Personal data processing policy applicable from 1 November 2022

In the case of processing of personal data of a natural person which is necessary for the performance of a contract by the controller or for the implementation of measures taken before the conclusion of the contract and which is necessary for the performance of the controller's public law obligations.

1. Identity and contact details of the controller

1.1 The data controller is the company PINYA s.r.o., with registered office at Tuřanka 1222/115, 602 00 Brno - Slatina, identification number 293 129 22, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 73455.

1.2 The contact details of the administrator are as follows: delivery address Tuřanka 1222/115, 602 00 Brno - Slatina, e-mail address gdpr@pinya.cz , telephone +420 734 558 090.

1.3 The administrator has not appointed a data protection officer.

2. Legal framework

2.1 The legal basis for the processing of your personal data is that this processing is necessary for:

a. the performance of a contract between you and the controller or for the performance of a measure by the controller prior to the conclusion of such contract within the meaning of Article 6(1)(b) of Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "Regulation");

b. compliance with the legal obligations to which the controller is subject, within the meaning of Article 6(1)(c) of the Regulation, in particular compliance with the obligations imposed on the controller by generally binding legal provisions, in particular Act No 235/2004 Coll, on value added tax, as amended, Act No 586/1992 Coll., on income taxes, as amended, Act No 262/2006 Coll., Labour Code, as amended, and Act No 563/1991 Coll., on accounting, as amended.

3. Purpose of the processing of personal data

3.1 The purpose of the processing of your personal data is the performance of a contract between you and the controller or the performance of measures by the controller prior to the conclusion of such a contract and the performance of related public law obligations by the controller.

3.2 There is no automatic individual decision-making by the controller within the meaning of Article 22 of the Regulation.

4. Period of storage of personal data

4.1 Your personal data will be processed for the duration of the contract negotiations and, in the case of the conclusion of a contract, for the duration of the effects of the rights and obligations under the contract, as well as for the period necessary for archiving purposes in accordance with the relevant generally binding legal regulations, but no longer than the period specified by generally binding legal regulations.

5. Other recipients of personal data

5.1 The other recipients of your personal data will be persons providing accounting services for the controller, IT hosting and software providers, providers of postal and delivery services, other third parties who perform activities as a processor of personal data for the controller, with whom the controller has concluded a corresponding contract.

5.2 In addition, the recipients of your personal data for the performance of legal obligations may be tax authorities or other competent authorities in cases where the controller is required to do so by generally binding legal regulations.

5.3 The controller does not intend to transfer your personal data to a third country (a country outside the EU) or an international organisation.

6. Your rights

6.1 Under the conditions set out in the Regulation, you have the right to request access to your personal data, the right to rectification or erasure of your personal data or restriction of their processing, the right to object to the processing of your personal data, and the right to the transferring of your personal data.

6.2 If you believe that the processing of your personal data has infringed or is infringing the Regulation, you have the right, among other things, to lodge a complaint with a supervisory authority.

6.3 You are under no obligation to provide personal data. The provision of your personal data is a necessary requirement for the negotiation, conclusion and performance of the contract and without the provision of your personal data the contract cannot be concluded or performed by the controller.