Principles of processing personal data when conducting business activities

Dear Business Partners,

The information below is provided to ensure full and transparent disclosure regarding the processing of your personal data (in particular identification and contact details of natural persons – representatives/employees and responsible persons of business partners, customers/clients – including first name, last name, job position, company, contact phone number, and email), by the controller of such data, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

1. Controller Contact Details:

ALTWORX s.r.o., Company ID No.: 15529347, registered office: Skryjova 1606/8, Husovice, 614 00 Brno, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 746, website: https://www.altworx.com/ (hereinafter referred to as the “Controller”).

2. Data Protection Officer Contact Details:

The Controller has not appointed a Data Protection Officer (DPO). For all matters relating to the processing of personal data and the exercise of rights under applicable legal regulations, you may contact the Controller directly via email: altworx@altworx.com, or by post at:
ALTWORX s.r.o., GDPR, Skryjova 1606/8, Husovice, 614 00 Brno, Czech Republic.

3. Purposes of Processing Personal Data and Legal Basis:

Maintenance of records of contact persons – representatives/employees of business partners (suppliers, customers) and clients of the Controller in the course of the Controller’s / business partner’s commercial activities.

The processing of personal data for this purpose is necessary for the purposes of the legitimate interests of the Controller and/or its existing business partners in conducting business relationships, in particular for maintaining mutual communication, handling requests, inquiries and complaints (claims) of customers/clients (including website visitors via contact forms), and for the promotion of our/your business and offering its products and services pursuant to Article 6(1)(f) GDPR.

4. Legitimate Interests of the Controller or a Third Party:

In addition to the above purpose, personal data may also be processed for other legitimate interests of the Controller, in particular in connection with:

direct marketing of similar goods and services to existing customers/clients by electronic means,
the exercise and enforcement of rights and claims arising from provided services and supplied goods,
manual or automated verification/evaluation of credit risk, creditworthiness, or payment discipline of a business partner,
assessment of the payment capacity of a business partner through registers (information databases) containing records of its liabilities,

for the duration of the preparation and existence of the contractual relationship between the business partner and the Controller.

5. Recipients or Categories of Recipients of Personal Data:

authorized employees of the Controller,
public authorities and other entities pursuant to applicable legal regulations,
service providers to the Controller with whom the Controller has concluded a personal data processing agreement.

6. Transfers of Personal Data to Third Countries:

The Controller does not intend to transfer personal data to any third country or international organization.

7. Retention Period of Personal Data:

Personal data of contact persons – representatives/employees of business partners and customers/clients – are retained for the period necessary until all rights and obligations arising from contractual relationships have been settled or otherwise ceased, or for the period required by applicable legal regulations, whichever is longer.

8. Your Rights Regarding the Protection of Your Personal Data:

You have the right to request access to your personal data from the Controller and the right to rectification or erasure (if legal grounds for erasure are met).

You have the right to restriction of processing.

You have the right to object to processing.

You have the right to contact the Controller in all matters related to the processing of your personal data and the exercise of your rights under applicable legal regulations.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. The competent supervisory authority is:

Office for Personal Data Protection
pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.cz

9. Information on the Obligation to Provide Personal Data:

Providing your personal data to the Controller within communication or in the context of offers/requests for goods or services is voluntary and only to the extent necessary for establishing and maintaining a business relationship. Failure to provide personal data to the required extent will make it impossible for you or your company to enter into a business relationship with the Controller.