Principles for processing and protecting personal data
I. Contents and purpose of the document
1. This document contains information concerning personal data protection provided by visitors to https://pragster.cz, clients and those interested in our services and products.
2. The purpose of this document is to familiarise clients with our services and products (data subjects), their rights and provide comprehensible information about how the personal data shall be handled.
3. We value your trust in providing us with your personal data and therefore when processing personal data we proceed according to Regulation (EU) 2016/679, i.e. the General Data Protection Regulation which came into effect on 25 May 2018 and is generally known under the abbreviation GDPR.
4. For the sake of completeness, we wish to state that we assume all the data that you personally provide us with are true and current data, and that if a change arises in this respect, you shall inform us without undue delay so we can rectify this.
II. Personal data controller – who we are and how to contact us
Daniel Madar, ID No.: 71481893, with registered office in Žižkova 708, 261 01 Příbram II (hereinafter referred to as the “Controller”). E-mail: firstname.lastname@example.org and email@example.com, phone: +420 777 333 993, website: https://pragster.cz.
III. What personal data do we process and how do we obtain them?
We process data that you personally provide us with. In specific cases this is providing data by filling in a form on the website, providing data when drawing up contracts and related documents and when implementing contracts (i.e. particularly when arranging a purchase or sale or lease or sublease of real estate), during personal contact (including data transmitted when viewing real estate), by phone, in writing, by e-mail or other means of communication. We also process data that we publish on the internet, particularly on social networks. If we need your consent for the processing of some personal data for specific purposes we need your consent, we will then process such data for a given purpose only with your consent.
Personal data that we process:
Name, surname, title, address, date of birth, age, birth number, ID No., Tax ID No., phone number, e-mail, education, bank account number, IP address, information about ordered services, information about the services we have provided you with, your marital status, gender, photographs of you, video recordings of you, data on real estate whose sale we are arranging on your behalf (in connection with other data) etc.
IV. For what purposes do we process personal data, for what period and under what authority?
A. Personal data processing for the purpose of concluding a contract and the fulfilment of contractual obligations
So that we can conclude a contract with you, deliver services that you order from us and communicate with you in these matters, we process the following general personal data: name, surname, title, address, birth number, date of birth, ID No., Tax ID No, bank account number, phone number, e-mail.
The legal title (authorisation) for processing these data is the direct fulfilment of contractual obligations arising from the contract concluded between them. Such obligation can be, for example, the drawing up of an agency real estate purchase contract. At the same time this may not be a contract concluded in the traditional printed form and personally signed. This can involve a contract concluded verbally, over the phone or a filled in and sent order form to the website and our confirmation of such order.
For this purpose we process personal data for the duration of the contractual relationship between us. Once the contractual relationship is terminated we store some of the personal data for the purposes of fulfilling legal obligations or for the purposes of legitimate interests as you shall read in the following sections of this document.
B. Personal data processing for the fulfilment of accounting, tax and other legislative obligations
In order to fulfil the obligations arising from applicable legislation, particularly in accounting and tax law, and obligations arising from Act No. 253/2008 Coll., on Selected Measures against Legitimisation of Proceeds of Crime and Financing of Terrorism – Anti-Money Laundering Act (“AML Act”), we process the following data: name, address, birth number, phone, e-mail.
The period for which data is processed is determined directly by the relevant legislation that lays down the obligation for their processing.
C. Personal data processing for the purposes of legitimate interests of our or third parties
A legitimate interest may cover many situations. We are therefore informing you of the legitimate interests for which we are processing personal data:
- A legitimate interest is the protection and proof of our rights and legal claims, particularly from concluded contracts or the loss caused. For these purposes we store data for a period of 4 years after the termination of contractual cooperation or after our last contact if a contract was not concluded. This time limit is determined in view of the limitation periods of claims while taking into account that we do not have to learn of any court enforced claim immediately at the time it is enforced by the other party.
- A legitimate interest is also direct marketing. To send business messages we shall process the following personal data of our clients: name, surname, address, e-mail.
D. Personal data processing based on your consent
If you give us your consent, we shall process your personal data to send offers of our real estate services. We shall require your consent to this processing if you are not our client. Before you give us your consent we shall inform you to what data being processed and for what specific purpose the consent shall apply to. You can revoke your consent at any time. Of course if we process some of your personal data based on a different legal title (see paragraph A to C above), we shall process the personal data for these purposes even after the revocation of your consent because consent is not necessary for such specific purposes.
V. Accessing personal data to other parties
Further parties that work as processors help us to ensure some of our contractual or legal obligations. These are cooperating accountants, law firms, providers of data repositories and software applications.
Personal data shall also be made available to the relevant administrative authorities if this obligation is laid down by the law (i.e. particularly for an audit during which the relevant authority is authorised to demand that personal data is submitted).
VI. Information about your further personal data protection rights
A. Right to have access to personal data
This is the right to confirmation if we process your personal data and if we do then to access to these data and information about their processing.
B. Right to the correction of personal data
This is the right to correct inaccurate personal data that apply to you without undue delay. In view of the purposes of processing, you have the right to amend personal data and to provide an additional statement.
C. Right to delete personal data (right “to be forgotten”)
In cases laid down by the law or the GDPR you have the right to demand that we delete your personal data without undue delay (in the GDPR the reasons are given in Article 17, including exceptions when data is not deleted).
D. Right to restriction of processing
In cases laid down in Article 18 of the GDPR you have the right to demand that the processing of your personal data is restricted.
E. Right to data portability
Under the terms and conditions laid down in Article 20 of the GDPR, you have the right to acquire your personal data and transmit them to another controller. Where it is technically feasible you have the right to demand transmission of your personal data directly from one controller to another.
F. Right to object
In cases when we process personal data for the purposes of legitimate interests, you have the right to raise an objection to such processing and we shall not continue to process the data if our legitimate interest shall not prevail over your interests or rights and freedoms. If the legitimate interest is direct marketing then an objection shall always result in personal data no longer being processed for direct marketing.
G. Right to lodge a complaint at the supervisory authority
If you believe that your rights concerning personal data protection are being infringed, you have the right to lodge a complaint at the Office for Personal Data Protection. You can find more information about the Office for Personal Data Protection directly at the Office’s website at https://www.uoou.cz.
If you have any further queries concerning the processing of your personal data you can contact us at firstname.lastname@example.org or email@example.com. You can always find a current version of this document at https://pragster.cz/gdpr. This version is effective from 25 May 2018.