1. PERSONAL DATA CONTROLLER AND THE PURPOSE OF THE PROCESSING TERMS
1. The personal data controller is BAKOTECH s.r.o., Id No.: 24804983, with its registered office at Prague 10 – Hostivař, Štěrboholská 1434/102a, Postal Code 10200, Email: moc.hcetokab%40zc.ofni (hereinafter referred to as the “Controller”).
2. The purpose of this document is to fulfil the information obligations of the Controller arising from the Regulation (EU) of the European Parliament and Council 2016/67, dated on April, 27 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/ES (general regulation on the protection of personal data; hereinafter referred to as “GDPR“) towards the natural persons using login portal services which is operated on the Controller’s website: https://bakotech.cz/ (hereinafter referred to only as the ”Participant“ or the “Participants“).
4. CATEGORIES OF RECIPIENTS OF PERSONAL DATA
1. The recipients of Participants’ personal data may include, in particular cases, entities of the BAKOTECH Group and subjects presenting their products or performing their training within the training or other events organised by the Controller.
2. In the case the personal data are in addition to the Controller processed also by the processors, it is on the basis of the contracts on the processing of personal data concluded in accordance with GDPR.
7. THE RIGHTS OF THE DATA SUBJECTS (THE PARTICIPANTS)
1. As a result of the processing of the Participants’ personal data, each Participant shall have the following rights: 1. right to access to his/her personal data from the Controller;
2. right to rectification of inaccurate personal data processed by the Controller about the Participant;
3. right to restriction of processing. Restriction of processing means that the Controller must identify the personal data whose processing has been restricted and may not process them for the duration of the restriction, except for their storage. The Participant has the right to restriction of processing if:
● he denies the accuracy of the personal data for the time necessary for the Controller to verify the accuracy of the personal data;● the processing is unlawful and the Participant refuses the erasure of personal data, requesting instead the restriction of their use;● the Controller does not the need personal data for the purposes of processing anymore but the Participant request them to identify, exercise or defend legal claims;● the Participant has objected the processing which is referred to in point 7.1.7. of these terms until it is verified whether the Controller’s legitimate interests prevail over Participant’s interests, rights or freedoms; 4. right to erasure of personal data. The right to erasure of personal data pertains only to the personal data processed by the Controller for purposes others than meeting his legal obligation. The right to erasure is granted exclusively, provided that the personal data being processed are not necessary for the given purpose anymore, the processing is based on consent and this consent is revoked by the Participant, the Participant objects and there are no prevailing reasons for further processing, the personal data have been processed illegally, the Controller is obliged to do the erasure by law or when the personal data have been collected in relation with the provision of the information society services under Article 8, Paragraph 1 GDPR;
5. right to data portability. The Participant may request the Controller to provide him with the Participant’s personal data in order to hand them over to another data controller or to be handed over by the Controller to another personal data controller directly. However, the Participant, shall have this right only concerning the data processed by the Controller by automated means based on the consent of the Participant or a contract concluded with the Participant;
6. right to file a complaint with the Supervisory Authority, in the event the Participant assumes that the legal regulations on the protection of personal data have been violated by processing the personal data, the Participant may file a complaint with the Supervisory Authority at his domicile, place of employment or at place where the alleged violation took place. In the Czech Republic, the Supervisory Authority is Office for Personal Data Protection, having its registered office at plk. Sochora 27, 170 00 Prague 7, web: www.uoou.cz;
7. In the event the Controller process the Participant’s personal data for the purposes of his or other subject’s legitimate interests, the Participant may object anytime to the processing. The Participant may object at the Controller’s registered office or at his email address which are specified in paragraph 1.1 of these terms. Should the Participant object, the Controller is entitled to continue in such processing only if he proves justified reasons for the processing that prevail over the Participant’s interests or rights and freedoms and if the processing is necessary to determination, exercise or defend legal claims;
8. If the Controller processes Participant’s personal data for the purposes of direct marketing, the Participant has the right to object anytime to the processing of the personal data pertaining to him for this marketing, which includes also profiling, if it relates to this direct marketing. If the Participant object to the processing for the purposes of direct marketing, the personal data won’t be processed for these purposes any longer;
9. If the processing of personal data is based on consent, the Participant shall have the right to revoke this consent anytime, without further notice. The Controller declares that the revoking of the consent won’t have any negative consequences for the Participant. Consent can be revoked by a Participant by sending e-mail request to moc.hcetokab%40zc.ofni.