GDPR
Identification of the data controller:
SHD Real Estate s.r.o., ID No.: 116 62 514, File No.: C 352 526, registered at the Municipal Court in Prague, Registered office: Prague 5, Bucharova 2641/14, Postal code 15800
(Hereinafter referred to as the "Company")
Personal data protection and processing (GDPR regulation)
a) In accordance with the relevant legislation, in particular the General Data Protection Regulation No. 2016/679 (GDPR) , and on the free movement of such data and repealing Directive 95/46/EC (GDPR), and Act No. 101/2000 Coll., on the protection of personal data and on the amendment of other laws, the Company processes personal data to the extent that the relevant data subject has provided it to the Company in connection with the conclusion of a mutual contractual or other legal relationship, or which the Company has collected in another way and processes it in accordance with the law and to fulfil the Company's legal obligations.
b) The Company obtains personal data directly from the data subjects (provision of data in the preparation of contracts and related documents and in connection with the execution of orders, contracts, in particular in connection with the construction and sale of apartments, houses and plots of land), by personal contact, by telephone, in writing, by e-mail, by SMS or by other means of communication, or from publicly accessible registers, lists and records (e.g. commercial register, trade register, land register, etc.).
c) Personal data means: Identification and address data used to uniquely and unmistakably identify the data subject - name, surname, title, date of birth, birth number, permanent address, marital status, citizenship, identification card number, ID number, VAT number, registered office; contact data - contact address, telephone number, e-mail address; descriptive data - bank connection; other data necessary for the performance of the contract - information on the services ordered and provided, photographs showing the data subject, data on the course of the contractual relationship, including mutual correspondence and communication.
d) The processing and management of personal data is carried out by the Company at its registered office. The processing of personal data takes place by means of computer technology or, in the case of personal data in paper form, manually, in compliance with all security principles for the management and processing of personal data. To this end, the Company has adopted technical and organisational measures to ensure the protection of personal data, in particular measures to prevent unauthorised or accidental access to, alteration, destruction or loss of personal data, unauthorised transfers, unauthorised processing and other misuse of personal data.
e) The processing and management of personal data is carried out by the Company mainly for the purpose of concluding a contract and fulfilling contractual obligations and is primarily processed for the purpose of mutual communication in connection with the interest in the offered apartments, family houses and plots, the specific request of the data subject and accompanying services, e.g. informing about marketing and discount promotions of the Company and for the purpose of concluding a contract, or order and drawing up related documentation. Furthermore, the above specified personal data is used to prepare the necessary contractual documentation and is processed for the duration of the mutual contractual relationship. After the end of the contractual relationship, certain data are then stored for the purposes of fulfilling the Company's legal obligations or for the purposes of the Company's legitimate interest, for the fulfilment of obligations under accounting, tax and other legal regulations, in particular in the field of accounting and tax law, and obligations under Act No. 253/2008 Coll., on certain measures for the legalization of the proceeds of crime and the financing of terrorism. The period of time for which the data is processed is determined directly by the relevant legal regulations that impose an obligation on the Company to process the data.
f) The legitimate interest for which personal data from contracts and mutual communications are processed by the Company is the protection and proof of the Company's rights and legal claims, in particular from the concluded contracts or the damage caused. For this purpose, personal data is processed for a period of 4 years from the end of the contractual cooperation or from the last mutual contact if no contract has been concluded. The length of this period is determined in relation to limitation periods, taking into account that the Company may not become aware of any claim brought before a court immediately at the time of its assertion by the other party.
g) Disclosure of personal data to others. To ensure contractual or legal obligations, the Company cooperates with other entities to whom personal data must be disclosed. These include, but are not limited to, entities that provide information technology services, IT database services, accounting services, tax advisory services, legal services to the Company. The Company is responsible for ensuring that the recipients of the personal data do not misuse the personal data disclosed to them and that integrity and confidentiality obligations are negotiated with them in accordance with applicable law. Personal data will also be disclosed to the relevant administrative authorities if the Company is obliged to do so by law.
Information on other data protection rights:
h) Right of access to personal data. This is the right to confirm whether or not the Company processes the personal data of the data subject. If so, the data subject has the right to access the processed personal data and information about its processing.
i) Right to rectification of personal data. This is the right to rectify inaccurate personal data or to complete incomplete personal data of the data subject.
j) Right to erasure of personal data. In the cases provided for by law or referred to in Article 17 of the GDPR, the data subject has the right to request that the Company erase his or her personal data without undue delay.
k) Right to restriction of processing of personal data. In the cases referred to in Article 18 of the GDPR, the data subject has the right to request that the Company restrict the processing of his or her personal data.
l) Right to the portability of personal data. Under the conditions set out in Article 20 of the GDPR, the data subject has the right to obtain his or her personal data and transfer it to another controller. If technically feasible, he/she has the right to request the transfer directly to another controller.
m) Right to object. In cases where the Company processes personal data for legitimate interest purposes, the data subject has the right to object to such processing and then the Company will no longer process the personal data unless its legitimate interest or right overrides the interests or rights and freedoms of the data subject. If the legitimate interest is direct marketing, then the objection shall always result in the termination of further processing of the personal data for the purposes of the Company's marketing and commercial communications.
n) Right to lodge a complaint with a supervisory authority. Any data subject who discovers or believes that the Company is carrying out processing of his or her personal data which is contrary to the protection of the private and personal life of the data subject or contrary to the law, in particular if the personal data is inaccurate with regard to the purpose of its processing, shall be entitled to: request an explanation from the Company; demand that the Company remedy the situation thus created, which may in particular involve the rectification, completion or erasure of personal data; lodge a complaint with the Data Protection Authority; bring a civil action in court and seek judicial protection.
More information about your rights is available on the website of the Data Protection Authority (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276).
For communications with the Company regarding data protection and data processing (GDPR regulation), please contact: