Personal data processing policies
- The purpose of this Policy is to provide information about your rights in connection with the processing of your personal data by Cooner s.r.o., with its registered office at Brněnská Pole 1884/6, 664 51 Šlapanice, ID No. (IČO): 062 06 361, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 100708 (hereinafter referred to as the “Controller”), in accordance with Act No. 101/2000 Coll., on Personal Data Protection, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the “GDPR”). 12:52
If you are our employee, customer, distributor, newsletter subscriber, or website visitor, you entrust the Controller with your personal data.
The Controller is responsible for their protection and security.
Please familiarize yourself with personal data protection, the principles, and the rights you have under the GDPR.
- The purpose of this Policy is to provide information about your rights in connection with the processing of your personal data by Cooner s.r.o., with its registered office at Brněnská Pole 1884/6, 664 51 Šlapanice, ID No. (IČO): 062 06 361, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 100708 (hereinafter referred to as the “Controller”), in accordance with Act No. 101/2000 Coll., on Personal Data Protection, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the “GDPR”). 12:52
- If you are our employee, customer, distributor, newsletter subscriber, or website visitor, you entrust the Controller with your personal data.
The Controller is responsible for their protection and security.
Please familiarize yourself with personal data protection, the principles, and the rights you have under the GDPR. - Categories of Personal Data Processed
a) Identification Data – For the purpose of entering into and performing a contract, the Controller processes your identification data, in particular your first name and surname, date of birth, personal identification number (birth number), place of birth, marital status, education, and residential or registered office address. Identification data form an integral part of the contracts you enter into with the Controller. The Controller further processes identification data to the extent required by applicable legislation. The basic identification data of natural persons are verified by the Controller against an identity document. In the case of an employee, this includes all data necessary for fulfilling the employer's (Controller's) obligations arising from the employment relationship, and their scope is always determined on an individual basis.
b) Contact Details
If you provide your contact details to the Controller, in particular your first name, surname, correspondence address, email address, or phone number, the Controller processes these for the purpose of the activities mentioned above.
c) Personnel Data
Data provided by individuals in an employment or similar relationship are processed for the purpose of fulfilling the Controller's legal obligations. The Controller processes and retains these data without your consent. - Personal Data Processing and Retention Period
The Controller retains your identification data for the period of:
• the performance of the contract
• the fulfillment of legal obligations
• the duration of the Controller's legitimate interest
• the statutory retention (archival) periods - Legal Grounds for Processing Personal Data
Based on your consent, the Controller is entitled to process your personal data for marketing and commercial purposes.
Granting consent is not required where the Controller processes the contact details of its customers based on its legitimate interest for direct marketing purposes.
Granting consent to the processing of your contact details for marketing and commercial purposes is voluntary.
This consent remains valid until you withdraw it in the manner specified in Article 8 of this Policy.
The Controller processes and retains the personal data of employees for the purpose of fulfilling legal obligations.
. - Security of Personal Data
The Controller secures your personal data through organizational and technical measures against access
by unauthorized persons. - Personal Data Processing by Third Parties
The processing of your personal data by a third party is (must be) secured by a contract concluded between the
Controller and the processor (third party). - Rights of Data Subjects
a) You have the right of access to your personal data processed by the Controller/processor, which includes the right
to obtain confirmation as to whether the Controller/processor is processing personal data and the right to be provided
with information about the processing of personal data (purposes, categories, recipients, retention period, etc.).
b) You have the right to rectification of your personal data processed by the Controller/processor if they
are inaccurate.
c) You have the right to erasure of your personal data (the right to be forgotten) processed by the
Controller/processor, provided that they are no longer necessary for the purposes for which they were processed,
with the exception of personal data processed for the purpose of fulfilling legal obligations of the
Controller.
d) You have the right to restriction of processing of your personal data in cases where:
− you believe that the data are inaccurate,
− you believe that the Controller/processor is processing them unlawfully,
− the Controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment,
exercise, or defense of legal claims,
− you object to the processing, pending verification whether the legitimate grounds
of the Controller override those of the data subject.
e) You have the right to notification regarding rectification or erasure of personal data or restriction of processing,
except where this proves impossible or involves disproportionate effort.
f) You have the right to receive your personal data processed by the Controller/processor in a structured,
commonly used, and machine-readable format, and the right to transmit those data
to another controller (right to data portability).
g) You have the right to object to the processing of your personal data by the Controller.
h) Where your personal data are processed based on your consent, you have the right to withdraw this consent at
ny time. However, the withdrawal of consent does not affect the processing of personal data based
on other legal grounds, nor does it affect the lawful processing carried out prior to its withdrawal.
You must exercise all the above rights with the Controller:
– in writing at: Cooner s.r.o., Brněnská Pole 1884/6, 664 51 Šlapanice, Czech Republic
– via email at: [email protected]
unless another method of exercising your right is determined by the Controller in a specific case.
i) You have the right to lodge a complaint regarding the processing of your personal data with the Controller's
supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), located at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic. - Data Transfers Outside the EU
We process data exclusively within the European Union or in countries that ensure an adequate level of protection
based on a decision of the European Commission. - Confidentiality
We would like to assure you that our employees and external partners/contractors who process your personal
data are bound to maintain confidentiality regarding personal data and security measures, the disclosure of
which would compromise the security of your personal data. This duty of confidentiality continues even after
the termination of contractual relations with us. Without your consent, your personal data will not be disclosed
to any other third party.
This Policy is valid and effective as of April 21, 2022.
