Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
This document sets out the principles and procedures for processing personal data and rights in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the Regulation), and Act No. 480/2004 Coll., on certain information society services, as amended.
All information about an identified or identifiable user of the NaTreku.cz website. An identifiable user of the NaTreku.cz website is a natural person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier or to one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
Karel Souček, VAT.: 757 202 13 (hereinafter referred to as the "Controller"), the entity that determines the purpose and means of processing personal data, carries out the processing and is responsible for it. The Controller may authorize or entrust a processor with the processing of personal data, unless a specific law provides otherwise;
Any entity that, on the basis of a specific law or on behalf of the Controller, processes personal data pursuant to the Act and the Regulation, on the basis of a concluded contract for the processing of personal data;
The natural person (including self-employed persons) to whom the personal data relate;
The IP address and the type of web browser are processed in order to display the website correctly by evaluating user data, for example by testing software and web changes. The IP address is also processed for the purpose of preventing and protecting servers from cyber attacks. IP addresses are collected by Google Tag Manager, which anonymises them and passes them on to Google Analytics. From there, it is possible to track the behaviour of a website visitor, but it is not possible to trace a specific person
The NaTreku.cz website may contain links to other companies' websites. If a data subject clicks on a link to any such website, the data protection of personal data on such websites may be governed by their own privacy policies, and the Controller cannot be held responsible for the compliance of the third party operators of such other websites with the law. When visiting third-party websites and before providing your personal data on third-party websites, please check their privacy policies.
The controller processes personal data in the spirit of the following principles arising from the Regulation:
List of communication channels that can be used to receive and respond to a request from a NaTreku.cz user:
The administrator obtains personal data of users of the NaTreku.cz website in the following cases:
The Controller and its contractual processors process the following personal data or categories of personal data in relation to the relevant legal title and purpose of processing:
The administrator processes personal data of users of the NaTreku.cz website on the basis of the following legal grounds:
Personal data will be processed when registering a new user for the purpose of identifying the user and for the purpose of recording and future possible exercise and defence of the rights and obligations of the Administrator. Such processing is permitted by Article 6(1)(b) and (f) of the Regulation.
Personal data will be processed for a period of 5 years, unless another legal regulation requires the retention of contractual documentation for a longer period.
The controller processes the personal data of data subjects for the purposes of subscribing to the newsletter or by sending a contact form. The user of the NaTreku.cz website by these actions (subscribing to the newsletter, sending a contact form) grants the Administrator consent to the processing of personal data - e-mail address, first and last name. The personal data will be processed for a period of 3 years from the date of consent, unless the user actively extends this period.
Personal data are processed both automatically and manually and may be made available to processors with whom the Controller has concluded a contract for the processing of personal data and, where applicable, to another person in accordance with the Act and the Regulation.
The processing of personal data may be carried out for the Controller by processors exclusively on the basis of a contract for the processing of personal data, i.e. with guarantees of the organisational and technical security of the data and with a definition of the purpose of the processing, while the processors may not use the data for other purposes. The processing of personal data is carried out by the Controller, but the following processors may also process personal data for the Controller:
Ing. Vítězslav Hekerle, VAT 04702191
Google Czech Republic s.r.o., VAT 27604977
The administrator works with NaTreku.cz user data in other processing systems and their protection is secured by unique usernames and passwords. Usernames and passwords are stored on the Administrator's personal computer, access to which requires a username and password.
The administrator shall cease handling the data of the user of the NaTreku.cz website after the termination of the contractual relationship, after the expiry of the period specified in the consent to the processing of personal data or after the legal grounds for archiving personal data have passed.
In the event of a data breach or data leak, the Administrator shall immediately notify the users of the NaTreku.cz website and the Office for Personal Data Protection within 24 hours.
Brno, 25 May 2018