General Data Protection Regulation – GDPR

GDPR

Information about the personal data processing method and personal data protection.

Personal data controller:

CRG Czech-kart s.r.o., Rokycanova 781/15, 779 00 Olomouc, Company registration No. 01575074, tax registration No. 01575074.

Legal grounds for using the personal data:

We place a great emphasis on the personal data protection. This information about the personal data processing informs you how CRG Czech-kart s.r.o.  obtains, stores and further processes your personal data. When dealing with the personal data, we respect the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Purpose and scope of the personal data processing:

The personal data processing does not require the client’s/business partner’s consent. Such data processing is required for fulfilling the mutual contractual relationships. Whenever the Personal Data Protection Act strictly requires the consent to the personal data processing, we always explicitly request it, which means that the clients/business partners are notified of this fact in advance and have an opportunity to decide whether to give the consent voluntarily or not. The scope of the processed data corresponds to the purposes of processing thereof. For purposes of concluding and performing an agreement with a client/business partner, we process any and all data that the client has provided or is to provide in connection with the agreement/purchase order conclusion and that is related to the subject of performance of the agreement/purchase order. Such data includes address, identification details and descriptive details in the following scope: name and registered seat of the company, contact person’s name, company registration No., tax registration No., banking details, telephone number, e-mail.

We use the received data in the scope required for:

a) agreement execution – in connection with a purchase order and goods delivery b) performance of legal obligation – this includes registration and processing of accounting documents, control statements, audits by tax authorities, etc. c) legitimate interest – mainly for purposes of providing new information or managing requirements.

Period and method of the personal data retention:

The personal data processed based on the legal grounds of execution of the agreement entered into by and between our company and you is retained for duration of the respective agreement or for a period stipulated by the applicable law, in particular, in relation to accounting, tax and archival. Access to the gathered and stored personal data is provided only to selected employees who need such access for purposes of performing their work duties. Such employees are contractually bound to keep the information received in connection with the personal data protection confidential.

Data processing by a third party:

The data can be processed for CRG Czech-kart s.r.o.  also by a selected tax adviser for purposes of auditing the accounting records, whereas such tax adviser has the obligation to keep the data confidential, to ensure adequate data security and to process the data only for a period required for conducting the audit. Relationships with the third parties are always secured contractually in order to avoid violation of the personal data handling principles. The other rights and data are processed in a transparent and correct way in accordance with the law. You have the right to access your data, to explanation, as well as other rights in case you assume that the processing is not correct, or, as the case may be, file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, Prague 7, Postcode 17000.

The person responsible for the personal data issues in the company is:

Vladimír Nemajer, e-mail info@crgczech.com.

This information was updated on 21 May 2018.