Data Processing and Protection Policy
If you are our customer or a visitor to the website mlynherlikovice.cz, you entrust us with your personal data. We are responsible for their protection and security. This document contains information regarding the protection of personal data provided by visitors to the above-mentioned website. Please familiarize yourself with the personal data protection policies and your rights under GDPR (EU Regulation 2016/679 on data protection).
Who is the controller?
Aequitas Capital Investment a. s., IČO 08906190, with its registered office at
Na Bělidle 997/15, 150 00 Prague 5. We process your personal data as the
controller, i.e., we determine how personal data will be processed and for what
purpose, for how long, and we select any additional processors who will help us
with the processing.
Contact details
If you wish to contact us during the processing, you can reach us at the phone
number +420 603 937 776 or via email at info@mlynherlikovice.cz.
Declaration
We declare that, as the controller of your personal data, we comply with all
legal obligations required by applicable legislation, particularly the Data
Protection Act No. 110/2019 Coll., on the processing of personal data and
Regulation (EU) 2016/679 known as GDPR, and thus: we will process your personal
data only on the basis of a valid legal reason, mainly legitimate interest,
performance of the contract, legal obligation, or granted consent, we fulfill
the information obligation under Article 13 of GDPR before the start of
personal data processing, we will allow you and support you in exercising and
fulfilling your rights under the Data Protection Act and GDPR.
Types of personal data collected
Personal data may fall into the category of „common personal data“ or it may
be a special category of data, i.e., sensitive data, for which legal regulations
set stricter conditions for processing.
1. Common personal data we process:
Name, surname, address, other delivery addresses if applicable, IČO, DIČ (only
for entrepreneurs), phone number, email, IP address, cookies, other information
necessary for fulfilling the contract (mainly the content of the contract and
the subject of performance), photos from our live meetings and educational
events you attended, and video recordings from these events.
2. Special category of personal data („sensitive“) personal data we
process:
We do not process sensitive personal data.
Scope of personal data and purposes of processing
We process personal data that you voluntarily and personally entrust to us for
the following legal reasons (and to fulfill these purposes):
Providing services, concluding, and fulfilling the
contract
We necessarily need your personal data within the scope: name and surname,
email, phone, billing information, information about the content of the contract
and the subject of performance to conclude and fulfill the contract.
We need your personal data within the scope: name and surname, email, phone, and the text of the message you enter in the contact form on our website to contact you based on your message.
Accounting, fulfilling obligations from tax and other legal
regulations
If you are customers, we process your personal data within the scope: name,
surname, email, phone, billing information, subject of the provided performance
to comply with the legal obligation for issuing and recording tax documents, as
well as other obligations arising from applicable legal regulations
(particularly in the field of accounting, tax law, and archiving). The period
during which the data are processed is directly determined by the relevant legal
regulations that impose the obligation to process them.
Marketing – sending newsletters
We use your personal data (name, surname, email), the content you click on in
the email, and when you most often open it, for direct marketing purposes –
sending commercial messages. If you are our customer, we do so based on a
legitimate interest, as we reasonably assume that you are interested in our
news, for 5 years from the last order. If you are not our customer, we send you
newsletters only based on your consent, for 5 years from the granting of
consent. In both cases, you can withdraw this consent using the unsubscribe link
in each sent email.
Advanced marketing based on consent
Only based on your consent can we also send you inspiring articles, third-party
offers, or use your email address for remarketing and ad targeting on Facebook,
for 5 years from the granting of consent. Of course, you can withdraw consent
at any time through our contact details or in each such email.
Legitimate interest – protection and proof of rights and legal
claims
This mainly involves rights and claims from concluded contracts or caused harm.
For these purposes, we process personal data for 5 years after the end of
contractual cooperation or our last contact if no contract was concluded. This
period is set with regard to the limitation periods of claims, considering that
we may not immediately learn of a claim asserted in court. For these purposes,
data from orders, contracts, related documentation, and our mutual communication
are stored.
Photographic and video documentation – live events and
training
Only based on your consent can we take photos and video recordings of you as a
participant during training to be used for video documentation and photo
documentation of the training on the website and in our promotional materials.
You have the right to withdraw this consent at any time later by sending an
email to our email address or a letter to the delivery address mentioned above
in our contact details. No additional personal data will be included with the
photos and recordings unless we explicitly agree.
Cookies
Security and protection of personal data
We protect personal data to the maximum possible extent using modern
technologies that correspond to the level of technical development. We protect
it as if it were our own. We have adopted and maintain all possible (currently
known) technical and organizational measures to prevent misuse, damage, or
destruction of your personal data.
Disclosure of personal data to third parties
We do not sell, trade, or otherwise transfer your personally identifiable
information to third parties. This does not include trusted third parties who
assist us in operating our website or conducting our business if those parties
agree to keep this information confidential.
Thus, our collaborators have access to your personal data. To ensure specific processing operations that we cannot provide by ourselves, we use the services and applications of processors who can protect data even better than we can and specialize in this processing. They are providers of the following platforms:
Analytical and marketing tools
Google Analytics – website traffic statistics
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Facebook Pixel
Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Marketing and customer support
Facebook – social network
Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, VAT
IE9692928F
This list may not be exhaustive, and providers may change in the future. If we decide to use additional applications or processors in the future to facilitate and improve processing, we promise that in such a case we will impose at least the same security and processing quality requirements on the processors as we do on ourselves. We enter into personal data processing contracts with all external processors in accordance with applicable legislation.
Personal data will also be made available to the relevant administrative authorities if such an obligation is imposed on us by law (i.e., particularly in the case of inspections where the authority is authorized to require the submission of personal data).
Data transfer outside the European Union
All processing of personal data will be carried out within the EU.
Your rights in connection with personal data protection
You have a number of rights in connection with personal data protection. If you
wish to exercise any of these rights, please contact us via email at info@mlynherlikovice.cz.
You have the right to information, which is fulfilled by this information page with personal data processing policies. Thanks to the right of access to personal data, you can ask us at any time, and we will provide you with evidence within 30 days of what personal data we process and why. If anything changes for you or you find your personal data outdated or incomplete, you have the right to supplement and correct personal data. You can exercise the right to restrict processing in the cases specified in Article 18 GDPR, i.e., if you believe we are processing inaccurate data, you believe we are processing data unlawfully, but you do not want to delete all data, or if you have raised an objection to processing. You can limit the scope of personal data or purposes of processing. (For example, by unsubscribing from a newsletter, you limit the purpose of processing for sending commercial messages.)
In cases where personal data is processed for legitimate interests, you have the right to object to such processing, and we will no longer process the data unless our legitimate interest prevails over your interests or rights and freedoms. If the legitimate interest is direct marketing, raising an objection always results in the termination of further processing for direct marketing purposes.
Right to data portability
If you want to take your personal data and transfer it to someone else under the
conditions set out in Article 20 GDPR, we will proceed in the same way as for
the right of access – with the difference that we will provide the
information in a machine-readable format. Here we need at least 30 days.
Right to erase personal data (right to be
„forgotten“)
Your next right is the right to erasure (to be „forgotten“), if the
conditions of Article 17 GDPR are met. We do not want to forget you, but if you
wish, you have the right. In such a case, we will delete all your personal data
from our system and from the system of all sub-processors and backups. We need
30 days to ensure the right to erasure.
In some cases, we are bound by a legal obligation, e.g., we must keep issued tax documents for the period specified by law. In this case, we will delete all such personal data that is not bound by another law. We will inform you about the completion of the erasure via email.
Complaint to the Office for Personal Data Protection
If you feel that we are not handling your data in accordance with the law, you
have the right to file a complaint with the Office for Personal Data Protection
at any time. We would be very happy if you first inform us of this suspicion so
that we can do something about it and rectify any mistakes. You can find more
information about the office and personal data protection directly on the
office's website www.uoou.cz.
Unsubscribing from newsletters and commercial messages
We send emails with inspiration, articles, products, and services to you if you
are our customer based on our legitimate interest. If you are not a customer, we
send them to you only based on your consent. In both cases, you can stop
receiving our emails by clicking the unsubscribe link in each sent email.
Confidentiality
We assure you that our collaborators who will process your personal data are
obliged to maintain confidentiality about personal data and security measures,
the disclosure of which would jeopardize the security of your personal data.
This confidentiality persists even after the end of our contractual
relationships. Your personal data will not be disclosed to any other third party
without your consent unless such an obligation is imposed directly by law or an
immediately binding EU regulation.
Other important information for exercising your rights
If you have any further questions about the processing of your personal data
with us, you can contact us via email at info@mlynherlikovice.cz. By
sending a message to this email or by sending a written request to our address,
you can also directly exercise your rights mentioned in this document. Please
note that for the purpose of verifying that the request is made directly by you,
we may contact you and reasonably verify your identity and request.
The current version of this document can always be found on the website mlynherlikovice.cz.
These personal data processing policies are effective from May 1, 2021.
