Information about personal data processing
Dear Customers and Business Partners,
This document aims to provide you with basic information about the processing of your personal data. We can assure you that we treat your personal information with due care and in accordance with applicable law.
This information memorandum fully reflects Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), which became effective on 25 May 2018.
1. Who is the personal data controller?
A controller is a person who, alone or together with others, determines the purposes and means of processing your personal data.
The personal data controller is the company AML Holding a.s. with its registered office at třída Míru 2800, Zelené Předměstí, Pardubice 530 02, identification no.: 28819772, registered in the Commercial Register maintained by the County Court in Hradec Králové, File: B 2995 (the "Company").
2. Who can you contact?
If you have any questions about your personal data you can contact our personal data protection coordinator – Ludmila Krajcová, tel.: 585 418 471, e-mail: firstname.lastname@example.org.
The personal data protection coordinator is also responsible for dealing with any claims that you may apply towards our Company in connection with your rights as a data subject.
3. Why and on the basis of what laws do we process your personal data?
The Company processes your personal data for the following reasons:
- to secure the conclusion and subsequent fulfilment of contractual obligations between you and the Company;
- to adapt our products and services to your needs;
- to protect our legitimate interests.
The legal basis for the processing of your personal data is the fulfilment of legal obligations applicable to the Company and fulfilment of the contract concluded between you and the Company and the legitimate interests of our Company consisting in the securing of supplies for the production and other activities of our Company, including sales management, and last but not least also protection of the Company's property.
If you do not grant the Company your consent to the processing of personal data for marketing purposes it does not mean that the Company will refuse to provide you with its products or services under the contract.
4. How did we obtain your personal data?
The Company obtained your personal data directly from you, in particular from the contracts that we concluded with you, from forms which you have filled in, or during mutual communication.
Your personal data may also come from publicly available sources, registers and records, such as the Commercial Register, Land Register, Register of Debtors or various professional registers.
5. What categories of your personal data do we process?
To ensure your satisfaction with the proper performance of the obligations, and to ensure the fulfilment of legal obligations and the personalized offer of the Company's goods and services as well as other abovementioned purposes, the Company processes the following categories of personal data:
- Basic identification data – first name, surname, date of birth, home address and identification number;
- Contact details – phone number and email address;
- Information on the use of the Company's products and services;
- Information derived from mutual communications – information from emails, call records or other contact forms;
- Invoicing and transaction data – in particular, information appearing on invoices, agreed billing terms and received payments.
6. To whom do we transfer your personal data?
We hand over your personal data to state authorities in order to comply with statutory obligations applicable to our Company (e.g. tax authorities).
Your personal data may also be handed over to external companies that help us with various activities where personal data is processed (accounting agenda, IT services, etc.).
Your personal data is not transferred to countries outside the European Union or European Economic Area or to any international organization.
7. How long will we store your personal data?
We keep accounting documents for the statutory period of 10 years. Other personal data for which there is no statutory archiving time is retained for a period of 4 years, due to the possibility of defending our rights in possible litigation.
If we process your personal data for marketing purposes based on your explicit consent, such data will be retained until consent is revoked.
8. What are your rights in relation to the processing of your personal data?
You have the right to access your personal data, i.e. the right to request that we inform you how we process your personal data and provide you with copies of documents containing your personal data. You have the right to request that we correct inaccurate personal data. Furthermore, you have the right to request the deletion of your personal data or limitation of its processing. You may also object to data processing if you believe that we process your personal data in violation of the law, file a complaint with a supervisory authority such as the Office for Personal Data Protection or revoke your consent at any time.
Individual rights can be claimed by sending an email to the Personal Data Protection Coordinator referred to in point 2. You can also claim your rights by writing to our mailing address in item 1.
All statements as regards your rights will be provided by the coordinator free of charge.
Your request may be rejected if it is unreasonable or disproportionate. A request is considered unreasonable if it is an objection to processing based on a legitimate interest of the Company which does not indicate the reasons why your interest outweighs the legitimate interest of the Company. A request is considered disproportionate if it is repeated or if there are a disproportionately large number of requests from the same applicant.
We will provide you with a reply and, if necessary, information about the measures taken as soon as possible, but not later than within one month. We are entitled to extend the deadline by two months if necessary in view of the complexity and the number of requests. We will inform you of any extension and the reasons for it.
If you have any additional questions about the above information regarding your personal data, please contact our Personal Data Protection Coordinator using the above contact information.