Personal data protection
TERMS AND CONDITIONS FOR PERSONAL DATA PROTECTION
Identity and Contact Details of the Controller
AD-IN-ONE Europe, a.s., Company Registration No.: 280 82 869, with its registered office at Bavorská 856, Prague 5, 155 00, registered in the Commercial Register maintained by the Municipal Court in Prague under File No. B 14840
To exercise the rights of the data subject under Personal Data Protection Act No. 101/2000 Coll., and Regulation (EC) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “General Regulation“), you may contact us personally at our registered office, by post at the above-mentioned correspondence address, through data box, Data Box ID: siickh6 or by e-mail at firstname.lastname@example.org. Our company does not fulfil conditions for the mandatory appointment of a Data Protection Officer. If in doubts about your identity, we may ask you for additional verification of your identity.
Object of Data Processing
As part of our business, we process only common categories of personal data:
Categories of Data Subjects
Employees, members of bodies corporate (statutory bodies), authorised or contact persons of business partners, website visitors, users of software and applications developed by AD-IN-ONE Europe, a.s. within the licenses granted to customers for their use, customers and potential customers.
Purpose and Legal Basis of the Processing
(a) Processing of data necessary for performing under the agreement
Personal data processed to provide services, safe and proper performance of an agreement, user rights management and to ensure customer service to our customers. The provision of these personal data is a contractual obligation, and failure to do so would make it impossible for us to perform an agreement with the client efficiently and safely.
(b) Processing of data necessary for fulfilling a legal obligation applicable to the controller
Personal data processed to fulfil obligations arising from legislation, imposing the obligation to process personal data. Typically, this includes the retention of data for bookkeeping purposes; providing these data is a statutory requirement.
(c) Processing of data necessary for negotiating and fulfilling an employment relationship
Personal data processed for the purpose of recruiting staff, retained for the purposes of concluding a contract of employment, if any, with applicants. Providing these personal data is a contractual obligation, and failure to do so would prevent us from efficiently carrying out a selection process and safely performing the contract with an employee.
(d) Processing of data necessary for the purposes of legitimate interests during business communication
Personal data processed to establish, maintain, and deepen our business relationships and contacts with our business partners and customers, for example, for the purpose of sending out sale offers, identifying and improving your customer experience, PR, and brand strengthening. Our legitimate interest includes also the use of personal data for the proper protection of our legal claims, keeping internal statistics and records, carrying out internal checks, etc. In the event of instigating any judicial, administrative or other proceedings, we process personal data to the extent necessary for the duration of such proceedings. The provision of such data is voluntary, you are entitled, under Article 21 of the General Regulation, to object to the processing for such purposes at any time; if objection to the processing for the purposes of direct marketing is made, the data shall immediately cease to be processed.
(e) Processing of cookies from websites
Categories of Personal Data Recipients
All personal data are used solely for the internal use of AD-IN-ONE Europe, a.s. and are protected from misuse. Personal data are, to the extent necessary, transferred for processing by public authorities and other processors who, in accordance with the guidelines imposed, provide sufficient guarantees for introducing technical and organisational measures so that the processing concerned would comply with the requirements of the General Regulation.
The processors include but are not limited to advisory and consulting companies, attorneys-at-law, external hauliers, law enforcement agencies, supervisory authorities in the field of personal data protection and other state administration authorities competent under special regulations.
Recipients also include the cloud storage provider Amazon Web Services Inc., and card payment gateway operators. Credit card numbers and other sensitive data are processed by the payment gateway provider. AD-IN-ONE Europe, a.s. does not retain or have available credit card numbers.
During the processing of personal data these are not transmitted to third countries outside of the European Union or to international organizations.
Time and Method of Personal Data Processing
Personal data are processed for a period of time that is strictly necessary to ensure all rights and obligations arising from agreement, as well as for a period of time that is required for their retention in accordance with generally binding legal regulations.
In general, however, we use and process personal data out of legitimate interest for:
Personal data are stored in electronic form solely on the servers of our company in the Czech Republic or in the territory of the European Union. Physically, we store data only on the premises of our company or under the supervision of responsible persons.
Rights of Data Subjects
Data subjects are entitled to turn to AD-IN-ONE Europe a.s. for the purpose of exercising the right of access to personal data concerning them, their correction or erasure or, as the case may be, limitation of processing, the right to object to processing, as well as when exercising the right to the portability of data and other rights under the General Regulation.
If you believe that your data is not adequately and in compliance with legal regulations handled, you are entitled to file a complaint with the supervisory authority, i.e. with the The Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7 – Holešovice, or through the Office website: www.uoou.cz.
AD-IN-ONE Europe, a.s. , 01/2019