GDPR
PRIVACY POLICY
drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data within the meaning of Articles 13 and 14 of the Regulation (hereinafter "GDPR") and Act No. 110/2019 Coll., on personal data processing (hereinafter the "Personal Data Processing Act")
Who processes your data?
LOGSYS a.s.
Hraniční 1397, Poštorná, 691 41 Břeclav
ID No.: 269 81 009
contact e-mail: logsys@logsys.cz
hereinafter referred to as "we" or the "controller" or the "organization"
What is personal data?
Personal data is practically any information that can identify a living natural person directly, or whose purpose is to reach such a person. Personal data can be divided into general (e.g., first and last name, age, phone number, place of birth, marital status, etc.) and sensitive (today referred to as special categories of personal data, which include only the following personal data - biometric data, trade union/political party membership, ethnic origin, philosophical beliefs, genetic data, information about convictions and criminal offenses, religious beliefs, political opinions, racial origin, sexual orientation/life, health status).
What is personal data processing?
Personal data processing means a systematic activity performed by the controller with personal data for a specific purpose. Activities according to the previous sentence include, in particular: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Sources and categories of personal data:
The controller processes personal data (directly from you) that you have provided, or personal data obtained based on the fulfillment of your order.
Your identification and contact details and data necessary for the performance of the contract.
Legal reason and purpose of processing
The legal reason for processing is:
Your consent to the processing of personal data for the purpose of providing direct marketing according to Art. 6(1)(a) GDPR
For the purpose of concluding and performing a contract (i.e., in accordance with the provision of our services), we process your personal data according to the provisions of Art. 6(1)
b) GDPR. The legal basis for processing your general personal data is therefore a contract.
Once the contract is fulfilled, we must archive your personal data for the period prescribed by relevant legal regulations. Here, the legal reason for processing your general personal data is compliance with a legal obligation, which is stipulated by Art. 6(1)(c) GDPR.
The purpose of personal data processing is:
Processing your order and exercising rights and obligations arising from the contractual relationship between you and the Controller. When ordering, personal data necessary for successful order processing are required according to Art. 6(1)(b) of the Regulation (this includes subsequent payment execution, service delivery, complaint handling, etc.); we use your personal data provided to us to conclude a contract with you, and if a contract is already concluded between us, we use it to fulfill it. The processing of the customer's personal data takes place without the customer's consent, as the legal basis for processing their personal data for the purpose of fulfilling the contract is the specific contract between the customer and the operator. The provision of personal data is a necessary requirement for concluding and performing the contract; without providing personal data, it is not possible to conclude the contract or for the controller to fulfill its terms.
What personal data and to what extent will we process?
In order to provide our services to you, we need to know the following personal data:
General personal data: first and last name, permanent residence address, delivery address for services or goods, your phone number and e-mail,
How long will we store the data?
We will store your personal data for the entire duration of fulfilling our mutual contract. After the end of the contractual relationship, we will store your personal data for as long as necessary to fulfill the archiving obligation under the legal regulations that require archiving (these regulations include, for example, the Accounting Act, the Value Added Tax Act, the Archiving and Records Management Act).
To whom do we further transfer your personal data?
Your personal data may be transferred to the following group of persons: providers of legal, tax, and accounting services, providers of technical solutions.
Your personal data may also be transferred to public administration authorities and courts, but only provided that this is stipulated by a special legal regulation, or you give explicit consent to it.
Your personal data is always transferred to our processors based on a processing agreement and in accordance with the minimum required standard of personal data protection required by the GDPR.
The controller does not provide, publish, or make personal data available to third countries.
Conditions of personal data security
The controller declares that they have taken appropriate personnel, technical, and organizational measures to ensure personal data protection.
The controller has taken technical measures to secure data repositories and repositories of personal data in documentary form.
The controller declares that only persons authorized by them have access to personal data.
As part of the personal data processing activities we carry out in our operations, no automated decision-making or profiling takes place.
What are your rights in connection with the processing of your personal data?
Under the conditions set out in the GDPR, you have:
The right of access to your personal data under Art. 15 GDPR
The right to rectification of personal data under Art. 16 GDPR
The right to restriction of processing
The right to erasure under Art. 17 GDPR
The right to object under Article 21 GDPR
The right to data portability under Article 21 GDPR
The right to withdraw consent (electronically or to the mailing address)
The right to lodge a complaint with the Data Protection Authority if you believe that your personal data protection rights have been violated.
How can you exercise your rights?
Right of access
Based on your request, we must inform you whether we process or do not process your personal data. If we do process them, you have the right to be informed about:
for what purpose we process your data,
to what extent this data is processed
how long they will be stored
to whom they will be made available
whether you can lodge a complaint with the Office for Personal Data Protection.
You can submit the request electronically to the email address logsys@logsys.cz or by mail to the address: Hraniční 1397, Poštorná, 691 41 Břeclav.
Right to rectification
If you believe that we process incorrect (inaccurate) personal data about you, you have the right to their rectification. If you discover such an inaccuracy in your personal data, let us know and we will correct it without undue delay. You can submit the request electronically to the email address logsys@logsys.cz or by mail to the address: Hraniční 1397, Poštorná, 691 41 Břeclav
Right to erasure
Under certain circumstances, you have the right to have us erase your personal data. You can ask us to erase your data at any time. We will erase your personal data if:
we no longer need your personal data for the purpose for which you provided them to us,
you withdraw your consent,
you object to the processing of your personal data,
we process your personal data unlawfully,
the personal data must be erased to comply with a legal obligation,
you are a child, or a parent of a child, who consented to the processing of personal data over the internet.
Right to restriction of processing
You can ask us to restrict the processing of your personal data. If we grant your request, we will only store your personal data and will not work with it further. The restriction of the processing of your data will occur if:
your personal data is incorrect, until we verify its accuracy,
we process personal data unlawfully, but you do not agree to its erasure and request instead that we only restrict the processing of your personal data,
we no longer need your data, but you need it for the establishment, exercise, or defense of legal claims,
you object to the processing of your personal data, until we verify whether our legitimate grounds override your reasons.
Right to data portability
You have the right to request that we provide you with your personal data in electronic format (e.g., XML or CSV file) that allows you to easily transfer data to another company. You can also ask us to transfer your personal data directly to the selected company ourselves. We will comply with your request if you provided the personal data directly to us and gave us consent to process it
Right to object
You have the right to object to us processing your personal data. If we process your personal data in the following cases:
due to our legitimate interest,
creating a customer profile,
you can object to their processing if you have personal reasons for doing so.
How can you exercise these rights?
You can contact us with your request in one of the following ways:
By email: logsys@logsys.cz or by mail to the address: Hraniční 1397, Poštorná, 691 41 Břeclav.
If you believe that your personal data protection rights have been violated, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection at the following address:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
ID No.: 70837627
Phone: switchboard: +420 234 665 111 (does not provide consultations)
information: +420 234 665 800 (information line is available every Tuesday and Thursday from 1:00 PM to 3:30 PM)
WWW: https://www.uoou.cz
E-mail: posta@uoou.cz
Data box ID: qkbaa2n