In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”), the following information is hereby provided to you as data subjects, in particular about (i) what personal data we collect, (ii) how we handle this data, (iii) on what legal basis we process personal data and for what purposes we use personal data, (iv) to whom we are entitled to disclose this personal data, (v) what your rights are in the area of data protection, and (vi) where you can obtain information about your personal data that we process.
We would like to ask you to familiarize yourself with the content of this Notice on the processing of personal data (“Notice”).We are ready to answer any questions you may have by contacting us at info@bmstroje.cz or at the company’s headquarters at Pastviny 26, Žamberk, 564 01.
A. GENERAL INFORMATION
Identity of the administrator:
Milan Bednařík, ID No.: 86903357, with registered office at Pastviny 26, Žamberk, 564 01, registered in the Trade Register of the Municipal Office of Žamberk, ID No.: 361109-128716 (“BM STROJE” or also “the administrator”)
Contact details of the administrator:
(i) Contact address: 26 Pastviny Street, Žamberk, 564 01, (ii) Contact e-mail: info@bmstroje.cz, (iii) Contact phone: +420 775 035 625.
B. INFORMATION ON THE PROCESSING OF PERSONAL DATA
BM STROJE, as the data controller, handles your personal data in accordance with the applicable legislation and always in such a way as to ensure the security of your data to the maximum extent possible. The data controller complies with the principles of personal data processing laid down by the applicable legislation and fully respects the highest standards of data protection.
Purposes of the processing of personal data. Legal basis for processing personal data:
The purpose of processing personal data is (i) offering BM STROJE’s trade, services and products, sending commercial communications, (ii) marketing communication and marketing research, including obtaining your opinion on the level of satisfaction with the performance/services provided by BM STROJE in order to achieve improvement of the performance/services provided and/or (iii) sending personalised offers of BM STROJE’s trade, services and products identified on the basis of your use of BM STROJE’s products, services and website, or your behaviour and personal preferences; and for the purposes for which consent was granted. The legal basis for processing is the consent to the processing of personal data given by the data subject pursuant to Article 6(1)(a) of the GDPR.
This includes, in particular, the offering of BM STROJE’s business, services and products and the dissemination of commercial messages through various communication channels such as mail, electronic means of communication (in particular electronic mail (e-mail communication), messages sent to mobile telecommunications devices via telephone number), or through telephone calls or BM STROJE’s website. For these purposes, BM STROJE processes your
(i) identification data, i.e. name, surname, title
(ii) contact details, i.e. telephone, e-mail address, contact address
(iii) other personal data, i.e. IP address,
Your personal data may be processed manually and automatically directly by the controller’s authorised employees and by processors authorised by the controller on the basis of a contract for the processing of personal data.
In connection with the processing of personal data for the purposes of:
offering BM STROJE’s business, services and products, in particular by offering BM STROJE’s products and services and by disseminating commercial messages through various communication channels, such as mail, electronic means of communication (e.g. e-mail, messages sent to mobile telecommunications devices via telephone numbers), telephone calls or websites; and
marketing communications and marketing research, including obtaining your opinion on the level of your satisfaction with the performance/services provided by BM STROJE in order to achieve improvement of the performance/services provided, you are not subject to any decision-making based solely on automated processing which would have any legal or similar significant effects on you or would affect you in any significant way; there is no automated decision-making, including profiling, in the processing of your personal data by BM STROJE for these purposes.
In connection with the processing of personal data for the purpose of sending personalized offers of BM STROJE’s trade, services and products identified on the basis of your use of the products, services and websites of the controller, or your behavior and personal preferences, you are subject to decision-making based solely on automated processing, in particular profiling.
Automated decision-making, and in particular profiling, will be carried out in particular in the form of (a process of) logical and/or algorithmic operations, whereby our system, according to your use of products, services and our website, or your behaviour and personal preferences, will enable you to be sent personalised offers that are relevant to you and that we believe will be of interest to you.
The importance of automated decision-making, and in particular profiling, is that it allows us to send you personalised offers of our company’s business, services and products that may be of interest to you. In this context, we believe that by using personalised offers of our company’s trade, services and products, we will be able to contact you with offers that you will find interesting and that you will find interesting.
As a consequence of automated decision-making, and in particular profiling, you will receive relevant commercial communications from us in the context of personalised offers, as our aim is to send you personalised offers of our company’s trade, products and services that are interesting to you.
BM STROJE informs you that the provision of personal data for the above purposes is not a legal or contractual requirement for the conclusion of a contract. Therefore, it is not your obligation to provide the personal data in question, nor is it your obligation to consent to their processing for the above purposes. For the avoidance of doubt, please note that consent is not a contractual requirement and is not conditional on the continuation of the contract (including the provision of services) between you and BM STROJE. You are further advised that if you have given BM STROJE consent to the processing of your personal data, you have the right to withdraw this consent at any time (see the section “Right to withdraw consent” in this Notice for more details).
Period of storage of personal data:
Your personal data will be stored by BM STROJE for the following purposes:
offering BM STROJE business, services and products, sending commercial communications for a period of 10 years
marketing communication and marketing research, including obtaining your opinion on the level of your satisfaction with the performance/services provided by BM STROJE in order to achieve improvement of the quality of the performance/services provided for a period of 10 years
to send you personalized offers of BM STROJE’s business, services and products identified by your use of BM STROJE’s products, services and website or your behavior and personal preferences for a period of 10 years
Beneficiary, categories of beneficiaries:
Your personal data may be disclosed to employees of BM STROJE if it is necessary for the performance of their work duties, which require the handling of your personal data, while observing all security measures. In addition, your personal data will be disclosed to business partners who are involved in the processing of personal data of our customers and third parties (data subjects) who have given their consent to our company to process personal data (these are so-called processors with whom the BM STROJE administrator has concluded a contract for the processing of personal data, such as processors who provide us with server, web or IT services or services for sending commercial communications. Alternatively, your personal data may be disclosed to third parties for other reasons in accordance with applicable law. The controller does not intend to transfer personal data to a third country outside the European Union or an international organisation.
C. YOUR RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA
Right of access to personal data:
As a data subject, you have the right to obtain confirmation from the controller as to whether or not the personal data concerning you are being processed and, if so, the right to access that personal data and the following information about:
processing purposes;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period;
the existence of the right to request from the controller the rectification or erasure of personal data, the restriction of their processing or the right to object to such processing;
the right to lodge a complaint with a supervisory authority (the Office for Personal Data Protection);
all available information about the source of the personal data;
whether automated decision-making, including profiling, takes place, the procedure used, as well as the significance and foreseeable consequences of such processing.
If personal data is transferred to a third country or an international organisation, you have the right to be informed of the appropriate safeguards that apply to the transfer. The controller will provide you with a copy of the personal data processed. For further copies, the controller is entitled to charge a reasonable fee based on administrative costs. It applies that the right to obtain a copy must not adversely affect the rights and freedoms of other persons.
Right to rectification:
As a data subject, you have the right to have inaccurate personal data concerning you corrected by the controller without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by providing an additional declaration.
Right to erasure:
As a data subject, you have the right to have personal data concerning you erased by the controller without undue delay if one of the following grounds applies
the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn the consent on the basis of which the data was processed and there is no other legal basis for the processing;
personal data have been unlawfully processed;
personal data must be erased to comply with a legal obligation;
personal data has been collected in connection with the offer of information society services.
The right to erasure shall not apply where a lawful exception is given, in particular where the processing of personal data is necessary (a) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or (b) for the establishment, exercise or defence of legal claims.
Right to restriction of processing:
As a data subject, you have the right to have the controller restrict processing in any of the following cases:
you contest the accuracy of the personal data – in this case, the processing will be limited to the time necessary for the controller to verify the accuracy of the personal data;
the processing is unlawful and you refuse to delete the personal data and instead request a restriction on its use;
the controller no longer needs the personal data for processing purposes, but you require the personal data for the establishment, exercise or defence of legal claims.
If the processing has been restricted, these personal data may, with the exception of their storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
Right to data portability:
As a data subject, you have the right to obtain personal data concerning you that you have provided to the controller. Upon your request, the controller will provide you with the data in a structured, commonly used and machine-readable format or, where technically feasible, to another clearly identified controller. The right to data portability does not apply to personal data that are not processed by automated means.
The exercise of the right to data portability shall not adversely affect the rights and freedoms of other persons.
Right to withdraw consent:
You are not obliged to consent to the processing of your personal data by BM STROJE. You have the right to withdraw your consent to the processing of your personal data for the above purposes (or any of them) at any time. Withdrawal of consent does not affect the processing of your personal data prior to its withdrawal. You may withdraw your consent to the processing of your personal data by (i) a signed written notice of withdrawal sent in writing to BM STROJE’s contact address, or (ii) a notice of withdrawal of consent sent by email to BM STROJE’s contact email address set out above in this Notice. Please note that we may also process certain personal data for certain purposes without your consent. If you withdraw your consent, BM STROJE will cease processing the relevant personal data for the purposes requiring your consent for which your consent was withdrawn; however, BM STROJE may be entitled, or even obliged, to continue to process the same personal data on another legal basis (i.e. another lawful ground).
The right to lodge a complaint with the supervisory authority:
If you believe that the processing of your personal data is in breach of the law (including the GDPR), you have the right to lodge a complaint against the controller’s practices with a supervisory authority, the supervisory authority for the Czech Republic being the Office for Personal Data Protection (www.uoou.cz). This is without prejudice to any other administrative or judicial remedies provided for the protection of the data subject under applicable law.
D. MORE INFORMATION
Method of exercising rights by the data subject:
As a personal data subject, you may exercise your rights in relation to the processing of personal data against the controller by contacting the controller at the contact address BM STROJE, Pastviny 26, Žamberk 564 01, or by contacting the controller at the contact e-mail address info@bmstroje.cz
Provision of information by the administrator:
The administrator shall provide the information in writing in documentary form. However, if you contact the Controller electronically at the contact email address of the Controller, the Controller will provide you with the information electronically (in the form of an email message) unless you request the information in paper form. This is without prejudice to your right to data portability.
Milan Bednařík – BM STROJE, Pastviny 26, Žamberk 564 01, Entrepreneur registered in the Trade Register of the Municipal Office of Žamberk Ev. no.: 361109-128716