How long do we retain your personal data?
Your personal data is retained only over a necessary period that we need for the fulfilment of purposes specified in these Principles, or where applicable to comply with duties imposed on us by law.
The ultimate period of personal data processing that we apply to you in the KUBOUŠEK Group is 10 years as of the date of termination of the legal relationship between you and any of the KUBOUŠEK Group companies, or where applicable 10 years as of the end of the taxable period in which the performance was executed. The duty to retain also identification and transaction details is imposed on us by the Accounting Act, Value Added Tax Act and other applicable accounting and tax regulations. Your personal data is also archived for a period of 10 years for the reason of our legitimate interests, in particular in the case that we have to submit evidence in a lawsuit, namely with regard to statutory limitation of time for action pursuant to the Civil Code.
Data that we process based on your consent is retained for the period for which your consent was validly given. In the case that you gave us your consent to data processing for marketing purposes, we process your personal data over the period stated in a specific consent, however, over the period of our contractual relationship and 5 years after its termination. If you do not become our customer, i.e. no contractual relationship is entered into, we process your data over a period stated in a specific consent, however no later than over a period of 5 years as of the date on which you gave us your consent. For the avoidance of any doubt, the consent itself and amendment to or withdrawal of the consent are retained on the grounds of our legitimate interests over the entire period of the consent and 10 years after its validity expired.
Are you obliged to submit your personal data to us?
The submission of data that you disclose to us with your consent is voluntary. The submission of other data is requested by us as its processing is necessary for entering into or performing under a contract, fulfilment of our legal duties or protection of our legitimate interests. If you do not submit such data to us, we cannot conclude the respective contract with you or we cannot provide you with the respective product or service.
If we ask for your consent to your personal data processing, such a request for your consent, or where applicable the consent that we will provide you with for your reference and signature or a different approval, will be clearly formulated to provide you with a reasonable basis for decision-making. You may withdraw your consent at any time, namely via the contact details provided for this purpose at the end of these Principles.
Your personal data will be retained only over a period that is necessary for the fulfilment of the purposes described in these Principles or purposes of which you were informed in a different way. This means that as soon as you give us your consent to your personal data processing, we will retain your data in accordance with your consent and/or until you withdraw your consent. However, even in the case of the withdrawal of your consent, we may retain some of your personal data over a period that is necessary for the fulfilment of our statutory duties and for the purposes of our defence in possible legal disputes.
We will not share your personal data with third parties for the marketing purposes of such third parties, unless we were given your consent to. In the case that you gave us such a consent but later change your mind and do not want to be delivered marketing materials from a third party, please approach directly the third party.
Personal data resources
Depending on situation, we process data that was acquired from you within the KUBOUŠEK Group, data from publicly available resources and registers as well as data acquired from third parties (for example our business partners).
Disclosure and submission of personal data
Your personal data is primarily administered within the framework of the KUBOUŠEK Group.
Sharing within the KUBOUŠEK Group
Your identification and contact details, information on products and services and information resulting from your communication and interaction are shared within the KUBOUŠEK Group in particular for administrative purposes and also to improve the quality of our service where for example one company of the KUBOUŠEK Group that you approach will submit your personal data to another company within the KUBOUŠEK Group that specializes in the area of your interest. This is done for the purposes of the KUBOUŠEK Group's legitimate interests and for the purposes of entering into and performing under a contract with you. In some cases, in particular of administrative nature, other companies of the KUBOUŠEK Group have the position of processors. However, in other cases also other companies are in the position of controllers (e.g. when the data is handed over to a different company for the purposes of a contract conclusion and the provision of products and services).
If the customer gave us his/her consent to using the data in the KUBOUŠEK Group, we can share your data within the Group for marketing purposes to be able to provide easier and faster service of better quality across the KUBOUŠEK Group. Thanks to the consent we are able to take your preferences into account and you acquire access to much a more extensive spectrum of services that are more relevant from your point of view. The consent applies to companies that are members of the KUBOUŠEK Group. The consent is strictly voluntary and you may withdraw it or only restrict it with respect to individual companies in whose offers you are not interested at any time.
Other possible recipients
If necessary for the attainment of any of the purposes specified above, in particular if an external entity disposes of the necessary professional and technological resources, your data is processed by cooperating contractors. If we assign some activity forming part of our services to a third-party entity, processing of relevant personal data may occur. In some cases such contractors become personal data processors. Such a contractor is authorized to dispose of data exclusively for the purposes of the activity that it was entrusted with by the respective data controller. In such a case your consent is not required for the purposes of processing activity execution.
Among potential recipients are in particular:
· banking institutions;
· administrative authorities within the framework of the fulfilment of statutory duties imposed by applicable legal regulations;
· our business partners (in particular contractors and subcontractors);
· providers of IT services, including cloud data repositories;
· marketing agencies and marketing service providers;
· the CCTV systems administrator;
· providers of media and postal services, including courier services.
In excess of the aforementioned, we transfer personal data outside the KUBOUŠEK Group only based on your consent or where legal regulations impose such a requirement on us. Some authorities and other organizations are authorized to request information on you.
In some cases we transfer personal data to our business partners or third parties in third countries (outside the EU), e.g. to Japan. The aforementioned situation is related in particular to the origin of the product that is provided to you by the KUBOUŠEK Group where the transfer occurs in the case of order or complaint concerning the product. In certain cases personal data is transferred to a third country with respect to legislative requirements related to permission to export the product concerned. We always take into account the level of the protection of personal data disclosed in such a way.
We try hard to protect data that you provided us as much as possible. For this purpose we have implemented a number of technological and organizational measures that protect your personal data against unintentional or unlawful destruction, unintentional loss or modification, unauthorized disclosure or access and against any other illegal form of processing.
Access to your personal data is limited to only the employees of the KUBOUŠEK Group and the KUBOUŠEK Group's contractors who need the information for the purposes of its processing in our name and who are bound on a contractual basis to maintain the security and confidentiality of your personal data.
As we have mentioned above, in certain cases we transfer or are obliged to transfer personal data to third parties. In such cases we select trustworthy partners with whom we are sure that they will keep at least the same level of personal data protection as that provided by the KUBOUŠEK Group.
When submitting personal data to the administrative authorities we always employ the most appropriate and secure options that the respective authority offers.
We utilize cloud data repositories that are located within the EU and where a high level of security is guaranteed.
The website of the KUBOUŠEK Group is available to you without having to disclose your identity or any other information concerning your person. When you are using the KUBOUŠEK Group website we collect information from your browser that may include personal data. For the collection of such information we use various types of cookies files. Such information may include your IP address, unique identifier utilizing “cookies”, information about cookies, type of device, domain, type of browser and language, type of operating system, country and time zone, information on your browsing on our website and time and date of your visit to our website. Such information help us improve the quality of our website or our marketing services.
Via the website also third parties may collect information, namely using so-called third-party cookies, plug-ins and widgets. Such third parties collect information directly from your Internet browser and its processing is subject to privacy protection rules of the respective third parties.
What are cookies?
Cookies are small text files that are saved by the website in your computer or mobile device at the moment when you start using the website. They are used to remember your preferences and activities that you executed (e.g. username and password, font size and other display preferences). You do not have to enter such data again over some time.
On our website we use the following:
· Short-time cookies of the first page that are necessary for the operation of our website.
· Long-time cookies of the first page to be able to adapt our website to your preference as much as possible. For the website analysis we use anonymous data measurement by the Google Analytics tool.
· Third-party cookies are used to be able to adapt advertising communication to your preferences. This concerns in particular cookies on social media, advertising systems and embedded videos.
More information about cookies, prohibition of cookies
For more information about what cookies are, how they work, how to administer or delete them, see the following website www.allaboutcookies.org
In the settings of certain Internet browsers (Internet Explorer, Safari, Chrome) it is possible to prohibit cookies and other monitoring technologies. More options for administering cookies are available on the following website www.youronlinechoices.com/cz/vase-volby.
If you decide to prohibit certain cookies, the functionality of the services offered via our website may be limited.
Your rights related to personal data processing
If you exercise your rights related to your personal data that we process, your identification will be required. We would like to inform you that if we are not able to verify your identity electronically or if we have reasonable doubts as to your identity, we will ask you to submit your identity card or other proof of identity. This is the only method how to eliminate any possibility that your personal data will be disclosed to a third party or that your personal data will be modified in an unauthorized manner.
In addition, you may exercise your rights related to personal data processing via a request whose specimen is available on our website www.kubousek.cz.
Right to information and access to personal data
We respect the principle of the transparency of personal data processing. In accord with this principle you will always be provided with information on the type of your personal data that we process.
Your request will be attended as soon as possible, however, no later than within one month. In more complicated cases we are authorized to extent the time limit by up to two months.
If you request for information on your personal data processing, we will provide you with information on the purpose of your personal data processing, personal data, or categories of personal data that are processed, including all available information on the source thereof, or categories of potential recipients. In addition, you will be informed of the scheduled period over which your personal data will be archived, or where such a period cannot be specified, of criteria used to determine such a period, and the existence of the right to request for the rectification or erasure of your personal data or limitation of its processing, or the right to object to such processing and also the right to file a complaint with the supervisory authority.
You have the right to request from any company of the KUBOUŠEK Group a copy of your personal data that is processed provided that the rights and freedoms of third parties are not infringed by such an act. We may charge a reasonable fee covering the related administrative costs for additional copies made on your request. If you submit the request in electronic form then the information will be provided in electronic form that is normally used, unless you ask for a different form.
Right to rectification
When processing your personal data we do our best to ensure its accuracy and relevance. We will try to delete or rectify inaccurate or incomplete personal data. If you discover that any items of personal data that we process in relation with you are erroneous or outdated, please let us know. You have the right to request that the KUBOUŠEK Group companies rectify inaccurate personal data concerning you without any undue delay. With regard to the purposes of the processing, you have the right to request for the completion of incomplete personal data.
In certain cases we are not able to perform personal data rectification. These cases concern in particular your personal data that is erroneous or outdated and that is included in a tax document whose archiving is imposed on us by law.
In addition, the recipients to whom personal data was disclosed will be informed of any rectification with the exception of cases where this is impossible or where this would require unreasonable effort.
Withdrawal of consent to personal data processing
Further processing of your personal data that is performed based on your consent to personal data processing may be restricted at any time. The only thing that you need to do is to withdraw your consent with such processing.
Right to erasure (right “to be forgotten”)
You may also exercise your right “to be forgotten”. You have the right to request that the KUBOUŠEK Group companies erase personal data concerning you without any undue delay and the KUBOUŠEK Group is obliged to erase such personal data for any of the following reasons:
a) personal data concerned is no longer needed for the purposes for which it was collected or processed otherwise;
b) you withdraw your consent on the basis of which your personal data was processed and no other legal ground of processing thereof exists;
c) personal data was processed illegally;
d) personal data must be erased to fulfil statutory duties imposed by law of the European Union or Czech Republic.
In such a case we will erase all your personal data that we process. An exception to this rules are cases where such processing is imposed by a statutory duty or is executed for reasons of our legitimate interest related to filing and defending legal claims.
In addition, the recipients to whom personal data was disclosed will be informed of erasure with the exception of cases where this is impossible or where this would require unreasonable effort.
Right to ban on processing
You have the right to request that the KUBOUŠEK Group companies restrict processing in any of the following cases:
a) you contest the accuracy of your personal data, in which case for the period necessary for the KUBOUŠEK Group companies to be able to authenticate the accuracy of your personal data;
b) the processing is illegal and you refuse the erasure of your personal data and request the restriction of its use instead;
c) the KUBOUŠEK Group does not need your personal data any longer for the purposes of processing but you request it for the determination, exercise or defence of legal claims;
d) objection to processing has been raised, namely until it is verified whether legitimate interests of the KUBOUŠEK Group take precedence over your reasons for the objection.
In addition, the recipients to whom personal data was disclosed will be informed of all restrictions with the exception of cases where this is impossible or where this would require unreasonable effort.
Right to personal data portability
You have the right to acquire personal data concerning you that you disclosed to the KUBOUŠEK Group companies, in a structured, commonly used and machine readable format as well as the right to submit such data to a different data controller without the KUBOUŠEK Group companies preventing it, namely in the case that:
a) processing is based on the consent to personal data processing or processing for the purposes of contract conclusion is concerned, and
b) the processing is executed in an automated way.
When exercising your right to data portability you have the right to request that your personal data be handed over by the KUBOUŠEK Group directly to a different controller where this is technologically feasible. The right to personal data portability may not affect the rights and freedoms of any third parties.