Information on the processing of personal data

Information on the processing of personal data

This document will inform you, as customers of our company Milan METELKA a.s., ID: 29182867, registered address no. 723, 683 04 Drnovice, registered in the Commercial Register at the Regional Court in Brno under B 5943, about your rights related to the processing of your personal data in connection with the new Regulation of the European Parliament and the Council of the EU 2016/679. We strive to inform you of the personal data we process about individuals in the course of providing our services, selling our goods, possibly in e-shops and in visiting our website and in contacts with potential customers, for what purposes and for how long we process this personal data in compliance with legal regulations, to whom and for what reason we may transmit it, and also to inform you about the rights you, as an individual, have in connection with the processing of your personal data. Please review the following information.

This information became effective on 25 May 2018 and was issued in accordance with Regulation (EU) 2016/679 (“Regulation” or “GDPR”) in order to ensure our information obligation as a controller under Article 13 of GDPR.

Data Controller

The controller of your data is Milan METELKA a.s., ID: 29182867, registered address no. 723, 683 04 Drnovice, registered in the Commercial Register maintained by the Regional Court in Brno under B 5943 (“Controller”). The data controller collects and handles your data and is responsible for ensuring that it is properly and lawfully processed. You can exercise your rights towards the data controller by the means specified below.

 

Categories of personal data

1. Basic identification data

a) name and last name, business name
b) company ID, Tax Identification Number
c) billing address, shipping address
d) address of place of business

2. Contact details

a) telephone number
b) contact email
c) user name
d) password

3. Data on the goods purchased

a) type, specification of the goods provided

4. Data from mutual communications

If mutual communications are necessary for the performance of the contract, e.g. for the purpose of verifying certain data, these communications can be in writing, over the phone or in electronic form; a record of these communications can be maintained.

Legal reason, purpose and duration of the processing

The scope of the data processed depends on the purpose of the processing. We process personal data for the above-mentioned activities only to the extent necessary so that these activities are completed and only for the time necessary or for the time imposed on us by legal regulations.

1. Processing data due to the performance of the contract

We process personal data for the purposes of concluding a contract with you, of managing your contract, changing the contract or for negotiating with you for the conclusion of a contract or changing it at the suggestion of the data subject.

• Preparation of contract documentation
• Delivery of ordered goods
• Verification of data transmitted by the customer

In the event a contract is or was completed by an applicant, we process their personal data to the extent of basic personal, identification and contact data, as well as data on the nature of the services provided and mutual communications for a period of 4 years from the date of the end of the final contract.

If there have only been negotiations to conclude a contract without actually concluding it in the end, we process the personal data provided for a period of 3 months from the date of the termination of the negotiations.

2. Processing of data in order to comply with legal obligations

• Complying with legal tax obligations
• The purposes established by special laws for criminal proceedings and to fulfill the obligation to cooperate with the Czech police and other state authorities (fulfilling legal obligations)

For tax purposes, contracts are archived for 10 years.

3. Processing of data due to the legitimate interests of our company

• Debt collection, disputes
• Securing evidence in the event we have to defend the rights of our company
• Records of outstanding debts and debtors

In the event a dispute or debt arises, we process personal data to the extent of basic personal, identification and contact data, as well as data of the nature of the services provided and mutual communications pending the outcome of the dispute or recovery of receivables.

 

Processing of personal data on the basis of consent as of 25 May 2018

We can also process your personal data for sales and marketing purposes solely and exclusively with your expressed consent granted recently for the period since 25 May 2018. Such consent can possibly be granted in a separate document. The purpose of processing data for commercial and marketing purposes is to create an appropriate offer for our services or third-party services. For commercial purposes, and based on this consent, the processing includes name and last name, business name, company ID, VAT registration number, billing address, shipping address, business address, contact email, contact phone number, product information and specifications.

The granting of consent for commercial and marketing purposes means your consent to receive advertisements through electronic, written or telephone contact.

The granting of consent is completely voluntary and can be withdrawn by you at any time. In the event your consent has not been withdrawn it remains in force for a period of 4 years from the date of the termination of your contract or until you withdraw it (at any time).

Withdrawing your consent for commercial and marketing purposes will not affect the processing of your personal data for other reasons (contract performance, fulfilling legal obligations and the legitimate interests of our company)

 

Cookies

If you have cookies enabled in your web browser, we process your behavior as recorded by the cookies placed on the website operated by our company for the purposes of ensuring the better operation of our website. If you have cookies enabled in your web browser, you can restrict or prohibit their use within your web browser.

 

Who has access to your data (categories of recipients)

To be able to provide you with the full range of our services while complying with our legal obligations and protecting our legitimate interests, third parties also have access to your data. If necessary in order to achieve one of the purposes listed above, especially if an external entity in the region has the necessary professionalism and expertise, your data will be processed by collaborating distributors and suppliers. If these suppliers process personal data provided by our company, they have the status of personal data processors and they process personal data only within our guidelines and may not use it otherwise. These include, in particular, IT service providers, accounting companies, transport companies, debt collection agencies, archiving service providers, law firms, print and postal service providers, including couriers, and others who provide services to us and with whom we have concluded, in order to protect your personal data, a contract on the processing of personal data.

Some public authorities and other organizations are entitled to request information about you. These are mainly for the supervisory purposes of the Czech Trade Inspection Authority, the courts, the police force of the Czech Republic. We only provide such information exclusively if the authorization to request it is permitted by law.

 

What your rights are regarding your data

• You have the right to be informed about the processing of your personal data – You have the right to know and get information about who the controller is, who the controller’s representative is, you also have the right to know who the data protection officer is, to know the reason for the processing, the categories of personal data, the recipients or categories of recipients of personal data, information about the transfer of personal data to third countries, the retention period of personal data, the authorized controller, you have the right to know that you can contact the Office for Personal Data Protection, you have the right to know the source of the personal data processed, and information whether and how automated decision-making and profiling is carried out.

• You have the right to access your personal data – This includes knowing and acknowledging that (whether) your personal data is or is not processed, and if so, you have access to information about the purposes of the processing, the categories of personal data, recipients or categories of recipients, the retention period of personal data, information about your rights, about your right to complain to the Office for Personal Data Protection, information about the source of your personal data, information on whether automated decision-making and profiling is being done, information and guarantees in the event your personal data is transferred to third countries or international organizations. You also have the right to receive copies of the personal data processed.

• You have the right to correct your personal data – If you find that we are processing personal data that is neither current nor accurate or is otherwise incorrect, please contact us and we shall rectify it.

• You have the right to have your personal data erased – In some cases we are obliged to delete your personal data at your instruction. We duly evaluate such requests and if we come to the conclusion that further processing is necessary for any of the purposes stipulated by the Regulation, we will notify you about it in accordance with the Regulation together with information that you can file a complaint against our procedure to the Office for Personal Data Protection.

• You have the right to restrict the processing of your personal data – If we process your personal data with your consent beyond the performance of the contract or the legal reasons for the processing, you have the right to require us to restrict this processing to the minimum legal reasons for it or you have the right to block certain personal data.

• You have the right to be notified of the rectification, erasure or restriction of the processing – In the event the processing of your personal data is rectified, erased or restricted, you have the right to be notified by us that these actions have occurred.

• You have the right to the portability of your data – If you want to have us provide your personal data to another controller, another company, we will transfer your personal data in the appropriate format to the entity designated by you.

• You have the right to raise an objection – If you get the impression or you learn that we are processing your personal data contrary to the protection of your private and personal life or contrary to the law, please contact us and ask us to explain or to rectify the defective situation. You can also raise an objection directly against automated decision-making.

• You have the right to withdraw your consent to the processing of your personal data – You can withdraw the consent you have given for commercial and marketing purposes any time with an explicit and specific expression of your will, either by phone or email to our company.

If you have cookies enabled in your web browser, you can restrict or prohibit their use within your web browser.

• You have the right to lodge a complaint or reservation with the Office for Personal Data Protection – In connection with the processing of your personal data, you can turn to the supervisory authority with your complaint or reservation regarding the processing of your personal data, namely the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, phone: 234 665 111, website www.uoou.cz/.

 

Legal regulations for personal data protection:

For comprehensive information, below is a list of the legislation that deals with the issue of processing personal data.

• Act 480/2004 Coll., on certain services of information companies
• Act 89/2012 Coll., Civil Code
• Regulation 216/679/EU, on the protection of personal data (GDPR)
• Act 563/1991 Coll., Accounting
• Act 101/2000 Coll., Personal Data Protection
• Act 235/2004 Coll., Value Added Tax