“LA LINEA s.r.o.”, ID: 49282000 with its registered office at Elišky Krásnohorské 1585, Dvůr Králové n. L., Postal Code 54401, hereinafter referred to as the “Company” is aware of the importance of personal data protection for privacy of the people and therefore has adopted the following Personal Data Protection Policy:
It undertakes to comply with regulations in the following fields – EU Regulation 2016/679, hereinafter referred to as “the GDPR Regulation,” the Data Protection Act 101/2000 as amended and to respond to other legislation in this field.
For the proper performance of the regulations, the company formed a new function - the Personal Data Protection Officer.
The company acquires the personal data of these groups of Data Subjects directly from Data Subjects, it does not obtain them from other sources.
1. Contact Details
Personal Data Administrator is “LA LINEA s.r.o.”, address: Elišky Krásnohorské 1585, Dvůr Králové n. L., POSTAL CODE 54401.
The contact details of the person responsible for the personal data protection are: tomas.dolezal@lalinea.cz, Phone: 499 311 128
2. Table of Personal Data Processing
| Name of Processing
|
Purpose of Processing
|
Personal Data Categories
|
Legal title
|
Specification of legal title
|
Storage Period
|
Other recipients
|
Data source
|
|
Order details
|
Ensuring the delivery of the order
|
Contact and billing information
|
Performance of the contract
|
|
For the duration of the contract
|
None
|
Data Subject
|
|
Complaints
|
For possible claim
|
Billing information
|
Performance of the contract
|
|
For the duration of the claim period
|
None
|
Data Subject
|
|
Billing
|
Ensuring billing
|
Billing information
|
Legal duty
|
Act on VAT
|
10 years
|
Control from Financial Office
|
Data Subject
|
|
Sending offers
|
Information on new goods and services
|
Email address
|
Legitimate interest
|
|
Upon filing an objection
|
None
|
Data Subject
|
3. Explanation of Table and Processing
Legal titles - the legal justifications for processing and defined in the GDPR, Articles 6 and 9.
Retention period - means how long we are authorized or required to process and store your data.
Other recipients - here we specify the other recipients we provide the data to. If “No one” is specified, then it means that we do not pass it on to anyone.
Data Source - here we specify from whom we receive the personal data. If “Data Subject” is specified then it means that we obtained it directly from the Data Subject.
We do not intend to transfer your personal data outside the EU or any international organization.
In cases where the processing is based on the legal title “Conclusion or Performance of a Contract,” we need your personal data for the conclusion of the contract and its subsequent performance, without which it is not possible to conclude the contract.
In cases where the processing is based on the legal title “Legal Obligation”, we need to process your personal data on the basis of legal requirements within the time specified by the law, and we must not limit or delete this processing during this period.
We will only process your personal data for the purposes listed in the table.
4. Description of the Rights of Data Subjects
As the data subject (the natural person about whom the data are processed) you have the following rights to your personal data:
| Right |
Specification |
|
Request an extract
|
This is an extract of the data we have about you, the so-called right of access.
The extract will be in the format according to our capabilities. You do not have the right to request an extract in your specified format.
Exceptions where we are not allowed to issue an extract are cases involving documents whose publication would jeopardize the rights and freedoms of others. These are the personal data of other persons, the protection of business secrets, intellectual property, etc.
|
|
Request of correction
|
If you find that we are conducting inaccurate, outdated or incomplete data about you, request a correction or addition.
|
|
Request deletion
|
We need to delete in cases where we have stored personal data after a specified retention period or have no valid legal title.
We may not legally delete in cases where the processing is performed under the title of Performance of a Contract or a Legal Obligation.
|
|
Require restrictions on processing
|
This concerns processing under the title of legitimate interest.
The limitation on processing will occur in the case of an objection and the restriction will be maintained during the assessment of the objection.
|
|
Right to object to processing
|
Objection may be made in cases where the processing is performed under the title of legitimate interest.
The objection to the sending of business communications will always be acknowledged.
In cases where your name or other contact information is given in order to provide services, the possibility of abuse is almost impossible and it is necessary for these activities. Therefore, we consider this legitimate interest to be prevalent and we do not recognize objections.
|
|
Revoke consent to processing
|
This is possible in cases where the processing is performed on the basis of consent. If you give consent to the processing and revoke it, the processing will be terminated.
|
|
Require an extract in a portable format
|
You can request an extract in a portable format only for processing based on legal titles - performance of contract and consent.
You may request an extract only of the data you have given us and which we do in electronic form and you do not have the right to request the specific format. We will pass it to you in an xls format.
|
|
Objection to automated decision making
|
We perform no processing based on automated decision making.
|
|
Submit a grievance to the Supervisory Authority
|
In case we do not respond to your request within 1 month, you can file a grievance with the Office of Personal Data Protection.
|
5. Method of Exercising Rights
If you wish to exercise any of these rights, you can apply in the following method:
Once you have verified your identity according to your ID or passport, the request will be filed and a settlement deadline will be sent. Without a verified identification it is not possible to accept the request.
You will be given a written Notification on the Results of the Request Application and related materials upon the re-verification of your identity.
For more than one copy, we are entitled to charge a fee corresponding to the administrative costs.
Actions related to the exercise of the rights of data subjects are performed free of charge.
However, if the requests are determined to be manifestly unreasonable or disproportionate, mainly because they are repeated, we can:
-
impose a reasonable fee for administrative costs
-
refuse to comply with the request.
To submit a request electronically:
-
send it by e-mail to: tomas.dolezal@lalinea.cz with a valid electronic signature; without this confirmation of identity the request cannot be recognized.
Fill in the following:
-
Identification data - name, surname, date of birth
-
Exercising of the right you are requesting - see chapter Description of the Rights of Data Subjects
-
Specify the request - for example, in the case of correcting administered data
-
Phone - in the case of specification and agreeing on the next steps
In case you have any doubts as to your identity, we are authorized to ask you for additional information to confirm your identity.
