GDPR
The personal data controller is Imperial Invest F s.r.o., ID No.: 08711917, with its registered office at Prague 1, Staré Město, Týnská 632/10, postal code 110 00, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 368214, hereinafter referred to as the "administrator."
The controller of personal data provided to it by the data subject undertakes to process such confidential personal data in accordance with the law, in particular within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter referred to asthe "Regulation").
The controller can be contacted at the following email address ondrej.trcka@imperial-invest.cz and also at the above postal address.
Below, the personal data controller informs the data subject about the protection and processing of personal data.
When using the website, when using services, when contacting the data subject, we process the following personal data:
Directly provided
First name, last name/business name
Date of birth, birth number/ID number, VAT number
Place of residence/registered office
Email
Other personal data that you provide or communicate to us yourself during communication and use of services, either in person, by email, by telephone, or by other means (e.g., ID number, telephone number, bank account number)
(In)directly provided
IPaddress
browser type
time zone
other software and hardware data that you provide to us based on your use of our website in accordance with the enabling/disabling of cookies
Indirectly provided
datathat is publicly available from registers, records, registries, etc.
We process personal data primarily for the purpose of concluding and performing a contract; without this data, we cannot perform the concluded contract. The data provided will therefore be used to perform the contract.
We also process personal data for the purpose of communicating with the data subject and its subsequent archiving.
We also process personal data to fulfill legal obligations under applicable law and/or for marketing, data analysis, testing, statistical purposes, etc.
The controller also informs the data subject about the possible processing of personal data in connection with the monitoring of its business premises by audiovisual means, primarily for the purpose of security and protection of property, life, and health of data subjects. In this sense, personal data are considered to be identifiers that can be used to link a specific person in the recording to the captured action. This is therefore processing necessary for the purposes of the legitimate interests of the controller, with monitoring being carried out in a proportionate, adequate, and necessary manner that does not disproportionately interfere with the privacy of data subjects. Monitoring records are stored for a short period of time and are immediately deleted if there is no security incident; if there is a security incident, these records are provided to law enforcement authorities and/or courts, administrative authorities, etc.
Personal data is not disclosed or provided to third countries. Personal data is accessible primarily to the controller and its employees; other recipients of personal data may include public authorities, information system maintenance providers, and providers of processing software, services, and applications.
We take care to share personal data only with trusted partners within the group, i.e., personal data may be provided to partners who help us fulfill our contractual obligations (external collaborators, suppliers, providers of payment, accounting, tax, and legal services, website administrators, security system operators, etc.). i.e. partners who provide us with appropriate guarantees that the processing meets all legal requirements, protects rights and personal data, and that these partners only have access to personal data to the extent necessary and for the time necessary.
The controller has taken all appropriate organizational and technical measures to maximize the protection of the data subject's personal data and thus minimize unauthorized access to such data, both for personal data stored in electronic form (we manage personal data on our servers and/or on the servers of trusted partners) and for personal data stored in paper form.
We process personal data only for the time necessary to exercise the rights and obligations arising from contractual obligations and to fulfill legal obligations. We store personal data provided on the basis of consent only until the consent is revoked. Personal data will be stored for a maximum of the period specified by law. After the archiving period has expired, personal data will be destroyed. Personal data will also be destroyed immediately if consent is revoked.
The data subject has the right to decide on the handling of their personal data to a specified extent, whereby the data subject may exercise the following rights:
Right of access – the data subject has the right to obtain information from the controller as to whether their personal data is being processed and, if so, what data is being processed and how it is being processed; The data subject has the right to a copy of this data.
Right to rectification – The controller shall, without undue delay, rectify any inaccurate personal data concerning the data subject at the request of the data subject, and the data subject has the right to complete incomplete personal data at any time.
Right to erasure – the controller's obligation to destroy personal data that it processes about the data subject if certain conditions are met and the data subject requests it; personal data necessary for the exercise of legal claims and/or the fulfillment of a legal obligation cannot be destroyed
Right to restriction of processing – the data subject has the right to have the controller restrict the processing of their personal data in certain cases; nor may the processing of personal data necessary for the exercise of legal claims be restricted
Right to object – the data subject has the right to object at any time to processing based on the legitimate interests of the controller, a third party, or necessary for the performance of a task carried out in the public interest or in the exercise of official authority
Right to portability – gives the data subject the possibility to obtain the personal data they have provided to the controller in a commonly used and machine-readable format, which they can then transfer to another controller or, if technically possible, request that the controllers transfer it to each other
Right to withdraw consent – this right does not apply if personal data is processed for the purpose of performing a contract, and not on the basis of consent
Right to lodge a complaint – the data subject has the right to contact the supervisory authority, which is the Office for Personal Data Protection, at any time if they believe that the processing of their personal data has violated the rules of personal data protection
Contact details of the Office for Personal Data Protection:
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
telephone: +420 234 665 111 (switchboard)
email address: posta@uoou.cz
website: www.uoou.cz
The aboverights can be exercised via the email or postal address of the controller, as stated above. These addresses can also be used to request additional information regarding the above rights.
The personal data provided is confidential, obtained on the basis of a concluded contract or expressed consent to the processing of personal data. The data subject gives the controller consent to the processing of personal data for the duration of the contract and/or until the data subject expresses disagreement with the processing of personal data. All personal data is provided voluntarily.
The personal data controller acts in such a way that the data subject's rights are not infringed and, at the same time, protects the data subject's personal data from unauthorized interference.
The consent given to the controller is valid until revoked by the data subject, who may revoke this consent at any time by sending a written notice to the controller at its registered office or by email. The right to withdraw consent to the processing of personal data at any time does not apply if the personal data is processed for the purpose of performing a contract or fulfilling a legal obligation, rather than on the basis of consent. However, the withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent given prior to its withdrawal.
The data subject hereby confirms that the personal data provided is correct and confirms that they are giving their informed and unambiguous consent. The data subject also confirms that they have been informed that the provision of personal data is voluntary.