This document contains information for data subjects regarding the processing of their data in the organization within the framework of the requirements imposed on the organization as a personal data controller by Article 13 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons about the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (from now on referred to as GDPR).
SOGOS – FANAM, s.r.o.
Otrokovice, Objízdná 1628, Zlín district, ZIP code 76502
C 25649 filed with the Regional Court in Brno
Contact e-mail: [email protected]
From now on, it will be referred to as “we” or “the Administrator” or ” Organisation.”
Personal data is virtually any information that can directly identify a living natural person or is intended to reach such a person. Personal data can be divided into general (e.g., first and last name, age, telephone number, place of birth, personal status, etc.) and sensitive (now referred to as special categories of personal data, with only the following personal data – biometric data, trade union/political party membership, ethnic origin, philosophical beliefs, genetic data, information on convictions and criminal offenses, religious beliefs, political opinions, racial origin sexual orientation/life, health status).
Processing of personal data means a systematic activity carried out by a controller on personal data for a specific purpose. The activities referred to in the preceding sentence are, in particular, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure, or destruction.
The controller processes personal data (directly from you) that you have provided or personal data that it has obtained based on the fulfillment of your order.
Your identification, contact details, and data are necessary for the contract’s performance.
Your consent to the processing of personal data to provide direct marketing under Article 6 (1) (a) GDPR
We process your data according to Article to conclude and perform the contract (i.e., to provide our services). 6 (1) (b) GDPR. Therefore, the contract is the legal basis for processing your data.
Once the contract has been fulfilled, we must archive your data for the period prescribed by the relevant legislation. The legal basis for processing your general personal data is fulfilling a legal obligation, as provided for in Article 6 (1) (c) GDPR.
Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Administrator. When you place an order, the personal data necessary for the successful execution of the order is required by Artikle 1 (b) of the Regulation (this also includes the subsequent payment, delivery of services, handling of complaints, etc.); we use the personal data you provide to us to conclude a contract with you and, if a contract has already been concluded between us, we use it to fulfill it. The processing of the customer’s data is carried out without the customer’s consent, as the legal basis for processing their data for contract performance is the specific contract between the customer and the operator. The provision of personal data is required for the conclusion and performance of the contract; without it, it is impossible to conclude the contract or for the operator to fulfill its terms.
When running a social media profile (Facebook), we want to raise operator awareness online and communicate with customers.
The personal information you post on our social networking sites, such as comments, likes, videos, pictures, etc. ,will be publicly available through the social networking platform. We do not subsequently process the personal data for any other purpose.
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. You can send your objections by e-mail to the contact address of the controller, [email protected]
Social network operators have rules, service infrastructure, and privacy provisions. We have no control over the transfer of data and the use of your data by social network operators. We recommend that you read the privacy policy of the social network platform provider:
– Facebook – following link: https://www.facebook.com/policy.php
In particular processing operations, we act as joint operators with social network operators within the meaning of Article 26(4) of the GDPR.
To provide you with our services, we need to know the following personal data:
General personal data: name and surname, permanent address, service delivery address, telephone number, and e-mail.
We will retain your data as long as we perform our mutual contract. After the end of the contractual relationship, we will keep your data for as long as necessary to comply with the essential archiving obligation under the legal regulations that require archiving (these regulations are, for example, the Accounting Act, the Value Added Tax Act, the Archives and Records Act).
Your data may be transferred to providers of legal, tax, and accounting services and technical solutions (in particular, cloud service providers and web hosting providers).
Your data may also be transferred to public authorities and courts only if a specific legal regulation provides this or you give explicit consent.
Your data is always transferred to our processors based on a processing contract and by the minimum standard of data protection required by the GDPR.
The controller does not disclose, publish, or make available personal data to third countries.
The controller has taken appropriate personal, technical, and organizational measures to protect personal data.
The controller has taken technical measures to secure data and personal data storage in file form.
The controller declares that the personal data can only be accessed by persons authorized by the controller.
No automated decision-making or profiling occurs in our data processing activities during our business.
Under the conditions set out in the GDPR, you have:
We must tell you whether or not we process your data upon request. If we do process it, then you have the right to say:
The application can be submitted electronically to the email address [email protected] or by post to Otrokovice, Objízdná 1628, Zlín district, postcode 76502
If you believe that we are processing incorrect (inaccurate) personal data, you have the right to have it corrected. If you become aware of such inaccuracy in your data, please let us know, and we will fix it without delay. You can submit your request electronically to the email address [email protected] or by post to Otrokovice, Objízdná 1628, Zlín district, postcode 76502
In certain circumstances, you have the right to have us delete your data. You can ask us to delete your data at any time. We will delete your data if:
You can ask us to restrict the processing of your data. If we comply with your request, we will only store your data and not process it further. We will limit the processing of your data if:
You have the right to request that we provide you with your data in an electronic form (e.g., an XML or CSV file) that allows you to transfer your data to another company quickly. You can also ask us to transfer your data directly to the company of your choice. We will comply with your request if you have provided us with personal data directly and have given us your consent to process it.
You have the right to object to us processing your data. If we process your data in the following cases:
You can contact us with your request in any of the following ways:
By email: [email protected] or by post to Otrokovice, Objízdná 1628, Zlín district, postcode 76502
Suppose you believe that your data protection rights have been violated. In that case, you have the right to file a complaint with the supervisory authority, the Office for Personal Data Protection, at:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
ID: 70837627
Telephone: switchboard: +420 234 665 111 (does not provide consultations); information: +420 234 665 800 (the information line is available on Tuesdays and Thursdays from 13.00 to 15.30)
WWW: https://www.uoou.cz
E-mail: [email protected]
Mailbox ID: qkbaa2n
This Privacy Policy is valid and effective from 24.04.2019
Update on 27.10.2022