Privacy Policy – GDPR

We handle personal data following the applicable legislation. We ensure the protection of personal data mainly in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR). The GDPR has been valid uniformly throughout the EU since May 25, 2018, and according to the applicable legislation.

Basic principles

In general, we always process your personal data only to the extent that is necessary for the given purpose. Personal data can be divided into two groups – personal data that we can process without your consent, and personal data that we cannot process without your consent.
COLLECTED DATA that we process without your consent:

• the data that is necessary to fulfill our legal obligation (e.g. the Accounting Act),
• the data needed to fulfill the contracts we enter into with you (identification data – personal data used for your unambiguous and unmistakable identification, e.g. name, surname, title, date of birth, address of residence; contact details enabling us to contact you, e.g. telephone number, e-mail address, contact address),
• login details for our website or applications (login, password, etc.).,
• details of purchases and our business cooperation, e.g. purchase history, payment details, bank details, payment card, etc.,
• network identifiers in connection with the use of web services and applications – when using our websites and applications, we use various technologies to collect and store information to identify your browser and device (cookies and similar technologies), we collect data about devices (e.g. IP address or other unique identifiers of your device, hardware model, operating system version, mobile network data, server protocols, Internet protocol address, date and time of your request), location data (IP address, GPS system, WI-FI access points or mobile network transmitters)
• other data, the processing of which is required for our company by the legislation of the Czech Republic or the European Union

In other cases, we process the data based on your consent.
We process personal data in such a way that they are properly secured against unauthorized access to data, accidental loss, destruction, or damage.
We store personal data only for the necessary time and archive it according to the legal deadlines imposed by legal regulations. After the loss of the reason for processing or the expiration of the necessary processing time, we delete the relevant personal data.

COLLECTED DATA, which we process only with consent
In some cases, our company processes the above data or other data based on your consent. In such cases, the exact scope of the personal data processed is stated in the consent you have signed, and you always have the option to revoke this consent.
Following the applicable law, we collect and process personal data for a predetermined purpose and only to the extent necessary to fulfill that purpose.

Personal data processed through websites

• Cookies – Cookies are a tool to ensure the functionality of the website for a specific user. Information about cookies, what we collect and for what purposes, including instructions on how you can prevent their storage, and more information can be found here: http://dega.posunemevasvys.cz/en/cookies/
• Product data – If you decide to buy a product, we process your data, which you provide to us as part of it. Also, if you show interest in our activities and provide us with your data in this connection, we will process them for the purpose of communication with you. In these cases, the data processing time is limited to 1 year after the expiration of the product warranty period or the last contact with you (unless stated otherwise in a specific case).
• Data on persons signing up for a program, activity, etc. If you decide to log in through one of the websites operated by us, into a program, activity, etc., we process your data that you provide to us as part of the application. Processing in these cases always takes place during the realization period and further for the period determined individually according to the nature of the specific program, activity, etc.
• Data on persons subscribing to information materials – If you decide to subscribe via one of our websites, to receive a newsletter or other information material, we require your consent to the processing of the contact information provided (usually e-mail). In these cases, the processing time is limited to the time of publishing the given information material.

How to protect your data
Following the applicable legislation, our company secures personal data, which it handles by means of all appropriate technical and organizational measures in order to ensure the highest possible level of protection, taking into account the nature, scope, and purposes of processing and probable risks. We have security and control mechanisms in place in an effort to prevent unauthorized access to or transfer of data, loss, destruction, or another possible misuse.
Our employees are bound by a duty of confidentiality. If we pass on the data to third parties, then these persons are also bound by a legal or contractual obligation of confidentiality.

Processors of personal data
We do not sell or otherwise pass on your data to other parties, except for contractual partners who allow us to communicate with you, and except in situations where we have a legal obligation to pass on your data to another person. Most processing activities are performed by our company with our own forces, in some cases, we use the services of third parties (hereinafter „processors“). We try to select only those specialists who are sufficiently trustworthy and secure the transmitted personal data. The processors have contractually agreed to provide at least the same level of protection of the transferred personal data as our company provides. At the same time, we oblige processors to maintain confidentiality. The processor is entitled to handle the transmitted data exclusively to perform the activity which was entrusted to by our company. If we use cloud storage, these are located within the EU and thus ensure the level of protection required by applicable law.

The processors are:

• providers of IT services, applications, and cloud storage
• accounting service providers of our consultants
• archiving service providers
• entities enforcing our receivables
• marketing agencies
• state bodies or other entities in cases where it is required by law for our company (e.g. state administration bodies, supervisory bodies, bodies active in criminal proceedings, courts, executors, notaries, insolvency administrators).

With your consent or at your request, your personal data may be provided to other entities.
We process your personal data for the time necessary to fulfill the purpose for which they were collected or another related purpose. Unless the law directly stipulates a specific period for which personal data must be processed, we consider that the purpose of the processing lasts as long as this processing activity threatens to enforce legal claims (usually a ten-year limitation period) and one more calendar year after the termination of all impending legal claims, i.e. in case of a contract, it is usually 11 years after the termination of the contractual relationship.
For the purposes of sending business messages, our company will process your contact details as long as the partner expresses disagreement with such sending. Even then, however, we will be entitled to process basic data on why we sent commercial communications for a reasonable period of time to prove the legitimacy of such sending.

Your fundamental rights

Our company is obliged to provide you with the information contained in this document in a concise, transparent, and comprehensible manner. If any provision of this policy is unclear to you or is not fully understood by you, please do not hesitate to contact us. Contacts for our company are listed at the end of this document. Our staff will be happy to provide you with explanations or additional information. Your fundamental rights include:

• the right to request information on what personal data we process,
• the right to request clarification from us regarding the processing of personal data,
• the right to request access to this data from us and to have it updated or corrected, or to be restricted, and the right to object to the processing,
• in case of automated processing of personal data, you have the right to data portability,
• the right to withdraw consent (in cases where processing is based on consent) at any time, for example by sending an e-mail or letter to the contact details below,
• the right to request the deletion of personal data from us (we are obliged to comply with you if we do not have to process the data to fulfill a legal obligation),
• the right to contact us or the Office for Personal Data Protection in case of doubts about compliance with the obligations related to the processing of personal data.

If you exercise your rights, we may require you to verify your identity.

By the personal data administrator:

DEGA CZ s.r.o.
Malesicka 2850/22c
130 00 Prague 3
Czech Republic
EUROPE
Company DEGA CZ s. r. o. is registered in the Commercial Register of the Municipal Court in Prague, Section C, Insert 125371
Contact information:
By e-mail: GDPR@dega.co.com
Telefon: +420 212 812 520