Personal data processing principles
1. What kind of document is this?
This Personal Data Processing Policy document serves as information documentation pursuant to Article 13 GDPR on the processing of personal data in connection with the use of the Contesaur service and the visit to Contesaur.com.
2. Who are we?
We are Pretty Much Nomads s.r.o., with registered office at Chudenická 1059/30, Hostivař, 102 00 Prague 10, company registered under registration number C 330591, registered at the Municipal Court in Prague, ID number 090 83 863 and we provide the Contesaur service.
In this context, we are the controller of your personal data.
3. What do you find in this document?
Given that we are a data controller, you will find in this document information on how we process your personal data, for how long and for what purposes.
In addition, this document provides you with information regarding the use of cookies on our website.
4. What is personal data?
Personal data is any information about an identified or identifiable person. Simply put, it is information that you provide to us when you fill out forms or use our service.
For example, the following categories:
Category | Example |
Identification data | E.g. first name, last name, title, nickname… |
Address data | E.g. name of the municipality, street, descriptive or registration number, postcode. |
Contact details | E.g. email, phone number, social media nickname. |
Payment details | For example, billing information or account number. |
Information about using the service | E.g. logs and activity within the service. |
Content of communication | For example, the content of our communications or your messages. |
5. What entitles us to process your personal data?
We always process personal data in accordance with the GDPR. According to Article 6 GDPR, we can only process your personal data if:
- you give us your free and revocable consent;
- we are required by law to carry out the processing and the processing is carried out in the performance of our legal obligation;
- we are obliged to carry out the processing in question by the contract we enter into together or in the event that such a contract is about to be entered into;
- we have a legitimate interest in processing your personal data and such legitimate interest takes precedence over your privacy rights.
The basis on which we process your personal data in a particular case can be found below.
6. How do we process your personal data when you register and use the service?
In case you want to use our Contesaur service, it is necessary for us to enter into a contract with you, under which we will then set up a user account for you. Thus, the information below is based on the need to conclude a contract, and we are not able to provide you with our service without it.
In this case, we process your personal data for the following purposes:
|
Purpose |
Scope |
Legal title |
Processing time |
|
Conclusion and execution of a service contract, including related communications and user account creation |
Identification data Contact details Address data Payment details Information about using the service |
Necessity for the performance of the contract (or legitimate interest of the administrator if you represent a legal entity) |
For the duration of the contract and then 3 years after its termination (basic data on contractual relationships for 10 years) |
|
Reaching out via email and phone regarding offers of products and services that are similar to the products and services purchased |
Identification data Contact details Information about purchased services and products |
So-called customer exception |
For the duration of the contract and subsequently for 3 years after its termination |
|
Analysis of service usage to improve the application |
Information about using the app |
Legitimate interest |
For the duration of the contract and 3 years after its termination. |
It is your free choice whether you entrust us with the above personal data. However, the truth is that without it we cannot enter into a contract with you and provide you with our services.
However, it is important for the operation of our service to process certain statistical data about how our clients use our service. Without this we would not be able to detect problems or provide service. Therefore, when using our service, we process your personal data based on our legitimate interest. This interest involves collecting information about service usage in an anonymized manner, such as through statistical reports and heatmaps. These insights enable us to improve our service to make it as good as possible. Should you feel that your right to privacy takes precedence over our legitimate interest in your case, you have the right to object to this processing.
We will also be happy to keep in touch with you and send you information about new developments in our service from time to time. We are entitled to do so by the so-called customer exemption under § 480/2004 Coll., the Act on Certain Services, which you can exclude in the checkbox during registration or in any communication using the unsubscribe link.
7. How do we process your personal data in case of the newsletter?
We are happy to keep in touch with you and send you our news, invitations to events and other information we think you might like. Therefore, if you give us your consent, we process your personal data as follows:
Purpose | Scope | Legal title | Processing time |
Sending offers, newsletters, and other information from the administrator, including third-party offers tailored to what you might like | Identification data Contact details Information about using the app | Consent | Pending withdrawal of consent |
All processing is completely voluntary on your part, you are under no obligation to give us consent and, on the contrary, you have the maximum right to withdraw any consent at any time, using the procedure set out below.
In the case of sending commercial communications, we try not to send you information that is not necessarily of interest to you. For this purpose, we carry out profiling, which consists in analysing what you like and, on the basis of this, we already send you information mainly from your area of interest.
8. How do you process my personal data in case of the contact form?
If you, on the other hand, want to communicate with us, we will be only too happy to do so. In such cases, we process your personal data for the following purposes:
Purpose | Scope | Legal title | Processing time |
Answering your query and related communication | Identification data Contact details Content of the ammunition | Legitimate interest | For the duration of our communication, but no longer than 1 year after its termination |
It is not obligatory for you to provide the above information, however, without it we are unable to communicate with you. Answering your query is therefore in our legitimate interest. Should you feel that we are going beyond our legitimate interest in your case, you have the possibility to object to this processing using the procedure below.
9. To whom do you disclose personal data?
We will only disclose your personal data to third parties if we are required to do so by law or on the basis of a processing contract. We list the categories of recipients below, and we are always happy to give you specific information about particular recipients:
Recipient | Purpose of disclosure |
Cloud storage provider | With regard to the operation of our service, we use the services of a third party with whom the data is stored in a secure form |
Emailing tool provider | We use a third party service to send emails |
10. What rights do I have in relation to the processing of personal data?
In view of the fact that we process your personal data, you have various rights towards us, the content, conditions of exercise and limitations of which we would like to inform you about.
10.1. Right of access
Virtually anyone has the right to contact us and obtain confirmation from us as to whether or not we are processing their personal data. In addition, you have the right to ask us at any time for more information about the processing of your personal data, such as the purposes of the processing, the categories of data concerned, the recipients, the duration of the processing, your rights, etc.
You also have the right to obtain from us a copy of any personal data we process about you. The only reason why we should not comply is if it would adversely affect the rights and freedoms of other persons or data subjects.
10.2. Right to repair
If you find that we process your personal data inaccurately (e.g. we have an old address, contact details, etc.), you always have the right to ask us to correct or complete the inaccurate data on the basis of your additional declaration.
10.3. Right to erasure (right to be forgotten)
We only process your personal data for the period of time specified by us and then delete it immediately. However, you also have the right to write to us to request that we delete your personal data if one of the following reasons applies
- the personal data is no longer needed for the above purposes;
- withdraw your consent to the processing of personal data;
- you object to a legitimate interest and we assess that this legitimate interest does not override your rights (in the case of marketing purposes based on legitimate interest, we will delete the data immediately);
- processing was unlawful;
- deletion is required by Czech or EU law.
However, we may not be able to accommodate you in all cases. Sometimes there are reasons why we should keep your personal data where it is necessary to do so:
- for the exercise of the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest in the field of public health;
- for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
- for the establishment, exercise or defence of legal claims.
10.4. Right to restriction of processing
If you ask us to do so, we will stop processing your personal data or keep it stored, but we will not process it otherwise. This right is called the “right to restrict processing” and can only be exercised in the following cases
- you deny the accuracy of the personal data for the time necessary to verify its accuracy;
- the processing is unlawful, you will refuse to erase the personal data and you will require the restriction of its use;
- we no longer need the personal data for processing purposes, but you require us to retain it for the establishment, exercise or defence of legal claims;
- you raise an objection against a legitimate interest, pending an assessment of its validity.
10.5. Right to portability
Where we process your personal data by automated means and the processing is based on consent or necessity for the performance of a contract, you have the right to so-called portability. The right to portability guarantees that we will transmit the data you have provided to us in a commonly used and machine-readable format, or that we will transmit the data to another controller that you identify to us.
10.6. Right to object to processing on the basis of legitimate interest
Where we process your personal data on the basis of legitimate interest, you have the right to object to this processing on the basis of a reasoned objection. In the case of processing for direct marketing purposes, you do not have to justify the request and we will immediately stop processing your personal data in accordance with the GDPR.
This is the case, for example, when we send you commercial communications about similar products or services that you have purchased from us, i.e. on the basis of the so-called customer exception. If you do not wish to do so, please let us know by sending us an e-mail or by providing us with this information at the appropriate point during registration or ordering and we will not do so or will cease to do so. Similarly, you can use the unsubscribe link at the bottom of the email within our business communications.
In other cases, we have the right to review your objection and assess whether your rights take precedence over our legitimate interests.
10.7. Right to withdraw consent
If we process your personal data on the basis of consent, you are of course entitled to refuse and withdraw your consent at any time. In this case, we will not continue with further processing and, unless we are prevented by law from doing so, we will delete your personal data.
However, if we also process your personal data on the basis of another legal title, we are not obliged (sometimes not even allowed) to delete the personal data.
10.8. Right to lodge a complaint with the Office for Personal Data Protection
If you believe that we are processing your personal data unlawfully, you are of course entitled to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
11. How can you exercise the above rights?
If you would like to exercise your rights, please email us at info@contesaur.com or use the settings in your user account, if this is possible for that right.
12. Do we use automated individual decision-making in the processing of personal data?
Not
13. What cookies do we use?
We use cookies (short text files) on our website www.contesaur.com to help us improve our service. A full list, including more information about the cookies we use, can be found in the cookie bar that appears when you visit our site.
You can change your consent to the storage of cookies at any time in this bar by clicking on the minimized cookie bar icon.
Questions at info@contesaur.com
Support at support@contesaur.com
This project was implemented with the financial support of the Technology Incubation Programme.
Copyright © 2023 Pretty Much Nomads
