GDPR

The company ŽÁROHMOTY, spol. s r.o. processes general personal data and special categories of personal data. Special categories of personal data are processed solely to meet the controller’s legal obligation.

The company ŽÁROHMOTY, spol. s r.o. processes personal data for the following categories of data subjects:

The company ŽÁROHMOTY, spol. s r.o. stores personal data only for a necessary period of time, which shall be determined based on the following legal reasons:

The period for which specific personal data of a specific data subject will be stored will be specified based on the received request.

Right to require access to personal data concerning the data subject, namely information about the purpose of the processing, category and recipients of the personal data. Information about how the personal data were obtained and about the expected period of processing.

Right to rectification and completion of personal data concerning the data subject.

Right to erasure of personal data concerning the data subject.

Right to restriction of processing of personal data concerning the data subject.

Right to portability of personal data concerning the data subject.

Right to object against the processing of personal data concerning the data subject.

Data subject's right to lodge a complaint with a supervisory authority. The data subject has the right to lodge a complaint about failure to meet the obligations of the controller ŽÁROHMOTY, spol. s r.o. according to Regulation (EU) 2016/679. The data subject may lodge a complaint with the Personal Data Protection Authority (PDPA).

PDPA contact details:

Any request by the data subject for erasure, restriction or termination of the processing of specific personal data will be assessed by the controller on an individual basis and the data subject will be informed about the result, including the reasons for approving or rejecting the request, and will receive advice on any other possibilities the data subject has.

The deadline for the notification obligation is 1 month of the date of receiving the data subject’s request. The deadline may be extended by another 2 months if necessary, taking into account the complexity and number of requests. In such a case, the controller shall inform the data subject about the extension within 1 month of the date of receiving the request together with the reasons for postponement.

Any request submitted by the data subject based on its rights shall contain:

Identification data of the requesting party (in case of a legal person: data of the natural person representing the legal person) shall mean:

Identification data of the data subject shall mean:

Contact details of the requesting party shall mean:

Any request submitted by the data subject shall bear its own authenticated signature or electronic signature based on a valid personal certificate of the data subject or its legal representative.

Any request submitted by a person authorized by the data subject shall bear its own authenticated signature or electronic signature based on a valid personal certificate of the requesting party and its attachment shall contain a power of attorney allowing the submission of a request with the data subject's authenticated own signature.

The company ŽÁROHMOTY, spol. s r.o. does not make any decisions based on automated processing, including profiling.

The company ŽÁROHMOTY, spol. s r.o. provides access to the personal data being processed only to contractual data processors, i.e. external companies which provide accounting and tax consultancy to the data controller and support the operation of its information system, IT administration and maintenance, controller's website administration and maintenance and administration and maintenance of security and camera systems.

Under the contracts concluded, data processors are bound by the same obligations as the data controller. This mainly includes the obligation to process personal data solely for the given purposes, non-portability of personal data and compliance with the controller's rules for ensuring security.

Based on its legitimate interest, the data controller provides personal data of employees and other natural persons entering the controller's premises only if it is necessary to deal with illegal treatment of its assets. In such a case, the data controller shall provide personal data to law enforcement authorities.

The controller regularly provides personal data to other subjects solely in order to meet its legislative obligations. Such data include only personal data of employees and the data subject is informed about the categories of recipients through the employee's personal questionnaire.

The company ŽÁROHMOTY, spol. s r.o. shall not provide any personal data to third parties or international organizations.

The company ŽÁROHMOTY, spol. s r.o. uses a camera system solely for the purposes of protecting the company's property.

The company ŽÁROHMOTY, spol. s r.o. uses the camera system solely to monitor the premises it owns, i.e. its immovable property. The company ŽÁROHMOTY, spol. s r.o. does not use the camera system to monitor any public areas.

ŽÁROHMOTY, spol. s r.o. operates CCTV utilizing video recorders. Personal data processed via video surveillance involve video recordings of natural persons. Such personal data are processed for the following categories of data subjects:

Legal reasons which enable the company ŽÁROHMOTY, spol. s r.o. to process personal data from the camera system are constituted by the controller's legitimate interest.

The area under video surveillance is visibly marked with signs.