Privacy Policy

If you are our customer, newsletter subscriber or website visitor, you entrust us with your personal data. We are responsible for its protection and security. Please familiarize yourself with our data protection, principles and rights in relation to the GDPR (General Data Protection Regulation).

Who is the administrator?

We are the City of Špindlerův Mlýn, ID: 00278343, with our registered office at Špindlerův Mlýn 173 543 51 Špindlerův Mlýn, Czech Republic. We process your personal data as a controller, i.e. we determine how personal data will be processed and for what purpose, for how long and select any other processors who will assist us with the processing.

Contact details

If you would like to contact us during the processing, you can contact us at 608443774 or by e-mail: sebkova@mestospindleruvmlyn.cz.

We declare

We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:

We will process your personal data only on the basis of a valid legal reason, primarily legitimate interest, performance of a contract, legal obligation or consent granted,

We fulfill the information obligation according to Article 13 of the GDPR before the processing of personal data begins, we will enable you to exercise and fulfill your rights under the Personal Data Protection Act and the GDPR, and we will support you in this.

Scope of personal data and purposes of processing

We process personal data that you entrust to us for the following reasons (to fulfill these purposes):

• provision of services, performance of contract

your personal data in the scope of: e-mail and telephone are necessary for the performance of the contract

• bookkeeping

If you are a customer, we absolutely need your personal data (invoicing data) to comply with the legal obligation to issue and record tax documents.

• marketing – sending newsletters

We use your personal data (email and name), gender, what you click on in the email and when you open it most often for the purpose of direct marketing - sending commercial communications. If you are our customer, we do so out of legitimate interest, as we reasonably assume that you are interested in our news, for a period of 5 years from the last order.

If you are not our customer, we will only send you newsletters based on your consent, for a period of 5 years from the date of granting. In both cases, you can revoke this consent by using the unsubscribe link in each email sent.

• advanced consent-based marketing

Only with your consent can we send you inspiring offers from third parties or use your email address, for example for remarketing and targeting advertising on Facebook, for a period of 5 years from the date of consent. This can of course be revoked at any time via our contact details.

• Photographic documentation – live events, e.g. training courses, conferences.

We retain your personal data for the duration of the statute of limitations, unless the law provides for a longer retention period or we have stated otherwise in specific cases.

Cookies

When you browse our website, we record your IP address, how long you stay on the page and which page you came from. We consider the use of cookies to measure website traffic and customize the display of the website as our legitimate interest as the administrator, as we believe that this allows us to offer you even better services. You can find the full terms and conditions of use of cookies here.

Security and privacy

We protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We protect it as if it were our own. We have adopted and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.

Transfer of personal data to third parties

Our employees and collaborators have access to your personal data.

To ensure specific processing operations that we cannot provide on our own, we use the services and applications of processors who can protect data even better than us and specialize in the given processing.

They are providers of platforms or services for project management, direct marketing, and accounting.

It is possible that in the future we may decide to use other applications or processors to facilitate and improve processing. However, we promise you that in such a case, when selecting the processor, we will place at least the same demands on security and processing quality as we do on ourselves.

Data transfer outside the European Union

We process data exclusively in the European Union or in countries that ensure an adequate level of protection based on a decision by the European Commission.

Your rights regarding the protection of personal data

You have a number of rights in relation to the protection of personal data. If you would like to exercise any of these rights, please contact us via e-mail: info@lepidus.cz.

You have the right to information, which is already fulfilled by this information page with the principles of personal data processing.

Thanks to the right of access, you can contact us at any time and I will provide you with evidence within 30 days of what personal data we are processing and why.

If something changes about you or you find your personal data outdated or incomplete, you have the right to supplement and change your personal data.

You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, you believe that we are processing it unlawfully but you do not want to delete all the data, or if you have objected to the processing.

You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.)

Right to portability

If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access - the only difference is that we will provide you with the information in a machine-readable format. Here we need at least 30 days.

The right to delete your data from our database (to be forgotten)

Your other right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish, you have the right to do so. In such a case, we will delete all your personal data from our system and from the system of all sub-processors and backends. We need 30 days to ensure the right to erasure. In some cases, we are bound by a legal obligation, and for example, I have to record issued tax documents for a period specified by law. In this case, we will delete all such personal data that are not bound by another law. We will inform you by email about the completion of the erasure.

Complaint to the Personal Data Protection Office

If you feel that we are not handling your data in accordance with the law, you have the right to contact the Office for Personal Data Protection with your complaint at any time. We would be very happy if you would first inform us of this suspicion so that we can do something about it and correct any errors.

Unsubscribing from newsletters and commercial communications

We send you emails with inspiration, articles, or products and services if you are our customer based on our legitimate interest.

If you are not yet a customer, we only send them to you with your consent. In both cases, you can unsubscribe from our emails by clicking the unsubscribe link in each email we send you.

Secrecy

We would like to assure you that our employees and collaborators who will process your personal data are obliged to maintain confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of the contractual relationship with us. Without your consent, your personal data will not be disclosed to any other third party.

These personal data processing principles are valid from May 25, 2018.