On the basis of EU Regulation 2016/679 (hereinafter the GDPR), we are providing you with information about the processing of customers’ personal data that is carried out in connection with our business activities.
The personal data administrator is MOSER, a.s., Kpt. Jaroše 46/19, 360 06 Karlovy Vary, Czech Republic.The contact details of the person responsible for protecting personal data are: firstname.lastname@example.org, tel.: 00420 353 416 242.
|Processing name||Processing purpose||Personal data categories||Legal title||Storage period||Other recipients||Client category|
|Data for an order||Ensuring delivery of an order||Contact and invoicing information, contact persons||Fulfilling contracts||For the validity of the contract||N/A||Customer|
|Invoicing||Invoicing delivery||Invoicing data||Legal obligation||10 years||Tax Office||Customer|
|Dispatching||Delivering goods||Delivery address and telephone, contact person||Fulfilling contracts||10 years||Transport company||Customer|
|Sending business messages via e-mail||Information about news||Email address||Legitimate interest||Until objection is filed||N/A||Potential customer, Customer|
|Sending printed promotional materials||Information about news||Delivery address||Legitimate interest||Until objection is filed||N/A||Potential customer, Customer|
|Records of contacts from business and marketing events||Acquiring new contacts||Business card||Legitimate interest||Until objection is filed||N/A||Potential customer|
Legal titles - the legal justifications for processing are defined in the GDPR, Articles 6 and 9.
Storage period - how long we are authorized or required to process and store your data.
Other recipients - here we present the other recipients we provide the data to. If “N/A” is stated, then it means that we do not provide them to anyone.
Data Source - here we state where we obtained the personal data. If “Data Subject” is presented then it means we obtained them directly from the person concerned.
In cases where the processing is based on the legal title “Concluding or fulfilling a contract”, we need your personal data for concluding a contract and its subsequent fulfilment, without which it is not possible to conclude the contract.
In cases where the processing is based on the legal title “Legal Obligation”, we need to process your personal data on the basis of legal requirements within the time specified by the given act and we are not allowed to restrict or erase this processing during this period.
We will only process your personal data for the purposes stated in the table.
As a data subject (the natural person about whom the data are processed) you have the following rights to your personal data:
|To request a listing||
This concerns a listing of the data we have about you, the so-called Right to Access.
The listing will be in a format in line with our capabilities. You do not have the right to request a listing in a format that you specify.
An exception where we are not allowed to make a listing are cases involving documents whose publication would threaten the rights and freedoms of others. This concerns personal data of other persons, the protection of trade secrets, intellectual property, etc.
|To request a rectification||If you find that we keep inaccurate, outdated or incomplete data about you, you can request they be corrected or supplemented.|
|To request an erasure||
We must make a deletion in cases where personal data have been stored for longer than a specified storage period or we have no valid legal title.
By law we may not make a deletion in cases where processing is carried out as Fulfilling a Contract or a Legal Obligation.
|Request restrictions on processing||
This concerns processing under the title of a legitimate interest.
A restriction on processing occurs in the case of an objection being filed and the restriction will last for the period of assessing the objection.
|To file an objection to processing||
An objection may be filed in cases where the processing is carried out as a legitimate interest.
An objection to sending commercial communications will always be recognized.
In cases where your name or other contact information is given in order to provide services, the potential for abuse is virtually eliminated and it is essential for these activities. Therefore, we consider this legitimate interest to be overriding and we do not recognize the objections.
|Withdraw consent to processing||
This is possible in cases where processing is done on the basis of consent. If you give consent to processing and withdraw it, processing will cease.
|Request a listing in a portable format||
You can request a listing in a portable format only in cases where the processing is based on the legal titles - fulfilling a contract and consent.
You may only request a listing of the data that you have given us and which we keep in electronic form and you do not have the right to request the format. We will hand it over to you in XLS format with named columns.
|Filing an objection to an automated decision||
We do not carry out processing based on an automated decision.
|Filing a complaint to the Supervisory Authority||
If we do not respond to your request within 1 month, you can file a complaint with the Office for Personal Data Protection.
If you wish to exercise any of these rights, you can submit a request to do so in the following manner:
Send it by email to email@example.com with a valid electronic signature; without this confirmation of identity it cannot be recognized.
It should contain:
We will send you a notification about the result of the request within 30 days of receiving it.
Activities related to exercising the rights of data subjects are free of charge. However, if the requests are found to be clearly unreasonable or inappropriate, especially if they are repeated, we can:
If doubts arise as to your identity, we are entitled to ask you for additional information to confirm your identity.
Karlovy Vary, 24 April 2018