Through these Personal Data Protection Principles (hereinafter the “Principles”), we inform the data subjects, whose personal data we process, on all the processing activities and the principles for the protecting of the data subjects.
1. People Responsible
Personal Data Administrator:
RUŠ s.r.o. IČ: 02032244, Sluhy č.p. 242, 250 63 Sluhy
Eva Nejedlá, IČO 68011245, Sluhy č.p. 242, 250 63 Sluhy
Karel Nejedlý, IČO 41834674, Sluhy č.p, 242, 250 63 Sluhy
Contacts for exercising your rights: Telephone: +420 720 041 771, E-mail: firstname.lastname@example.org
(hereinafter “us”,or “our”)
2. Basic Terms
Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC effective from 25.5.2018.
Personal data pursuant to Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”) meaning any information about an identified or identifiable natural person (i.e. about the data subject = you).
Special Personal Data:
Special personal data means data on racial or ethnic origin, political opinions, religion or philosophical beliefs or trade union membership, genetic data processing, biometric data for the sole purpose of identifying a natural person and health or sexual life, or the sexual orientation of the natural persons.
Data Subject = You:
The data subject is an identified or identifiable natural person, an identifiable natural person being a natural person that can be identified directly or indirectly, particularly by reference to a particular identifier such as name, identification number, location data, network identifier or one or more specific physical elements, the physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Personal Data Processing:
The processing of personal data, pursuant to Article 4, Paragraph 2 of the GDPR, means any operation or set of operations with personal data or personal data files carried out with or without the help of automated procedures such as collecting, recording, arranging, structuring, storing, or alteration, retrieval, inspection, use, disclosure through transmission, distribution or any other disclosure, sorting or combining, restriction, deletion or destruction.
An administrator pursuant to Article 4, Paragraph 7 of the GDPR is a natural or legal person, a public authority, an agency or any other body which, alone or jointly with others, determines the purposes and means for processing personal data. We act as an administrator in relation to your personal data.
A processor, pursuant to Article 4, Paragraph 8 the GDPR, is a natural or legal person, public authority, agency or other subject that processes personal data for the administrator.
The Supervisory Authority in the Czech Republic is the Office for the Protection of Personal Data (hereinafter referred to as “the Office”).
Risk processing means processing that will probably pose a risk to the rights and freedoms of the data subjects, processing that is not occasional or involves the processing of special personal data or personal data relating to criminal convictions and offenses referred to in Article 10 of the GDPR.
Automated by Individual Decision-making including Profiling:
Automated individual decision-making including profiling is generally understood as any form of decision based on the automated processing of personal data, i.e. without human intervention, including, but not restricted to, the assessment of certain personal aspects relating to the data subject, particularly for analysis or estimation, analyzing or anticipating aspects relating to his/her work performance, economic situation, health, personal preferences, interests, reliability, behavior, where he/she is found or moving.
3. Categories of subjects, processed personal data, purpose, legal basis and processing time
We process personal data for a clearly defined purpose:
Categories of data subjects
Purpose of personal data processing
Lawful basis and processed personal data
Performance of contracts concluded with customers
The lawful basis is contract performance.
For this purpose, personal data may be processed for the contractual and warranty periods.
Exercising rights from a contractual relationship after termination of the contract
The lawful basis is our legitimate interestcomprised of the right to recover debts, compensation for damages and other claims that may arise during the contractual relationship.
For this purpose, personal data may be processed for a period of four (4) years from termination of the contractual relationship, or in the event of a court proceeding, for the entire duration of the court proceeding.
Fulfilment of our accounting and tax duties
The lawful basis is fulfilment of our legal dutiesas stipulated by legal regulations such as the Accounting Act or VAT Act.
For this purpose, personal data may be processed for a period of ten (10) years from the end of the tax period in which the performance for the customer took place.
Dissemination of advertising communications such as professional information and messages, marketing materials, offers of goods or services
The lawful basis is our legitimate interestto provide and offer you similar services or goods that correspond to your needs on the basis of our business relationship.
For this purpose, personal data may be processed for the period of the contractual relationship.
Visitors to our website
Statistics before data are anonymised, displaying ads for our services or goods
The lawful basis is our legitimate interestthus defined: a) improving our services and focusing on what you are really interested in; b) offering you similar services or goods that correspond to your needs on the basis of access to our website.
For this purpose, personal data may be processed for a period of six (6) months.
By sending a response to a question from a visitor to the website
The legal basis is contractual performance or your consent
For this purpose, personal data may be processed until the question in the contact form is resolved, for a maximum of thirty (30) days or until your consent to processing expires.
Subscribers to news
Regular advertising communications sent by e-mail
The legal basis is the consent that you gave us when you signed up to receive news.
For this purpose, personal data may be processed until the consent is cancelled.