GDPR / Privacy Policy

Privacy Policy Statement

According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1. Personal Data Controller
Name: Jiří Matyáš
Company ID: 01386450
Registered Office: č. p. 287, 561 34 Výprachtice
E-mail: autodopravamatyas@seznam.cz

2. Purposes of Personal Data Processing

We process your personal data for the following purposes:

• maintaining documentation related to our business activities and commercial cases
• managing ordering systems
• maintaining client and employee records
• preparing reports for public authorities
• accounting and tax operations
• maintaining complaint records
• maintaining records of disposed documentation
• handling claims and complaints
• maintaining records of income, expenses, received payments, and financial management as required by tax and accounting regulations
• sending commercial communications

3. Legal Basis for Personal Data Processing

The legal basis for processing your personal data referred to in Section 2 is:

• compliance with our legal obligations (in particular Act No. 563/1991 Coll., on Accounting, Act No. 586/1992 Coll., on Income Taxes, and Act No. 634/1992 Coll., on Consumer Protection)
• performance of obligations arising from a contract under which we provide our services to you (the contract does not necessarily have to be concluded in writing)
• in the case of occasional commercial communications related to sold products or services, we process your personal data (e-mail address, first name, surname, date of birth) based on our legitimate interest, as we believe you may be interested in similar products and services
• the client’s consent to receive commercial communications

4. Recipients of Personal Data

In accordance with applicable legal regulations, recipients of your personal data may include public authorities in specific cases. For the purposes described above, personal data may also be processed by data processors acting on behalf of the controller under data processing agreements concluded in compliance with the General Data Protection Regulation. We do not transfer your personal data abroad.

5. Retention Period of Personal Data

Personal data contained in business documentation are processed for the period specified by applicable legal regulations or for the duration of our business relationship, and subsequently for one year after you cease to be our client.

6. Rights of the Data Subject
When processing your personal data, you have the following rights:

• the right to request access to your personal data
• the right to rectification of your personal data
• the right to restriction of processing

Restriction of processing means that we must mark your personal data whose processing has been restricted and, for the duration of the restriction, we may not process them further except for storage. You have the right to restriction of processing if:

• you contest the accuracy of the personal data, for the period necessary to verify its accuracy
• the processing is unlawful and you oppose the erasure of the personal data and request restriction instead
• we no longer need your personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims
• you have objected to processing as described in Section 7, pending verification whether our legitimate grounds override your interests or rights and freedoms
• the right to erasure of personal data. This right applies only to personal data processed for purposes other than providing our services. Data processed for the provision of our services may not be erased where retention is required by law.
• the right to data portability. You may request that we provide your personal data to you for transfer to another controller, or that we transfer them ourselves. This right only applies to data processed automatically based on your consent or a contract with you. Data processed for the provision of our services may only be provided to you and, under legal conditions, to public authorities.
• the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

7. Right to Object to Processing

If we process your personal data based on our legitimate interests or those of a third party (the legal bases are listed in Section 3), you have the right to object to such processing at any time. You may submit your objection to the address listed in Section 1. If you object, we may continue processing only if we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.

8. Mandatory Processing and Obligation to Provide Personal Data

Processing your personal data for the purpose of providing our services is a legal requirement.