PRINCIPLES OF PERSONAL DATA PROCESSING

Principles of personal data processing


The Customer (the data subject) acknowledges that he or she provides or has provided his or her personal data to the Contractor voluntarily and freely.

The Contractor declares that any personal data he processes on the basis of the purposes described below is considered to be strictly confidential and handled in accordance with Regulation 2016/679 Coll. effective from May 25, 2018. The provider shall ensure that the data subject does not suffer prejudice to his or her rights, in particular the right to the preservation of human dignity, and shall also protect against unauthorized interference with the personal and private life of the data subject.

PERSONAL DATA

The Customer acknowledges that, from many personal data and information provided voluntarily and freely to the Contractor in connection with the sole purpose of processing, the Contractor processes the following personal data:

Name, surname, function, company name, address, telephone, ID-Nr., VAT-Nr., E-mail, bank account Nr.

These personal data are being collected, processed and stored in accordance with the applicable laws of the Czech Republic, in particular with Regulation (EU) 2016/679 Coll. (GDPR) effective from May 25, 2018. If personal data is processed for the purposes listed below, your explicit consent is not required. Customer acknowledges that the extent of his or her personal data submitted for processing purposes in relation to his person is reasonable and kept at minimum possible.

LEGAL BASIS OF PROCESSING OF PERSONAL DATA AND PURPOSES

The Customer acknowledges that, in accordance with Regulation 2016/679 Coll. effective from 25 May 2018, personal data processed are based on the following legal bases and purposes:

  • Processing is necessary to fulfill the contract for the purpose of inquiry and registration through web form on the website http://www.vimpex.cz and the intention to conclude a contract for work and prior to contract conclusion based on request of the customer and the related sending of commercial messages, products, offers, by electronic means and other commercial communications related to the contractual or pre-contractual relationship between the Customer and the Contractor.
  • Processing is necessary to fulfill the contract (for the purpose of sending a price quotation or inquiry, conclusion of a contract for work) and sending of commercial messages by electronic means related to the contractual or pre-contractual relationship between the Customer and the Contractor.
  • Completion of the legal obligation (for the purpose of submitting reports, overviews, or reports when processing the accounting of the Tax Office, Czech Social Security Administration, Employment Department, etc.)
  • Legitimate interest for the purposes of the related protection of the Contractor's rights and freedoms in case of defense against future legal claims resulting from the contractual relationship between the Customer and the Contractor and the Legitimate Interest for direct marketing purposes.

STORAGE-ARCHIVING PERIOD

Personal data is being archived for the period of 3 years in case of registration via web form on the web-site http://www.vimpex.cz and intention to conclude a contract of work, and prior to conclusion of the contract based on Customer’s request, or for the period of 10 years from the termination of the contractual relationship unless otherwise implied by legal title for retention of personal data.

FORWARDING OF PERSONAL DATA TO THIRD PARTIES

The Customer acknowledges that personal data processed on the basis of the above mentioned purposes of processing between the Customer and the Supplier may be forwarded:

  • Personal data processors that the Contractor uses for processing (cloud, IT).
  • External processors providing accounting, tax, legal advice and services.
  • Transportation companies for the supply of goods.
  • Other entities for fulfilling the legal obligation that applies to the Contractor and for which the law permits.

RIGHTS OF THE DATA SUBJECT

The Customer acknowledges that, in connection with the legal bases of the processing of personal data, he has the following rights:

  • The right of access to personal data, in particular the purpose of processing the categories of personal data concerned, the time of filing and the right to file a complaint with the Supervisory Authority.
  • Right to the repair of personal data, including the right to request explanation and removal of the defective status and other legal rights to such data.
  • The right of deletion, unless otherwise restricted by law.
  • The right to limit the processing of personal data.
  • The right to the portability of personal data.
  • Right to object.

DECLARATION ON SECURITY OF DATA PROCESSING

The Contractor declares that, in the above described processing of data and the resulting purposes of the processing of personal data, taking into account the state of the art and costs incurred in carrying out the nature, scope and purposes, he has implemented at the time of identifying the processing equipment and at the time of processing the appropriate technical and organizational measures for the protection of personal data from accidental loss, destruction, or damage.