PERIMPEX CONSULTING, S.R.O. INFORMATION ON PROCESSING OF CLIENTS’ BUSINESS PARTNERS’ PERSONAL DATA

Dear clients,

This document contains basic information about processing your personal data. It was prepared in conformity with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 EC (General Data Protection Regulation, GDPR).

You will find this information here:

1 Personal data administrator

2 The purpose why we need personal data and the legitimacy of their processing

3 Personal data and their processing

3.1 Personal data source

3.2 Time of processing

3.3 Handling over the data

4 Your Rights

4.1 The right of information about the processing of your personal data

4.2 The right of access to personal data

4.3 The right of correction

4.4 The right of deletion (the right to be forgotten)

4.5 The right of limitation of processing

4.6 The right of transmission of data

4.7 The right to bring objections and automated individual decision making

4.8 The right to file a complaint at the Office for Personal Data Protection

4.9 The right to withdraw the consent

5 Legal force

1 PERSONAL DATA ADMINISTRATOR

An administrator is a person who alone or together with others determines the purposes and decides how personal data will be processed.

The administrator of your personal data is the company Perimpex Consulting, s.r.o.– Company registration number: 05650216, with its registered office at K Jízdárně 8/1, 190 16, Prague – Koloděje registered at the Company register administrated by the Municipal Court in Prague under the file number C 268338.

You can reach the administrator via these contacts:

phone number: +420 778 111 803, e-mail: gdpr@test4.crs-company.cz

2 THE PURPOSE WHY NEED THE PERSONAL DATA AND THE LEGITIMACY OF THEIR PROCESSING

We process your personal data to:

ensure concluding and subsequent performance of the contractual obligation between you and the administrator [Article 6(1)(b) GDPR]. Other legal obligations proceed from this relationship and the administrator has to process personal data even for this purpose [Article 6(1)(c) GDPR];
marketing purposes, so that we could provide information about our current offer or new services, we obtain your unequivocal permission [Article 6(1)(a) GDPR];
protect our legitimate interests [Article 6(1)(f) GDPR], which is securing the protection of our assets, legitimate performance of the contractual and legal obligations.

Providing personal data to the administrator is generally a legal and contractual requirement. Concerning providing personal data for marketing purposes which doesn’t mean fulfilling the contractual and legal obligation of an administrator, permission is required from you. If you don’t permit the administrator permission to process your personal data for maketing purposes, therefore, it doesn’t mean that the administrator will refuse to provide you with a product or service based on the contract.

Our rightful interests are legitimate fulfillment of all contractual obligations, legitimate fulfillment of all legal obligations, protection of our business and property, and last but not least protection of the environment and securing sustainable development.

The lawfulness of processing is given by Article 6(1) GDPR, according to which the processing is lawful, if it’s necessary to fulfillment of the contract, to fulfilment the administrator’s legal obligations, to the protection of administrator’s lawful interests or processing under the consent you gave us.

The lawfulness of processing is further proceeding for example from Act no. 563/1991 Sb., on accountancy, as amended, according to which invoicing data are processed and kept, the Act no. 89/2012 Sb., civil code, as amended, according to which the administrator defends his rightful interests or the Act no. 235/2004 Sb., on the value-added tax, as amended.

3 PERSONAL DATA AND THEIR PROCESSING

We process these personal data:

basic identification data – forename and surname, or the name and the address of a company, the company registration number and VAT identification number at a self-employed person,
contact information – phone number and email address (it is your unique ide identifier for us)
information about the services we provide to you, particularly:
1. marketing services
information about mutual communication – information from emails, phone call records or contact forms
invoicing and transactional data – particularly, information appeared on invoices, negotiated invoicing terms and received payments

3.1 PERSONAL DATA SOURCE

We obtained the personal data directly from you, especially from filled-out forms, mutual communication or concluded contracts.

Besides, personal data can also come from sources accessible to the public, such as registers, Company register or Trade register, for example.

3.2 TIME OF PROCESSING

We keep the information, that is archived based on periods given by the legislation, for the duration stated in-laws (this is related mostly to invoicing documents).

We dispose of your identification and contact information, records about communication 5 years after the last mutual contact.

Personal data processed only for marketing purposes will be processed until the consent is withdrawn, for a maximum period of 5 years.

After elapsing of the stated period, your personal data are destroyed safely and irretrievably so that the personal data will not be abused.

3.3 HANDLING OVER THE DATA

We must give the personal data to government authorities within the legal limit, such as tax administrator, court or criminal justice authorities.

When processing your personal data, we use various systems we have installed on our devices then. If it’s not this case and the system is provided by an external supplier, we have got an appropriate contract concluded with him and we ensure that he also takes care of your data with proper responsibility and in conformity with the GDPR.

For sending business offers via emails, we also use external suppliers to whom we pass on only the necessary data (first name and last name, email).

In the case of all processors, we make sure that even they process your personal data safely and in full compliance with the GDPR.

We will not pass on the personal data to countries outside the European Union or the European Economic Area, nor to any international organization.

4 YOUR RIGHTS

In connection with the processing of your personal data, you are guaranteed with the rights described in this article. You can apply them at the administrator at the above-mentioned contacts, either personally at the stated address or in writing at the address of the company main office (in that case we ask to verify your identity, to make sure, that we won’t pass on your personal data to somebody else).

The administrator provides all the communications and statements to your applied rights free of charge. If the request is manifestly unfounded or inappropriate, mostly because it is repeated, the administrator is entitled to charge adequate fee considerating administrative costs related to the provision of the requested information. In case of repeated exercise of application to the provision of copies of processed personal data, the administrator due to this reason reserves the right to charge a proportionate fee for administrative costs.

The administrator will provide you with statements and possible information about approved actions as soon as possible, no later than one month. In case of need and concerning complexity and number o requests, the administrator is entitled to extend the period by two months. The administrator will inform you about the extension including the reasons.

4.1 THE RIGHT OF INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA

You are entitled to requests information from the administrator, if the personal data are processed or not. If the personal data are processed, you have got the right to demand information from the administrator, mainly about identity and contact data of the administrator, his representatives and eventually the representatives for the protection of personal data, about the purposes of processing, categories of personal data concerned, about the recipients or categories of recipients of personal data, about authorized administrators, enumeration of your rights, the possibility to turn to the Office for Personal Data Protection with its seat at pplk. Sochora 27, 170 00 Prague 7, about the source of processed personal data and the automated decision making and profiling.

If the administrator intends to process your personal data for a different purposes, then for which the data were collected, he will provide you with information about this different purpose and other relevant information before further processing.

The information provided to you within exercising this right is already contained in this document, but it does not prevent you from requesting it again.

4.2 THE RIGHT OF ACCESS TO PERSONAL DATA

You are entitled to request information from the administrator, if your personal data are processed or not and if yes, you have got the access to information about the purposes of processing, categories of personal data concerned, recipients or categories of recipients, the period for keeping the personal data, information about your rights (the right to request a correction or deletion from the administrator, the right of limitation of processing, the right to raise an objection against this processing), about the right to file a complaint at the Office for Personal Data Protection, information about the source of the personal data, information about whether the automated decision-making and profiling come about, and information regarding the used procedure, as well as the significance and anticipated consequences of this processing for you, information and guarantees in case of passing on the personal data into third country or international organization. You have got the right to obtain copies of the personal data being processed. The right to obtain this copy must not violate the rights and liberties of other people.

4.3 THE RIGHT OF CORRECTION

You have got the right of correction of your personal data in particular situations.

4.4 THE RIGHT OF DELETION (THE RIGHT TO BE FORGOTTEN)

In certain stated cases, you have got the right to request that the administrator will delete your personal data. Such cases include the situation, that the processed data are no longer necessary for the above-mentioned purposes for example. The administrator deletes the personal data after the expiration of the period automatically, but you can contact him with your request at any time. Your request is subject to individual assessment then (the administrator may have got the obligation or legitimate interest to keep your personal data, despite your right to deletion) and you will be informed about its processing in detail.

4.5 THE RIGHT OF LIMITATION OF PROCESSING

The administrator processes your personal data only in the necessary scope. If you have the feeling, that the administrator, for example, oversteps the above-mentioned purposes, for which processes the personal detail, you can submit a request so that your personal data would be processed solely for the necessary legal reasons or your personal data would be blocked. Your request is subject to individual assessment then and you will be informed about its processing in detail.

4.6 THE RIGHT OF TRANSMISSION OF DATA

If you wish the administrator to provide your personal data to another administrator, or other company, the administrator will pass on your personal data in an appropriate format to a subject chosen by you, if there are no legal or other relevant obstacles to hamper this procedure.

4.7 THE RIGHT TO BRING OBJECTIONS AND AUTOMATED INDIVIDUAL DECISION MAKING

If you find out or you just suppose, that the administrator performs the processing of the personal data in contrary to the protection of your private and personal life or in contrary to legal rules (on condition that the personal data are processed by the administrator based on public or legitimate interest, or being processed for direct marketing, including profiling or statistical purposes or the purposes of scientific or historical interest), you may contact the administrator and ask him for an explanation or deletion of unsound situation.

You can raise a claim directly against automated decision-making and profiling, too.

4.8 THE RIGHT TO FILE A COMPLAINT AT THE OFFICE FOR PERSONAL DATA PROTECTION

You can always contact the supervisory authority with your initiative or complaint in case of personal data processing, which is The Office for Personal Data Protection, with its seat at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/.

4.9 THE RIGHT TO WITHDRAW THE CONSENT

You have got the right to withdraw the given consent with the processing of the personal data at any time, either by filling out the form on the website or by sending the cancellation at email or address of the main office or by a link in email communication.

5 LEGAL FORCE

This document is in force since 25/5/2018 and it can be updated at any time. The current version will always be published on the company’s website.