Information on personal data processing
Information on the controller
This is information on how the company
- TRIADA, spol. s r.o., with its registered office at U Svobodárny 1110/12, 190 00 Prague 9, ID No. 43871020, registered in the Commercial Register maintained by the Municipal Court in Prague, file number C 5091
- PONCA spol. s r.o., with its registered office at U Svobodárny 1110/12, 190 00 Prague 9, ID No. 27461840, registered in the Commercial Register maintained by the Municipal Court in Prague, file number C 109644
- Český zavináč z.s., with its registered office at U Svobodárny 1110/12, 190 00 Prague 9, ID No. 70837457, registered in the Association register maintained by the Municipal Court in Prague, file number L 10943
as joint controllers (hereinafter referred to as controllers) process personal data in connection with the provision of their products and services and the realization of their activities.
Contact details:
Data Protection Officer
The controller has not appointed a data protection officer.
Purpose of processing
The controller offers products and services mainly to legal entities, but it is not excluded that its clients may also be natural persons. The controller provides its customers with the following products and services, which are mainly aimed at clients from the public administration sector or suppliers to the public administration sector:
- Munis information system for municipalities and cities, including service support
- Professional seminars for public administration
- Obec a finance magazine
- Solón electronic publication
- ISSS conference
- DMO conference
- Public Administration Diary
- Zlatý erb competition
In these cases, personal data is processed:
- For the purpose of ensuring the performance of a contract for the delivery of a product or service, where the personal data of a business partner or its contact and responsible persons is processed.
- For the purpose of fulfilling legal obligations, particularly in the area of accounting and taxation.
- For the purpose of protecting the property and rights of the controller.
- For the purpose of marketing and business activities, which consist of improving the quality of products and services, offering additional products and services, or expanding existing products and services to existing business partners.
- For the purpose of sending commercial communications.
Legal basis for processing
The legal basis for processing is:
- The performance of a contract to which a natural person is a party, or in the case of a legal entity, its contact persons and responsible persons.
- Compliance with a legal obligation.
- The legitimate interest of the controller.
- Consent.
Legitimate interests of the controller
The legitimate interest of the controller is one of the legal grounds for processing that does not require consent to processing. The controller processes personal data on the basis of legitimate interest
- For the purposes of developing its business – improving and expanding products and services to customers.
- For the purposes of protecting the rights of the controller.
- Persons visiting websites for the purpose of ensuring network security and preventing unauthorized access.
Categories of data subjects
- Business partners, if they are natural persons.
- Contact and responsible persons of business partners – legal entities.
- Persons who consent to receiving commercial communications.
- Persons visiting websites.
Categories of personal data
- First name, last name, title, mailing or contact address, telephone number, email address, login name, job title.
- Participation of persons in seminars, conferences, and similar events.
- IP address.
Recipients of personal data
- The recipients of personal data are the controller's employees and persons authorized by the controller. In cases where required by special legal regulations, personal data is transferred to state administration bodies or other competent authorities.
- Recipients also include persons authorized to resolve any disputes.
Processors
- TRIADA, spol. s r.o., ID No. 43871020
- Moreno Vlk & Asociados Law Firm, ID No. 66243424
- KDFP – Ing. Irena Kemény, ID No. 43068987
Transfer of data to third countries or international organizations
Personal data is not transferred to third countries or international organizations.
Supervisory authority
The supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.cz.
Period for which personal data will be processed
- Personal data whose processing is related to the performance of a contract is processed for the duration of the contractual relationship and subsequently for the period during which the rights of the contracting parties are enforceable.
- We process the personal data of visitors to our website for a maximum period of 3 years.
- Personal data processed for the purpose of fulfilling legal obligations is processed for the period specified by the relevant legal regulations.
Automated decision-making and profiling
Automated decision-making and profiling are not used.
Source of personal data
Personal data was obtained:
- From the person themselves, or
- From a legal entity that listed the person as a contact or responsible person in connection with the performance of the contract.
Consequences of not providing personal data
If a person does not provide the data necessary to conclude a contract, it will not be possible for the controller to conclude such a contract and provide the relevant services. If the person does not provide contact details in connection with the performance of the contract, this may affect the scope and level of services provided by the controller.
Rights of individuals
An individual (data subject) has the right:
- To access personal data – the data subject has the right to
obtain confirmation from the controller as to whether or not personal data concerning him
or her are being processed, and if so, has the right to access such personal data and the
following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- the envisaged period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data concerning the data subject or restriction of processing, or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- any available information on the source of the personal data, if not collected from the data subject;
- the fact that automated decision-making, including profiling, is taking place. The data subject has the right to obtain a copy of the personal data being processed.
- To rectify personal data – the data subject has the right to rectify inaccurate personal data concerning him or her and to complete incomplete personal data.
- Right to erasure of personal data – the data subject has the
right to have the controller erase personal data concerning him or her without undue delay
if:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the data subject withdraws the consent on which the processing is based and there is no other legal ground for the processing;
- the data subject objects to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing;
- the personal data has been processed unlawfully;
- the personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject;
- the personal data have been collected in relation to the offer of information society services. The right to erasure shall not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, or for the establishment, exercise, or defense of legal claims of the controller.
- Restriction of processing – the data subject has the right to
obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims;
- the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
- Object to processing – the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out by the controller on the basis of his or her legitimate interest. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
- Data portability – the data subject has the right to obtain
personal data concerning him or her, which he or she has provided to the controller, in a
structured, commonly used and machine-readable format, and the right to transmit those
data to another controller without hindrance from the controller to which the personal
data have been provided, where:
- the processing is based on the performance of a contract; and
- the processing is carried out by automated means.
- Withdrawal of consent – the data subject has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Lodge a complaint with a supervisory authority.
Valid from June 7, 2018