Information for data subjects
I. Content and purpose of the document
- This document contains information about the protection of personal data provided by visitors to the website www.manver.cz, by our clients and those interested in our services and products.
- The purpose of this document is to make you (data subjects) acquainted with your rights and provide clear information on how personal data will be treated.
- We appreciate that you provide us with your personal data and therefore we are already processing personal data not only according to the Czech Personal Data Protection Act (No. 101/2000 Coll.) but also according to the Regulation (EU) 2016/679, the General Data Protection Regulation, which is generally known under the acronym GDPR. Click on the number of the Regulation in the previous sentence to get directly into the text of this regulation and you will find the exact wording of the legal regulation to which we refer below.
- The content of this document:
- Content and purpose of the document
- Personal data administrator - who are we and how can you contact us?
- What personal data do we process and how do we get it?
- For what purposes do we process personal data, how long and what does entitle us to do it?
- Disclosure of personal data to others
- Information about your privacy rights
- Other important information for exercising your rights
__________________________________________________________________________
II. Personal data administrator - who are we and how can you contact us?
MANVER s.r.o., Company ID: 28454243, with its registered office at Chvalovická 693, 289 11 Pečky ("Administrator")
we are is registered with the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 14681
contact e-mail: info@manver.cz, contact phone: +420 321 674 588, our website www.manver.cz
III. What personal data do we process and how do we get it?
We process the data you provide to us. This may include providing data by filling in one of the forms on the website, entering data into the user account on our website, providing data for the contracts and related documents (i.e. in connection with the delivery of goods, services), personal contact, telephone, written, mail or other means of communication (SMS, Skype, FB messenger, etc.).
We also process data you post on the Internet, especially on social networks (such as Facebook, Instagram) and public domain data (especially for entering or checking your identification data in contracts).
If we have to have your consent to the processing of certain personal data for the specific purposes, then we process such data for the purpose only with your consent.
You give us the information on a voluntary basis, in some cases we would not be able to deliver the ordered goods (for example, if we send it to a specific address and you would not give it to us) or provide service (e.g. some data are necessary for colsuntancy), we will always notify you in advance. You are required to provide us with the data only in cases where the law is directly enforcing it.
Personal data may fall under the category of "common personal data" or it may be a specific category of data, i.e. sensitive data when stricter conditions are laid down for its processing.
A. Common personal data we process:
Company name, first name, surname, title, address, ID, VAT number, phone number, e-mail, IP address, cookies, ordered goods and services, information about the goods you purchased from us, what services we've provided, photos from our live meetings / educational events you've attended, video footage from these events.
B. Special categories of personal data ("sensitive" personal data) we process:
We do not process any special categories of personal information.
IV. For what purposes do we process personal data, how long and what does entitle us to do it?
A. Processing of personal data for the purpose of concluding a contract and meetin contractual obligations
In order to conclude a contract with you and deliver your ordered goods / products or services and to conduct related communication with you, we process these common personal data:
Company name, first name, surname, title, address, ID, VAT number, phone number, e-mail, IP address, cookies, ordered goods and services, information about the goods you purchased from us, what services we've provided, photos from our live meetings / educational events you've attended, video footage from these events.
The legal title for the processing of this data is meeting contractual obligations of the contract concluded between us. Such an obligation may be the delivery of goods, sending of specific instructions before the seminar, etc. It does not have to be strictly a signed contract in a classic printed form. For example, a contract may be concluded verbally, by telephone or by filling in and sending the order form on the website and by confirming such an order.
For this purpose, we process personal data for the duration of the contractual relationship between us. Upon termination of a contractual relationship, certain data are retained to meet legal obligations or for purposes of legitimate interest, you can read more about it in the following sections of this document.
B. Processing of personal data to meet the obligations of accounting, tax and other legal regulations
In order to meet the obligations arising from applicable legal regulations, especially in the areas of accounting, tax law and archiving.
The period for which the data are processed is determined directly by the applicable legal regulations, which are subject to the duty of processing.
C. Processing of personal data for the purposes of the legitimate interests of our or third parties
A legitimate interest may cover a variety of situations. That is why we inform you of the legitimate interests for which we process personal data:
It is a legitimate interest to protect and prove our rights and legal claims, especially from concluded contracts or caused harm. For this purpose, we process personal data for a period of 4 years after termination of the contractual cooperation or our last contact, unless the contract has been concluded. This time limit is set with respect to the limitation periods of the claims, taking into consideration that we do not may know about any claim that is made in court at the time of its application by the other party. For this purpose, data from the contracts and our mutual communication are kept.
Direct marketing is also a legitimate interest. For sending commercial messages we will process the following personal data of our clients: company name, name, surname, address, e-mail. You can always stop recieving commercial messages to your mail easily by clicking on the link in the email.
In order to offer you tailor-made products and services and send you only offers and information that will not overwhelm you and will be of benefit to you, we have our database of contacts and personal data divided into multiple lists. For example, if you wish to receive information about our news, your email will automatically be included in the "newsletter" database. When you send us an order from the web, your contact will be added to the "ordered" list and after being paid to the "paid" list, and at that point the system automatically sends you the ordered electronic product (or an order for shipping the goods, etc.). Part of this automated processing serves us directly to meet our contractual obligations, part is used for marketing (it falls into the category of legitimate interest). If this "sorting" of the data is done on a large scale, a lot "specialized", then we could only do so on the basis of your consent (and you can then revoke it at any time as described in the next section of this document).
D. Processing your personal data based on your consent
If you give us your consent, we will process your personal data to send you an offer of our services / products. We will need your consent to this processing if you are not our client. If you give us another consent, we will process your personal information as well as for sending the offers of services / products of our business partners. Before giving us your consent, we will let you know what information and the specific purpose of processing your consent will apply to. You can revoke your consent at any time. However, if we also process some of your personal information under another legal title (see under A to C above), we will process your personal data for that purpose even after your consent has been revoked because such consent is not necessary for such specific purposes.
V. Disclosure of personal data to others
Some of our contractual or legal obligations are assisted by other people who are in the position of processors. In particular, it is a cooperating accountant, law firms, data warehouse and software applications provider. We have written agreements with these partners, in which they have agreed to meet our privacy obligations to keep your data safe. Current list of partners can be found here: Ms. Piknerová - Corporate Accountant, KK comp Ing. Karel Krištoufek - IT, computer network administration, Shopsys s.r.o - websites, Stable.cz - webhosting, Zajíčková s.r.o. – lawyer services, PPL - carrier, TOPTRANS - carrier.
Personal data will also be available to the administrative authorities if such a duty is imposed by law (i.e. in the case of an inspection where the authority is entitled to request the disclosure of personal data).
VI. Information about your other privacy rights
A. Right to access to personal data
This is the right to confirm that we process your personal data and, if so, the right to access to this data and their processing.
B. Right to rectification
This is the right to rectification of your personal data without undue delay. Taking into account the purposes of the processing, you have the right to complete incomplete personal data or provide an additional statement (in which you provide full data).
C. Right to erasure (right to be forgotten)
In cases specified by law or GDPR, you have the right to request us to erase your personal data without undue delay (in GDPR, the reasons given in article 17, including the exceptions where the deletion is not done).
D. Right to restriction of processing
In the cases provided in Article 18 of the GDPR you have the right to require us to restrict the processing of your personal data.
E. Right to data portability
Under the conditions set out in Article 20 of the GDPR, you have the right to obtain your personal data and pass it on to another administrator. If technically feasible, you have the right to request direct transfer to another administrator.
F. Right to object
In cases where we process personal data for purposes of legitimate interest, you have the right to object to such processing, and then we will not process the data unless our legitimate interest outweighs your interests or rights and freedoms. If direct marketing is legitimate interest then the objection always results in the termination of further processing for direct marketing purposes.
G. Right to lodge a complaint with a supervisory authority
If you think your data protection rights have been breached, you have the right to lodge a complaint with The Office for Personal Data Protection. For more information on the Office and the protection of personal data, please visit www.uoou.cz.
VII. Other important information for exercising your rights
In case you have further questions about processing your personal data, you can contact us at info@manver.cz. By posting this mail or by sending a written request to our address in the introductory part of this document, you can also directly claim your rights as described in Article VI. Just keep in mind that we can then contact you and verify your identity and requirement for the purpose of verifying that the request is actually applied to you. The same applies to any telephone and similar communications.
The current version of this document is always available at www.manver.cz. It is applied from 25.5.2018.