Information and Personal Data Processing Policies
Act No. 110/2019 Coll., On the processing of personal data (hereinafter referred to as the “Act”)
I. Personal data controller
Logic Space, with its registered office in Boršov nad Vltavou 245, 373 82, registration number: 18042481, tel .: +420 723 278 197, e-mail: [email protected] (hereinafter referred to as the “Company” or “controller”), as the personal data controller, hereby informs, based on this Act, of the manner and scope of processing personal data, including the scope of the rights of data subjects related thereto, unless the Act provides otherwise, these are provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of individuals with regard to personal data processing and on the free movement of such data and repealing Directive 95 / 46 / EC (General Regulation on Personal Data Protection) – (hereinafter referred to as “GDPR”).
II. Scope of personal data processing
Personal data are processed to the extent to which the data subject has provided them to the controller in connection with the conclusion of a contractual or other legal relationship with the controller or which the controller has otherwise collected and processed in accordance with applicable legal regulations or to fulfill the controller’s legal obligations under the Act.
III. Sources of personal data
directly from data subjects providing personal data voluntarily (e.g. when concluding a contractual relationship, e.g. from email, personal or telephone communications for a request for an offer to the controller) and these sources are a basic condition not only for concluding or changing a contractual relationship and also serves primarily for the unambiguous and unmistakable identification of data subjects, which are determined by generally binding regulations, as a necessary requirement for actions of contractual parties and compliance with the law by the Company, namely in particular personal data transmitted, but also derived data from public registers, lists and records (e.g. commercial register, trade register, telephone directory, etc.) camera systems, which are in the possession or ownership of the controller, and their operation is carried out for the purpose of protecting the persons and property of the controller against possible unlawful conduct of other subjects.
IV. Categories of personal data subject to processing
• Identification data are always divided according to the types of data subjects and the purpose of processing personal data and their scope is determined by the necessity for the purpose of processing personal data: identification data in particular mean: name, surname, title, date of birth, document number, VAT number, permanent, temporary, or registered office address, signature, nationality, previous education information and other identification data on the basis of which we are able to unambiguously identify you.
• Contact details: contact or delivery address, telephone number, email address, etc. Contact details are also personal data on the basis of which we are able to contact you. More detailed information regarding specific categories of personal data that we process can be found in the text of the document, by which you either grant consent to the processing of personal data or by which we inform you about the processing of personal data when providing / fulfilling a contractual relationship – to create an offer, or other purposes of personal data processing, based on our contractual obligation or legitimate interest.
• other data necessary to fulfill the contract, data provided beyond the relevant laws processed with the consent of the data subject (processing of photographs, use of personal data for personnel management, etc.)
• categories of special data: in particular data on your health status, only if personal data are provided by you or required by applicable law.
V. Categories of data subjects
Interested party, controller’s employee, external collaborator (natural person doing business or not doing business), controller’s partner, carrier, service supplier, or other person who is in a contractual relationship with the controller, further job applicant, natural persons involved in the processing of personal data, other data subjects.
VI. Categories of recipients of personal data
public administration bodies (police, alien police, bailiffs, etc.), or state authorities within the framework of fulfilling obligations laid down by the relevant legal regulations (authorities, institutions, etc.) or based on your consent to the processing of personal data, further the Regional Hygiene Station and other state administration and self-government organizations, further partner and affiliated or parent companies when providing services for you, persons providing postal and email shipments, further supplier companies providing IT management, websites, Christmas greetings, possible satisfaction surveys and technical processing operations (suppliers of information systems and applications) and other processors of the controller or other possible recipients in the territory of the Czech Republic, foreign countries, EU Member States. More detailed information regarding processors and recipients of personal data can be found in the text of the document, by which you either grant consent to the processing of personal data or by which we inform you about the processing of personal data when providing / selling our product or specific service based on our contractual obligation or legitimate interest.
VII. Purpose of personal data processing
the purposes of personal data processing of data subjects:
• negotiation of a contractual relationship, performance of the contract – conclusion and performance of the Contract or other contractual relationship necessary to ensure the services you require;
• customer support;
• obtaining and evaluating information related to services provided by us;
• processing requests and requests related to the above purposes of personal data processing of data subjects
• possible registration for newsletters, invitations and promotion of the Company;
• negotiating, concluding and fulfilling lease and lease agreements under Act No. 89/2012, Civil Code.
• internal administrative needs and internal records and protection of the rights and interests of the controller, recipient or other affected persons (e.g. debt collection, claims for damages, administrative proceedings under special regulations, creation of statistics)
• archiving under the law,
• fulfilling legal obligations of the controller and based on its statutory activities
• protection of vital interests of data subjects
• improving the controller’s website based on their use
• statistical reporting.
VIII. Method of personal data processing and protection
It is performed only by employees at the workplaces and at the registered office and branches of the controller, also with the help of a processor and computer technology, or even manually in the case of personal data in paper form in compliance with all security principles and technical or organizational measures for managing and processing personal data.
IX. Duration of personal data processing
In accordance with the deadlines specified in the relevant contracts, the file and disposal rules of the controller or the relevant legal regulations, it is the time required to ensure the rights and obligations arising both from the contractual relationship and from the relevant legal regulations that the controller complies with.
X. Instruction
The controller processes data with the consent of the data subject, with the exception of cases specified by law when processing personal data does not require the consent of the data subject within the meaning of the Act, unless otherwise provided as a result of Exceptions or GDPR.
In accordance with § 28 of the Act, the controller informs the data subject upon request of the data subject of the right to access personal data and the following information:
• the purpose of processing, category of personal data affected,
• recipients or categories of recipients to whom personal data have been or will be made available, planned period for which personal data will be stored, all available information about the source of personal data,
• if not obtained from the data subject, the fact whether automated decision-making, including profiling, takes place, informed about the right to request correction, restriction of processing or deletion of personal data and sources of this data.
Each data subject who finds out or suspects that the controller or processor is processing his personal data, which is contrary to the protection of his or her privacy and personal life or contrary to the law, in particular if personal data are inaccurate with respect to the purpose of their processing, may:
• ask the controller for an explanation and further require the controller to remedy such a condition. In particular, this may involve blocking, correcting, supplementing, or deleting personal data,
• if the request of the data subject under paragraph 1 is found to be justified, the controller will remove the harmful condition without delay,
• if the controller does not comply with the request of the data subject under paragraph 1, the data subject has the right to contact the supervisory authority directly, ie the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00, Prague 7, tel. 234 665 800 or email: [email protected],
• the procedure under paragraph 1 does not exclude the possibility for the data subject to address his / her proposal directly to the supervisory authority,
• contact for the controller’s data protection officer: , Logic Space, email: [email protected].