Protection of personal data
INFORMED CONSENT TO THE PROCESSING OF PERSONAL DATA FOR BUSINESS PARTNERS PURSUANT TO THE GENERAL DATA PROTECTION REGULATION (GDPR)
The APOGEO Group (APOGEO, s.r.o., APOGEO Esteem, a.s., APOGEO Audit, s.r.o., APOGEO Group, SE, APOGEO Transactions, s.r.o.) acts as the controller of personal data.
Contact person:
Petr Rada
phone: +420 267 997 766
email: petr.rada@apogeo.cz
The controller also provides information on the processing of personal data
(1) Purpose of processing: The data controller will process the data subject’s personal data for the purpose of sending APOGEO Group news and commercial communications in electronic form by email. The data subject has the right to remove their email from the database at any time by clicking the “Unsubscribe” button in the footer of each individual email. Further rights of data subjects are set out in the information below.
(2) Legal basis: – Data subject’s consent: for the purpose of sending news and commercial communications by email – Legitimate interest: for the purpose of sending news and commercial communications to existing clients about products and services related to those ordered by the client in the past, by email.
(3) Personal data processors: The personal data that is obtained will not be provided to other external processors for further processing.
(4) Other recipients: As a result of a legitimate interest or the execution of a contract, the data controller may make the personal data that is provided available to contractual partners in the fields of IT services and technologies, marketing services, or consulting services authorized by the data controller. The specific data categories will be communicated to data subjects upon request.
(5) Other third parties: For the purposes of state supervision, prevention, investigation, the detection or prosecution of criminal offences, or the execution of criminal penalties, including protection against threats to public security and its prevention, the data controller shall provide the personal data to the competent public authorities or other entities authorized to process personal data.
(6) Period of personal data storage: The data controller stores personal data in accordance with the legal archiving obligation.
(7) Automated processing of personal data: Personal data is not subject to automated processing by the company.
(8) Rights of the data subject:
Right to access personal data – the data subject has the right to access the personal data concerning them; the data controller is obligated to provide a copy of the processed personal data.
Right to correction and addition of personal data – the data subject has the right to have the data controller correct or add to inaccurate personal data concerning them without undue delay.
Right to erasure – the data subject has the right to have the data controller erase personal data concerning them without undue delay, if:
– personal data is not needed for the purposes for which it was processed
– the data subject withdraws their consent to the processing of their personal data
– the data subject objects to the processing
– personal data has been processed illegally
– the storage of personal data is not mandated by other relevant legal regulations – it is not a matter of public interest with regard to public health, archiving, scientific or historical research, statistics
– it does not relate to the execution or defence of legal claims.
Right to restrict the processing – in justified cases, the data subject has the right to have the data controller restrict the processing of personal data.
Right to the portability of personal data – the data subject has the right to obtain personal data related to them in a structured, commonly used, and machine-readable format, and the right to transfer this data to another controller.
Automated individual decision-making – the subject has the right not to be subjected to any decision based solely on automated processing, including profiling, unless this is necessary for the fulfilment of the contract.
Right to lodge a complaint with the supervisory authority – the data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection.
Right to object – the data subject has the right to object to the processing of personal data; the data controller may not process the data further in unjustified cases. An objection against processing for direct management purposes can be made at any time.
(9) Withholding of personal data: If the data subject is interested in receiving information, news, and commercial communications by email, they must provide their personal data. Withholding the required personal data makes sending such emails impossible.