Data Controller:
KORCHEM s.r.o.
Blučina No. 703 664 56 Blučina
IČO: 277 36 253
Company registered in KS in Brno, section C, insert 55573
(hereinafter referred to as the "controller")
The controller processes personal data of natural persons – customers/business partners in accordance with legal regulations, especially Act No. 110/2019 Coll., on the processing of personal data, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR Regulation").
The controller strives for the greatest possible transparency in relation to the processing of personal data of its customers and business partners; therefore, it provides the basic information and rights arising from the GDPR Regulation regarding the processing of personal data below.
The source of personal data of natural persons who are employees, members of bodies, or cooperating persons of customers and business partners of the controller (hereinafter also referred to as "data subjects") are mainly customers and business partners who provide the controller with data during negotiations on the conclusion or fulfillment of contractual relationships, during communication within the fulfillment of contractual relationships, or during visits to the controller's premises.
Providing personal data of data subjects is always voluntary; however, without providing personal data, some performances and services cannot be provided by the controller.
The legal basis for processing personal data of data subjects is always one of the following titles:
The purpose for which personal data is processed is the business activity of the controller.
The scope of persons to whom the controller provides personal data of data subjects derives from the above. Personal data may be processed for the purposes described above by the controller and its employees, as well as by its contractual processors, based on contracts for the processing of personal data concluded in accordance with relevant legal regulations. The controller uses external service providers who provide mainly IT, legal, and tax consultancy or web hosting. For the purpose of fulfilling their obligations, the controller must provide them with and/or they process certain personal data of data subjects. The controller does not transfer personal data of business partners outside the European Economic Area.
The controller and its contractual processors, based on the relevant legal title and purpose of processing, process the following categories of personal data:
Personal data is processed for the duration of contractual relationships concluded within the business activity of the controller, and after their termination, it will be handled according to valid legal regulations, especially Act No. 499/2004 Coll., on archives and file service and on the amendment of some laws, as amended, GDPR Regulation and AML Act, i.e., for 10 years, unless the legal regulations stipulate a different period. Personal data of data subjects is processed both automatically and manually. To ensure the confidentiality, integrity, and availability of personal data of data subjects, the controller uses modern IT security systems and maintains appropriate technical and organizational security measures against unlawful or unauthorized processing of personal data and against accidental loss or damage to personal data. Access to personal data is only allowed to persons who need it to fulfill their work duties and are bound by legal or contractual confidentiality obligations.
The basic rights of data subjects under the GDPR Regulation are as follows:
Right of access to personal data, i.e., the right to request the data controller to confirm whether personal data is being processed. If so, the data subject, in particular, has the right to request information on the categories of personal data being processed, for what purpose, to which third parties the personal data will be disclosed, the planned period for which the personal data will be stored, whether the data subject has the right to request the deletion or correction of personal data or the restriction of their processing or to object to such processing, whether they have the right to lodge a complaint with a supervisory authority, etc.
Right to rectification of personal data, i.e., the right to request the controller to correct or complete personal data if they are inaccurate or incomplete.
Right to erasure of personal data, which represents the obligation of the controller to delete personal data concerning the data subject if certain conditions are met and if the data subject requests it.
Right to restrict the processing of personal data, i.e., the right to request the controller to temporarily restrict the processing of personal data in certain cases.
Right to object, i.e., the right to object at any time to the processing of personal data, provided that the personal data is processed in the public interest or based on the legitimate interest of the controller. If an objection is raised, the controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing.
Right to data portability, i.e., the right to request the controller to provide personal data that has been provided to the controller, in a commonly used and machine-readable format. The data subject can then transfer this data to another controller or (if technically feasible) request the controllers to transfer it among themselves.
If you have any questions regarding the processing of personal data or if you wish to exercise any of the above rights, you can contact us at the email address: info@korchem.cz or at our correspondence address: Mlýnská 668, Křenovice u Slavkova.
More information on the rights of data subjects can be found on the official website of the Office for Personal Data Protection, especially at: https://www.uoou.cz.
If, despite all the above, you are dissatisfied with the processing of personal data by the controller, you can address your complaint to the Office for Personal Data Protection.