INFORMATION ABOUT PROCESSING OF PERSONAL DATA
in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to only as the “Regulation”)
1. GENERAL
This document contains information about processing of personal data which the data subject provided to the data controller within the framework of the relationship arising from a supply contract or from individual separate orders, or which the controller obtained from publicly accessible sources.
The data subject is a supplier whose services the data controller uses, or a client who uses the services of the data controller. When mention is made in this text of a data subject, this shall be understood to mean such parties.
2. DATA CONTROLLER
Data controller: ATL EUROPE s.r.o., Company ID Number: 259 25 865, with registered office at Hořická 283/22, Pražské Předměstí, 500 02 Hradec Králové
Contact person: Mgr. Ivana Kapustová
Telephone No.: +420 724 485 977
E-mail address: ivana.kapustova@atleurope.cz
The data controller does not have an elected Data Protection Officer.
The data controller declares that it duly ensures protection of the personal data of its suppliers and clients, in particular by ensuring an internal directive which grants rights to and imposes obligations on employees who process or store personal data, and also by ensuring sufficient protection for such data.
3. TYPES OF PERSONAL DATA WHICH WE PROCESS
The data controller processes data which the data subject provided in a contract or in another manner, or which the data controller ascertained from publicly accessible registers (the Commercial Register or Trade Licensing Register etc.) or from other publicly accessible sources. This in particular concerns the data subject’s name and surname, academic title, job title, VAT number, data about his/her ID document (personal ID card, passport), data about his/her driving licence, contact details (telephone number, e-mail address, postal address or invoicing address) and payment details (bank account number).
The data controller also processes the data of third parties which the data subject provided to the data controller, this in particular concerning information relating to drivers – name and surname, telephone number, job title, details about his/her driving licence, details about his/her ID document (personal ID card or passport) and nationality. The data subject declares that he/she is entitled to dispose of such third-party data and that he/she was entitled to provide it to the data controller.
4. LEGALLY DETERMINED REASONS AND PURPOSE OF PROCESSING THE PERSONAL DATA OF DATA SUBJECTS
1. Processing is performed in compliance with art. 6 para. 1 a) of the Regulation on the basis of consent given which the data subject provided to the data controller.
2. Further to this, if this does not concern processing on the basis of consent given:
a. Processing is performed in compliance with art. 6 para. 1 b) of the Regulation for performance of precontractual or contractual obligations, in particular for the purpose of creation of an order, ensuring transportation and monitoring of a consignment.
b. Processing is performed in compliance with art. 6 para. 1 c) of the Regulation for compliance with a legal obligation which relates to the data subject, this in particular concerning obligations arising from the following items of legislation:
Act No. 89/2012 Coll., Civil Code
Act No. 235/2004 Coll., on Value Added Tax,
Act No. 563/1991 Coll., on Accounting,
Act No. 499/2004 Coll., on Archiving and Record Management,
c. Processing is performed in compliance with art. 6 para. 1 f) for the purposes of the legitimate interests of the respective controller or third party.
5. RECIPIENTS TO WHICH PERSONAL DATA HAS OR WILL BE MADE AVAILABLE
Personal data may, within the framework of complying with the legal grounds specified in para. 4, be provided by the data controller to third parties for further processing, this in particular concerning parties which ensure transportation, customs services or supplier services.
The data controller is also entitled to pass on personal data to third countries (i.e. outside the EU). In such a case, it undertakes to ensure that these third countries comply at least with the same standards of personal data protection as are provided by EUR countries.
6. PLANNED PERIOD OVER WHICH PERSONAL DATA WILL BE STORED
The data controller stores personal data for the period of duration of performance of the contractual relationship and also for the period it is instructed to do so by the legislation.
7. LIST OF RIGHTS OF DATA SUBJECTS
Right of access pursuant to art. 15 of the Regulation – including the right to gain confirmation from the data controller as to whether personal data is or is not being processed (this document contains information about processing of personal data)
Right to rectification pursuant to art. 16 of the Regulation – other than correction, also including the right to supplementation of incomplete personal data
Right to erasure pursuant to art. 17 of the Regulation – if the reasons specified in the Regulation are met
Right to restriction of processing pursuant to art. 18 of the Regulation – if any of the reasons listed in the Regulation occur
Right to data portability pursuant to art. 20 of the Regulation – subject to meeting of the conditions specified in the Regulation
Right to object pursuant to art. 21 of the Regulation
Right to file a complaint with the supervisory authority – in the case of the Czech Republic, this is the Office for Personal Data Protection, with registered office at Pplk. Sochora 727/27, 170 00 Prague 7 - Holešovice
How to exercise individual rights
A data subject who has any questions or who would like to exercise any of the above-mentioned rights can contact the contact person specified in point no. 2 of this information.