Protection of personal data

Information on the processing of personal data

We are aware of the importance of protecting personal data and privacy of our customers and therefore we act in accordance with applicable law, in particular with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”), Act No. 101/2000 Coll., on Personal Data Protection, as amended, Act No. 127/2005 Coll., on Electronic Communications, and in accordance with the relevant provisions of the Civil Code.

This privacy notice is valid and effective from 25 May 2018.

Information about us and contact details:

SBLCore s.r.o., ID No.: 042 78 968, having registered seat at Sezemická 2757/2, Horní Počernice, Post Code: 193 00, Prague 9, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 245258

E-mail: blanka@sblcore.com

Why we process your personal data:

The provision of personal data is voluntary, but some of your data are necessary for conclusion of a contract and fulfilment of our obligations. We process the data that you provide to us primarily for the purpose of providing our services and products, invoicing, internal use, for marketing and business purposes, or for the collection of claims or the assessment of payment discipline.

What data and for which purpose we process:

1. For the purposes of conclusion and subsequent performance of the relevant contract, including the processing of your possible claims from defective performance, we process:

   name and surname of the customer, e-mail address, telephone

   Legal basis for the processing of personal data for this purpose is primarily the fulfilment of the relevant contract and at the same time the fulfilment of our legal obligations under the legal regulations governing rights and obligations in connection with accounting.

   Provision of personal data for this purpose is a prerequisite for the conclusion and performance of the contract and does not require consent to the processing of personal data. If personal data are not provided to us, we cannot conclude and properly perform the contract.

2. For the purpose of asserting claims arising from or arising out of the relevant contract we process:

   name and surname of the customer, e-mail address, telephone

   Legal basis for processing personal data for this purpose is our legitimate interest. We do not need your consent to provide personal data.

3. For the purposes of direct marketing (i.e. sending an offer related to a service or goods that have been provided to you as part of the performance of the relevant agreement), we process:

   name and surname of the customer, e-mail address, telephone

   Legal basis for processing personal data for this purpose is our legitimate interest. We do not need your consent to provide personal data, but you may oppose the processing.

4. For the purpose of sending other commercial and marketing communications we process:

   name and surname of the customer, e-mail address, telephone

   Legal basis for processing personal data for this purpose is the consent of the customer or the customer's contact person. To process your personal data for this purpose, we need your consent, which you can withdraw at any time.

There will be no automated decision making or profiling of your personal data.

How long do we process your personal data:

We keep your personal data for the duration of the contractual relationship and subsequently for 4 years after its termination, or for the period necessary in order to properly exercise our legal claims arising out of the agreement.

For the purposes of direct marketing, we keep personal data for the duration of the contractual relationship and subsequently for a period of 2 years after its termination.

For the purpose of sending other business and marketing communications, we keep personal data for the duration of your consent.

If you request the deletion of your personal data, we will delete or anonymize your personal data within 1 month of receiving such a request; however, this does not apply if we may retain your data based on our legitimate interests (in particular for the purpose of enforcing rights under the applicable agreement) or on another legal basis and for another purpose under the applicable law.

Who we share your data with:

We will provide you with an up-to-date list of third parties to whom we may transfer your personal data upon your request sent to our e-mail address below.

Your personal data are not transferred outside the EU.

Security:

We place great emphasis on security policy within the company, employee confidentiality, adherence to internal guidelines and the selection of our business partners.

What are your rights:

• Right of access – to request access to your personal data and information about how we process it;
• Right to rectification – to have your personal data corrected if it is inaccurate and to have incomplete personal data completed;
• Right to erasure (also known as the Right to be Forgotten) – to have your personal data erased;
• Right to restriction of processing – to restrict processing of your personal data;
• Right to data portability - to electronically move, copy or transfer your personal data in a standard form;
• Right to object - to object to processing of your personal data;
• Rights to complain against processing of your personal data at Data Protection Authority (Office for Personal Data Protection, having registered seat at Pplk. Sochora 27, Prague 7, Post Code: 170 00).

If you have any questions regarding the processing of personal data, you can contact us via our e-mail address.