Czechoslovak Group (CSG) is a global industrial and technology group based in the heart of Europe, building on the heritage of Czechoslovak industry.
PERSONAL DATA PROCESSING POLICY
This Personal Data Processing Policy (hereinafter the "Policy") of CSGM a.s., having its registered office at Pernerova 691/42, Prague 8, Czech Republic, ID No.: 013 84 694, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File 19596 (hereinafter the "CSGM" or "we") contains information about the basic circumstances of the processing of personal data.
We process personal data, including personal data of data subjects located outside the European Union/European Economic Area (hereinafter the "EU"), in accordance with applicable EU law, in particular the General Data Protection Regulation (EU) 2016/679 ("GDPR"). In the event of specific requirements for the processing of personal data in jurisdictions outside the EU, if these impose obligations on us as data controllers beyond the scope of the GDPR, we also respect these local specifics when processing personal data.
This Policy contains the following information:
CSGM is the controller of your personal data within the meaning of the GDPR, i.e. it collects, stores and uses (and otherwise processes) your personal data for the performance of its business activities.
You can contact the controller in the following ways:
Delivery address:CSGM a.s., Pernerova 691/42, Praha 8, Czech Republic
Contact e-mail: email@example.com
We may process your personal data primarily for the following purposes:
contract performance (in particular, the performance of contracts with our business partners, including pre-contractual measures);
compliance with legal obligations (in particular obligations within the meaning of accounting and tax legislation, i.e. the transfer of personal data to the financial administration authorities or other public authorities in accordance with the relevant legislation);
protection of our legitimate interest (e.g. protection of our website and network against misuse, operation of CCTV on our premises, protection of our know-how);
effective communication (especially to facilitate the establishment of business negotiations, to preserve your preferences, etc.);
handling requests received via email and contact forms;
sending commercial messages (newsletter) and targeting advertising.
If you are our customer, we usually process your personal data as follows:
If you are our business partner (supplier), we usually process your personal data as follows:
If you apply for a job with us, we usually process your personal data as follows:
All personal data is processed in a lawful and transparent manner and only adequate, relevant and necessary data in relation to the purpose of the processing is required. Further information is available in the current version here.
LINKS TO THIRD PARTY WEBSITES
Links to the websites of other entities are placed on our Website in order to make our Website more interesting for you as a user. You will only be redirected to the relevant website if you actively click on the link. In this case, your web browser will open the corresponding page. Please note that the personal data processing settings are governed by the policies of the respective website, which are beyond our control.
If you visit our premises that are monitored by CCTV, we usually process your personal data as follows:
If you participate in events that we organise or you provide us with your personal data in the context of events that we otherwise participate in (e.g. events, exhibitions, etc.), we usually process your personal data as follows:
If you consent to the processing of your personal data for the purposes of sending you commercial messages and targeting advertising, you acknowledge that your consent is voluntary and that you may withdraw your consent at any time. Consent is usually granted for a period of 5 years or until revoked.
We only disclose your personal data to authorised employees or individual data processors contracted by CSGM or other data controllers. These are e.g. processors or controllers involved in the delivery of goods/services, making payments, providing marketing services. However, only to the extent necessary for the fulfilment of the individual purposes of processing and on the basis of the corresponding legal title for the processing of personal data. The current list of recipients of CSGM personal data is available upon request.
For the purposes set out in this Policy, we may also transfer personal data to recipients and processors based outside the EU in certain cases. In the case of transfers of personal data to countries outside the EU, if required by applicable data protection legislation, we undertake to take additional measures to ensure adequate protection of personal data through the Standard Contractual Clauses, the current version of which is available at https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX:32021D0914.
In the cases provided for by law, we are entitled or obliged to transfer certain personal data to law enforcement authorities or other public authorities on the basis of applicable legislation, for example.
Personal data of third parties, which means personal data of employees of our business partners, carriers and other individuals involved in cooperation with us, or other data we receive in connection with the conclusion or performance of a contract, will be processed in accordance with the GDPR. We will use this personal data for the purpose of fulfilling contracts with business partners. The business partner hereby acknowledges that we will process the personal data of these third parties for the duration of our contractual relationship and for the period of time stipulated by special legal regulations, if any. They will then be kept for a longer period of time if there is a justified need to keep the data in relation to a specific case. The business partner is obliged to properly instruct its employees and other natural persons involved in the business partner's cooperation with us on the processing of personal data by CSGM.
We process and store your personal data for the period of time necessary to ensure all rights and obligations arising from the relevant contractual relationship and for the period of time for which we are obliged as a data controller to store personal data under generally binding legal regulations or for which you have given us your consent to the processing. In other cases, the processing period is based on the purpose of the processing, which must be proportionate, or is determined by data protection legislation.
For the duration of the contract negotiations (during the tendering process) and for a maximum of 6 months after its completion
* We are entitled to process your e-mail address within the meaning of Section 7(3) of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services), as amended, for the purpose of disseminating commercial messages concerning our own products or services (e.g. in the form of a newsletter) in the event that you have not refused such sending.
As a data subject, you have the following rights under the law, which you can exercise at any time. This includes the right (i) to access personal data, (ii) to rectification of inaccurate or false personal data, (iii) to erasure of personal data if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed or if it is established that they were processed unlawfully, (iv) to restriction of processing of personal data, (v) to the portability of the data; and (vi) the right to object, after which the processing of your personal data will be terminated unless it is demonstrated that there are compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, in particular if the ground is the enforcement of legal claims. You also have the option of contacting the relevant supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (in Czech: Úřad pro ochranu osobních údajů) (www.uoou.cz), to whom you can lodge a complaint.
In the event of repeated or manifestly unjustified requests to exercise the above rights, we shall be entitled to charge a reasonable fee for the exercise of the right in question or to refuse to exercise the right. We would inform you of such a procedure.
To exercise your rights, please contact us by letter to our registered office or by email to firstname.lastname@example.org. We reserve the right to adequately verify the identity of the applicant for the rights in question.
This Personal Data Processing Policy is effective from 25/05/2018
Last updated date November 2023