architecture & innovation

Information on the processing of personal data pursuant to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (GDPR)

 

Administrator:

ConTree Concept a.s. together with the subsidiary ConTree Innovation s.r.o.

Industrial design and architecture
ID: 29082269 and 06648355
Registered seat: Zborovská 6, 30100 Plzeň
Email: info@contree.cz

 

The controller declares that it processes the personal data of its clients, or suppliers and other persons (hereinafter referred to as the "data subject"), for the following purposes:

 

• performance of the contract pursuant to Article 6, paragraph 1, letter b) GDPR, and for the duration of the rights and obligations of these contracts, as well as the duration of rights from liability for defects and the warranty and consequently the expiration of the limitation period, which applies to claims that may result from the legal relationship between the trustee body data arise

• fulfillment of legal obligations that apply to the administrator pursuant to Article 6, paragraph 1, letter (c) the GDPR, for example in relation to the tax obligations of the administrator, for a maximum period of ten years from the termination of the services by the administrator

• for the purposes of the legitimate interests of the administrator pursuant to Article 6, paragraph 1, letter (f) GDPR, namely:

  • the provision of legal assistance to the controller for a period of limitation relating to claims which may arise from the legal relationship between the controller and the data subject

  • tax and accounting advice to the administrator for a period of ten years from the termination of the provision of services by the administrator

  • direct marketing until the data subject objects to this purpose of processing. As part of the processing of personal data, the following data are processed: name, surname, telephone, email, address, postal code, city, or IČ / DIČ, IP address, exceptionally date of birth or birth number

 

Personal data will be destroyed or anonymised by the end of the calendar quarter following the end of the processing period at the latest .

The controller is entitled to transfer personal data to processors with whom it has concluded a contract for the processing of personal data and to public authorities if this obligation arises from a law or a legally binding decision of these bodies. The controller shall not make the data available to recipients in third countries or international organizations.

The data subject has the right to request:

 

• access to his personal data (Article 15 of the GDPR), consisting in the right to obtain confirmation from the controller as to whether or not personal data concerning him are being processed and, if so, has the right to access such personal data and further to the information specified in Article 15 (1) (a) a) to h) GDPR

• correction or erasure of personal data (Article 16 or Article 17 of the GDPR), consisting in

  • the right to have the controller correct inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to supplement incomplete personal data, including by providing an additional statement

  • the right for the controller to delete without undue delay personal data concerning the data subject , provided that the conditions of Article 17 of the GDPR are met

• processing restrictions (Article 18 of the GDPR), ie the right for the controller to restrict processing if the conditions of Article 18 of the GDPR are met,

 

The controller shall notify the individual recipients to whom the personal data have been disclosed of any rectification or erasure of personal data or restrictions on processing carried out in accordance with Article 16, Article 17 (1) and Article 18 of the GDPR, except where this proves impossible or requires a disproportionate effort.

The controller shall inform the data subject of these recipients, if the data subject so requests.

The data subject shall have the right to object at any time to the processing of personal data concerning him or her on the grounds relating to his or her specific situation, pursuant to Article 6 (1) (a). (e) or (f) GDPR, including profiling based on these provisions. The controller does not further process personal data if
does not demonstrate serious legitimate reasons for the processing which outweigh the interests or rights and freedoms of the data subject, or for the determination, exercise or defense of legal claims.

The data subject has the right to data portability (Article 20 of the GDPR), ie the right to obtain personal data concerning him provided to the controller in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller without the controller to whom the personal data have been provided has defended himself if:

• processing is based on consent pursuant to Article 6 (1) (a). (a) or Article 9 (2) (a) (a) or in a contract as referred to in Article 6 (1) (a). b); and

• processing is performed automatically.

 

Furthermore, the data subject has the right to object to the processing (under the conditions of Article 21 of the GDPR). Where personal data are processed for the purposes of direct marketing, the data subject has the right at any time to object to the processing of the personal data concerning him for that marketing, which includes profiling as far as that direct marketing is concerned. If the data subject objects to processing for direct marketing purposes, personal data will no longer be processed for these purposes.

The controller is obliged to report to the data subject a breach of personal data security if it is likely that a certain one will result in a high risk to the rights and freedoms of the data subject, under the conditions of Article 34 of the GDPR.

The administrator has the right to demand a reasonable payment for the provision of information, not exceeding the costs necessary for the provision of information.

The data subject is entitled to file a complaint for the processing of personal data with the Office for Personal Data Protection, Lt. Col. Sochora 27, 170 00 Prague 7. More information on the rights of the client-entity is available on the website of the Office for Personal Data Protection. (https://www.uoou.cz/6-pravasub projektu-udaj/d-27276)

 

In Pilsen on May 1, 2018

 

Statutory director and executive
Ing. Petr Minar