Privacy Policy

This document contains information for data subjects regarding the processing of their data in the organization within the framework of the requirements imposed on the organization as a personal data controller by Article 13 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons about the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (from now on referred to as GDPR).

Who processes your data?

SOGOS – FANAM, s.r.o.

Otrokovice, Objízdná 1628, Zlín district, ZIP code 76502

C 25649 filed with the Regional Court in Brno

Contact e-mail: [email protected]

From now on, it will be referred to as “we” or “the Administrator” or ” Organisation.”

What is personal information?

Personal data is virtually any information that can directly identify a living natural person or is intended to reach such a person. Personal data can be divided into general (e.g., first and last name, age, telephone number, place of birth, personal status, etc.) and sensitive (now referred to as special categories of personal data, with only the following personal data – biometric data, trade union/political party membership, ethnic origin, philosophical beliefs, genetic data, information on convictions and criminal offenses, religious beliefs, political opinions, racial origin sexual orientation/life, health status).

What is personal data processing?

Processing of personal data means a systematic activity carried out by a controller on personal data for a specific purpose. The activities referred to in the preceding sentence are, in particular, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure, or destruction.

Sources and categories of personal data:

The controller processes personal data (directly from you) that you have provided or personal data that it has obtained based on the fulfillment of your order.

Your identification, contact details, and data are necessary for the contract’s performance.

Lawful basis and purpose of processing

The lawful reason for processing is:

Your consent to the processing of personal data to provide direct marketing under Article 6 (1) (a) GDPR

We process your data according to Article to conclude and perform the contract (i.e., to provide our services). 6 (1) (b) GDPR. Therefore, the contract is the legal basis for processing your data.

Once the contract has been fulfilled, we must archive your data for the period prescribed by the relevant legislation. The legal basis for processing your general personal data is fulfilling a legal obligation, as provided for in Article 6 (1) (c) GDPR.

The purpose of processing personal data is:

Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Administrator. When you place an order, the personal data necessary for the successful execution of the order is required by Artikle 1 (b) of the Regulation (this also includes the subsequent payment, delivery of services, handling of complaints, etc.); we use the personal data you provide to us to conclude a contract with you and, if a contract has already been concluded between us, we use it to fulfill it. The processing of the customer’s data is carried out without the customer’s consent, as the legal basis for processing their data for contract performance is the specific contract between the customer and the operator. The provision of personal data is required for the conclusion and performance of the contract; without it, it is impossible to conclude the contract or for the operator to fulfill its terms.

When running a social media profile (Facebook), we want to raise operator awareness online and communicate with customers.

The personal information you post on our social networking sites, such as comments, likes, videos, pictures, etc. ,will be publicly available through the social networking platform. We do not subsequently process the personal data for any other purpose.

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. You can send your objections by e-mail to the contact address of the controller, [email protected]

Social network operators have rules, service infrastructure, and privacy provisions. We have no control over the transfer of data and the use of your data by social network operators. We recommend that you read the privacy policy of the social network platform provider:

– Facebook – following link: https://www.facebook.com/policy.php

In particular processing operations, we act as joint operators with social network operators within the meaning of Article 26(4) of the GDPR.

What personal data will we process, and to what extent?

To provide you with our services, we need to know the following personal data:

General personal data: name and surname, permanent address, service delivery address, telephone number, and e-mail.

How long will we keep the data?

We will retain your data as long as we perform our mutual contract. After the end of the contractual relationship, we will keep your data for as long as necessary to comply with the essential archiving obligation under the legal regulations that require archiving (these regulations are, for example, the Accounting Act, the Value Added Tax Act, the Archives and Records Act).

To whom do we pass on your data?

Your data may be transferred to providers of legal, tax, and accounting services and technical solutions (in particular, cloud service providers and web hosting providers).

Your data may also be transferred to public authorities and courts only if a specific legal regulation provides this or you give explicit consent.

Your data is always transferred to our processors based on a processing contract and by the minimum standard of data protection required by the GDPR.

The controller does not disclose, publish, or make available personal data to third countries.

Personal data security conditions

The controller has taken appropriate personal, technical, and organizational measures to protect personal data.

The controller has taken technical measures to secure data and personal data storage in file form.

The controller declares that the personal data can only be accessed by persons authorized by the controller.

No automated decision-making or profiling occurs in our data processing activities during our business.

What are your rights about the processing of your data?

Under the conditions set out in the GDPR, you have:

  • Right of access to your data under Article 15 GDPR
  • Right to rectification of personal data under Article 16 GDPR
  • Right to restriction of processing
  • Right to erasure under Article 17 GDPR
  • Right to object under Article 21 GDPR
  • Right to the transfer of personal data under Article 21 GDPR
  • The right to withdraw consent (electronically or to a mailing address)
  • The right to complain to the Data Protection Authority if you believe your data protection rights have been violated.

How can you fulfill your rights?

Right of access

We must tell you whether or not we process your data upon request. If we do process it, then you have the right to say:

  1. for what purpose do we process your data,
  2. the extent to which the data are processed
  3. how long they will be kept
  4. to whom they will be made available
  5. whether you can complain to the Data Protection Authority.

The application can be submitted electronically to the email address [email protected] or by post to Otrokovice, Objízdná 1628, Zlín district, postcode 76502

Right to repair

If you believe that we are processing incorrect (inaccurate) personal data, you have the right to have it corrected. If you become aware of such inaccuracy in your data, please let us know, and we will fix it without delay. You can submit your request electronically to the email address [email protected] or by post to Otrokovice, Objízdná 1628, Zlín district, postcode 76502

Right to erasure

In certain circumstances, you have the right to have us delete your data. You can ask us to delete your data at any time. We will delete your data if:

  • We no longer need your data for the purpose for which you provided it to us,
  • you withdraw your consent,
  • you object to the processing of your data,
  • we process your data unlawfully,
  • the personal data must be erased to comply with a legal obligation,
  • if you are a child or parent of a child who has consented to processing personal data via the Internet.

Right to restriction of processing

You can ask us to restrict the processing of your data. If we comply with your request, we will only store your data and not process it further. We will limit the processing of your data if:

  • Your data is incorrect until we have verified its accuracy,
  • •we process personal data unlawfully, but you do not agree to delete it and instead request that we only restrict the processing of your data,
  • We no longer need your data, but you need it to prove, exercise or defend your rights
  • you object to processing your data until we have verified that our legitimate interests outweigh your reasons.

Right to data portability

You have the right to request that we provide you with your data in an electronic form (e.g., an XML or CSV file) that allows you to transfer your data to another company quickly. You can also ask us to transfer your data directly to the company of your choice. We will comply with your request if you have provided us with personal data directly and have given us your consent to process it.

Right to object

You have the right to object to us processing your data. If we process your data in the following cases:

  • because of our legitimate interest,
  • creating a customer profile,
  • you can object to their processing if you have personal reasons.

How can you exercise these rights?

You can contact us with your request in any of the following ways:

By email: [email protected] or by post to Otrokovice, Objízdná 1628, Zlín district, postcode 76502

Suppose you believe that your data protection rights have been violated. In that case, you have the right to file a complaint with the supervisory authority, the Office for Personal Data Protection, at:

Office for Personal Data Protection

Pplk. Sochora 27
170 00 Prague 7

ID: 70837627

Telephone: switchboard: +420 234 665 111 (does not provide consultations); information: +420 234 665 800 (the information line is available on Tuesdays and Thursdays from 13.00 to 15.30)

WWW: https://www.uoou.cz

E-mail: [email protected]

Mailbox ID: qkbaa2n

This Privacy Policy is valid and effective from 24.04.2019

Update on 27.10.2022