PRIVACY PROTECTION

On 25 May 2018, the new Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation; GDPR) entered into force.

The purpose of the present document is to provide you, the customer, with information on how we handle your personal data within our company and what your rights are in relation to the processing of personal data.

The controller of your personal data within the meaning of GDPR is the company:

METALURGIE Rumburk s.r.o., Company ID: 64 652 955, Žitná 1098/15, 408 01 Rumburk, Czech Republic

Personal data processing principles

We process your personal data under several so-called legal titles, as METALURGIE Rumburk s.r.o. can only process your personal data for the purposes for which it has a legal basis.

If we have entered into a contract with you or are negotiating a contract with you, the processing of your data falls under the legal title of performance of the contract. In order for us to be able to negotiate cooperation and conclude a contract, we need to process some of your personal data. This entitles us to use this data solely for the purpose of contract negotiations.

Některé Vaše osobní údaje zpracováváme, pokud je to nezbytné pro splnění právní povinnosti firmy, respektive pokud to vyžaduje zákon.

Pokud jste s námi již uzavřeli smlouvu, snažíme se, abyste z našich produktů získali co největší užitek, a proto vám například zasíláme reklamní tipy a produktové nabídky, pozvánky na firemní akce a řadu dalších informací. Toto vše se děje na základě oprávněného zájmu naší firmy a od této komunikace se můžete kdykoliv odhlásit.

Pokud nejste naším zákazníkem či zaměstnancem, tak zpracováváme Vaše osobní údaje, pouze pokud jste nám k tomu dali svůj souhlas. Zpracování osobních údajů na základě souhlasu je dobrovolné, pokud souhlas neudělíte, nebude nijak ovlivněno smluvní plnění. Na základě Vašeho souhlasu realizujeme výzkum trhu, vývoj a rozvoj našich produktů, nabízení produktů a služeb a péče o klienty.

Purposes of the processing

All the personal data we process is processed for a clearly defined purpose. We always delete personal data for which the purpose of the processing no longer exists.

To keep the extent of the processing as limited as possible and to process only relevant data, we only process the data that we actually need for the purpose.

In particular, we process your contact details (name, surname, job title, company, phone number, email address), mainly for the purpose of developing and improving our products and services.

Period of the processing

The processing of your personal data will take place for the duration of the contract. After the lapse of this period, only data of which the further retention is stipulated by applicable laws (e.g. the Archives and Records Act) will be retained.

Integrity and confidentiality

The processing of your personal data takes place in electronic and paper form. All the systems and rooms containing your data are secured against accidental data leaks.

Your personal data can only be accessed by authorised persons who need to handle it in order to perform their job-related tasks and meet their obligations. These persons are obliged to maintain the confidentiality of the information they learn.

The person who handles the data as part of their job duties is physically present on the premises where the data is processed. This person is responsible for ensuring that the documents containing the personal data are not left unattended (placed unsecured on desks, etc. where anyone can access them).

The rooms and premises where the data is stored are locked and protected by a security code. Access to the IT equipment on which the data is processed is password-protected.

Your data protection rights

In certain cases, you have the right to request that the company erase your personal data (the right to “be forgotten”). It is important to know that even despite this right, the company may be obliged to retain your personal data for reasons required by law.

TOS VARNSDORF a.s. processes your personal data only to the extent necessary. If you believe that the company is overreaching beyond the processing purposes set out above, you can ask it to restrict the processing of your personal data.

You have the right to obtain your personal data and transfer it to another controller, provided that no legal or other material obstacles prevent you from doing so.

If you believe that TOS VARNSDORF a.s. is processing your personal data contrary to the protection of your private life or contrary to the law, you have the right to request an explanation or rectification of the breach.

If you believe that your personal data protection rights are being violated, you have the right to file a complaint with the Office for Personal Data Protection.

For some purposes, we may only process your personal data on the basis of your consent. This consent is voluntary and you can withdraw it at any time. If you withdraw your consent, we will no longer process your personal data. Your personal data may nevertheless continue to be processed for other purposes, insofar as the purposes are based on legal grounds.

Transfer of personal data abroad

Your personal data is processed primarily in the Czech Republic and is not transferred abroad in any way.

If you have any concerns about the processing of your personal data, you can contact us for clarification. You can also file a complaint with the Office for Personal Data Protection.

This document is effective from 25 May 2018.