Brief summary of information on personal data protection and consent to personal data processing

On the basis of the General Data Protection Regulation (hereinafter referred to as “GDPR”), the company AirProtect, p. r. about. Principles of protecting the privacy of clients (information provided when obtaining personal data from the person in question according to Articles 13 and 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons in the processing of personal data and the free movement of such data and Act No. 18/ 2018 Coll. on the protection of personal data).

In this form, we provide detailed information on the processing of personal data for the purpose of selling and buying goods for the purpose of selling them to the final consumer (retail) or another business operator (wholesale) in accordance with Act no. 100/2010. 513/1991 Coll. Commercial Code no. no. 42/1964 Coll. Civil Code, z. Ref. 7/2005 Coll. on Bankruptcy restructuring, z. Ref. 250/2007 Coll. on consumer protection; Ref. 102/2014 Coll. on consumer protection when selling goods or providing services on the basis of a contract concluded at a distance or a contract concluded outside the seller’s premises and on the amendment and addition of certain laws, or other services provided by our company.

CONTENTS

1. Who is the administrator of your personal data?
2. What personal data do we process?
3. What sources do personal data come from?
4. For what purposes have you given your consent?
5. How long will we process your personal data?
6. Who can have access to your personal data?
7. What are your rights when processing personal data?
8. How can you revoke consent to the processing of personal data?
9. WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA? The administrator of personal data is the company that determines the purpose and means of processing personal data. For the above purpose of sale/purchase of goods, the manager of your personal data is AirProtect, p. r. about.
10. WHAT PERSONAL DATA DO WE PROCESS? For the purpose of providing services, we process the following categories of personal data, ■ Basic identification data – name, surname, social security number, date of birth, address of permanent/temporary residence, ■ Contact and other data – telephone number, e-mail address, ■ Information on the use of services – what services you have had with us in the past ■ Information from records of telephone calls or other interactions with you, for example via e-mail, or the contact or registration form available on our website www.airprotect.eu of our e-shop.
11. FROM WHAT SOURCES DO PERSONAL DATA COME FROM? We obtain the personal data mentioned in the previous point directly from you. Personal data can also come from publicly available sources, registers and records. Your personal data may also come from third parties who are authorized to handle them.
12. FOR WHAT PURPOSES DID YOU GIVE YOUR CONSENT? You gave your consent mainly for the purpose of buying and selling movable property.
13. HOW LONG WILL WE PROCESS YOUR PERSONAL DATA? You have given your consent to our company for the duration of the contractual relationship and for the following 10 years from the termination of such contractual relationship or until the moment you withdraw your consent. After the expiry of the relevant period, your personal data will be deleted, but only to the extent and for the purposes for which consent is not required according to legal regulations.
14. WHO HAS ACCESS TO YOUR PERSONAL DATA? To process data for the purpose of buying or selling movable property, other entities that process personal data such as intermediaries whose task is to provide services to the company. For example, they can be external companies that manage our systems (PC services, accounting services, courier and postal services,…) or other services ensuring the proper running of the company.
15. WHAT ARE YOUR RIGHTS WHEN PROCESSING PERSONAL DATA? When processing personal data, you can exercise the following rights:

Information on the processing of your personal data

The information includes in particular: identification and contact details of the administrator, his representative and, where appropriate, the responsible person, purposes of processing, category of personal data concerned, recipient or categories of recipients of personal data, information on the transfer of personal data to third countries, period of retention of personal data, authorized administrators, a list of your rights, the possibility to contact the Office for Personal Data Protection, the source of processed personal data, information on whether and how automated decision-making and profiling occurs.

Right to access personal data

You have the right to confirmation of whether or not personal data is being processed and, if so, you have access to information about the processing, categories of personal data concerned, recipients or categories of recipients, the retention period of personal data, as well as the right to information about your rights, just submit complaint to the Office for the Protection of Personal Data, information on the source of personal data, information on whether automated decision-making and profiling is taking place, information and guarantees in case of transfer of personal data to a third country or international organization. You have the right to provide copies of processed personal data.

The right to correct personal data

The person in question has the right to have the operator correct incorrect personal data concerning him without undue delay. With regard to the purpose of personal data processing, the person concerned has the right to supplement incomplete personal data. If we process your out-of-date or inaccurate personal data (for example, you have changed your address), please inform us and we will correct the personal data.

Right to erasure

In some cases stipulated by law, we are obliged to delete your personal data on your instructions. However, each such request is subject to individual assessment, as our company also has an obligation or a legitimate interest in keeping personal data.

The operator is obliged to delete personal data without undue delay if the person concerned has exercised the right to deletion, if

• personal data are no longer needed for the purpose for which they were obtained or otherwise processed,
• the person in question revokes the consent he expressed to the processing of his personal data for at least one specific purpose of the law, or the person in question expressed explicit consent to the processing of this personal data for at least one specific purpose on the basis of which the processing of personal data is carried out, and there is no other legal basis for the processing of personal data,
• the person in question objects to the processing of personal data and there are no valid reasons for the processing of personal data; personal data is processed illegally,
• is a reason for canceling the fulfillment of an obligation under this Act, a special regulation or an international treaty to which the Czech Republic is bound, or
• personal data were obtained in connection with the offer of information society services. The above does not apply if the processing of personal data is necessary
• to exercise the right to freedom of expression or the right to information,
• to fulfill an obligation according to this law, a special regulation or an international treaty to which the Czech Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
• for reasons of public interest in the field of public health in accordance with the law,
• for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes, if it is likely that the law will make it impossible or seriously difficult to achieve the goals of such processing, or
• to assert a legal claim. Right to restriction of processing The person concerned has the right to have the operator restrict the processing of personal data if
• the person in question objects to the correctness of the personal data, during the period allowing the operator to verify the correctness of the personal data,
• the processing of personal data is illegal and the person in question objects to the erasure of personal data and requests a restriction of their use instead,
• the operator no longer needs personal data for the purpose of processing personal data, but the person in question needs them to assert a legal claim, or
• the person concerned objects to the processing of personal data for a reason related to his specific situation carried out to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator, or the processing of personal data is necessary for the purpose of the legitimate interests of the operator or a third party, except in cases where these interests outweigh the interests or rights of the person in question requiring the protection of personal data, especially if the person in question is a child; this legal basis does not apply to the processing of personal data by public authorities in the performance of their tasks, including profiling based on these provisions.

The operator may not further process personal data, unless he proves the necessary legitimate interests for the processing of personal data that outweigh the rights or interests of the person concerned, or grounds for exercising a legal claim, until verification of whether the legitimate grounds on the part of the operator prevail over the legitimate grounds of the concerned persons.

If the processing of personal data has been restricted, in addition to storage, the operator may process personal data only with the consent of the person concerned or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The operator is obliged to inform the affected person whose processing of personal data will be restricted before the restriction of processing of personal data is lifted.

Right to data portability

The person concerned has the right to obtain the personal data concerning him and which he has provided to the operator in a structured, commonly used and machine-readable format and has the right to transfer this personal data to another operator if it is technically possible and if

• personal data is processed because the person concerned has expressed consent to the processing of his personal data for at least one specific purpose, the person concerned has expressed explicit consent to the processing of this personal data for at least one specific purpose; or the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, or for the implementation of measures prior to the conclusion of the contract based on the request of the person concerned, and
• processing of personal data is carried out by automated means. Exercising the above-mentioned right does not affect the right to erasure.

The right to portability does not apply to the processing of personal data necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator.

The right to object

The person concerned has the right to object to the processing of his personal data for reasons relating to his specific situation carried out as processing of personal data that is necessary for the fulfillment of a task carried out in the public interest or in the exercise of public authority entrusted to the operator, or the processing of personal data is necessary for the purpose of legitimate interests the operator or a third party, except when these interests are overridden by the interests or rights of the data subject requiring the protection of personal data, especially if the data subject is a child; this legal basis does not apply to the processing of personal data by public authorities in the performance of their tasks, including profiling based on these provisions.

The operator may not further process personal data, unless he proves the necessary legitimate interests for the processing of personal data that outweigh the rights or interests of the person concerned, or grounds for asserting a legal claim.

The person concerned has the right to object to the processing of personal data concerning him for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. The person concerned has the right to object to the processing of personal data concerning him for reasons relating to his specific situation, except in cases where the processing of personal data is necessary for the performance of a task for reasons of public interest, if the personal data is processed for a scientific purpose, for the purpose historical research or for statistical purposes when processing personal data for the purpose of archiving, for scientific purposes, for historical research purposes or for statistical purposes, the operator and intermediary are obliged to accept reasonable guarantees for the rights of the person concerned.

Tyto záruky obsahují zavedení přiměřených a účinných technických a organizačních opatření zejména k zajištění dodržování zásady minimalizace údajů a pseudonymizace.

The right to file a complaint with the Office for Personal Data Protection

With your initiative or complaint regarding the processing of personal data, you can contact the supervisory authority at any time, which is the Office for the Protection of Personal Data of the Czech Republic with its headquarters at Hraničná 12, 820 07 Bratislava 27.

Where can you exercise your rights and are these rights charged?

You can exercise individual rights directly with AirProtect. r. o., by phone on the line +421 987 555, by sending an email to the address: air.protect.official@gmail.com or by a written request sent to the address indicated in the header of this document (company headquarters).

We provide all information and statements about the rights you exercise free of charge.

How long can you expect a response from the company? We will provide you with a statement and any information about the measures taken as soon as possible, but no later than within one month of receiving your request. If necessary, and taking into account the complexity and number of applications, we can extend this period to two months. We will inform you in writing about the extension, including the reasons.

8. HOW CAN YOU WITHDRAW CONSENT TO THE PROCESSING OF PERSONAL DATA? Consent to the processing of personal data is based on the principle of voluntariness. This means that you can revoke it at any time with a written, hand-signed statement delivered to our company’s headquarters, or to the company’s e-mail air.protect.official@gmail.com

In Žilina on April 23, 2023, AirProtect, s.r.o..