Conditions for the General Data Protection Regulation – GDPR

Basic Provisions

Pursuant to Article 4, Par. 7 of the Regulation (EC) of the European Parliament and of the Council 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR"), the administrator of the personal data is MVB OPAVA CZ s.r.o. Reg. No. 25867326, registered address Ostravská 350/2b, 747 70 Opava 9 (hereinafter referred to as: "Administrator").

The Administrator's contact data:

Address: Ostravská 350/2b, 747 70 Opava - Komárov

E-mail: mvb@mvb.cz

Phone No.: +420 553 780 331

The personal data are any information on an identified or identifiable natural person; an identifiable person is a natural person who can be identified, directly or indirectly by reference to a certain identifier such as name, ID number, tracking data, network identifier or to one or more specific factors of a physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

The Administrator has not appointed a person in charge of the personal data protection.

Sources and categories/scope of the processed personal data

The Administrator processes personal data provided by you or personal data obtained by the Administrator on the basis of your order.

The Administrator processes your identification and contact data and data necessary for the execution of the contract:

the name, surname, date of birth, address of permanent residence, mailing address, telephone number, e-mail address, bank account number and the data communicated to the Administrator by the data subject during negotiations regarding conclusion of a contract, or change of an already concluded contract and during the performance of the contract.

The lawful grounds and purpose of personal data processing

The lawful ground for the processing of personal data is:

the performance of a contract between you and the Administrator pursuant to Article 6, Par. 1, Letter b) GDPR,

The purpose of the personal data processing is:

execution of your order and exercise of the rights and obligations arising from the contractual relationship between you and the Administrator; when ordering, personal data essential for successful execution of the order are required (name and address, contact); the provision of the personal data is a necessary requirement for the conclusion and implementation of the contract; without providing personal data, the Administrator cannot conclude the contract and execute it.

The Administrator is not involved in automatic individual decision-making pursuant to Article 22 GDPR.

The personal data are processed manually in a written form and automatically in an electronic form.

The data storage period

The Administrator stores the personal data:

for a period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Administrator and claims of these contractual relations (for 10 years after the termination of the contract).

After this period for the personal data storage, the Administrator deletes the personal data.

Personal data recipients (Administrator's subcontractors)

The personal data recipients are persons:

involved in delivery of goods / services / implementation of payments on the basis of a contract,
involved in servicing and claiming of the goods on the basis of a contract,
providing services for the website operation and other service related to the operation of the website.

The administrator has no intention to pass the personal data to a third country (outside the EU) or an international organization.

Your rights

Under the conditions laid down in GDPR, you have the right to:

access your personal data pursuant to Article 15 GDPR,
correct personal data pursuant to Article 16 GDPR or restrict its processing pursuant to Article 18 GDPR.
erase the personal data pursuant to Article 17 GDPR.
object to the processing pursuant to Article 21 GDPR and
transferability of the data pursuant to Article 20 GDPR.

You have also the right to make a complaint to the Office for the Protection of Personal Data if you believe that your right to the personal data protection has been violated.

Conditions for personal data security

The Administrator declares that he has adopted all appropriate technical and organizational measures to ensure the security of the personal data.
The Administrator has adopted technical measures to protect data storages and storages of personal data in the paper form, especially the data security and technical security (passwords, encryption, access restrictions by means of AD, locked rooms for storing personal data).
The Administrator declares that only persons authorised by the Administrator have access to the personal data.

Final provisions

We hereby inform all customers and suppliers of the above-mentioned Administrator about the terms of personal data protection.
The Administrator has the right to change these terms. He shall issue a new version of the personal protection terms on his website and send you a link to the new version of these terms on your e-mail address that you have provided to the Administrator.

These terms take effect on 25 May 2018.