Personal data processing regulations
ORINVEST, s.r.o., Na Bělidle 503, 543 01 Vrchlabí, IČO: 48168289 incorporated in the Commercial Register kept by the Regional Court in Hradec Králové, File No C 4136 (hereinafter referred to as "we"), as the data administrator, informs you as the user of www.slunecnalouka.eu about personal data collection and protection.
This text informs you about:
- What kind of personal data we process;
- Why and how your personal data is processed;
- Who has the access to your personal data;
- How long we will process your personal data and
- What your rights to privacy and data protection are.
If you need advice, want to discuss the processing of your personal data or need us to explain any part of this text, please send us an e-mail to firstname.lastname@example.org.
Extent of personal data processing
If you contact us via our website, you may be asked to fill out certain personal data or data concerning your company. These data include:
- Your name and surname,
- address or company address,
- identification number (IČO),
- phone number,
- e-mail address.
Purpose of personal data processing
The data that you share with us are used to contact you and provide you with information that you request or to meet our obligations. Your personal data are processed in a legal and transparent way and only appropriate, relevant and essential data in relation to the purpose of processing are required.
Your name, surname and e-mail address can also be used by us for commercial communication, i.e. to inform you about events, publications or services that we offer and that we think you may find interesting. Providing your personal data for the purposes of contract fulfilment and providing your personal data for the purposes of answering your questions or providing information requested by you are included in the terms of our contract. Not providing these data may result in a failure to conclude a contract or a failure to provide an answer to your question.
You can refuse the processing of your personal data for the purposes of commercial communication anytime without any consequences for our mutual relationship. All you need to do is send us an e-mail with a request to email@example.com or to any e-mail address from which you have received our commercial messages. You can unsubscribe from our commercial communication by adjusting your user profile or by using the cancellation form in any of our e-mails containing commercial communication.
Who can access your personal data
We are the administrator of your personal data. For the purposes mentioned above, we can transfer your personal data to our subcontractors so that they can process the data for us. Your personal data can be transferred to:
- Processors who provide Mediator with server, web, cloud or IT services or who are Mediator's business partners; e.g. LHMS, Mediatel, ŠKODA AUTO, Porsche Česká republika, Volkswagen Financial Services, Sauto leasing.
Duration of personal data processing
Your personal data will be processed for a period of time during which we will be providing you with our services and meeting our obligations arising from our contract, for the maximum three-year period or a period of time that we find necessary for meeting our archiving obligations emerging from effective regulations, such as the Act on Accounting, the Act on Archiving and Records Management and the Value Added Tax Act.
Your rights arising from personal data processing
In relation to the processing of your personal data carried out by us, you have the following rights:
- right of access;
- right to rectification;
- right to erasure („right to be forgotten“);
- right to restriction of processing;
- right to object;
- right to data portability;
- right to lodge a complaint.
Your rights are explained bellow to give you an idea of their content.
You can exercise your rights by contacting us by e-mail: firstname.lastname@example.org
You can lodge a complaint with a supervisory authority, i.e. the Office for Personal Data Protection (www.uoou.cz/en).
Right of access means that you have the right to obtain from us confirmation as to whether or not your personal data are being processed, and, where that is the case, access to the personal data and the information about the purposes of the processing, the extent of the processing, information about who has the access to the data, how long we will process them, whether you have the right to rectification, erasure, restriction of processing or the right to lodge a complaint; information about where we gained your personal information and about the existence of automated decision-making, including profiling. You also have the right to obtain a copy of the personal data undergoing processing, in which case the first copy is free of charge and subsequent copies may be provided by the mediator for a fee covering administrative expenses.
Right to rectification means that you have the right to ask us for the rectification of your personal data if they are inaccurate or incomplete.
Right to erasure means that we must erase your personal data if (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) the personal data have been unlawfully processed, (iii) you object against the processing and if there is no other legal ground for the processing, or if (iv) the personal data have to be erased for compliance with a legal obligation.
Right to restriction of processing means that until we resolve all problematic issues arising from the processing of your personal data, we must restrict the data processing. Where the data processing has been restricted, we may only store your personal data or use them for the establishment, exercise or defence of legal claims.
Right to object means that you have the right to object to processing of your personal data that are processed for direct marketing purposes or for a legitimate interest. If you object to processing of your personal data for direct marketing purposes, your personal data will no longer be processed.
Right to data portability means that you can ask us to transmit your personal data in a structured, commonly used and machine-readable format to another controller. The condition of exercising this right is technical feasibility.
These personal data processing regulations go into effect on 25 May 2018.