Privacy Guidelines
This document provides you with the information how we treat your personal data obtained from you or in connection with our business. Your privacy rights are regulated in Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). This document is to inform you on the most important privacy rights you have and the processing practices.
Article I
Basic Controller’s Data
Company’s identification data: CZ07571186
Corporate name: Valner Studio s.r.o.
Registered office: Pekařská 616/12, 779 00 Olomouc, Czech Republic
Email: studio@valner.cz
Web: www.valner.cz
(the ‘Company’)
Article II
Data Protection Officer
No data protection officer is appointed.
Article III
Purpose of Personal Data Processing
We primarily process your personal data in order to be able to provide you with the contracted performance. We are authorised to process your personal data for such a purpose if that is necessary for us to perform the contract you have made or plan to make with us.
We also process personal data to fulfil the duties owed to public authorities. We also process your personal data in order to comply with our statutory duties. We are authorised to process your personal data for such a purpose if that is necessary for us to comply with a duty we have.
Also, we may process your personal data if we have a legitimate interest to do so. Our legitimate purposes are document the performance provided by us, defend and exercise our rights, and process and respond to your comments and queries; we process your personal information to no higher extent than necessary for us to pursue these legitimate purposes.
We also process your personal data in order to inform you about our special offer campaigns and interesting business information. Consequently, such processing’s purpose lies in direct marketing, particularly offering news, products and services, purchasing opportunities or other corporate events. Such processing’s legal basis lies in our legitimate interest. We have obtained your contact information from you or you have willingly published it or provided for publication.
If you wish to receive no marketing information any longer, just opt out any time by clicking the link included in each email message or effecting any other proven communication addressed to us, such as by sending an email to info@valner.cz or a letter to Valner Studio, Wolkerova 801/48, 779 00 Olomouc, Czech Republic.
Article IV
Extent of Personal Data Processed
We only process the personal data provided for us by you knowingly and willingly, the data generated in the course of our business and the information published or provided for publication willingly by you, and only that information that is necessary for us to achieve the purpose for which the information has been collected. We only request those data which are necessary for us to perform our contractual obligations or statutory duties or achieve our legitimate interests communicated to you.
Personal data will be subject to no decision-making based solely on automated processing that would produce legal effects concerning you or affect you significantly.
Article V
Transfers of Personal Data
We transfer no personal data to any entity without the knowledge of the affected data subject. Sometimes personal data may be transferred to third countries outside the European Economic Area (EEA), such as the USA. If personal data are transferred to countries outside the EEA or countries lacking adequate level of protection under the applicable legislation, the GDPR in particular, and other EU or national personal data legislation, such transfers will be effected on the basis of an exception related to the specific situation or we will make sure to obtain adequate guaranties to ensure a GDPR-compliant level of protection.
Article VI
Time of Processing
We keep personal data for a time necessary for us to pursue the purpose for which we have obtained the data. Given statutory duties and statutes of limitation, personal data will usually be processed for a period of 10 years of the termination of contract and the lapse of warranty or other periods. The personal data processed by us in reliance on our legitimate interest are usually processed for a period of three years. Where justified by special reasons, we may decide to keep the data beyond this period.
Article VII
Rights of Affected Persons
In connection with personal data processing you enjoy a range of rights which you may exercise with us under the conditions set out in the General Data Protection Regulation (GDPR):
Article VIII
Access to Personal Data. Security Measures
We make sure that access to the personal data we process is only provided for our employees on the need-to-know basis. Personal data are secured against unauthorised manipulation and alteration.
In some instances we use personal data processors for rendering our services and processing your personal data. These processors process your personal data at our direction and are bound to comply with the personal data protection regulations in force. It is usually companies that provide us with server, web, cloud or IT services and any other persons or companies as we may require.
Your personal data are only transferred to third parties if necessary. All processors and third parties will only have access to your personal data to the extent and for the time as necessary to provide products or services, discharge contractual obligations or statutory duties or exercise our legitimate interests in accordance with law.
If we are requested by judicial or administrative authorities to disclose personal data, we only do so where the law compels us to.
We never transfer, sell and exchange your personal data with third parties for trading purposes.
If you are a legal entity, you undertake to communicate these guidelines to your agents, contact persons and employees. If you provide us with third parties’ personal data, you undertake to communicate these guidelines to those third parties.
These guidelines take force and effect on 25 May 2018.
Article I
Basic Controller’s Data
Company’s identification data: CZ07571186
Corporate name: Valner Studio s.r.o.
Registered office: Pekařská 616/12, 779 00 Olomouc, Czech Republic
Email: studio@valner.cz
Web: www.valner.cz
(the ‘Company’)
Article II
Data Protection Officer
No data protection officer is appointed.
Article III
Purpose of Personal Data Processing
We primarily process your personal data in order to be able to provide you with the contracted performance. We are authorised to process your personal data for such a purpose if that is necessary for us to perform the contract you have made or plan to make with us.
We also process personal data to fulfil the duties owed to public authorities. We also process your personal data in order to comply with our statutory duties. We are authorised to process your personal data for such a purpose if that is necessary for us to comply with a duty we have.
Also, we may process your personal data if we have a legitimate interest to do so. Our legitimate purposes are document the performance provided by us, defend and exercise our rights, and process and respond to your comments and queries; we process your personal information to no higher extent than necessary for us to pursue these legitimate purposes.
We also process your personal data in order to inform you about our special offer campaigns and interesting business information. Consequently, such processing’s purpose lies in direct marketing, particularly offering news, products and services, purchasing opportunities or other corporate events. Such processing’s legal basis lies in our legitimate interest. We have obtained your contact information from you or you have willingly published it or provided for publication.
If you wish to receive no marketing information any longer, just opt out any time by clicking the link included in each email message or effecting any other proven communication addressed to us, such as by sending an email to info@valner.cz or a letter to Valner Studio, Wolkerova 801/48, 779 00 Olomouc, Czech Republic.
Article IV
Extent of Personal Data Processed
We only process the personal data provided for us by you knowingly and willingly, the data generated in the course of our business and the information published or provided for publication willingly by you, and only that information that is necessary for us to achieve the purpose for which the information has been collected. We only request those data which are necessary for us to perform our contractual obligations or statutory duties or achieve our legitimate interests communicated to you.
Personal data will be subject to no decision-making based solely on automated processing that would produce legal effects concerning you or affect you significantly.
Article V
Transfers of Personal Data
We transfer no personal data to any entity without the knowledge of the affected data subject. Sometimes personal data may be transferred to third countries outside the European Economic Area (EEA), such as the USA. If personal data are transferred to countries outside the EEA or countries lacking adequate level of protection under the applicable legislation, the GDPR in particular, and other EU or national personal data legislation, such transfers will be effected on the basis of an exception related to the specific situation or we will make sure to obtain adequate guaranties to ensure a GDPR-compliant level of protection.
Article VI
Time of Processing
We keep personal data for a time necessary for us to pursue the purpose for which we have obtained the data. Given statutory duties and statutes of limitation, personal data will usually be processed for a period of 10 years of the termination of contract and the lapse of warranty or other periods. The personal data processed by us in reliance on our legitimate interest are usually processed for a period of three years. Where justified by special reasons, we may decide to keep the data beyond this period.
Article VII
Rights of Affected Persons
In connection with personal data processing you enjoy a range of rights which you may exercise with us under the conditions set out in the General Data Protection Regulation (GDPR):
- Right to access to your data – we will tell you whether or not we process you personal data; if we do, we will also disclose your data to you and tell you how we process them.
- Right to rectification – if you find out the data we have about you are incorrect, you may request any time that we should rectify the data and we will do so.
- Right o erasure – at your request we will erase the personal data which concern you if we need your data no longer, you withdraw your consent to our processing your data, you object to the processing of your data, your data are processed contrary to law, we are required by law or other legal regulation to erase the data or the data have been collected in connection with an information society services offer addressed to a child. We only may refuse to erase your data on the grounds set out in the GDPR.
- Right to restricted processing – you may also request restricted processing. This means we will keep your data but will not access and dispose of them.
- Right to data portability – if you have provided us with your data in a structured and machine-readable format, we will transfer such data to other controller at your request.
- Right to object to processing – you may raise objection if you believe your right to the privacy of the data we process about you is stronger than our interest in processing those data; if you raise such an objection, we will carefully review the degree of our legitimate interest and notify you of our conclusion. Until that time we will discontinue processing your data.
- Right to complain with Personal Data Protection Authority – if you believe we infringe on your rights, you may complain about us with the Personal Data Protection Authority. However, we kindly ask you to communicate your complaints to us first. You may contact us any time by email on info@valner.cz or phone on +420 777 750 108
Article VIII
Access to Personal Data. Security Measures
We make sure that access to the personal data we process is only provided for our employees on the need-to-know basis. Personal data are secured against unauthorised manipulation and alteration.
In some instances we use personal data processors for rendering our services and processing your personal data. These processors process your personal data at our direction and are bound to comply with the personal data protection regulations in force. It is usually companies that provide us with server, web, cloud or IT services and any other persons or companies as we may require.
Your personal data are only transferred to third parties if necessary. All processors and third parties will only have access to your personal data to the extent and for the time as necessary to provide products or services, discharge contractual obligations or statutory duties or exercise our legitimate interests in accordance with law.
If we are requested by judicial or administrative authorities to disclose personal data, we only do so where the law compels us to.
We never transfer, sell and exchange your personal data with third parties for trading purposes.
If you are a legal entity, you undertake to communicate these guidelines to your agents, contact persons and employees. If you provide us with third parties’ personal data, you undertake to communicate these guidelines to those third parties.
These guidelines take force and effect on 25 May 2018.