Personal data protection (GDPR)

Declaration on the processing of personal data of customers of inzagi s.r.o.

in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council in relation to the processing of personal data and the instruction of data subjects

The company inzagi s.r.o., registered office: Purkyňova 648/125, Brno, ID No.: 03623947 (hereinafter referred to as inzagi), processes personal data of natural persons as a data controller when providing its services in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as GDPR) effective from 25 May 2018 and applicable Czech legislation. We therefore set out below the principles and legal grounds for the processing of personal data. For what purposes and for how long inzagi processes this personal data, to whom and for what reason it may transfer it, as well as what rights individuals are entitled to in connection with the processing of their personal data.

1. Scope of the processing of personal data

Personal data is processed to the extent that the data subject (customers of natural persons, own employees, representatives of customers, if the customer is a legal entity) has provided it to inzagi, in connection with the conclusion of a contractual or other legal relationship with inzagi, or which inzagi has otherwise collected and processes in accordance with applicable law or to fulfil the legal obligations of the controller.

2. Sources of personal data

• Directly from an individual in the context of a contract, order and request for services, negotiations, etc.
• from a legal person in connection with the conclusion of a contractual relationship
• from a legal obligation

3. Categories of personal data subject to processing

• address and identification data used to uniquely and unmistakably identify a natural person (e.g. name, surname, date of birth, permanent address)
• data enabling contact with the natural person (contact details – e.g. contact address, telephone number, e-mail address and other similar information)
• personal data required by law
• economic data (e.g. bank details – account number)
• other data necessary for the performance of the contract

4. Purpose of processing personal data

Inzagi processes personal data of natural persons for the following reasons:

1. performance of the contract (order) concluded by the client with inzagi, in particular for the provision of the ordered services
2. legal obligation (e.g. Accounting Act, Value Added Tax Act, Archive and File Service Act, Classified Information Protection Act)
3. the legitimate interest of the administrator (recovery of outstanding debts, securing evidence in case of the need to defend the rights of inzagi)
4. direct marketing (sending information about inzagi’s services) to customers

With regard to these purposes, inzagi only processes personal data that are specified in the contract (order) or that it obtains from the natural person in the course of the performance of the contract, order (see previous point 3. Categories of personal data). The processing of personal data of the natural person for the purpose of the performance of the contract is a necessary requirement for the actual conclusion of the contract and the provision of performance by inzagi.

5. Does inzagi need the consent of the natural person to process personal data?

inzagi only processes personal data according to the previous point 4. a) to d) only in the modes for which it does not need the consent of the natural person.

6. How long does inzagi process personal data?

inzagi processes personal data of natural persons for the duration of the contractual relationship. After the end of the contract, inzagi will continue to retain the personal data if it is obliged to do so by law. Currently, this can be up to 10 years after the termination of the contractual relationship. Another reason for retaining personal data may be a legal claim by inzagi to record and recover unpaid amounts for services rendered.

7. Method of processing personal data

inzagi processes personal data manually, no natural person is subject to a decision based solely on automated processing, including profiling, which would have any legal effect on the natural person or could similarly affect the natural person.

inzagi does not currently process cookie logs from the inzagi website.

8. Categories of recipients of personal data

inzagi also uses the services of other suppliers in the performance of its obligations and duties under contracts. Insofar as these suppliers process the personal data transmitted to inzagi, they have the status of so-called data processors. In this case, the processor processes the personal data according to inzagi’s instructions and may not use it in any other way. inzagi carefully selects such suppliers and concludes a personal data processing agreement with each processor, which sets out strict obligations for the processor to protect and secure the personal data.

inzagi may also have a legal obligation to provide personal data to government authorities in certain cases. inzagi does not transfer personal data outside the EU.

9. Rights of natural persons – personal data subjects

Every personal data subject has the right to information about the processing of personal data. inzagi has summarized this information in this “Declaration”. If you do not find what you are looking for in this “Declaration”, please contact our company: info@inzagi.cz or at our registered office, i.e. inzagi s.r.o., Purkyňova 648/125, 612 00 Brno.

According to the GDPR regulation, as of 25 May 2018, the data subject has the following rights if he/she is an identifiable natural person for inzagi and proves his/her identity:

• the right to access, rectification or deletion of personal data – the data subject has the right to information about the purpose of processing, its scope or storage period, at the same time has the right to have only accurate personal data processed that correspond to the reality – this also includes the right to rectification of inaccurate personal data, if the purpose or legal basis on which the personal data was processed has already passed, he has the right to have it deleted
• the right to object – the subject may object at any time if he/she considers that the processing is in breach of the law, and if the objection is justified, the subject is obliged to terminate the processing of personal data
• the right to data portability – if inzagi asks the subject to transfer his or her personal data to another controller, it will do so to the extent that the subject requests it
• the right to lodge a complaint with the Office for Personal Data Protection – at any time, the subject may lodge a complaint with the Office for Personal Data Protection: uoou.cz
• the right to restriction of processing – if the processed data of the subject are inaccurate, inzagi will restrict their processing for the time necessary to correct or complete them, it will also restrict the processing of inzagi for the time it verifies that the objection raised is legitimate
• the right to notification of a personal data breach – this right consists of the obligation for inzagi to notify the subject in accordance with the law where there is a personal data breach of the subject which results in a high risk to the rights and freedoms of the natural person concerned