Controller
By giving this consent to the processing of personal data, you agree that VAPAS, a.s., with its registered office at Nádražní 484, 671 67 Hrušovany nad Jevišovkou, will process your personal data in accordance with the conditions set out below.
Scope of processing
The controller will process your personal data to the extent that you voluntarily provided it when completing a form, by telephone, by email or in person. The controller will process primarily the following data: first name, surname, email address, telephone number and IP address.
Purpose of processing
The controller will process your personal data for the purposes of direct marketing (sending information about the controller’s new products and services), sending commercial communications within the meaning of Act No. 480/2004 Coll., and analysing your behaviour in relation to these commercial communications in order to personalise the services offered.
Legal basis for processing
The legal basis for processing is your freely given consent and the fact that your personal data is necessary for the individual direct marketing purposes you have subscribed to. Personal data is processed in accordance with the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – hereinafter referred to as the GDPR.
Retention period
The controller will process your personal data for 10 years unless you withdraw this consent to the processing of personal data. This does not, however, affect the processing of your personal data to the extent necessary to fulfil obligations arising from generally binding legal regulations.
Access to data
Your personal data will be accessible to the controller, its employees and, where applicable, third parties – processors who provide appropriate safeguards and whose processing meets all GDPR requirements. These parties include, in particular, marketing and IT consultants and the controller’s contractual partners (suppliers). They will only have access for as long as strictly necessary and to the extent strictly necessary, where this is required to provide the service and comply with legal requirements. In some cases, the controller is required to disclose personal data to its contractual partners on the basis of Article 6(1)(f) of the GDPR, including partners established outside the EU. In these individual cases, data subjects will be provided with information in accordance with the requirements of Article 13(1)(f) and Article 14(1)(f) and the related provisions of the GDPR. Under certain precisely defined conditions, we are also required to disclose some of your personal data under applicable legislation, for example to the Police of the Czech Republic or other law enforcement authorities, including specialised units (ÚOOZ, the Customs Administration, etc.), and other public authorities.
Your rights
In relation to your personal data, you have the following rights in particular:
- the right to withdraw your consent at any time;
- the right to rectify or complete your personal data;
- the right to request restriction of processing;
- the right to object to processing or lodge a complaint about it, subject to the conditions laid down by applicable law (with the supervisory authority, which is the Office for Personal Data Protection www.uoou.cz);
- the right to request data portability;
- the right of access to your personal data;
- the right to be informed of a personal data breach, subject to the conditions laid down by applicable law;
- the right to erasure of your personal data (the right to be “forgotten”), subject to the conditions laid down by applicable law; and
- further rights laid down in the Personal Data Protection Act and in General Data Protection Regulation No. 2016/679 once it enters into force.
Processor
The following companies process personal data:
- STUDIO ERIGO s.r.o., Company ID: 29197783, with its registered office at Bohunická 795/54, 619 00 Brno, registered in the Commercial Register maintained by the Regional Court in Brno, file no. C 64989
Contacting the processor
You can contact the processor by email at: info@erigo.cz or in writing at the controller’s registered office (Bohunická 795/54, 619 00 Brno). The processor is entitled to request proof of your identity in order to prevent unauthorised persons from accessing your personal data. All communication between you and the processor is monitored for the purposes of improving service quality and maintaining records of the processor’s compliance with legal obligations.
Providing data is voluntary
You provide us with your personal data entirely voluntarily. You are under no obligation to provide it. If you do not provide it, you will not face any penalties.