Privacy Policy

FairData Professionals a.s., with its registered office at Na Florenci 1332/23, Nové Město, 110 00 Praha 1, company reg. no. 06149961, entered in the Commercial Register kept by the Municipal Court in Prague, Section B, Insert No. 22565 (the “Company”) treats any and all personal data it processes as strictly confidential, and uses them in compliance with applicable data protection laws. The safety of your personal data is a priority for the Company.

Within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679), the Company is a controller of your personal data. This means that it collects, stores and uses (and otherwise processes) your personal data in pursuance of its business (the purposes for which data are processed are described in more detail below), which consists primarily of the provision of advice and related data protection advisory services.

This Data Processing Policy applies to (i) the processing of personal data by the Company while you use the www.fairdata.cz website (the “Website”), (ii) the processing of personal data by the Company while communicating with you by e-mail or phone, (iii) the processing of personal data by the Company for the duration of a business relationship with clients and contractors, (iv) the processing of personal data as part of the fulfilment of the Company’s legal obligations, and (v) the processing of personal data that is necessary to protect the legitimate interests of the Company.

This Data Processing Policy describes the purposes and methods of the processing of personal data, and informs you about individual categories of personal data the Company processes, the recipients (if any) of such data, the data retention period, and about your data protection rights.

PURPOSES OF THE PROCESSING OF PERSONAL DATA

The Company may process your personal data for the following purposes:

• Performance of a contract including related negotiations (agreements on the provision of advice/DPO services and fulfilment of clients’ requests; relations with business partners, including cooperating law firms, suppliers of goods and providers of services; recruitment activities – finding candidates);
• Compliance with legal obligations (in particular obligations under accounting and tax laws, i.e. transfers of personal data to tax and revenue authorities and, where appropriate, to other public authorities in compliance with applicable laws; lists of contacts and the services provided);
• Sending marketing communications, offers of products and services, and targeted advertising (the Company may send commercial communications and/or newsletters related in particular to law and business, and may offer services via e-mail; for targeted advertising, it is possible to use information obtained from the Website, for further information, click HERE);
• Protection of the legitimate interest of the controller (protection of the Company’s rights and interests protected by law, e.g. the identification of persons at the Company’s reception desk, protection of the network against harmful acts and protection from misuse of the Website);
• Processing requests sent by means of electronic forms (in particular if you wish to be employed by, or cooperate in any other manner with the Company, or if you enroll for professional seminars and educational or social events via the Website).

WHAT PERSONAL DATA DOES THE COMPANY PROCESS?

The Company may process the following personal data for the following purposes:

Data categories	Purposes of processing:
Full name	Performance of a contract; Fulfilment of legal obligations; Sending marketing communications, offers of services and products and targeted advertising; Protection of the Company’s legitimate interest; Processing requests sent by means of electronic forms
Contact address	Performance of a contract; Fulfilment of legal obligations; Sending marketing communications and offers of services and products; Protection of the Company’s legitimate interest; Processing requests sent by means of electronic forms
E-mail	Performance of a contract; Fulfilment of legal obligations; Sending marketing communications, offers of services and products and targeted advertising; Protection of the Company’s legitimate interest; Processing requests sent by means of electronic forms
Phone number	Performance of a contract; Fulfilment of legal obligations; Sending marketing communications, offers of services and products and targeted advertising; Protection of the Company’s legitimate interest; Processing requests sent by means of electronic forms
Bank account number and other transaction-related data	Performance of a contract; Fulfilment of legal obligations; Protection of the Company’s legitimate interest
Company identification no., tax identification number	Performance of a contract; Fulfilment of legal obligations; Protection of the Company’s legitimate interest
Birth identification number	Performance of a contract; Fulfilment of legal obligations
Date of birth	Performance of a contract; Fulfilment of legal obligations
Any other information regarding the client or third parties	Performance of a contract; Fulfilment of legal obligations; Sending marketing communications and offers of services and products; Protection of the legitimate interest pursued by third parties

The Company processes personal data both manually and by automated means. The processing of personal data by automated means takes place in particular for the purposes of performance of a contract and offering services.

The Company may collect, retain and use certain information by automated means, such as statistical information whenever you visit the Website.

In some cases, the Company obtains your identification and contact information from Bisnode Česká republika, a.s.; for more information on Bisnode Česká republika, a.s. and its personal data processing, visit www.bisnode.cz/privacy.

PROCESSING OF PERSONAL DATA BASED ON CONSENT

If you grant to the Company your consent with the processing of your personal data for the purpose of sending personalised marketing communications (in those cases, profiling may also take place) or for the purpose of sending offers of the services and products of the Company’s business partners, whether via e-mail or by phone, you acknowledge that such consent is given voluntarily and that the consent can be withdrawn at any time by a written notice to the Company’s address or via a link contained in the e-mail message with the marketing communication. The consent is granted until withdrawal. Failure to grant the consent does not affect the performance of the contract.

RECIPIENTS OF PERSONAL DATA

The Company will disclose your personal data only to its authorised employees and individual data processors engaged by the Company under relevant contracts, or to other controllers as applicable, but in any case within the scope necessary to achieve the purposes of the processing and on the basis of the relevant legal title for the processing of the personal data.

In some cases defined by legislation, the Company is authorised, or even obligated, to transfer certain personal data under applicable laws to the Czech Office for Personal Data Protection or to investigative, prosecuting and adjudicating bodies.

PERSONAL DATA OF THIRD PARTIES

The personal data of third parties, meaning the personal data of employees and customers of the Company’s clients or contractors, as well as of other individuals cooperating with the Company, or any other data the Company will receive from a client or contractor in connection with the execution or performance of a contract, will be processed in compliance with applicable data protection laws. The Company will use such data for the purpose of performance of contracts with clients and/or contractors. The Company will process the personal data of third parties for the duration of the contract concerned, and thereafter for a period stipulated by separate laws, if any. The data will be retained for a longer period if need reasonably arises to retain such data in connection with a particular case.

PERIOD OF RETENTION OF PERSONAL DATA

The Company will process and retain your personal data for the period of time necessary to safeguard all the rights and obligations resulting from the relevant contract, and thereafter for a period for which the Company, as a data controller, is required to retain personal data under generally binding applicable regulations, or for which you have granted to the Company your consent with such processing. In other cases, the period of processing is based on, and must be proportionate to, the purpose of the processing, or is stipulated by applicable data protection laws.

The Company processes personal data, based on the purpose of their processing, for the time periods specified below:

Purpose of the processing	Retention period
Performance of a contract	for the duration of the contract and for 10 years from termination of the contract
Compliance with legal obligations	for the period stipulated by applicable legal regulations
Sending marketing communications and offers of services, products and targeted advertising	for the duration of the consent to the processing of personal data, or until withdrawal of the consent, or in accordance with special legal regulations*
Protection of the legitimate interests of the Company or third parties	for a maximum of 3 years from the commencement of data processing, unless special legal regulations require otherwise, or unless it is necessary in justified cases to retain data for a longer period in connection with a particular case
Processing requests sent by means of electronic forms	for the period necessary to process the relevant request

* The Company may process your e-mail address within the meaning of Section 7(3) of Act No. 480/2004 Sb., on Certain Information Society Services and Amending Certain Laws (the Information Society Service Act), as amended, for the purpose of distribution of commercial communications relating to their own products and services (e.g. in the form of an informational bulletin or newsletter) in case you did not decline such communications.

DATA SUBJECT’S RIGHTS

As a data subject, you have certain rights in connection with the processing of personal data, which result from applicable laws and which you may exercise at any time. Those rights include (i) the right of access to personal data, (ii) the right to rectification of inaccurate personal data and to completion of incomplete personal data, (iii) the right to erasure of personal data if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, or if it is established that the personal data have been unlawfully processed, (iv) the right to restriction of processing, (v) the right to data portability, (vi) the right to object to processing of personal data whereupon the processing will be discontinued, unless compelling legitimate grounds for the processing demonstrably exist which override the interests, rights and freedoms of the data subject, in particular where such grounds include the exercise of legal claims, and (vii) the right to contact the Czech Office for Personal Data Protection.

• Right of access to personal data: If you wish to know whether the Company processes personal data, you have the right to obtain information as to whether or not your personal data are being processed and, where that is the case, you also have the right to obtain access to your personal data.
• Right to rectification of inaccurate personal data and to completion of incomplete personal data: If you think that the Company is processing personal data about you which are inaccurate or incomplete, you have the right to request their rectification and/or completion. The Company will rectify or complete the data without undue delay, always taking technological capacities into account.
• Right to erasure: If you request erasure, the Company will erase your personal data if (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) the personal data have been unlawfully processed, (iii) you object to the processing and there are no overriding legitimate grounds for the processing of your personal data, or (iv) the legal obligation in EU or national law to process personal data no longer applies.
• Right to restriction of processing: If you request restriction of processing, the Company will make your personal data unavailable, or will temporarily remove or store them, or will perform any other processing activities as may be necessary for the proper exercise of that right;
• Right to data portability: If you wish the Company to transfer to a third party the personal data it is processing about you electronically on the basis of a contract or your consent, you may exercise your right to data portability. In the event the exercise of this right adversely affects the rights and freedoms of others, the Company will not be able to act on your request.
• Right to object: The right to object to the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority, or for protection of the Company’s legitimate interests. Unless the Company demonstrates that compelling legitimate grounds for the processing exist which override the interests, rights and freedoms of the data subject, the processing will be discontinued without undue delay.

Where requests to exercise the above rights are repetitive or manifestly unfounded, we may either charge a reasonable fee for the exercise of the relevant right, or refuse to act on the request. If this is the case, we will inform you accordingly.

Additional information regarding the processing of personal data will be provided at privacy@fairdata.cz. or at

FairData Professionals a.s.
Na Florenci 1332/23
110 00 Prague 1

The Company reserves the right to reasonably verify the identity of the data subject exercising the aforesaid rights.

The protection of privacy and personal data is supervised by the Czech Office for Personal Data Protection.