Information on the processing of personal data of the customers and potential customers of Syntea software group a.s.

pursuant to the regulation of the European Parliament and of the Council (EU) No. 2016/679 on the protection of individuals with regard to the processing of personal data, in force since 25 May 2018 (hereinafter „Regulation“) 

Controller of personal data

Syntea software group a.s.

registered office at Radlická 591/115, 158 00 Prague 5

identification number: 27187951

registered in the Commercial Register at the Municipal Court in Prague, section B, insert 9617

tel.:         +420 257 310 970

email:     info@syntea.cz

This information does not apply to the processing of legal entities’ data, including the name, legal form and contact details of the legal entity.

 

Overview of processed personal data, legal basis and purpose of processing, processing time

The controller processes the following personal data of his or her customers or potential customers:

 

Personal data Legal basis of processing Purpose of processing Period of processing
name, surname, telephone number, email address, ID No. Article 6 (1) (a) of the Regulation (consent of the data subject with the processing of personal data provided on the website www.syntea.cz) handling of requests, complaints or queries by the data subject for the period for which consent to such processing was granted, i.e. for a period of five years from when consent was granted or until consent is revoked, if consent has been revoked before the expiry of this period

for the period for which consent to such processing was granted, i.e. for a period of five years from when consent was granted or until consent is revoked, if consent has been revoked before the expiry of this period

name, surname, telephone number, email address, ID No. Article 6 (1) (a) of the Regulation (consent of the data subject with the processing of personal data provided on the website www.syntea.cz)

 

Sending of electronic commercial communications by the controller if the data subject is not a customer of the controller for the period for which consent to such processing was granted, i.e. for a period of five years from when consent was granted or until consent is revoked, if consent has been revoked before the expiry of this period
name, surname, ID No. Article 6 (1) (b) of the Regulation measures of the controller before entering a contract with the customer until the conclusion of the contract negotiations and in case the contract between the data subject and the administrator is concluded, for the duration of the concluded contract and for the period stipulated by the legal regulations
name, surname, telephone number, email address, ID No. Article 6 (1) (f) of the Regulation (legitimate interest of the controller) development and support of the controller’s own business activities, in particular by sending electronic or written commercial communications of the controller to his or her customers, which can be objected to until the expiry of five years from the day of termination of the contractual relationship with the controller

 

Source of personal data

Personal data is obtained directly from the data subject in the context of consent to the processing of personal data or from publicly available sources (public registers).

Recipients of personal data

Personal data is accessed by the controller, his or her employees within the scope of their position and further:

  1. processers of personal data who, based on a contract on the processing of personal data under the terms and conditions of the stated personal data protection rules are charged with the processing of personal data by the controller, in particular: (i) providers of IT systems, postal and telecommunication services etc. and (ii) legal representatives, where this is necessary for the recovery of the controller’s claims or for the protection of legitimate interests of the controller.
  2. Public authorities (including administrations), if they are justified by a legitimate reason for accessing personal data or if it is necessary to protect the rights of the controller.

Personal data is not handed over to other countries.

Rights of data subjects

The right of access to personal data means that the data subject has the right to obtain information from the controller on whether his or her personal data is processed and, if so, which data is concerned and how the data is processed. The data subject also has the right to have all incorrect personal data related to him or her corrected by the controller at his or her request without undue delay. The data subject has the right to complete incomplete data at any time.

The right to erasure of personal data represents the expressed duty of a controller to dispose of the personal data he or she is processing on the data subject if the conditions stated by law are met and the data subject requests this.

The right to restrict processing of personal data. The data subject has the right to restrict the controller’s processing of his or her data in certain cases.

In the case of processing which is based on the legitimate interests of the controller, a third party or which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, the data subject has the right to object at any time. In the case of the processing of personal data for the purpose of sending commercial communications, which is carried out without the consent of the data subject, the data subject has the right to object to the controller for free at any time by written notice sent by e-mail or in writing to the addresses given in the header of this information.

The right to data portability gives the data subject the possibility to obtain the personal data he or she provided to the controller in a common and machine-readable format. This data he or she can then pass on to another controller or, if technically possible, request for the controllers to hand over data to one another.

In relation to data processed on the basis of the data subject’s consent, the data subject has the right to withdraw his or her consent with the processing of such personal data at any time.

The right to file a complaint gives the data subject the possibility to complain directly to the controller or to contact the Personal Data Protection Office if he or she is dissatisfied in any way with the processing of his or her personal data by the controller. More information on the rights of data subjects is available on the website of the Office for Personal Data Protection. (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276)