Guidelines on personal data processing
DISCOMP s.r.o., reg. no. 25236792, registered office at Cvokařská 8, 312 00 Plzeň
This documents describes rules of the personal data processing and your rights related to it.
Protection of your personal data as well as your privacy are of utmost importance to us. Hence we process your personal data with proper care always bearing in mind valid legal regulations and compliance with them.
Please, read following information carefully. Any time we deal with your personal data, we refer you to these guidelines and ask you to read it. While composing these guidelines, we strive for the highest comprehensibility. Do not hesitate to contact us in case of any doubts, remarks or questions. We will be delighted to hear from you and we will be pleased to set things straight.
These guidelines are effective since May 24th, 2018.
Contact details:
- Address: Plzeň, Cvokařská 8, PSČ 312 00
- E-mail: info@discomp.cz
The personal data processing is in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 480/2004 Coll. on certain Information Society Services and on Amendments to some Acts
1. Terms
Data subject: Natural person (consumer and self-employed person) to whom personal data are related to (You or Customer);
Personal data: Any information relating to an identified or identifiable customer; an identifiable customer is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (data or information);
Controller: Means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, performs processing and is responsible for it. Personal data controller is the company DISCOMP s.r.o., Reg. No.: 252 36 792
Processor: Means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller based on the agreement on personal data processing (business partner or partner).
Web site: Web pages on www.discomp.cz ;
Purpose of personal data processing: A reason for which personal data are processed. Such a reason may be, e.g. performance of the agreement, administration of user accounts, processing of complaints, sending commercial messages (newsletters) or advertising based on the customer's interests;
Scope of personal data processing: An account of particular customer personal data categories processed for a certain purpose;
2. Which personal data are processed?
With reference to particular legal requirements and purpose, our company processes the following personal data, or personal data categories:
- identity and contact details: e.g. first name, surname, mailing or other contact address, pick-up address, company address, reg. number, tax number;
- electronic contact details: e.g. phone number, e-mail address;
- other electronic details: IP address;
- other personal data related to the contractual relation: bank account number, order history;
- other personal data: typically data provided by the customer in the ordering form or other documents and while communicating with us, including later updates.
3. What is personal data origin?
We process data provided by you while, e.g. ordering our services, opening the user account, communicating with us or signing up for the newsletter. Typically, we collect:
- identity and contact details;
- electronic contact details;
- other personal data related to the contractual relation.
Additionally, further data we collect automatically when you browse our web site. Typically, we collect:
- other electronic details:
- web site you visited prior to our web site;
- IP address;
- access date and time;
- searching queries;
- response code http and https;
4. Why are personal data processed?
Your personal data may be processed for the following purposes:
- Performance of the contractual relation
- Purpose: Based on the purchase agreement with us, you have the right to receive the ordered goods. At the same time, we have the right to receive payment for ordered services. To be able to fulfill our obligation and check fulfillment of your obligation, we need to process your identity and contact details, address and other personal data related to the contractual relation (e.g. account number).
- Legal background: The reason for the personal data processing for purposes of the contractual relation performance results from the contractual relation between you and us. Provision of personal data is, in this particular case, a contractual requirement without which the agreement may not be entered into.
- Data storage time: Data storage time is defined by duration of the contractual relation between the customer and us.
- User account administration
- Purpose: Customers may sign up on our web site and administer their personal setting. For these purposes, we must process your e-mail address or you may provide us with your first name, surname and phone number. These data serve for simpler ordering of our products.
- Legal background: For the personal data processing for user account administration purposes, your agreement is required. Provision of personal data is, in this particular case, voluntary, however, it is impossible to sign up without it. You can revoke your agreement any time.
- Data storage time: Data storage time is defined by duration of your agreement. If you do not sign in to your account for 3 years, your agreement shall be considered revoked.
- Sending commercial messages and offering of our goods
- Purpose: New e-mail updates on our goods shall be sent regularly to our customers who express their agreement with such activities. You can always cancel subscription to commercial messages quickly and easily clicking on the cancellation link, which shall be a part of each message. Your preferences regarding receiving commercial messages may be administered in the settings menu, which shall be accessible through each newsletter.
If you are our customer (e.g. you have ordered goods with us), we may use your e-mail address, which you provided, to send commercial messages on similar products, provided that you did not disagree on such. Otherwise, we shall request your agreement on sending commercial messages on our products, events and promotion campaigns of the company. Information provided by you as well as information otherwise collected in relation to our goods–e.g. your web site activity, etc. We shall always request your agreement on receiving commercial messages if such is required by relevant legal regulations.
- Legal background: The personal data processing for purposes of sending commercial messages and product offers shall be granted by your agreement, alternatively by our justified interest regarding the direct marketing. Provision of personal data is, in this particular case, voluntary, however, it is impossible to send to you commercial messages without it. You can revoke your agreement any time. Provision of personal data, in this case, is not a legal or contractual requirement. Hence you shall not be bound by any obligation to provide your personal data to us.
- Data storage time: Data storage time is defined by duration of your agreement. Your agreement shall be considered revoked and authorized interest terminated if you do not open our commercial messages for 3 years.
- Accounting and taxation purposes
- Purpose: We shall process your personal data to comply with relevant accounting and tax regulations.
- Legal background: The reason for personal data processing for accounting and taxation purposes shall be fulfillment of legal requirements. We are required to process your personal data.
- Data storage time: Accounting details shall be processed for 5 years, taxation documents for 10 years.
5. Who shall have a right to access personal data?
Your personal data shall be accessible, primarily, to our authorized employees who request these data so that we may provide our services to you.
Following categories of our partners (receivers) shall be allowed to access your personal data:
- Partners ensuring transportation services
- Partners for accounting matters
- Public administration bodies
- We shall provide your personal data in case of law enforcement, if required by law or necessary as a preventive measure, investigation and prosecution of crime and frauds or should we be otherwise required by law to do so.
- Personal data may be requested by law enforcement authorities (Police of the Czech Republic, Prosecutor's Office and courts) or financial authorities.
- Provision of personal data shall not be done regularly but only randomly, especially, if required by law.
6. What are ways of the personal data processing?
Personal data are processed both manually and automatically. We thoroughly record all data processing activities in compliance with relevant legal requirements.
7. What are the data subject rights?
To pursue your rights, please feel free to reach out to us via our contact details stated in the beginning of this document. We reserve a right to verify receiver's identity appropriately.
Right of access by the data subject
- Should you want to know if we process your personal data, you have the right to receive such from us and, if so, you have a right to access your personal data. For repeated requests for personal data, we shall impose an appropriate administrative fee for each copy reflecting our real administrative costs.
- Right to rectification
- You have the right to request correction of personal data if you think that we process your personal data incorrectly or untruthfully. At the same time, you have the right to amend incomplete data. We shall make corrections and amendments without undue delay always respecting our technical capabilities.
- Right to erasure
- You have the right to request erasing of your personal data as long as your personal data are not requested for purposes for which they were collected or otherwise processed or if you find out illegal data processing.
- Right to restriction of personal data processing
- Should you not require full personal data erasure but rather temporary restriction of their processing, you may request such restriction with us.
- Right to data portability
- Should you require us to transmit your personal data to third subjects, you are entitled to apply right to data portability. The right referred to in this section shall not adversely affect the rights and freedoms of others, in which case we shall not be able to accept your request.
- Right to object
- Where the data subject objects to personal data processing for purposes of activities performed in the public interest, when applying public authority or protection of our legitimate interests, the personal data shall not be processed. We shall no longer process the personal data upon your request unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
- Right to revoke agreement
- Where the processing is based on your agreement, you shall have the right to revoke such at any time.
- Right to receive information on automated decision-making, including profiling
- You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- Right to file a complaint with The Office for Personal Data Protection
- • You shall have the right to file a complaint with the supervisory authority, which is The Office for Personal Data Protection with its office at Pplk. Sochova 27, 170 00 Praha 7, phone: 234 665 111, web site: www.uoou.cz.
8. Conclusion
Legal regulations and our business strategy as well as related ways of your personal data processing may change. Should we decide to update these guidelines, we shall upload changes on to our web site and, at the same time, we shall inform you about these changes. Should substantial changes to these guidelines be applicable or if required by law, we shall inform you prior to realization of these changes. We kindly ask you to read these guidelines thoroughly and check them regularly while communicating with us or using our web site.
