Profinit’s Privacy Statement

Since the protection of your personal data is important to us, Profinit EU, s.r.o., with registered office at Tychonova 270/2, Hradčany, 160 00 Prague 6, ID No.: 04434081, registered in the Commercial Register maintained by the Municipal Court in Prague under the Commercial Register No. C 247646 (hereinafter also referred to as the “Controller”), we will follow the following principles to ensure the highest level of protection of your personal data.

This declaration and the subsequent processing of personal data are governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the European Council dated on 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), (hereinafter referred to as “GDPR”). Cases that are not regulated by the GDPR or expressly allow their regulation to be delegated to the national level are governed by Act No. 110/2019 Coll. on the processing of personal data, as amended.

This statement may be amended by the Controller at any time, in particular in the event of changes in the relevant legislation relating to the protection of personal data, so in your own interest we recommend that you monitor our website for any updates to this statement.

First, we would like to explain some basic concepts to help you better understand the following text of this declaration.

Personal data “Personal data is any information about an identified or identifiable natural person (data subject). An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier (name, surname, number, network identifier) or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

Data subject “The Data subject is the natural person to whom the personal data relate and who is identifiable or identifiable from the personal data.”

Data controller “The Controller is the natural or legal person who determines the purposes and means of the processing of personal data and is primarily responsible for the processing. Unless otherwise specified in this policy or in the terms of a particular service, the controller of personal data is Profinit EU, s.r.o.”

Personal data processor “A processor is a natural or legal person who, on the basis of instructions from the controller, processes personal data for the controller.”

Processing of personal data “Processing is any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction.”

How do we process data?

We process the personal data provided by you on the basis of a lawful reason according to Article 6 GDPR paragraph 1 (b), namely if the processing is necessary for the performance of a contract or according to (c) to comply with a legal obligation or according to (f) if it is necessary for the purposes of the legitimate interests of the Controller. In addition, also according to point a) on the basis of your consent to the processing of such data where the legitimate interests according to the aforementioned provision are not sufficient as a lawful ground for processing.

Personal data is processed for the purposes of performance under existing contractual relationships and contractual relationships under negotiation.

We only ever use the personal data you provide for the purpose for which the data was disclosed or otherwise provided to us and we always transparently inform the user of this purpose.

What data do we process?

As part of our communications and business relationships, we collect the following personal data:

  • salutation/title
  • name
  • surname
  • contact address (for employment)
  • e-mail address
  • phone number (or numbers, if you give them to us)
  • IP address

Retention period of personal data

We retain the data for the period necessary for the purposes of performance under the contract and for the period necessary to comply with legal obligations or to protect our rights. Data provided on the basis of the data subject’s consent will be retained for the period specified in the consent. If you exercise your right to be forgotten or withdraw the consent given, the data will of course be retained for a shorter period.

Data transmission

The Controller is entitled to process personal data both automatically and manually, also together with other controllers or through designated processors. Personal data are/will only be made available to authorised employees of the Controller or employees of the processor, and only to the extent necessary for the purposes of processing. Transfers of personal data to other controllers or processors are kept to a minimum and all contractual relationships are based on processing agreements in which the other controllers or our processors have guaranteed to take measures to ensure the same level of security of personal data as provided by our company.

Cookies

To make our offer relevant to you, the profinit.eu website uses text cookies. You can learn more about them here, where you can also manage them.

Data security

To achieve the highest possible level of protection for the personal information you provide, we use certain technologies and security features.  While we do our best to protect your personal information from loss, misuse, unauthorized access, alteration or disclosure, it is never possible to ensure 100% control. Therefore, in the event of any incidents that reach a certain level of risk, we will notify you immediately.

CCTV footage

In order to protect property and prevent damage, the Controller monitors the movement of persons on its premises by means of camera systems with recording. The areas where the cameras are placed are always marked with a warning. In this case, after a balancing test has been carried out, the legal basis for this processing is the legitimate interest of the controller according to Article 6 GDPR paragraph 1 (f). If the recordings are not judged necessary for the purposes of criminal, administrative or other similar proceedings, they will be deleted within 7 days of their acquisition at the latest.

Personal data subjects’ rights

In order to respect the principle of transparency in the processing of personal data, we are happy to provide you with information on what personal data we process at the contact details below.

Where legally possible, you have the right to amend or correct the personal data we hold about you.

If the processing of your personal data is based on your consent, you have the right to restrict this processing, withdraw your consent or even have any data we hold based on your consent erased. The exceptions to this are where the processing is carried out because of a legal obligation or because of our legitimate interest.

You also have the right to a copy of the personal data we hold about you, including its sources, purposes and methods of processing, electronic decision-making and the parties with whom we share your data. We will endeavour to make the information you request available to you within a reasonable time. Depending on what information you request, we may charge you a small fee to the extent permitted by applicable law.

If you believe that the Controller’s processing of your personal data violates the GDPR, you have the right to object to the processing and also the right to file a complaint with the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7.

Contact details

In case of questions, complaints, comments or exercising the rights of data subjects, please contact us at the following email address: gdpr@profinit.eu