- What is the purpose of this document?
The purpose of this document is to provide you with information about the conditions under which the processing of the personal data you provide will be carried out. If, in the rest of this document, reference is made to “us” or “our company”, this refers to Energetické opravny, a.s. - Why will my personal data be processed?
By entering into a contract with our company, you have become our customer. We will therefore supply you with the agreed services. In order to provide this service to you, we need to work with your personal data. - Who will process my personal data?
The administrator of personal data, responsible for its proper processing, is Energetické opravny, a.s., registered in the Commercial Register maintained by the Regional Court in Ústí nad Labem under file number B 1133. Contact details – www.eopru.cz.
You can contact our Data Protection Officer, Mr. Tomáš Fejt, directly on the protection of your personal data, e-mail: gdpr@eopru.cz. - What personal data will be processed and what is the legal basis for this processing?
The legal basis for the processing of personal data is the contract concluded between you and our company. For the purpose of fulfilling our contractual obligations, we will process your identification and contact details as specified in the contract, including your bank account details.
It is not necessary for the conclusion of the contract and the performance of the obligations under it to include your e-mail and telephone contact details, however, if you provide this information, it will enable us to communicate with you more quickly and efficiently. - Where will my personal data be stored?
Your personal data will be stored both in electronic form and in physical form (printed). Documents in electronic form are stored in our ERP system and can only be accessed by authorised persons. Documents in physical form are stored in locked cabinets to which only authorised persons have access. - Who will have access to my personal data?
Access to your personal data is only granted to employees of our company who are assigned specific tasks related to the purpose of processing personal data. - Will my personal data be transferred outside the Czech Republic?
No, it’s not. - How long will my personal data be kept by your company?
For the entire duration of the contract and thereafter for the period necessary to secure the legal claims arising from the contract, i.e. until such time as our mutual rights and obligations may become the subject of litigation. With regard to the statute of limitations set by the Civil Code, we will retain your personal data for 10 years after the termination of the contractual relationship. - What are my rights in relation to the processing of personal data
You have the right to request access to your data at any time – this means that, upon your request, we will provide you with information on what personal data we process, for what purpose, from what source the personal data was obtained, to whom your data was provided and the planned period of time for which it will be stored.You have the right to request the correction of inaccurate personal data or its completion if it is incomplete. You also have the right to request the erasure of personal data that are no longer necessary for the purpose for which they were originally collected or that the controller is no longer entitled to use for other reasons (e.g. they have been processed unlawfully, their erasure is required by law, etc.).You have the right to request a restriction of the processing of your personal data – this means that you can ask us not to delete your data for which we would otherwise be obliged to do so, and you can also ask us not to process your personal data any further until it becomes clear whether the processed data is accurate, or if the data is not accurate. You have the right to the portability of your personal data – this means that you can request that we provide you with the personal data processed by us in electronic form so that it is easily portable to another controller (service provider). This right only applies to personal data that we have obtained in electronic form, based on your consent or on the basis of a contract.You have the right to object at any time to the processing of your data for direct marketing purposes (sending of commercial offers). If you do so, your personal data will no longer be used for this purpose. You also have the right to object to the processing of your personal data based on our legitimate interest (see section 4) – in this case, we will only continue to process your data if it is demonstrated that there are compelling legitimate grounds for doing so. - How can I exercise my rights?
You exercise your rights (including the right to object) with the data controller, which is our company. You can contact us in writing or by e-mail (contact details are given in point 3). For faster and better processing of your complaint, please use the form on our website – downloadable here. - How to proceed if I believe that the processing of my personal data has violated the law, respectively. European Data Protection Regulation?
In this case, you have the right to file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, tel. +420 234 665 111, e-mail: posta@uoou.cz, website: www.uoou.cz. - Does the processing of my personal data involve automated decision-making, including profiling?
Automated decision-making means a decision that is made by a machine (computer) without human intervention and that has legal or other similarly significant consequences for you (e.g. termination of a contract). Such processing of personal information does not take place in our company, the relevant steps are always decided by a specific employee of the company.