Personal data protection
Since 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation” or “GDPR”) and Act No. 101/2000 Coll. on the protection of personal data and amending and supplementing certain laws (hereinafter referred as the “Data Protection Act”). Personal data protection is of great importance to SPP Storage, s.r.o. (“SPP Storage, s.r.o.” or “the Company”), and therefore, the processing of personal data is carried out in accordance with the requirements of these legal regulations, with a particular emphasis on the security and protection of personal data.
Fulfilling the duty to inform
Information relating to the processing of personal data concerning the data subject shall be provided by the Company to the data subject in accordance with the GDPR and the Data Protection Act (i.e. at the time of collection from the data subject or, if the personal data has been obtained from another source, within a reasonable period of time after collection).
Rights of data subjects
Detailed information on the individual rights of the data subject, including how they are exercised, is provided in the information relating to the specific purpose of the processing (for example, when processing personal data of job applicants, all required information is included in the information processed by the Company for this specific purpose) and is available on the Company's website in the Personal Data Protection section.
- Information on personal data processing – camera systems
- Information on personal data processing – access systems
- Information on personal data processing – job applicant
- Information on personal data processing – external requests
Information on personal data processing – camera systems
As of 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) – “GDPR” applies.
In accordance with Art. 13 GDPR and the Personal Data Processing Act No. 110/2019 Coll., SPP Storage, s.r.o. is obliged to provide you with the following information:
Identity and contact details of the controller:
Pursuant to Article 4(7) GDPR, the controller is SPP Storage, s.r.o., building No. 891, 696 17 Dolní Bojanovice, registered in the Commercial Register maintained by the Regional Court in Brno, file no. C 107605, contact details: e-mail: podatelna@sppstorage.cz, website: www.sppstorage.cz (the “Company”).
Purpose and legal basis for processing personal data:
The purpose is to monitor the Company's administrative premises and technological facilities so as to (i) protect property, including the safe operation of technological equipment, (ii) control access to the Company's premises and premises, in which the Company carries out its activities, including monitoring unauthorised/forced entry to such premises and facilities, (iii) protect employees and persons entering the Company's premises and the premises, in which the Company carries out its activities with its consent. The legal basis is GDPR Article 6(1)(f), s.5 of the Personal Data Processing Act and s.60(8)(a) of Act No. 458/2000 Coll. – the processing of personal data is necessary for the Company's legitimate interests.
Recipients or categories of recipients:
The recipients are the Company's employees who, due to their job title and on the basis of the Company's mandate, are authorized to process personal data related to CCTV systems, and also security systems operators and law enforcement authorities.
Transfer of personal data to a third country or international organisation:
The Company does not transfer your personal data to any third country or to any international organization.
Personal data retention period:
14 days.
Your rights as a data subject:
You have the right to request access to your personal data at any time – based on your request, the Company will provide you with information about what personal data it processes about you, for what purpose, from what source the personal data was obtained, to whom the personal data was provided and the expected retention period of the personal data. The Company has the right to refuse to provide your personal data if such provision would adversely affect the rights of others. You have the right to request at any time the correction of inaccurate personal data or to have incomplete personal data completed. You also have the right to request the erasure of personal data that is no longer necessary for the purpose, for which it was originally collected or processed. You have the right to request a restriction of processing of your personal data – you can ask the Company not to delete your personal data that it would otherwise be obliged to delete, and you can also ask the Company to discontinue processing your personal data until it is proved whether the data processed is accurate or whether your objection to the processing of personal data was justified. The Company has the right to refuse to provide your personal data if such provision would adversely affect the rights of others. You have the right to object to the processing of your personal data at any time. If you do so, your personal data will continue to be processed by the Company only if it is proved that there are compelling legitimate grounds for doing so. If you believe that your rights have been violated in connection with the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, website: www.uoou.cz
How can you exercise your rights?
You can exercise your rights with the controller – the Company in one of the following ways: in writing or by email (contact details are listed in point 1 above).
Does the processing of your personal data involve automated decision-making, including profiling?
Automated decision-making means decision-making, which is carried out by a machine (computer) without human intervention and which has legal or other similarly serious consequences for you. No such processing takes place in the Company.
-----------------------------------------------------------------------------------------------
Note: The implementation of GDPR into the Czech legal system is done through Act No. 110/2019 Coll. on the processing of personal data (“Personal Data Processing Act”).
The current version of the information on personal data processing is available on the Company's website
Information on personal data processing – access systems
As of 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) – “GDPR” applies.
In accordance with Art. 13 GDPR and the Personal Data Processing Act No. 110/2019 Coll., SPP Storage,s.r.o. is obliged to provide you with the following information:
Identity and contact details of the controller:
Pursuant to Article 4(7) GDPR, the controller is SPP Storage, s.r.o., building No. 891, 696 17 Dolní Bojanovice, registered in the Commercial Register maintained by the Regional Court in Brno, file no. C 107605, contact details: e-mail: podatelna@sppstorage.cz, website: www.sppstorage.cz (the “Company”).
Purpose and legal basis for processing personal data:
The purpose is to control (control and record) the entry of employees and persons entering the Company's premises and premises, in which the Company carries out its activities, with its consent, to protect property, including the safe operation of technological facilities, and to prevent unauthorized persons from entering selected premises and buildings. The legal basis is GDPR Article 6(1)(f) and s.13(1)(f) of the Personal Data Processing Act – the processing of personal data is necessary for the Company's legitimate interests.
Recipients or categories of recipients:
The recipients are the Company's employees who, due to their job title and on the basis of the Company's mandate, are authorized to process personal data related to access systems, and also security service operators and law enforcement authorities.
Transfer of personal data to a third country or international organisation:
The Company does not transfer your personal data to any third country or to any international organization.
Personal data retention period:
1 year, unless otherwise provided for by special legislation
Your rights as a data subject:
You have the right to request access to your personal data at any time – based on your request, the Company will provide you with information about what personal data it processes about you, for what purpose, from what source the personal data was obtained, to whom the personal data was provided and the expected retention period of the personal data. The Company has the right to refuse to provide your personal data if such provision would adversely affect the rights of others. You have the right to request at any time the correction of inaccurate personal data or to have incomplete personal data completed. You also have the right to request the erasure of personal data that is no longer necessary for the purpose, for which it was originally collected or processed. You have the right to request a restriction of processing of your personal data – you can ask the Company not to delete your personal data that it would otherwise be obliged to delete, and you can also ask the Company to discontinue processing your personal data until it is proved whether the data processed is accurate or whether your objection to the processing of personal data was justified. The Company has the right to refuse to provide your personal data if such provision would adversely affect the rights of others. You have the right to object to the processing of your personal data at any time. If you do so, your personal data will continue to be processed by the Company only if it is proved that there are compelling legitimate grounds for doing so. If you believe that your rights have been violated in connection with the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, website: www.uoou.cz
How can you exercise your rights?
You can exercise your rights with the controller – the Company in one of the following ways: in writing or by email (contact details are listed in point 1 above).
Does the processing of your personal data involve automated decision-making, including profiling?
Automated decision-making means decision-making, which is carried out by a machine (computer) without human intervention and which has legal or other similarly serious consequences for you. No such processing takes place in the Company.
----------------------------------------------------------------------------------------------
Note: The implementation of GDPR into the Czech legal system is done through Act No. 110/2019 Coll. on the processing of personal data (“Personal Data Processing Act”).
The current version of the information on personal data processing is available on the Company's website.
Information on personal data processing – job applicant
As of 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) – “GDPR” applies.
In accordance with Art. 13 GDPR and the Personal Data Processing Act No. 110/2019 Coll., SPP Storage,s.r.o. is obliged to provide you with the following information:
Identity and contact details of the Controller:
Pursuant to Article 4(7) GDPR, the controller is SPP Storage, s.r.o., building No. 891, 696 17 Dolní Bojanovice, registered in the Commercial Register maintained by the Regional Court in Brno, file no. C 107605, contact details: e-mail: podatelna@sppstorage.cz, website: www.sppstorage.cz (the “Company”).
Purpose and legal basis for processing personal data:
The Company processes your personal data in connection with the advertised job offer and for the purpose of concluding an employment contract or other employment relationship. The legal basis for processing your personal data is the implementation of pre-contractual measures (Art. 6(1)(b)) GDPR.
The source of your personal data:
The Company processes your personal data:
a) Referred to in the CV or cover letter that you have delivered to the Company;
b) Made available in a CV database on an internet portal www.profesa.cz, www.jobs.cz or on other portals used for the publication of vacancies;
c) Provided by an employment agency that processes personal data provided by you.
Recipients or categories of recipients:
The recipients are employees of the company who are authorised to process personal data related to the agenda of job seekers with regard to their job title and on the basis of the Company's mandate.
Transfer of personal data to a third country or international organisation:
The Company does not transfer your personal data to any third country or to any international organization.
Personal data retention period:
The Company will store your personal data only for the duration of the job selection process and the subsequent processing of the final assessment of the fulfilment of the conditions required by the Company from individual candidates, or until the job subject to the selection process is filled. The data retention according to the previous sentence may be extended upon your explicit consent.
Your rights as a data subject:
You have the right to request access to your personal data at any time – based on your request, the Company will provide you with information about what personal data it processes about you, for what purpose, from what source the personal data was obtained, to whom the personal data was provided and the expected retention period of the personal data. You have the right to request at any time the correction of inaccurate personal data or to have incomplete personal data completed. You also have the right to request the erasure of personal data that is no longer necessary for the purpose, for which it was originally collected or processed. You have the right to request a restriction of processing of your personal data – you can ask the Company not to delete your personal data that it would otherwise be obliged to delete, and you can also ask the Company to discontinue processing your personal data until it is proved whether the data processed is accurate or whether your objection to the processing of personal data was justified. You have the right to object against the processing of your personal data at any time (only for personal data, for which the legal basis for processing is the legitimate interest of the Company). If you do so, your personal data will continue to be processed by the Company only if it is proved that there are compelling legitimate grounds for doing so.
If you believe that your rights have been violated in connection with the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, website: www.uoou.cz
How can you exercise your rights?
You can exercise your rights (including your right to withdraw your consent) with the controller – the Company in one of the following ways: in writing or by email (contact details are listed in point 1 above).
Information pursuant to Art. 13(2)(e) GDPR
The provision of your personal data related to job applications and its scope is a requirement essential to conclude an employment or similar contract in case of successful completion of the selection procedure.
Does the processing of your personal data involve automated decision-making, including profiling?
Automated decision-making means decision-making, which is carried out by a machine (computer) without human intervention and which has legal or other similarly serious consequences for you. No such processing takes place in the Company.
The Company will process the following personal data:
First name and surname
Date of birth
Address of residence or, where applicable, contact address
Educational qualifications (including relevant documents)
Information on previous work experience
Email address
Telephone
Information on personal data processing – external requests
As of 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – “GDPR” applies.
In accordance with Art. 13 GDPR, SPP Storage, s.r.o., is obliged to provide the following information:
Identity and contact details of the controller:
Pursuant to Article 4(7) GDPR, the controller is SPP Storage, s.r.o., building No. 891, 696 17 Dolní Bojanovice, registered in the Commercial Register maintained by the Regional Court in Brno, file no. C 107605, contact details: e-mail: podatelna@sppstorage.cz, website: www.sppstorage.cz (the “Company”).
Purpose and legal basis for processing personal data:
The processing of personal data is necessary to assess requests from external entities and to issue opinions on activities, projects or for other purposes in accordance with specific legislation (e.g. the Construction Act, the Planning Act, the Energy Act, the Mining Act, etc.).
The legal basis is Article 6(1)(c) and s.68(4) and s.69(3) of Act No. 458/2000 Coll., i.e. the fulfilment of the Company’s legal duty. It is therefore a legal requirement to provide personal data. If you do not provide personal data to the Company, it will not be possible to properly assess your request.
Source where your personal data comes from:
The Company processes your personal data:
a) Sent to the Company;
b) To competent construction authorities and other state administration bodies competent to request an opinion;
c) Sent to representatives you delegated to carry out legal acts related to construction permission proceedings / buying a plot.
Recipients or categories of recipients:
Recipients include employees of the Company who, in accordance with their job title and on the basis of the Company's mandate, are authorized to process personal data related to the registration of requests from external entities for opinion on an activity, project or other intent in accordance with personal legislation, construction authorities or other government bodies entitled to request the Company’s opinion under special legislation.
Transfer of personal data to a third country or international organisation:
The Company does not transfer your personal data to any third country or to any international organization.
Personal data retention period:
10 years.
Your rights as a data subject:
You have the right to request access to your personal data at any time – based on your request, the Company will provide you with information about what personal data it processes about you, for what purpose, from what source the personal data was obtained, to whom the personal data was provided and the expected retention period of the personal data. The Company has the right to refuse to provide your personal data it processes, if such provision would adversely affect the rights of others. You have the right to request at any time the correction of inaccurate personal data or to have incomplete personal data completed. You also have the right to request the erasure of personal data that is no longer necessary for the purpose, for which it was originally collected or processed. You have the right to request a restriction of processing of your personal data – you can ask the Company not to delete your personal data that it would otherwise be obliged to delete, and you can also ask the Company to discontinue processing your personal data until it is proved whether the data processed is accurate or whether your objection to the processing of personal data was justified.
If you believe that your rights have been violated in connection with the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, website: www.uoou.cz
How can you exercise your rights?
You can exercise your rights with the controller – the Company in one of the following ways: in writing or by email (contact details are listed in point 1 above).
Does the processing of your personal data involve automated decision-making, including profiling?
Automated decision-making is decision-making, which is carried out by a machine (computer) without human intervention and which has legal or other similarly serious consequences for you. No such processing takes place in the Company.
What personal data will be processed:
In addition to the personal data listed in deeds of ownership registered in the Land Registry, the Company will also process:
Contact address
Email address
Telephone
Other information specified in the request for opinion / in the request of the construction authority / other government body authorized to request opinion of the Company under special legislation.