Principles and Information about Personal Data Processing

I. Introductory Provisions

These Principles are prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) and Act No. 110/2019 Coll., on personal data processing. The aim of these Principles is to provide a Subscriber with basic information about personal data processing.
The terms below are defined as follows for the purposes of these Principles:

The Operator (Controller) is company L&K s.r.o., business ID number: 08834547, registered office: Dopravní 500/9, Uhříněves, 104 00 Prague 10;
A Subscriber is a natural person that completes and sends the Operator a contact form from the website www.sidlonamiru.cz and/or that uses the client information system at the address clients.sidlonamiru.cz; and
The Personal Data is the first name and surname, e-mail address and telephone number.

Personal data can be provided to specialised external subjects (“Processors”) that process Personal Data for the Controller (Operator) based on the relevant personal data processing agreement. The Controller (Operator) selects a person/entity that provides maximum guarantees about technical and organisational security for the personal data handed over as a Processor after careful consideration.

II. Purpose of Personal Data Processing

The Processor processes Personal Data for the following purposes:

Ensuring the conclusion and subsequent performance of a contractual obligation between the Operator and a Subscriber (Art. 6(1)(b) of the GDPR). Other statutory duties (in particular accounting, tax and archiving) result from such relationship and the Operator has to process Personal Data also for this purpose (Art. 6(1)(c) of the GDPR);
To protect its legitimate interests (Art. 6(1)(f) of the GDPR), which are, in particular, the protection of the Operator’s reputation as the website administrator and to protect the Operator’s asset interests for any court disputes and the making of legitimate claims by the Controller.

III. Protection of Personal Data and Information about Processing

The GDPR, Act No. 110/2019 Coll., on personal data processing, and other relevant legal regulations apply to Subscribers.
A Subscriber takes note that sending a completed contact form will commence the processing of Personal Data by the Operator.
The personal data are necessary in this context for the provision of a specific service by the Operator. If a Subscriber does not provide his/her Personal Data, services cannot be provided. In general, it is a contractual and statutory requirement.
If a contractual relationship is not concluded, a Subscriber’s personal data will be erased within 14 days of the end of negotiations, for the purpose of concluding a contract in case negotiations are renewed.
Personal Data will be processed for the period of negotiations about the conclusion of a contract between the Operator and a Subscriber, for the purpose of concluding a contract and for the term of the contractual relationship.
Personal Data can be processed and stored for the following 36 months in case a dispute arises concerning the relationship between the Operator and a Subscriber, for the purpose of protecting the Operator’s legitimate interests. After this period expires, the Operator will erase the Personal Data.
A Subscriber will provide the Operator with only truthful and precise Personal Data.
The Operator will make every effort so that there is no unauthorised processing of Personal Data. Subscribers’ personal data will not be handed over without a Subscriber’s consent to any third parties, a third country or international organisation. The exception to this is an external Processor, solely for the purpose of processing data in accordance with the contractual relationship between the Operator and a Subscriber or for the purpose of performing a legal duty of the Operator.
Personal Data are and will be processed in electronic form in an automatic and non-automatic manner. The Controller does not perform automatic decision-making or profiling.
A Subscriber takes note that his/her Personal Data are stored and processed in the European Union, where there is always compliance with European personal data protection standards.
The Operator accepts and complies with technical, organisational and security measures in order to protect a Subscriber’s personal data against their leak, loss, destruction and against unauthorised interference by unauthorised persons. The processing of a Subscriber’s Personal Data and access to them will be ensured only by the authorised persons who are bound by the duty of confidentiality and to comply with legal regulations.

IV. Cookies on Websites

In accordance with Section 89 of Act No. 127/2005 Coll., on electronic communications, as amended, the website uses cookies to ascertain a logged in user at clients.sidlonamiru.cz. They are short text files that a visited website sends to a browser. Thanks to them it is possible to tell registered users from other users. Cookies do not serve to obtain any sensitive personal data.
The following types of cookies are used during operations:

Ascertaining of logged in user at clients.sidlonamiru.cz

V. Subscriber’s Rights Related to Processing

A Subscriber is entitled:

To be informed about the processing of his/her Personal Data;
To request access to his/her Personal Data from the Operator;
To the rectification of Personal Data provided;
To the erasure of Personal Data provided;
To the restriction of processing of Personal Data;
To object to processing, as well as the right to portability of Personal Data;
To file a complaint to the Office for Personal Data Protection, registered office: Pplk. Sochora 27, 170 00 Prague 7, website: https://www.uoou.cz/
In the case of processing of Personal Data based on a Subscriber’s consent to processing, this consent can be rescinded at any moment

A Subscriber can exercise the aforementioned rights by writing to the address: company L&K s.r.o., business ID number: 08834547, registered office: Dopravní 500/9, Uhříněves, 104 00 Prague 10, or electronically at the addresscompanyLK@seznam.cz. The provider will deal with such requests promptly, but no later than within one month of receiving a request. A Subscriber will be informed of any extension of this period in time.

A Subscriber is entitled to obtain a confirmation about whether his/her personal data are or are not processed and, if they are processed, he/she is entitled to access the personal data, as well as other information. If a Subscriber chooses an electronic form for communication with the Operator, the Operator will provide the requested information also in electronic form, unless a Subscriber requests another method of provision of information.
In the case of a repeated and unreasoned request for the provision of a physical copy of Personal Data processed, the Operator is entitled to bill a reasonable charge for the related administrative costs.
If it is probable that a certain case of breach of Personal Data security will have as a consequence a high risk for a Subscriber’s rights and freedoms, the Controller (Operator) is obligated to notify such breach without undue delay to a Subscriber.

VI. Concluding Provisions

All legal relations arising in connection with the processing of Personal Data are governed by the legal order of the Czech Republic, regardless of from where access to them was realised. Czech courts have the jurisdiction to deal with any disputes arising in connection with the protection of privacy between a Subscriber and the Operator.
Subscribers that provide their Personal Data through the registration form for the purpose of concluding an agreement with the Operator or provide consent to processing of Personal Data do so voluntarily, on their own behalf and the Operator in no way manages their activities.
The Operator can change or modify the text of the Principles. The Provider informs Subscribers of each such change by e-mail at least 30 days before changes come into effect.
These Principles come into effect on 1 August 2020.