Dear Customers and Business Partners,
This document contains basic information about how we process your personal data.
Due to European Union legislation, this text has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR).
For maximum clarity, the text is structured in the form of questions and answers.
We present to you the basic information that we, as a personal data controller, are obliged to provide.
In case of any questions regarding the processing of your personal data, please do not hesitate to contact us using the following contact information: info@mhas.cz
A controller is a person who, alone or jointly with others, determines the purposes and decides how personal data will be processed.
The controller of personal data is the company MEIXNER & HANUŠ a.s. Czech republic. The controller can be contacted at the e-mail address info@mhas.cz.
A Data Protection Officer (DPO) is a person experienced in the field of personal data protection who ensures that processing is carried out correctly, particularly in accordance with relevant legal regulations. They are also the most qualified person for handling inquiries and requests concerning personal data.
The DPO is Mrs. Eva Majvaldová, who can be contacted at info@mhas.cz.
The controller processes personal data to:
Providing personal data to the controller is generally a statutory and contractual requirement. Regarding the provision of personal data for marketing purposes, which does not constitute the fulfillment of a contractual and statutory obligation of the controller, your consent is required. If you do not grant consent to the controller for the processing of personal data for marketing purposes, it does not mean that the controller would consequently refuse to provide you with its product or service under a contract.
The controller also processes personal data to protect its legitimate interests. The legitimate interests of the controller include, in particular, the proper performance of all contractual obligations of the controller, the proper performance of all statutory obligations of the controller, direct marketing, protection of the controller's business and assets, and last but not least, environmental protection and ensuring sustainable development.
To ensure maximum protection of your privacy, you have the right to object to your personal data being processed exclusively for the most necessary statutory reasons or to request that the personal data be blocked. You can read more about your rights related to the processing of personal data in Article 11 of this text.
The controller obtained the personal data directly from you, in particular from completed forms, mutual communication, or concluded contracts. In addition, personal data may originate from publicly available sources, registers, and records, such as the commercial register, debtor registers, professional registers, or the land registry. Furthermore, the controller may have obtained personal data from third parties who are authorized to access and process your personal data and with whom the controller cooperates, as well as from information on social networks and the internet that you have placed there yourself.
To ensure your satisfaction with the proper performance of the obligation, to ensure compliance with legal obligations, to ensure a personalized offer of the controller's goods and services, and for other purposes listed above, the controller processes the following categories of personal data:
The lawfulness of processing is established by Article 6(1) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract, for compliance with a legal obligation of the controller, for the protection of the legitimate interests of the controller, or if the processing takes place on the basis of consent you have granted us.
Our employees have access to your personal data, and in necessary cases, also the following associates and cooperating companies:
We have concluded a contract with all of these associates and companies, binding them to handle the transferred personal data as required by the GDPR regulation and only to the extent strictly necessary.
Within the scope of legal obligations, we must also provide personal data to state administration bodies, for example, the tax administrator, courts, law enforcement authorities, or capital market supervisory authorities.
We will not transfer personal data to countries outside the European Union or the European Economic Area.
The controller endeavors to ensure that the processing of your data is carried out properly and, above all, securely. You are guaranteed the rights described in this article, which you can exercise with the controller.
You can exercise individual rights by sending an e-mail to info@mhas.cz or by calling the telephone number +420 465 466 711. You can also exercise your rights in the form of a written request sent to our correspondence address U Dlouhoňovic 1397, PSČ 564 01 Žamberk.
All communications and statements regarding the rights you have exercised are provided by the controller free of charge. However, if the request is manifestly unfounded or excessive, in particular because of its repetitive character, the controller is entitled to charge a reasonable fee taking into account the administrative costs of providing the requested information. In case of repetitive requests for copies of processed personal data, the controller reserves the right to charge a reasonable fee for administrative costs for this reason.
The controller will provide you with a statement and, if applicable, information about the measures taken as soon as possible, but no later than within one month. The controller is entitled, if necessary and taking into account the complexity and number of requests, to extend the period by two months. The controller will inform you of the extension, including the reasons.
You are entitled to request information from the controller as to whether or not personal data is being processed. If personal data is processed, you have the right to request from the controller information in particular regarding the identity and contact details of the controller, their representative and, if applicable, the data protection officer, the purposes of processing, the categories of personal data concerned, the recipients or categories of recipients of personal data, legitimate controllers, the list of your rights, the possibility of contacting the Office for Personal Data Protection, the source of processed personal data, and automated decision-making and profiling.
If the controller intends to further process your personal data for a purpose other than that for which it was obtained, the controller will provide you with information about this other purpose and other relevant information prior to such further processing.
The information provided to you in connection with the exercise of this right is already contained in this text. However, this does not prevent you from requesting it again.
You are entitled to request from the controller information as to whether or not your personal data is processed, and if so, you have access to information about the purposes of processing, categories of personal data concerned, recipients or categories of recipients, storage period of personal data, information about your rights (rights to request from the controller rectification or erasure, restriction of processing, to object to such processing), the right to lodge a complaint with the Office for Personal Data Protection, information about the source of personal data, information on whether automated decision-making and profiling take place, and information regarding the procedure used, as well as the significance and envisaged consequences of such processing for you, information and safeguards in case of transferring personal data to a third country or international organization. You have the right to be provided with copies of the processed personal data. However, the right to obtain this copy must not adversely affect the rights and freedoms of others.
If there has been a change on your part, for example, a change of residence, telephone number, or any other fact that can be considered personal data, you have the right to request the controller to rectify the processed personal data. In addition, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
In certain specified cases, you have the right to request that the controller erase your personal data. Such cases include, for example, that the processed data is no longer necessary for the purposes mentioned above. The controller erases personal data automatically after the period of necessity has expired, but you can contact them with your request at any time. Your request is then subject to individual assessment (despite your right to erasure, the controller may have an obligation or legitimate interest to retain your personal data) and you will be informed in detail about its resolution.
The controller processes your personal data only to the extent strictly necessary. If you feel that the controller is, for example, exceeding the above-mentioned purposes for which it processes personal data, you can submit a request that your personal data be processed exclusively for the most necessary legal reasons or that the personal data be blocked. Your request is then subject to individual assessment and you will be informed in detail about its resolution.
If you wish the controller to provide your personal data to another controller or another company, the controller will transfer your personal data in an appropriate format to the entity designated by you, provided there are no legal or other significant obstacles preventing them from doing so.
If you find or suspect that the controller is processing personal data in violation of the protection of your private and personal life or in violation of legal regulations (provided that personal data is processed by the controller on the basis of public or legitimate interest, or is processed for direct marketing purposes, including profiling, or for statistical, scientific, or historical purposes), you can contact the controller and ask them for an explanation or to remedy the situation.
You can also object directly to automated decision-making and profiling.
You can contact the supervisory authority, the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/, at any time with your inquiry or complaint regarding the processing of personal data.
You have the right to withdraw your consent to the processing of personal data at any time, either by filling in a form/unchecking a box/sending a withdrawal to the registered office address of the controller or via a link in the e-mail communication.
Personal data is automatically evaluated and may be used for profiling or automated decision-making in the field of the controller's marketing activities. The controller uses the following methods for this:
As a result of these activities of the controller, your behavior on the website will be mapped and evaluated, which represents a certain intrusion into your right to privacy. At the same time, however, this evaluation helps ensure that you are only sent advertising offers regarding the controller's products and services that you might be interested in, given the results of the evaluation performed.
