GDPR

Information for customers on the processing of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

1. The controller of the personal data
BONEKA, spol. s r. o., Dubská 602, 415 01 Teplice, Czech Republic. The controller is an entrepreneur in the field defined in the Commercial Register maintained by the Regional Commercial Court in Ústí nad Labem, section C 2156

The processing of personal data takes place at the company's registered office and business premises:
Dubská 602, 415 01 Teplice, Czech Republic

2. Purpose(s) of the processing of personal data
We process your personal data for the following purposes

• keeping documentation related to our business and business cases;
• maintaining ordering systems
• maintaining customer directories
• processing reports for public authorities
• accounting and tax operations
• keeping records of complaints
• keeping lists of discarded documentation
• managing complaints
• keeping records of our income and expenditure, payments received and management, as required by tax and accounting regulations

 
3. Legal basis for processing personal data
The legal basis for the processing of your personal data referred to in point II. is the fulfilment of our legal obligations (in particular Act No. 563/1991 Coll., on accounting, Act No. 586/1992 Coll., on income taxes, Act No. 634/1992, on consumer protection fulfilment of obligations under a contract under which we provide you with our services (this contract does not have to be in writing)
 
4. Recipients of personal data
In addition to you, the recipients of your personal data may, in accordance with the provisions of the legislation, in specific cases be public authorities. In addition to the controller, personal data may also be processed by processors for the purposes described above on the basis of data processing contracts concluded in accordance with the General Data Protection Regulation. Your personal data may be transferred to other EU member states in the context of the performance of the subject matter of the work.

5. Period of processing of personal data
The personal data contained in the business documentation is processed for the period of time specified by the applicable legal regulations or for the period of time that you are our client. Disposal of documentation relating to the data subject is stored and disposed of in accordance with the Company's Shredding Regulations and applicable law.

6. Rights of the data subject
When processing personal data, you have the following rights regarding the protection of your personal data:

• the right to request access to your personal data from us;
• the right to rectification of your personal data that we process;
• the right to restrict processing. Restriction of processing means that we must mark your personal data for which processing has been restricted and we must not continue to process it for the duration of the restriction, except to store it. You have the right to restrict processing if you contest the accuracy of the personal data for the period necessary for us to verify the accuracy of the personal data;
• the processing is unlawful and you object to the erasure of the personal data and instead request a restriction on its use;
• if we no longer need your personal data for the purposes of processing but you require it for the establishment, exercise or defence of legal claims; if you have objected to the processing set out in section VII below, until it is verified that our legitimate grounds for processing outweigh your interests or rights and freedoms;
• the right to erasure of personal data. The right to erasure of personal data applies only to personal data that we process for purposes other than the provision of our services. We may not erase data that we hold about you for the purpose of providing our services;
• the right to data portability. You may request that we provide your personal data to you for the purpose of transferring it to another data controller, or that we transfer it to another data controller ourselves. However, you only have this right in respect of data that we process automatically on the basis of your consent or a contract with you. However, we may only disclose data we hold about you for the purpose of providing our services to you and, under lawful conditions, to a public authority.
• the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is in breach of data protection legislation. You can lodge a complaint with the supervisory authority at your usual place of residence, place of employment or at the place where the alleged breach occurred. In the Czech Republic, the supervisory authority is the Office: "Úřad na ochranu osobních údajů", street: Pplk. Sochora 27, ZIP: CZ-170 00, City: Prague 7, www.uoou.cz.

 7. Right to object against processing
If we process your personal data for the purposes of our or someone else's legitimate interests (the legal grounds for processing are set out in section III), you have the right to object to such processing at any time. You can object to this at our address listed in section I. If you raise such an objection, we will only be entitled to continue such processing if we can demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms and if the processing is necessary for the establishment, exercise or defence of legal claims.

8. Mandatory processing and obligation to provide personal data
The processing of your personal data for the purposes of providing our services is a legal requirement.

In Teplice, 3.6.2021