Consent to the processing of personal data and instruction of the data subject
1. Basic provisions
The administrator of personal data according to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is OpenServis.cz – Dominik Ulrich , ID number: 74729381, VAT number: CZ9005173595, with registered office at K Blahobytu 1699, 530 02, Pardubice.
2. Personal data
Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be directly or indirectly identified, in particular by reference to a certain identifier, for example a name, identification number, location data, network identifier or to one or more special elements of physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
The administrator has not appointed a personal data protection officer.
Personal data that will be processed:
• name and surname, title,
• Postal address,
• billing address,
• email address,
• telephone contact,
• IP address,
• Cookies.
3. Purpose of personal data processing
The purpose of personal data processing is to process sales orders and send business offers to the Administrator.
The administrator processes personal data that you have provided to him/her or personal data that the administrator has obtained based on the fulfillment of your order.
4. Legal reason and purpose of personal data processing
The legal reason for the processing of personal data is the fulfillment of the contract between you and the controller pursuant to Article 6, paragraph 1 letter b) GDPR,
legitimate interest of the controller in the provision of direct marketing (especially for sending commercial messages and newsletters) according to Article 6 paragraph 1 letter f) GDPR,
Your consent to processing for the purposes of providing direct marketing (in particular for sending business communications and newsletters) pursuant to Article 6, paragraph 1 letter a) GDPR in connection with § 7 paragraph 2 of Act No. 480/2004 Coll., on certain information society services in the event that no goods or services have been ordered.
The purpose of processing personal data is to process your order and exercise the rights and obligations arising from the contractual relationship between you and the controller; when placing an order, personal data is required, which is necessary for the successful processing of the order.
5. Personal data processing time
The period of personal data processing is for the duration of the contract and then one year after its termination, unless otherwise prescribed by other laws (accounting).
Until consent to the processing of personal data is revoked.
After the personal data retention period has expired, the administrator deletes the personal data.
6. Personal data may be provided to the following third parties:
Personal data will be provided for the purpose of posting tax documents in accordance with the contract and with generally binding legal regulations to the extent of:
- name and surname, title,
- mailing address,
- billing address,
- email address,
- telephone contact,
- bank connection data,
- data on the subject of the Administrator’s performance
7. Terms of security of personal data
The administrator declares that he has taken all appropriate technical and organizational measures to secure personal data.
The administrator has taken technical measures to secure data stores (login name, password, antivirus program and firewall) and personal data stores in paper form (locked room).
The administrator declares that only authorized persons have access to personal data.
8. Subject Statement
The data subject declares that he has been properly instructed by the Administrator on the processing and protection of personal data*, that the above personal data are accurate and true and are provided to the Administrator voluntarily.
*Instructions to the Data Subject
In accordance with the provisions of Article 13 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of April 27, 2016, the General Regulation on the Protection of Personal Data (hereinafter referred to as the “Regulation”), the administrator hereby informs that:
• the personal data of the Data Subject will be processed on the basis of his free consent, under the above conditions,
• the reason for providing personal data to the Data Subject is the Data Subject’s interest in sending business offers to the Administrator, which would not be possible without the provision of this data,
• The administrator did not appoint a personal data protection officer, did not entrust the processing of personal data to any processor or appoint a representative for the fulfillment of obligations in the sense of the Regulation,
• The Administrator does not intend to transfer the personal data of the Data Subject to a third country, an international organization or to third parties other than those mentioned above,
• The data subject has the right to withdraw his consent to the processing of personal data at any time, the right to request from the Administrator access to his personal data, their correction or deletion, or restriction of processing, and to object to the processing, he has the right to the transferability of this data to another administrator, as well as and the right to file a complaint with the Office for Personal Data Protection, ifthat the Administrator acts contrary to the Regulation when processing personal data.