Privacy policy

Information on the processing of personal data of clients and business partners

pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the "Regulation", in particular Article 13 thereof.

The controller of personal data is our company WAPRO spol. s r.o., Company Registration No.: 49970089, registered office: Rumunská 1361/27, 796 01 Prostějov, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 13512 (hereinafter referred to as the "Controller")

contact person:

Jiří Walla

tel.: 582 334 677

e-mail: jiri.wallawapro.cz

The Controller may process your personal data as a client or business partner, or persons used by them (hereinafter referred to as the "Data Subject") for the following purposes and on the basis of the legal grounds set out below:

Purpose of processing / Legal basis:

- Fulfilment of the Controller's legal obligations, particularly in the area of tax and accounting. / Compliance with a legal obligation of the Controller [Art. 6(1)(c) of the Regulation]

- Conclusion and performance of a contract concluded between the Controller and the Data Subject. / Performance of a contract or implementation of measures taken prior to concluding a contract [Art. 6(1)(b) of the Regulation]

- Sending commercial communications electronically and by post to Data Subjects (direct marketing). / Legitimate interest of the Controller [Art. 6(1)(f) of the Regulation]

Personal data may be provided by the Controller to the following categories of third parties:

- providers of accounting services, tax advisory services and auditors; providers of legal services; providers of IT services (the identity of these entities will be communicated by the Controller to the Data Subject upon request).

- other entities to which personal data may be provided under the law

The Controller retains personal data for a maximum period of 10 years from the termination of the legal relationship established by the contract concluded between the Controller and the Data Subject, unless otherwise provided by law. The Controller will process the relevant personal data even after the termination of the legal relationship established by this contract, if legal relationships arising from the contract continue to exist.
The Controller requires the provision of personal data for the fulfilment of obligations under the contract, or their provision is required by law. The consequence of not providing the data may be the non-conclusion of the contract.
Personal data will not be transferred by the Controller to a third country or international organisation.
In connection with the processing of personal data, the Data Subject has in particular the following rights: i. the right of access to personal data, including requesting confirmation as to whether or not personal data concerning them is being processed, and if so, for what purposes, to what extent, to whom it is disclosed, the planned retention period, the existence of the right to rectification, erasure, restriction of processing or the right to object to processing, the sources of obtaining personal data, and whether automated decision-making, including possible profiling, takes place on the basis of the processing of personal data. Related to this is the right to obtain a copy of the personal data being processed; its first provision is free of charge, and for further provision the Controller may charge a reasonable administrative fee (see Art. 15 of the Regulation);
the right to rectification and completion of personal data, whereby the Controller will correct or complete inaccurate/missing personal data without undue delay (see Art. 16 of the Regulation);
the right to erasure of personal data, in particular if it is no longer necessary for the purpose for which it was processed or if consent is withdrawn (see Art. 17 of the Regulation);
the right to restriction of processing of personal data until disputed questions regarding the processing of personal data are resolved (see Art. 18 of the Regulation);
the right to data portability, which corresponds in particular to the right to obtain one's personal data in a structured, commonly used and machine-readable format, and, where technically feasible, the right to have the Controller transfer the data to another controller (see Art. 20 of the Regulation);
automated individual decision-making – i.e. the right not to be subject to any decision based solely on automated processing, including profiling, unless this is necessary for the performance of a contract (see Art. 20 of the Regulation);
the right to withdraw consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

The rights described above may be exercised with the Controller in particular by registered letter or e-mail sent to the above-mentioned addresses. In addition, the Regulation allows a complaint in connection with the processing of personal data to be submitted to the Office for Personal Data Protection. More information and contact details are available at https://www.uoou.cz/

The Data Subject has the right to object at any time to the processing of personal data. Upon request, the Controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests or rights and freedoms of the Data Subject. An objection may be raised at any time against processing for the purposes of direct marketing.

Information on the processing of personal data – sending commercial communications

The controller of personal data is our company WAPRO spol. s r.o., Company Registration No.: 49970089, registered office: Rumunská 1361/27, 796 01 Prostějov, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 13512 (hereinafter referred to as the "Controller")

contact person:

Jiří Walla

tel.: 582 334 677

e-mail: jiri.wallawapro.cz

The Controller may process your personal data (hereinafter referred to as the "Data Subject") for the following purposes and on the basis of the legal grounds set out below:

Purpose of processing / Legal basis:

- Sending commercial communications electronically and by post to Data Subjects (direct marketing) / Consent of the Data Subject [Art. 6(1)(a) of the Regulation]

Personal data may be provided by the Controller to the following categories of third parties:

- providers of IT services (the identity of these entities will be communicated by the Controller to the Data Subject upon request).

- other entities to which personal data may be provided under the law

The Controller retains personal data until consent to processing is withdrawn.
Personal data will not be transferred by the Controller to a third country or international organisation.
In connection with the processing of personal data, the Data Subject has in particular the following rights:
the right of access to personal data, including requesting confirmation as to whether or not personal data concerning them is being processed, and if so, for what purposes, to what extent, to whom it is disclosed, the planned retention period, the existence of the right to rectification, erasure, restriction of processing or the right to object to processing, the sources of obtaining personal data, and whether automated decision-making, including possible profiling, takes place on the basis of the processing of personal data. Related to this is the right to obtain a copy of the personal data being processed; its first provision is free of charge, and for further provision the Controller may charge a reasonable administrative fee (see Art. 15 of the Regulation);
the right to rectification and completion of personal data, whereby the Controller will correct or complete inaccurate/missing personal data without undue delay (see Art. 16 of the Regulation);
the right to erasure of personal data, in particular if it is no longer necessary for the purpose for which it was processed or if consent is withdrawn (see Art. 17 of the Regulation);
the right to restriction of processing of personal data until disputed questions regarding the processing of personal data are resolved (see Art. 18 of the Regulation);
the right to data portability, which corresponds in particular to the right to obtain one's personal data in a structured, commonly used and machine-readable format, and, where technically feasible, the right to have the Controller transfer the data to another controller (see Art. 20 of the Regulation);
automated individual decision-making – i.e. the right not to be subject to any decision based solely on automated processing, including profiling, unless this is necessary for the performance of a contract (see Art. 20 of the Regulation);
the right to withdraw consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

The rights described above may be exercised with the Controller in particular by registered letter or e-mail sent to the above-mentioned addresses.

In addition, the Regulation allows a complaint in connection with the processing of personal data to be submitted to the Office for Personal Data Protection. More information and contact details are available at https://www.uoou.cz/

The Data Subject has the right to object at any time to the processing of personal data. Upon request, the Controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests or rights and freedoms of the Data Subject. An objection may be raised at any time, as this concerns processing for the purposes of direct marketing.