PERSONAL DATA PROCESSING POLICY
This Personal Data Processing Policy (hereinafter the "Policy") of Czechoslovak Export a.s., having its registered office at U Rustonky 714/1, Prague 8, 186 00, Czech Republic, ID No.: 049 86 512, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File 21489 (hereinafter the "CSE" or "we") contains information about the basic circumstances of the processing of personal data.
We process personal data, including personal data of data subjects located outside the European Union/European Economic Area (hereinafter the "EU"), in accordance with applicable EU law, in particular the General Data Protection Regulation (EU) 2016/679 ("GDPR"). In the event of specific requirements for the processing of personal data in jurisdictions outside the EU, if these impose obligations on us as data controllers beyond the scope of the GDPR, we also respect these local specifics when processing personal data.
This Policy contains the following information:
CSE is the controller of your personal data within the meaning of the GDPR, i.e. it collects, stores and uses (and otherwise processes) your personal data for the performance of its business activities.
You can contact the controller in the following ways:
PURPOSE, SCOPE AND LEGAL BASIS OF THE PERSONAL DATA PROCESSED
We may process your personal data primarily for the following purposes:
CLIENT
If you are our customer, we usually process your personal data as follows:
Purpose of processing
Scope of personal data
Legal basis for processing
BUSINESS PARTNER
If you are our business partner (supplier), we usually process your personal data as follows:
Purpose of processing
Scope of personal data
Legal basis for processing
JOB APPLICANT
If you apply for a job with us, we usually process your personal data as follows:
Purpose of processing
Scope of personal data
Legal basis for processing
WEBSITE VISITOR
When you visit a website operated by CSE ("Website"), cookies may be activated, which are small text files containing short data that may be stored on your device when you visit the Website. We use cookies on the Website for the following purposes:
All personal data is processed in a lawful and transparent manner and only adequate, relevant and necessary data in relation to the purpose of the processing is required. Further information is available in the current version here.
LINKS TO THIRD PARTY WEBSITES
Links to the websites of other entities are placed on our Website in order to make our Website more interesting for you as a user. You will only be redirected to the relevant website if you actively click on the link. In this case, your web browser will open the corresponding page. Please note that the personal data processing settings are governed by the policies of the respective website, which are beyond our control.
VISITOR TO OUR PREMISES MONITORED BY CCTV
If you visit our premises that are monitored by CCTV, we usually process your personal data as follows:
Purpose of processing
Scope of personal data
Legal basis for processing
PARTICIPANT IN EVENTS WE ORGANISE OR PARTICIPATE IN
If you participate in events that we organise or you provide us with your personal data in the context of events that we otherwise participate in (e.g. events, exhibitions, etc.), we usually process your personal data as follows:
Purpose of processing
Scope of personal data
Legal basis for processing
PROCESSING OF PERSONAL DATA ON THE BASIS OF CONSENT
If you consent to the processing of your personal data for the purposes of sending you commercial messages and targeting advertising, you acknowledge that your consent is voluntary and that you may withdraw your consent at any time. Consent is usually granted for a period of 5 years or until revoked.
RECIPIENTS OF PERSONAL DATA
We only disclose your personal data to authorised employees or individual data processors contracted by CSE or other data controllers. These are e.g. processors or controllers involved in the delivery of goods/services, making payments, providing marketing services. However, only to the extent necessary for the fulfilment of the individual purposes of processing and on the basis of the corresponding legal title for the processing of personal data. The current list of recipients of CSE personal data is available upon request.
For the purposes set out in this Policy, we may also transfer personal data to recipients and processors based outside the EU in certain cases. In the case of transfers of personal data to countries outside the EU, if required by applicable data protection legislation, we undertake to take additional measures to ensure adequate protection of personal data through the Standard Contractual Clauses, the current version of which is available at https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX:32021D0914.
In the cases provided for by law, we are entitled or obliged to transfer certain personal data to law enforcement authorities or other public authorities on the basis of applicable legislation, for example.
PERSONAL DATA OF THIRD PARTIES
Personal data of third parties, which means personal data of employees of our business partners, carriers and other individuals involved in cooperation with us, or other data we receive in connection with the conclusion or performance of a contract, will be processed in accordance with the GDPR. We will use this personal data for the purpose of fulfilling contracts with business partners. The business partner hereby acknowledges that we will process the personal data of these third parties for the duration of our contractual relationship and for the period of time stipulated by special legal regulations, if any. They will then be kept for a longer period of time if there is a justified need to keep the data in relation to a specific case. The business partner is obliged to properly instruct its employees and other natural persons involved in the business partner's cooperation with us on the processing of personal data by CSE.
RETENTION PERIOD OF PERSONAL DATA
We process and store your personal data for the period of time necessary to ensure all rights and obligations arising from the relevant contractual relationship and for the period of time for which we are obliged as a data controller to store personal data under generally binding legal regulations or for which you have given us your consent to the processing. In other cases, the processing period is based on the purpose of the processing, which must be proportionate, or is determined by data protection legislation.
Performance of the contract
Fulfilling legal obligations
Protecting our legitimate interest
Handling your requests sent via e-mail or contact forms
Sending commercial messages
Pre-contractual measures
* We are entitled to process your e-mail address within the meaning of Section 7(3) of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services), as amended, for the purpose of disseminating commercial messages concerning our own products or services (e.g. in the form of a newsletter) in the event that you have not refused such sending.
RIGHTS OF DATA SUBJECTS
As a data subject, you have the following rights under the law, which you can exercise at any time. This includes the right (i) to access personal data, (ii) to rectification of inaccurate or false personal data, (iii) to erasure of personal data if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed or if it is established that they were processed unlawfully, (iv) to restriction of processing of personal data, (v) to the portability of the data; and (vi) the right to object, after which the processing of your personal data will be terminated unless it is demonstrated that there are compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, in particular if the ground is the enforcement of legal claims. You also have the option of contacting the relevant supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (in Czech: Úřad pro ochranu osobních údajů) (www.uoou.cz), to whom you can lodge a complaint.
Right of access to personal data: if you want to know whether we are processing personal data about you, you have the right to be informed whether your personal data is being processed and, if so, you also have the right to access your personal data.
Right to rectification of inaccurate and false personal data: if you believe that we are processing inaccurate or false personal data about you, you have the right to request its rectification. We will carry out the repair without undue delay, taking into account the technical possibilities.
Right to erasure: if you ask us to erase it, we will erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) the processing is not required by law.
Right to restriction of processing of personal data: if you are not interested in erasure but only in temporary restriction of processing of your personal data, you can request us to restrict the processing of your personal data.
Right to data portability: if you want us to transfer your personal data that we process on the basis of your consent or on the basis of a contract to a third party, you can exercise your right to data portability. If the exercise of this right could adversely affect the rights and freedoms of third parties, we will not be able to comply with your request.
Right to object: you have the right to object to the processing of personal data that is processed for the purposes of protecting our legitimate interests. If we do not demonstrate that there is a compelling legitimate reason for the processing which overrides your interests or rights and freedoms, we will terminate the processing without undue delay on the basis of your objection. If the main reason for your objection is against the sending of commercial messages and the targeting of advertising, please use the link at the end of the last commercial message (newsletter) you received from us to unsubscribe from commercial messages and the processing of personal data for this purpose.
In the event of repeated or manifestly unjustified requests to exercise the above rights, we shall be entitled to charge a reasonable fee for the exercise of the right in question or to refuse to exercise the right. We would inform you of such a procedure.
To exercise your rights, please contact us by letter to our registered office or by email to ochranaou@czechoslovakgroup.cz. We reserve the right to adequately verify the identity of the applicant for the rights in question.
This Personal Data Processing Policy is effective from 25/05/2018
Last updated date November 2023