GDPR - INFORMATION ON THE PROCESSING OF PERSONAL DATA IN CONNECTION WITH THE PERFORMANCE OF THE CONTRACTUAL RELATIONSHIP

INFORMATION ON THE PROCESSING OF PERSONAL DATA IN CONNECTION WITH THE PERFORMANCE OF THE CONTRACTUAL RELATIONSHIP

1. PURPOSE OF THE DOCUMENT

1.1. The purpose of this document is to provide you with information on the processing of your personal data within the scope set out in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as „GDPR“ or „Regulation“), in connection with the contractual relationship with the controller.

2. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

2.1. The controller of your personal data is the Humatex, a.s., with registered office at ul. Důlní čp. 199, 418 01 Bílina, ID No.: 25458442, registered in the Commercial Register maintained by the Registry Court in Ústí nad Labem, Section B, Insert No. 1454 (hereinafter referred to as the „Controller“).

2.2. The contact details of the administrator are as follows: delivery address ul. Důlní čp. 199, 418 01 Bílina, e-mail address vitakova@humatex.cz, danek@humatex.cz , telephone 417 805 511.

2.3. The controller has not appointed a data protection officer.

3. CATEGORIES OF DATA PROCESSED

3.1. In connection with your contractual relationship with the controller, the controller processes the following categories of personal data:

- billing data: business name, i.e. name and surname, place of business, VAT number, tax identification number,
- contact details: telephone number, e-mail, correspondence address,
- bank account number,
- contact details of natural persons acting on behalf of the legal entity.

4. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

4.1. The legal grounds for the processing of your personal data by the controller are as follows:

4.1.1. the processing is necessary for the performance of a contract between you and the controller (or between the company for which you act and the controller) or for the performance of a measure by the controller prior to the conclusion of such a contract within the meaning of Article 6(1)(b) GDPR,

4.1.2. the processing is necessary for the performance of statutory obligations, e.g. in connection with bookkeeping and archiving of accounting documents containing personal data of suppliers within the meaning of Article 6(1)(c) GDPR.

5. PURPOSE OF THE PROCESSING OF PERSONAL DATA

5.1. The purpose of the processing of your personal data is the performance of contractual obligations under the contract concluded between you and the controller.

5.2. There is no automatic individual decision-making by the controller within the meaning of Article 22 of the Regulation.

6. STORAGE PERIOD OF PERSONAL DATA

6.1. Your personal data will be processed for the duration of the contractual relationship and for the period necessary for archiving purposes in accordance with the relevant generally binding legal regulations, but no longer than the period specified by the generally binding legal regulations.

7. CATEGORIES OF RECIPIENTS OF PERSONAL DATA

7.1. Other recipients of your personal data may be:

7.1.1. state administration bodies to the extent provided for by law,

7.1.2. Persons who cooperate with the controller and ensure the processing of personal data for the controller, which may be:

- entities involved in the delivery of services or the execution of payments under a contract,
- entities providing IT and database management for the administrator,
- entities providing legal and accounting services.

7.2. The controller does not intend to transfer your personal data to a third country (non-EU country) or an international organisation.

8. RIGHTS OF THE DATA SUBJECT

8.1. Under the conditions set out in Articles 15 to 22 of the GDPR, you have the right to ask the controller for access to your personal data processed by the controller, to request a copy of this personal data, to request the correction of inaccurate personal data, to request the erasure of personal data processed by the controller if they are no longer necessary for the purpose provided or if they are processed unlawfully by the controller, to request the restriction of the processing of your personal data in the cases set out in Article 18 of the GDPR.

8.2. If you believe that the processing of your personal data has violated or is violating the Regulation, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection.

8.3. The provision of your personal data to the controller for the performance of the contract is a contractual requirement and there is no obligation to provide this personal data to the controller. Without the provision of your personal data, it is not possible to conclude a contract or for the controller to perform it.

Humatex, a.s.