This document contains the description of the personal data processed by our company Praguest s.r.o., having registered address at Rostovská 318/9, Praha 10 (Prague 10), company identification number: 42937710, tax identification number: CZ42937710, registered in the Companies Register maintained with the Metropolitan Court in Prague, Section C, Insert 218074, Czech Republic (hereinafter referred to as Praguest), and by Suppliers (hereinafter referred to as Companies) using our platform www.praguest.com for business, with regard to their business partners, their representatives and employees, the purposes of personal data processing, the persons they are authorized to transfer them to and the rights you hold in relation with the processing of your personal data and their free flow, the so-called GDPR as amended.
For business cooperation resulting from the business fulfillment of the Companies and the Companies with counterparties, we use various types of personal data of our business partners (especially of suppliers and customers), their representatives and employees with whom we are in necessary contact. It is exclusively an essential extent without which the cooperation would not be feasible. In practice, it mainly refers to identification and contact details. We process the following personal data: a) identification data understood as first and last names, title, permanent address, residential address, job title held at the business partner, username and password; b) electronic and contact data, especially email address and telephone number, data box ID, IP address, identification data issued by the state, c) bank account number, d) business communication data, especially our records of the date and content of previous business communication. The processing of your personal data is essential for the realization of business cooperation. Such processing does not require your consent, since without the personal data, business cooperation would not be possible. It refers to cases regulated by the legal title (grounds) of Article 6 of GDPR. We process your personal data only for our own purposes as the Controller. We transfer the data to our third parties (especially business partners, special consultants, special administration etc.) in a limited extent only to fulfill the essentials of the business. They process them according to our instructions. We process all specified personal data as the controller. That means we define the aforementioned purposes, for which we collect your personal data, determine the means of processing and respond to their proper execution. We use your data exclusively to make, perform and settle contractual obligations (including invoicing and bookkeeping), for the purposes of marketing and fulfillment of duties resulting from legal regulations. We erase the personal data immediately upon the fulfillment of their purpose (usually business), unless the law sets forth a specific period for their retention (taxes and accounting). Marketing data requiring your revocable consent are stored for the maximum of two years. We receive the personal data from public sources, especially from the Companies Register and other public registers, from business partners or directly from you, the customers.
Personal data are only accessed by the controller and persons in a labor-law relation with the controller or processors based on a contractual relationship with the controller only for the defined purpose of processing. The controller must have a legal reason to transfer the data to another controller. The access and handling of personal data processed by the controller are subject to internal safety regulations of the controller. The controller may give access to personal data to third persons only in cases, when it is stipulated or allowed by law, otherwise only with the consent of the data subject. The processors of the personal data are the suppliers and providers of services relating with the controller´s operation.
In relation to your personal data you hold a number of rights.
- The right to be informed and the right of access,
- The right to rectification, i.e. addition,
- The right to erasure,
- The right to restrict processing,
- The right to data portability,
- The right to object,
- Right in relation to automated individual decision making and profiling with legal or similar effects.
- File a complaint at a supervisory body
It is the right to be informed and the right of access to personal data related with the right to the first free copy in the extent of processing. As regards the right of access you especially have the right to know what data we process, for what purpose, for what period of time, where we receive your data from, to whom we transfer them, who else processes the data, storing period and what other rights you have in relation with the processing of your personal data. As per your request, we issue a confirmation regarding the type and purpose of the processed data. If you find out that the personal data processed by us are inaccurate, outdated or incomplete, you have the right to request that we correct or complete them without undue delay. In some cases you have the right to request that we erase your personal data. We will erase your personal data without undue delay based on any of the following reasons: a) we no longer need your personal data for the purposes for which we processed them; b) you exercise your right to object against the processing of your personal data based on our legitimate interest, and we assess that we no longer have such legitimate interest entitling us to process them, or c) you believe that our processing of your personal data is no longer in compliance with the general applicable legal regulations. The stated right cannot be executed in the case that the processing of your personal data is still essential for the fulfillment of our legal duties or for the determination, execution or defense of our legal titles. We must restrict the processing of personal data in cases, when: a) you deny the accuracy of the personal data until we agree on the correct data; b) our processing of your personal data lacks a legal basis; c) we no longer need your personal data for the aforementioned purposes of processing, but you require them to determine, execute or defend your legal titles, or d) you object against the processing. We are also obliged to restrict the processing of your personal data during the time of examination of the legitimacy of your objection. The right to data portability is based on the possibility of conditional receiving of your personal data provided by you to the controller in a structured, commonly used and machine-readable format; and the right to hand over such data to the controller without the previous controller´s resistance. The data subject also has the right to request that the controller hands over the data subject´s personal data to another controller in a structured, commonly used and machine-readable format, if technically possible.
Based on their specific situation, the data subjects have the right to object any time against the processing of personal data that are processed based on legal reasons:
- The processing is essential for the fulfillment of tasks performed in the public interest or during the performance of state power assigned to the controller,
- The processing is essential for the purposes of legitimate interests of the relevant controller or the third party.
The personal data controller no longer processes the data, unless there are provable legitimate reasons for the processing prevailing over the interests or rights and freedoms of the data subject, or for the determination, exercise or defense of legal titles. Also the processing of personal data for the purposes of direct marketing or profiling may be objected. Should the data subject object against the processing for marketing purposes, personal data will no longer be processed for those purposes. The filing of the objection will be assessed immediately and followed by a report. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or has similar significant effects on him or her (Article 22 GDPR). The data subject has the right to file a complaint at a supervisory body, if he or she believes that the processing of his or her personal data breaches his or her right, whereas the supervisory body in the Czech Republic is the Office for Personal Data Protection.
In cases, when the processing of personal data requires your consent, you may revoke the given consent any time in writing or by email. The consent is required for sending business notifications (apart from newsletters referring to similar goods or services purchased at the entrepreneur by the customer), for giving references on the websites (if they contain personal data – e.g. first name, last name and email or photograph) or when the entrepreneur wants to track the customer´s position.
We hereby declare that we have adopted all adequate and currently known technical and organizational security steps using modern technologies in order to protect your personal data against abuse, damage or destruction as if they were of our own. We take the same care to secure data storages and personal data storages in a printed form. Personal data are accessible only by authorized persons. All our employees that have access to your personal data are obligated to remain confidential and are trained in the area of security of personal data processing. The obligation of confidentiality persists even after the termination of contractual relations with us.
By sending the order, you confirm that you have been acquainted with the conditions for the protection of personal data and that you accept them in full. We have the right to alter these conditions. To exercise the aforementioned rights, each data subject may refer to the controller by sending an email to firstname.lastname@example.org or in writing to the Praguest´s address.
These terms and conditions come into effect on 21st August 2022 Praguest s.r.o.