Processing of Personal Data
“By submitting the completed contact form, you agree to the processing of personal data¹.”
1) General Provisions
Information on personal data processing and personal data processing policies are created in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”) and in accordance with national legislation, in particular Act No. 110/2019 Coll., on Personal Data Processing, as amended (hereinafter referred to as the “Personal Data Processing Act”).
This information applies to:
(i) personal data processing carried out by the data controller during the use of the controller’s website www.rsvision.cz,
(ii) personal data processing carried out by the data controller during communication with the data subject via email or telephone,
(iii) personal data processing by the data controller during the term of a contractual relationship with the data subject,
(iv) personal data processing in the fulfillment of the data controller’s legal obligations, and
(v) personal data processing that is necessary for the purposes of protecting the legitimate interests of the data controller.
2) Data Controller
The data controller within the meaning of the General Data Protection Regulation is RS Vision s.r.o., ID No.: 06182623, VAT ID: CZ06182623, with its registered office at Velké Hamry No. 340, 468 45 Velké Hamry, registered in the Commercial Register maintained by the Regional Court in Ústí nad Labem, Section C, Insert 39825 (hereinafter referred to as the “Company”).
The Company can be contacted via email sent to the contact address: info@rsvision.cz.
The Company is a legal entity established under Czech law and, as a data controller, collects, stores, and uses (or otherwise processes) personal data for the performance of its business activities (the individual purposes for which personal data are processed are defined in more detail below).
The Company protects all processed personal data as strictly confidential and handles them in accordance with applicable legal regulations in the field of personal data protection.
3) Personal Data Processing
Processed Personal Data:
The Company may collect and process personal data from its website www.rsvision.cz via relevant electronic forms to the extent of the data subject’s first name, last name, telephone number, and email address, especially when the data subject contacts the Company through them.
All personal data collected by the Company originates from the data subject.
For the purposes of fulfilling a concluded contract with the Company, personal data will be further processed to the extent of date of birth, ID No., VAT ID, permanent residence address, registered office address, contact address, bank account number, or other personal data necessary for the proper fulfillment of the contract and for the protection of the Company’s legitimate interests.
Purposes of Processing and Legal Basis for Processing:
The Company declares that, as a data controller, it fulfills all statutory obligations required by applicable legislation, meaning it processes the data subject’s personal data only on the basis of a valid legal ground—primarily the performance of a contract, legal obligation, or granted consent. It fulfills the information obligation under Article 13 of the General Data Protection Regulation before commencing personal data processing, and it enables data subjects to exercise and fulfill their rights under the Personal Data Processing Act and in accordance with the General Data Protection Regulation.
The purpose of personal data processing is primarily:
a) Performance of a contract, including its negotiation
(Contracts for the provision of services or fulfilling the data subject’s requests, i.e., service provision contracts in accordance with relevant legal regulations, relationships with business partners such as suppliers of products and services, and recruitment activities – acquiring job applicants). Pursuant to Article 6(1)(b) of the General Data Protection Regulation, the Company is authorized to process personal data for this purpose without the data subject’s consent.
b) Handling requests sent via electronic forms
(Especially in the case of interest in employment with the Company or other cooperation with the Company). Pursuant to Article 6(1)(a) of the General Data Protection Regulation, the processing of personal data for this purpose takes place with the data subject’s consent.
c) Fulfillment of the Company’s legal obligations
(Especially for the purpose of issuing and recording tax documents). Pursuant to Article 6(1)(c) of the General Data Protection Regulation, the Company is authorized to process personal data for this purpose without the data subject’s consent.
d) Protection of the Company’s legitimate interests
(Offering of services, marketing by the Company). Pursuant to Article 6(1)(a) and (f) of the General Data Protection Regulation, the processing of personal data for this purpose takes place with the data subject’s consent.
Recipients and Processors of Personal Data:
Personal data are processed by the Company as the data controller and further by personal data processors.
Personal data processors are third parties in a contractual relationship with the Company, in particular the website administrator and the email address administrator. The Company may provide personal data to other entities if required by tax, labor, or any other generally binding legal regulations, for the purpose of fulfilling the Company’s statutory obligations.
Personal data are processed exclusively within the European Union or in countries that ensure an adequate level of protection based on a decision of the European Commission.
During the processing of personal data, there will be no automated decision-making, including profiling.
Duration of Personal Data Processing and Storage:
Personal data will be processed and stored by the Company only for the time necessary to fulfill the stated purpose for which the data are processed, i.e., for the time strictly necessary to ensure all rights and obligations arising from the relevant contractual relationship, and further for the period during which the Company, as a data controller, is obliged to store personal data under generally binding legal regulations, or for the period for which the data subject has granted the Company consent for processing.
Consent to personal data processing is granted for a period of three (3) years from the date of the provision of personal data by the data subject; however, this consent may be revoked before the expiration of this period. Personal data processed in paper form are stored at the Company’s registered office in a locked office. The Company ensures that no unauthorized person has access to them. Personal data processed in electronic form are stored on a server located in the Czech Republic, the security of which corresponds to the standards of the General Data Protection Regulation and is subject to the laws of the Czech Republic. The Company’s website www.rsvision.cz uses information security technologies, especially firewalls², all with the aim of preventing unauthorized access to personal data and guaranteeing their confidentiality.
Right to request access to, rectification, or erasure of personal data, restriction of processing, the right to object, and the right to data portability:
The data subject has the right to access personal data concerning them. The data subject has the right to have the Company rectify inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement. The data subject has the right to have the Company erase personal data concerning them without undue delay, and the Company has the obligation to erase personal data without undue delay where one of the grounds stipulated by legal regulations applies. The data subject has the right to obtain from the Company restriction of processing in cases stipulated by legal regulations.
Right to withdraw consent to personal data processing:
Where the processing is based on the data subject’s consent, a data subject who has given the Company consent to process personal data based exclusively on this legal title may withdraw this consent at any time. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority:
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes legal regulations. For the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), ID No.: 70837627, address: Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.cz, email: posta@uoou.cz.
Information as to whether the provision of personal data is a statutory or contractual requirement:
This section outlines whether providing data is a requirement necessary to enter into a contract, whether the data subject is obliged to provide the personal data, and the possible consequences of failing to provide such data.
The provision of personal data is both a statutory and contractual requirement; the provision of data is necessary for the proper fulfillment of the Company’s obligations arising from generally binding legal regulations, for the proper fulfillment of the Company’s contractual obligations, and for the protection of its legitimate interests.