Personal data protection

PRINCIPLES OF PROTECTION AND PROCESSING OF PERSONAL DATA

We protect and process all personal data as confidential. We only handle personal data in accordance with the applicable legislation for the relevant purpose. In this document, we would like to provide you with basic information about the processing of personal data and your rights associated with it.

Who processes your data?

Your data is processed and handled by the business company Právo lidem s.r.o., registration number: 18027512, with registered office in Prague 110 00, Jindřišská 907/10, Czech Republic, email: info@pravozamestnance.cz, including its employees and cooperating persons (hereinafter also referred to as the "Administrator").

For the purposes of handling and processing your personal data, it is considered to be the data controller. You can contact the Controller by email: info@pravozamestnance.cz or by phone at +420 724 230 884 We operate the website www.pravozamestnance.cz and relevant subpages.

The controller is a natural person, an entrepreneur. The Controller's employees and contractors also handle personal data on behalf of the Controller, always to the extent necessary for the performance of the Controller's tasks. These persons selected by the Controller are bound by a legally recognised or contractual duty of confidentiality. We (as the Controller) only handle the personal data we receive in the cases and for the purposes that are required by law or contractual arrangements or to fulfil the Controller's legitimate interest. Our employees and other staff are trained in the handling of personal data received. We have a policy that our employees only know and work with personal data that they actually need for their work.

The controller does not carry out automated processing of your personal data, nor does it allow third parties to carry it out.

What is personal data and who is the data subject?

Personal data means any information on the basis of which a natural person is personally identifiable or identifiable in connection with other data. The data subject is the person whose personal data is the subject of the processing, i.e. mainly (in particular):

A client of the Controller or a potential client of the Controller or a person interested in the Controller's services or products (including, for example, a visitor to the website);

A person whose data is disclosed or made available to the Administrator in connection with the provision of services or products by the Administrator to Clients (for example, data about persons with ownership rights, bank account holders and owners, acting persons and their representatives, individual officials) or which otherwise comes to their attention in the course of the operation of their business;

Employees, business contractors (e.g. including their employees, agents or persons authorised to act);

Natural persons acting in an official capacity (e.g. for an administrative authority, court or other public authorities) or in any other such capacity.

What personal data do we process (scope)?

In particular, we handle the following personal data in connection with the provision of our services to you:

(a) Name, surname, gender, marital status and title, data on cohabitation of persons or their relationships;
b) Residence, place of permanent or temporary residence, delivery address and other location data;
(c) Date of birth, birth number, identity card or passport number, residence permit;
(d) Identifiers - e.g. registration number, tax identification number and other unique identifiers...;
e) Copies of personal documents;
f) Network identifiers and designations - e.g. IP, labels, profiles, email,...;
g) Contact details - e.g. telephone number, email address, data box number, delivery agent, representative, social media profiles...;
h) Bank details; 
i) Details of ownership of or relationship to the property;
j) Details of liabilities or relationship to liabilities;
k) Details of the contractual performance and the object of the performance;
(l) Details of health and social insurance;
m) Data on administrative and judicial decisions, including pending executions and insolvencies;
n) Tax and accounting data; 
o) Data on payroll and remuneration processing;
(p) Registration data and sheets in accordance with the legislation;
(q) Payroll processing and valuation data;
(r) Special and sensitive data from criminal files or health data obtained in the course of providing services;
s) Other than the above information relating to your person;

The above list is only exemplary. Information is personal data if, alone or in combination with other information, it identifies a specific natural person or a specific person is identifiable on the basis of that information.

Not every data subject provides all of this information. The amount of personal information varies depending on the legal relationship you have with the Data Controller (e.g., a customer submits different information than an employee of the Data Controller).

How do we obtain personal data?

Personal data is most often obtained by the Administrator in written form (paper, electronic form) or in oral form in person or by telephone. The Controller may make and retain written records or other confirmation of communications from consultations or communications made orally (in person or by telephone).

You most commonly provide your personal data by completing an enquiry form when placing a binding order with the Controller. Personal information collected online from our website is protected by end-to-end encryption. Personal data is only recorded by the Controller upon receipt of a completed form. When the session is terminated without the order being sent, the personal data is not further processed by the Administrator. If you consent to receive newsletters, your personal data is further processed electronically for these purposes.

The Controller also receives and obtains personal data through communication with you or contractual partners, in the preparation of contracts or legal documents, in connection with the execution of contracts and contractual performance, in the performance of statutory obligations, in dealings with government authorities, law enforcement authorities, courts, from the Internet, from social networks, public registers and so on. The Controller also receives personal data about you in the context of remote communication with you or third parties, whether by means of (e-mail, telephone, SMS, social networks, ...) or video conference call.

Beyond that, your personal data can be obtained from publicly available data from public registers, public registries, catalogues, from your public profiles or data from websites, including browsing and movement data within the data provided by your chosen browser and web search tool (e.g. Google, List,...).  

For what purposes do we process personal data?

The Personal Data collected is processed by the Controller for the purposes of providing our services to you, to contact you and to develop business relationships or relationships arising from contracts or the law. Furthermore, from the Personal Data collected during your visit to the website, we receive feedback on our products and services within the framework of the preferences obtained from the browsing data (conditions are defined according to the cookie policy), the collection of this Personal Data can be limited/excluded according to the consent to the processing of cookies. We also store your feedback in relation to the goods purchased or services provided. We process personal data for the following purposes:

a) To fulfil statutory obligations (example below)

Tax and accounting obligations;
Obligations under the Local Taxation Act;
Obligations in relation to residence permits, asylum, visa obligations;
For compliance with social security and health insurance obligations (e.g. registration certificates);
Archiving and filing services;
Retention of data on goods sold under special legislation (e.g. handling of toxic preparations and substances);
Provision of assistance to public authorities;
Identification of beneficial owners and compliance with rules and procedures against money laundering;
And other...

(b) Performance of contracts, negotiation of contracts, protection of contractual performance (example below)

Performance of rights and obligations under contracts with customers or business partners;
Negotiating the provision of services;
Fulfilling client requirements;
Contracts and legal obligations with business partners;
Contracts and legal obligations with employees;
Representation before administrative and other bodies; actual execution of project approval and implementation;
Negotiations with third parties in the service provision regime.

c) Protection of the legitimate interests of the Controller

Identification of persons;
Protection of the rights and protected interests of the Controller;
Recovery of claims and fulfilment of obligations;
User movements on the website for the purpose of improving and enhancing the services we provide;
Satisfaction surveys to improve the Administrator's services;
Photo documentation of events held;
Statistics and performance measurements.

d) On the basis of the consent given (e.g. cookies or sending newsletters), which is voluntary and can be revoked at any time by a communication from you to the Administrator.

In order to improve and facilitate the movement of users, the collection of statistics and their evaluation, the Administrator collects data on the browsing and movement of users on its website. This personal data is not knowingly passed on to third parties and is only used for the Administrator's own purposes (statistics and evaluation of traffic, website modifications, facilitating the navigation of the website and website enhancements). We do not knowingly share your personal data for marketing or promotional purposes with third parties, nor do we pass on the data obtained regarding marketing and promotional information to others. Furthermore, the Controller may collect personal data indirectly through third party service providers (in particular, satisfaction questionnaires or reviews given) or pass on such personal data, in the case of the use (by you or by us) of integrated third party elements. The controller is entitled to ask you to complete satisfaction questionnaires, including by involving third parties.

Use of consumer reviews

We provide access to ratings and reviews of our services that have historically been made by our customers after their purchase and use on our website or when searching for results through search engines and comparison sites. We ensure and control the authenticity of such reviews by linking the reviews to specific paid orders for a stay at the Administrator's premises with attribution to a specific customer (who is identified through the personal information provided in the order, payment and email). This allows us to pair this with the order of a specific entity in our internal system for each review (review), and thus we are able to prove that the review actually came from the customer to whom our service was provided.

How long is the personal data received by the Controller recorded?

We process and store personal data for as long as necessary. We process compulsorily recorded data and kept for the period of time required by law (maximum 10 years for certain taxes and AML obligations). To secure other rights and obligations under contractual relationships and to fulfil statutory obligations under generally binding legislation (for a minimum of 5 years from the time of acquisition).

In the case of our legitimate interests, we retain personal data for the period necessary to exercise them, but for a maximum of 3 years from the date of acquisition, unless there is a reasonable need to retain the data for longer in a particular case. In the event of a request for erasure by you.

What rights do you have as a data subject?

The right to access personal data
You have the right to know (i) whether the Controller processes your personal data, (ii) what personal data it processes, (iii) for what purpose it is processed, and (iv) whether it has been or will be disclosed and to whom.

Right to rectification of inaccuracies or incompleteness
Provided that the Controller processes your data incomplete or inaccurate, you have the right to request its correction, clarification or completion.

Right to erasure of personal data
If you ask us to delete your personal data and at the same time the personal data (i) is no longer collected, stored and processed for the purposes specified, (ii) the processing is unlawful on our part, (iii) your reasons for deletion outweigh the reasons for keeping it, (iv) one of the existing legal obligations for processing it has ceased, the Controller will automatically delete your personal data.

Right to restriction of processing of personal data
Under the conditions set out in the Regulation, you have the right to request a restriction of the scope or purpose of the processing of your personal data. During the period of restriction, the personal data received will not be actively processed to the extent of the restriction.

Right to data portability 
You have the right to request the Controller to transfer, provide or otherwise transmit your personal data to third parties (another data controller) to the extent provided for by law. The Controller is not obliged to transfer data that would infringe the rights of other persons.

Right to object to the processing of personal data 
You may object to the processing of your personal data by the Controller if the Controller processes your personal data only on the grounds of its legitimate interest. In this case, an assessment will be made as to whether or not your rights and freedoms outweigh the legitimate interests of the Controller.

If your objection is justified and justified, the Controller will cease further processing of your personal data.In the event of repeated or manifestly unjustified requests to exercise the above rights, we will be entitled to charge a reasonable fee for the exercise of the right in question or to refuse to exercise it. We would inform you of such a procedure.

If you have any doubts or believe that your data protection rights are being violated, you may contact us at any time with a question or complaint or, in cases of serious misconduct on our part, the Data Protection Authority (the Authority).

The contact details for the Office are as follows:

Office for Personal Data Protection
Headquarters: Pplk. Sochor 27, 170 00 Prague 7
+420 234 665 111
Website: www.uoou.cz

Who processes the personal data received?

We transfer and share your personal data only in necessary cases (accountant, tax advisor, lawyer, approved supplier) or in cases where you give us your consent, always in compliance with the conditions and purpose of processing and with persons bound by a legally recognized or contractual obligation of confidentiality. Our employees are trained to handle personal data and, except for the necessary purpose, do not knowingly carry out any further processing of the personal data provided.

In order to be able to perform the contractual obligations of the Controller towards you, we are further assisted by our contractual entities who act as processor/controller in relation to you. Similarly, they assist us in fulfilling our legal obligations towards a public authority. These entities are:

Evaluation of anonymised traffic statistics using Google Analytics - Google Ireland ltd. Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland (measurement and statistics of web browsing);

Meta.com (Facebook, Instagram)

Other data

The controller does not carry out automated processing or profiling of customers.

Personal data is processed only within the European Union.

This policy is valid and effective as of 25.5.2018 and will be updated regularly.

 

COOKIE PROCESSING POLICY

The following document captures basic information about the processing and use of cookies on this website. The owner and operator of the website is and your data is processed and handled by the business company Právo lidem s.r.o., registration number: 18027512, with registered office in Prague 110 00, Jindřišská 907/10, Czech Republic, email: info@pravozamestnance.cz, including its employees and collaborators .