personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access and other forms of unlawful processing. Access to personal data is restricted to authorised recipients who need to know this data,
  • we maintain a comprehensive information security system, the scope of which is proportionate to the risks associated with data processing. This system is constantly adapted to mitigate operational risks and to protect personal data, taking into account the procedures applied. We also apply appropriate security measures when processing any sensitive personal data.

How personal data processed for other personal data controllers is protected (when we act as a personal data processor):

  • in some cases, we may process personal data as personal data processors. We collect and process this personal data only on the instructions of the controller and do not use it or pass it on for our own purposes. We maintain control of information security to protect personal data. We only disclose or transfer personal information on the instructions of the controller or for the purpose of performing the activities entrusted to us.

10. Our websites:

Cookies, data usage and similar tools:

  • when you visit our websites, we may automatically collect certain information using technologies such as cookies, internet browser analysis tools and server logs. In many cases, the information collected through cookies and other tools is used in an unidentifiable manner without any reference to personal data.
  • cookies are small text files that a website stores through a browser on the hard drive of a computer or other device when you visit it. We may use cookies to make it easier to use websites and also to customize browsing preferences and improve the functionality of our websites. Cookies may be used to manage performance and collect information about how our websites are used for analytical purposes. There are two types of cookies: session cookies, which are removed from your device when you leave the website, and persistent cookies, which remain on your device for a longer period of time or until you manually delete them.
  • information about how users use the websites (usage data) may be collected in the log files from our servers. This data includes, but is not limited to, the user’s domain name, language, browser type and operating system, internet service provider, IP (internet protocol) address, location or link from which the user came to the website, the website you visited before coming to our website, and the website you visit after leaving our website, as well as the time spent on our website. We may track and use website usage data to evaluate its performance and activity, to improve its design and functionality, or for security purposes.
  • you can change the settings of your internet browser to block accepted cookies or to notify you of their acceptance or to delete them. Alternatively, you can browse our websites using an anonymous browser profile. For more information on how to modify or change your internet browser settings, please refer to the browser’s manual or help. If you do not agree to the use of cookies or similar technologies that store information on your device, you must change your browser settings accordingly. Please note that some features of our websites may not work properly if you disable the acceptance of cookies or these

Linked pages:

  • we may provide links to third party websites (“linked pages”) on our websites. We are under no obligation to evaluate, control or examine linked pages. Each linked page may have its own terms of use and privacy statement. Users must familiarise themselves with and comply with these terms when using linked pages. We are not responsible for the policies and practices of any linked pages and any other links that may be found on those pages. These links do not constitute our endorsement of the linked websites or any company or service. We encourage users to familiarise themselves with the terms and relevant documents of these linked websites before using them.

Children:

  • our websites are not aimed at children. We do not use them to knowingly obtain personal data from children or to provide services to children. If we discover that a child has provided their personal data through one of our websites, we will remove that data from our systems.

Google Analytics service:

  • we may also use Google Analytics on our websites to collect information about users’ online activities on the websites, such as the websites visited, links clicked and searches performed.
  • we use this information to compile reports and to improve the website. Cookies anonymously collect information such as the number of visitors to the website, where visitors came from and the pages they visited. The information generated by these cookies and your current IP address will be transferred from your internet browser and stored on Google’s servers in the United States and other countries. Google will use this information on your behalf for the purpose of evaluating how you use our website, as described above. The IP address obtained through Google Analytics will not be associated with any other data held by Google. For more information about the data collected by Google Analytics, please visit http://www.google.com/intl/en/analytics/privacyoverview.html. You can block these cookies using the appropriate settings in your internet browser. If you do so, you may not be able to fully use the features of our websites. The Google Analytics Opt-out internet browser add-on can be downloaded at the following address: http://tools.google.com/dlpage/gaoptout.

11. Your rights:

You have the right, in relevant cases and to the extent permitted by applicable law, to contact us to exercise the right:

  • to access personal data,
  • to correct or update your inaccurate or outdated personal data,
  • erasure, if they are processed in violation of the protection defined by the relevant legislation or in violation of the consent granted, or if the consent has been withdrawn,
  • to restrict processing,
  • to object to processing,
  • to data portability,

and other rights under the General Data Protection Regulation. You also have the right to contact us in the case of data processed on the basis of consent also for the purpose of withdrawing consent to the processing of personal data.

You can exercise your rights via e-mail: predseda@elektrosvit.cz or by written submission to ELEKTROSVIT Svatobořice, a.s., Nádražní 1290/44, 696 04 Svatobořice- Mistřín.

The fulfilment of your rights is enabled free of charge and within 30 days of submitting the request. You may also have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection.

12. Consent and its withdrawal:

By knowingly providing your personal data, you acknowledge and agree to the collection, processing and use of such data, as set out in this document. Where required by applicable law, you will be asked for your explicit consent.

You always have the option to object free of charge to the use of your personal data, or to withdraw any prior consent granted for a specific purpose by clicking on the corresponding links on our websites (if established), by following the instructions in the e-mail, or by contacting our company via e-mail: predseda@elektrosvit.cz or by written submission to ELEKTROSVIT Svatobořice, a.s., Nádražní 1290/44, 696 04 Svatobořice-Mistřín.

13. Automated decision-making:

We do not carry out automated decision-making.

14. Contact options:

If you wish to communicate with us on matters relating to privacy, or in the event of questions, comments or complaints, you can contact us at:

  • e-mail: predseda@elektrosvit.cz,
  • address ELEKTROSVIT Svatobořice, a.s., Nádražní 1290/44, 696 04 Svatobořice-Mistřín.

We undertake to resolve complaints relating to the collection or use of your personal data.

15. Amendments to the Information Memorandum (Information on Personal Data Protection):

We reserve the right to make changes, modifications and updates to this document at any time. Please check regularly to ensure that you are working with the latest version of this document,.

Date 24.5.2018

Issued by: ELEKTROSVIT Svatobořice, a.s., Nádražní 1290/44, 696 04 Svatobořice-Mistřín.