Privacy Policy

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

This document sets out the principles and procedures for processing personal data and rights in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the Regulation), and Act No. 480/2004 Coll., on certain information society services, as amended.

1. Concepts

Personal data

All information about an identified or identifiable user of the NaTreku.cz website. An identifiable user of the NaTreku.cz website is a natural person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier or to one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
 

Administrator

Karel Souček, VAT.: 757 202 13 (hereinafter referred to as the "Controller"), the entity that determines the purpose and means of processing personal data, carries out the processing and is responsible for it. The Controller may authorize or entrust a processor with the processing of personal data, unless a specific law provides otherwise;
 

Processor

Any entity that, on the basis of a specific law or on behalf of the Controller, processes personal data pursuant to the Act and the Regulation, on the basis of a concluded contract for the processing of personal data;
 

Data subject (hereinafter referred to as "user")

The natural person (including self-employed persons) to whom the personal data relate;
 

Cookies

NaTreku.cz uses cookies to ensure optimal technical and user experience. Cookies are small "files" that are stored on your hard drive. This leads to easier navigation and ensures a high level of user experience of the website. Cookies can be used, among other things, to determine whether you have already visited our site from your computer.
 

IP addresses and web browser type

The IP address and the type of web browser are processed in order to display the website correctly by evaluating user data, for example by testing software and web changes. The IP address is also processed for the purpose of preventing and protecting servers from cyber attacks. IP addresses are collected by Google Tag Manager, which anonymises them and passes them on to Google Analytics. From there, it is possible to track the behaviour of a website visitor, but it is not possible to trace a specific person

.

Processing of personal data by third parties

The NaTreku.cz website may contain links to other companies' websites. If a data subject clicks on a link to any such website, the data protection of personal data on such websites may be governed by their own privacy policies, and the Controller cannot be held responsible for the compliance of the third party operators of such other websites with the law. When visiting third-party websites and before providing your personal data on third-party websites, please check their privacy policies.
 

2. Principle of personal data processing

The controller processes personal data in the spirit of the following principles arising from the Regulation:

• legality, fairness and transparency of processing;
• purpose limitation - collection only for specific, explicit and legitimate purposes;
• data minimisation - proportionality, relevance and limitation of processing to what is strictly necessary in relation to the purpose;
• accuracy and timeliness - the controller shall take all reasonable measures to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are erased or rectified without delay;
• limited storage - personal data shall be stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed, subject to the implementation of appropriate technical and organisational measures required by existing legislation to safeguard the rights and freedoms of the data subject;
• integrity and confidentiality - personal data are processed in a manner that ensures their adequate security, including protection by appropriate technical or organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage.

3. NaTreku.cz user rights

The user has the right to the following information:

• information on the purposes of the processing,
• information about the personal data processed,
• information on processors,
• information on the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period,
• a specification of the legitimate interest of the controller or of the third party where the processing is based on this ground,
• information about the source of the personal data.
   

According to the Regulation, the user of the NaTreku.cz website also has the right to:

• request information from the Controller as to what personal data it processes,
• request access to this data and have it updated or corrected, or request a restriction on processing,
• request the deletion of such personal data,
• in the case of processing carried out on the basis of a legitimate interest, the Controller may object to such processing,
• the right to data portability and the right to request a copy of the personal data processed,
• lodge a complaint with the Data Protection Authority and the right to effective judicial protection if he or she considers that his or her rights under the Regulation have been infringed as a result of the processing of his or her personal data in breach of the Regulation.
   

Possibilities of exercising the right of a user of the NaTreku.cz website

List of communication channels that can be used to receive and respond to a request from a NaTreku.cz user:

• by e-mail: info@natreku.cz

4. Sources of personal data

The administrator obtains personal data of users of the NaTreku.cz website in the following cases:

• User registration - legitimate interest, where the user enters their email and name,
• Newsletter subscription - by subscribing to the newsletter, the user agrees to the following information about the processing of personal data, the user only enters his/her e-mail.
• Submitting a contact form - by submitting a contact form, the user agrees to the following information about the processing of personal data, where the user enters their email and name.

5. Scope of processing

The Controller and its contractual processors process the following personal data or categories of personal data in relation to the relevant legal title and purpose of processing:

• name, surname, e-mail,
• other electronic data: IP address, cookies, authentication certificates, social media identifiers,
• hereinafter referred to as "Personal Data".

6. Processing of personal data

The administrator processes personal data of users of the NaTreku.cz website on the basis of the following legal grounds:

• legitimate interest of the controller (user registration),
• valid consent to the processing of personal data (submission of the contact form, subscription to the newsletter).
   

a) Legitimate interest of the administrator

Personal data will be processed when registering a new user for the purpose of identifying the user and for the purpose of recording and future possible exercise and defence of the rights and obligations of the Administrator. Such processing is permitted by Article 6(1)(b) and (f) of the Regulation.

Personal data will be processed for a period of 5 years, unless another legal regulation requires the retention of contractual documentation for a longer period.

b) Consent to the processing of personal data

The controller processes the personal data of data subjects for the purposes of subscribing to the newsletter or by sending a contact form. The user of the NaTreku.cz website by these actions (subscribing to the newsletter, sending a contact form) grants the Administrator consent to the processing of personal data - e-mail address, first and last name. The personal data will be processed for a period of 3 years from the date of consent, unless the user actively extends this period.

.

7. Processing of personal data

Personal data are processed both automatically and manually and may be made available to processors with whom the Controller has concluded a contract for the processing of personal data and, where applicable, to another person in accordance with the Act and the Regulation.

The processing of personal data may be carried out for the Controller by processors exclusively on the basis of a contract for the processing of personal data, i.e. with guarantees of the organisational and technical security of the data and with a definition of the purpose of the processing, while the processors may not use the data for other purposes. The processing of personal data is carried out by the Controller, but the following processors may also process personal data for the Controller:

Ing. Vítězslav Hekerle, VAT 04702191

Google Czech Republic s.r.o., VAT 27604977

8. Data protection

The administrator works with NaTreku.cz user data in other processing systems and their protection is secured by unique usernames and passwords. Usernames and passwords are stored on the Administrator's personal computer, access to which requires a username and password.

9. Termination of loading

The administrator shall cease handling the data of the user of the NaTreku.cz website after the termination of the contractual relationship, after the expiry of the period specified in the consent to the processing of personal data or after the legal grounds for archiving personal data have passed.

10. Security breach

In the event of a data breach or data leak, the Administrator shall immediately notify the users of the NaTreku.cz website and the Office for Personal Data Protection within 24 hours.

Brno, 25 May 2018