Processing of Personal Data
provided pursuant to Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the Council
of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation")
(updated as of 11/08/2020)
We, LEJAAN s.r.o., with registered office at Šumavská 931/13, Vinohrady, 12000 Prague 2,
Company ID 285 99 349, a company registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C158886, as personal data controller, hereby provide the following information concerning the processing of personal data in accordance with Article 12(1) of the Regulation.
PERSONAL DATA CONTROLLER:
Company: LEJAAN s.r.o.
Registered office: Šumavská 931/13, Vinohrady, 12000 Prague 2
Contact details: info@lejaan.cz
PURPOSES OF PERSONAL DATA PROCESSING
The purpose of processing personal data expresses the reason why we process your personal data. We process your personal data exclusively and only for a specific reason, which is the fulfilment of our legal or contractual obligation or the enforcement of obligations from third parties, including you, or the assertion of rights against third parties, including you.
We process your personal data only for the following purposes:
-
fulfilment of legal obligations that our company has under the relevant legal regulations;
-
the performance of the contract we have concluded with you, and the performance of acts necessary for the conclusion of the contract and further acts aimed at the conclusion of the contract, and these purposes of processing shall also apply to the processing of personal data of persons
with whom we are in contact because they represent or otherwise act on behalf of a person with whom we intend to conclude a contract or with whom we have already concluded a contract;
-
fulfilment of contractual conditions for the service operated on the website www.lejaan.cz, including the establishment and maintenance of a user account and its deletion;
-
protection of our property against fraudulent or other unlawful acts, transfer of personal data within the group of undertakings to which the controller belongs for administrative purposes, enforcement of legal obligations and protection of rights,
or direct marketing, which is a legitimate interest in promoting our products and services.
LEGAL BASIS FOR PERSONAL DATA PROCESSING
The legal basis for the processing of personal data means the reason to which the Regulation links our right, as the data controller, to process your personal data. Our company processes your personal data exclusively on the basis of the following legal grounds, which are a concluded contract or a legal regulation, or measures that must be taken before concluding a contract, or the processing is necessary for our legitimate interests, as stated above. We do not assume processing on other legal bases, but we cannot entirely rule them out; however, we confirm that if we carry out processing on other legal bases, we will do so exclusively in accordance with the Regulation and other legal regulations. The personal data we process are partly data that you are obliged to provide to us on the basis of a contract or data that are necessary for the performance of a contract or legal obligation, and without the provision of such data, it would not be possible to conclude the relevant contract with you.
WHOSE DATA DO WE PROCESS?
Our company processes personal data of the following categories of persons:
-
customers, suppliers, partners and collaborators and their representatives;
-
employees;
-
bodies or members of bodies of our company;
-
employees of state administration and self-government bodies;
-
other persons only on the basis of special consent.
We process the personal data of the above-mentioned persons to the extent in which they were provided to us during the conclusion of a contract or during negotiations on the conclusion of a contract, or from publicly available databases, as we only require such data and to the minimum extent that allows us to effectively fulfil contractual obligations and legal duties. An employee means a person cooperating with us in accordance with the Labour Code. A customer means a person using our services provided through the website www.lejaan.cz.
MINIMISATION OF PROCESSED PERSONAL DATA
Our company, guided by the principle of minimisation of processed personal data, processes exclusively data that it needs for the effective fulfilment of contractual and legal obligations.
In the case of employees and company bodies, these are mainly the following personal data: first name and surname, date of birth, birth registration number, permanent residence address or other contact address, telephone number, e-mail address, bank account number, and others.
In the case of suppliers, partners and collaborators and their representatives, these are name, surname, telephone number and email, bank details, identification number, tax identification number and others.
In the case of customers using our services through the website www.lejaan.cz, these are name, surname, date of birth and delivery address.
In the case of employees of public administration and self-government bodies, only their first name and surname and contact details for the purpose of fulfilling our company's legal obligations, which these employees handle.
CATEGORIES OF RECIPIENTS OF YOUR PERSONAL DATA
Personal data is processed by our employees, always exclusively by those who necessarily need the relevant personal data for their activities.
This may include our employees or third parties that we use in the performance of our activities.
We provide your personal data to several categories of processors who perform specialized activities for us, through which we mainly fulfil legal obligations. These categories include accountants, legal representatives, tax advisors, auditors, IT specialists and other entities, always processing your personal data for the purpose of fulfilling our contractual or legal obligations, or for the purpose of protecting our interests.
COOKIES
On the website www.lejaan.cz, we use so-called cookies. The terms of use of cookies are available on the website www.lejaan.cz.
PERIOD OF PERSONAL DATA PROCESSING
We process your personal data only for the necessary period so that the purpose of processing and simultaneously the legal and contractual obligations we have are met. We process personal data processed in connection with a contract or in connection with the fulfilment of a legal obligation for the duration of the contract or the fulfilment of the legal obligation and then for the period required by law for the archiving of your personal data, and if the archiving obligation does not apply to your personal data, then for 3 years from the date of fulfilment of the purpose of personal data processing.
THE REGULATION GRANTS YOU IMPORTANT RIGHTS IN RELATION TO YOUR PERSONAL DATA
The Regulation sets out fundamental rights by which you can influence the processing of your personal data, always within the limits of the Regulation. One of these rights is the right to be informed of the facts, rights and information set out in this document. Other fundamental rights that we must draw your attention to are the following:
-
RIGHT TO INFORMATION
You have the right to access your personal data that we process about you, including information about the purpose of processing, the categories of personal data we process, the recipients of these personal data, the planned processing period, and your rights in connection with the processing of personal data.
-
RIGHT TO WITHDRAW CONSENT
If you have given us consent to the processing of personal data, you have the right to withdraw it at any time. You can do so by email at the contact email listed above, or by post to the address of our registered office, or at the address of our registered office, using the form which is an appendix to this information.
-
RIGHT TO OBJECT
You have the right to object at any time to the processing of your personal data. If the objection is justified, we will immediately stop processing your personal data.
-
RIGHT TO RECTIFICATION
You have the right to rectification of inaccurate personal data and to have incomplete personal data completed.
-
RIGHT TO ERASURE
You have the right to request the cessation of processing (erasure) of your personal data and to be forgotten. The right to cessation of processing may be exercised if:
-
the purpose no longer exists,
-
consent to the processing of personal data is withdrawn and there is no other legal basis for processing,
-
you object to the processing and the objection is justified,
-
personal data are processed unlawfully,
-
erasure is necessary to comply with a legal obligation or
-
personal data were collected in relation to the offer of information society services to a child under 16 years of age.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to restriction of processing of your personal data. The right to restriction of processing may be exercised if:
-
the personal data processed are inaccurate,
for a period enabling us to verify the accuracy of the personal data,
-
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead,
-
we no longer need your personal data for the purposes of processing,
but you require them for the establishment, exercise or defence of legal claims, or
-
you have objected to processing, pending verification
whether our legitimate grounds override your legitimate grounds.
-
RIGHT TO DATA PORTABILITY
You have the right to portability of your personal data processed on the basis of consent or for the purpose of fulfilling a contract. You have the right to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit these data to another controller, or the right to have these data transmitted directly by us to the second controller (chosen by you), if technically feasible.
-
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint about the processing of your personal data by us with the Office for Personal Data Protection, with registered office at Pplk. Sochora 27, 17000 Prague 7, www.uoou.cz.
Further information about your rights in connection with the protection of your personal data can be found on the website of the Office for Personal Data Protection
https://www.uoou.cz/6-prava-subjektu-udaj/d-27276.
Appendix:
Form for withdrawal of consent to the processing of personal data.
WITHDRAWAL OF CONSENT
to the processing of personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data
to LEJAAN s.r.o., with registered office at Šumavská 931/13, Vinohrady, 12000 Prague 2, Company ID 285 99 349, a company registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C158886 (hereinafter referred to as the "Company"), I granted consent to the processing of my personal data for the purposes of [•, e.g. communication and sending commercial communications] (hereinafter referred to as "Consent").
I hereby withdraw my Consent in its entirety [or specify the scope of consent you are withdrawing].
I understand that the withdrawal of Consent does not affect the lawfulness of processing of personal data based on Consent before its withdrawal, and that the withdrawal of Consent does not affect the processing of personal data for purposes other than those stated above and on legal grounds other than processing based on the withdrawn Consent.
In on
Name and surname, address and signature