Mgr. Daniela Holá, ID No.: 10877321 (hereinafter referred to as the ‘controller’) informs the inquirer, as the data subject (hereinafter referred to as the ‘inquirer’), in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the ‘GDPR’), about the processing of his/her personal data:
1. Purpose of personal data processing
Personal data are obtained directly from the inquirer at the moment the inquiry is submitted. The controller undertakes to process accurate personal data solely for the purposes of the controller’s legitimate interests [in accordance with Article 6(1)(f) of the GDPR]. The controller processes the inquirer’s personal data for the purpose of handling the inquiry submitted by the inquirer. The reason for providing personal data to the controller is the ability to send the inquirer a response to their inquiry, which would not be possible without providing such data. Failure to provide personal data may result in the controller being unable to send a response. The controller undertakes not to process personal data in a manner incompatible with the purpose stated above.
2. Scope of personal data
The controller undertakes to process personal data only to the extent necessary for the purpose for which they are processed. The scope of personal data provided on the basis of consent is as follows:
- name and surname
- email address
- telephone number
(hereinafter referred to as the “personal data”).
3. Categories of personal data recipients and transfer of personal data
The controller declares that personal data will only be made accessible to the controller’s relevant employees who are bound by a duty of confidentiality regarding such data, as well as regarding security measures, the disclosure of which would compromise the security of this personal data. The controller also declares that it will not transfer the personal data to third countries or to any international organization.
4. Automated decision-making
There will be no automated decision-making or profiling pursuant to Article 22 of the GDPR when processing the inquirer’s personal data.
5. Rights of the data subject
The controller informs the inquirer about the rights arising from the GDPR, in particular:
- the right of access to personal data (the inquirer has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed pursuant to Article 15 of the GDPR)
- the right to rectification (the inquirer has the right to have the controller rectify inaccurate personal data concerning him or her without undue delay, as well as the right to have incomplete personal data completed pursuant to Article 16 of the GDPR)
- the right to erasure (the inquirer has the right to have the controller erase personal data concerning him or her without undue delay if one of the grounds set out in Article 17 of the GDPR applies)
- the right to restriction of processing (the inquirer has the right to have the controller restrict processing in the cases specified in Article 18 of the GDPR)
- the right to object (the inquirer has the right, on grounds relating to his or her particular situation, to object at any time to the processing of personal data concerning him or her based on Article 6(1)(e) or (f) of the GDPR, including profiling based on these provisions, pursuant to Article 21 of the GDPR)
- the right not to be subject to a decision based solely on automated processing (the inquirer has the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her pursuant to Article 22 of the GDPR)
- the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection, Pplk. Sochora 727/27, 170 00 Prague 7
6. Data Protection Officer
In accordance with Article 30(1)(a) of the GDPR, the controller provides the inquirer with the contact details of the Data Protection Officer. Any questions, suggestions, or other submissions related to the processing of your personal data may be directed to the Data Protection Officer – Mgr. Daniela Holá, email address: info@holalegal.cz.
7. Conclusion
The inquirer hereby declares that they have been duly informed by the controller about the processing of personal data in accordance with Article 13 of the GDPR and that the personal data provided are accurate and truthful.