Privacy Policy

INFORMATION ON PERSONAL DATA PROCESSING

Our company would like to hereby inform you how it processes personal data, in particular what personal data are being collected, how we deal with it, from what resources we gain it, for what purposes we use it, whom we are authorized to provide the personal data with and what your rights are.

Personal data is protected as strictly confidential and we always deal with it in accordance with the respective legal regulations, particularly in compliance with the Regulation (EU) of the European Parliament and of the Council No. 2016/679 of 27.04.2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR“).

1. DEFINITIONS

Personal data means any information that is related to the particular identified or identifiable natural person (e.g. name, age, date of birth, IP address).

Processing means any operation or a series of operations with the Personal data or a series of Personal data conducted via or without automated processes such as collecting, recording, sorting, structuring, saving, storing, adjusting or modification, searching, viewing, using, making accessible by transmission, spreading or any availability, combining, limiting, deletion or destruction of the Personal data.

Purpose of processing means the respective reason for the Personal data processing by our company.

Legal basis of processing means authorization of the Controller of the Personal data provided by respective legal regulations.

Eligible interest means one of the Legal basis of the processing indicating the interest of our company in the Personal data processing that might be expected by the respective Data subject that does not hinder the privacy and the right for protection of the Personal data of the respective Data subject (e.g. an interest in the protection of the rights of our company in any eventual legal or other proceedings).

Data subject means a natural person the Personal data relates to (usually a client or a business partner).

Controller means a legal or anatural person that determines the Purpose of the Personal data processing and means by which such Personal data processing shall be implemented.

Processor means a legal or natural person appointed by the Controller for certain activities for performance of which it is necessary to process the Personal data (e.g. IT services supplier).

Recipient means a subject that is provided with the Personal data (e.g.afinancial office, a court etc.).

2. GENERAL PRINCIPLES OF PERSONAL DATA PROCESSING

During Personal data processing, our company shall respect the highest standards of the Personal data protection whereas it aspires to follow in the maximum possible extent the following principles:

legitimacy our company shall process the Personal data correctly and only in a legal manner;

transparency our company shall take care that all information on the Personal data processing is concise, easily accessible and comprehensible;

purposeful restriction our company shall process the Personal data only for the legitimate purposes determined in advance;

minimisation our company shall process the Personal data only in the necessary extent always related to the determined Purpose of processing;

accuracy our company shall process only the exact Personal data which it shall update if needed;

time frame our company shall process the Personal data only during the time frame necessary for the particular Purpose of the processing;

security Personal data is protected by our company and shall be processed in a manner that ensures high level of Personal data security and that hinders unauthorized access to the Personal Data, their modification, destruction or loss as well as any other misuse; our company shall comply with the respective technical as well as organisational measures for ensuring the respective level of the Personal data protection.

3. MANNER OF THE PERSONAL DATA PROCESSING

The manner in which our company shall process your Personal data shall include manual as well as automatized Personal data processing in the internal systems and databases of our company.

Your Personal data shall be processed in particular by the employees and cooperating attorneys-at-law at our company, eventually by the third parties appointed to process your Personal data by our company or which process the Personal data due to performance of obligations determined by the respective legal regulations.

4. CONTROLLER OF THE PERSONAL DATA

During processing of your Personal data, our company is in the position of the Controller of the Personal data. In case of any request, reminder, application or any inquiry regarding the Personal data processing by our company, you may contact us via the following contact details:

Optimal.eco s.r.o.

Rumunská 256/25

120 00 Praha

Czech Republic

ID of the data mailbox: tgvw9vb

E-mail: info@optimal.eco

5. PURPOSE OF THE PERSONAL DATA PROCESSING

Our company shall process the Personal data in particular in relation to the provision of our services and consultancy in the area of our business activities as well as in relation to organizing educational or social events.

The Personal data may be processed by our company for the following Purposes of processing:

cooperation with business partners – Personal data processing as part of the relations with the business partners of our company, affiliated companys or other firms as well as suppliers of products and services to our company;
recruitment – Personal data processing of the job applicants or candidates for another form of cooperation with our company;
organizing educational and social events – Personal data processing e.g. as part of registration of the members for the seminars and social events organized by our company, their eventual contacting etc.;
sending business information and service offers – Personal data processing during offering legal services of our company;
property protection, protection of rights and interests of our company – Personal data processing related to determination, performance and defence the claims of our company, even in relation to the property of our company;
client administration – Personal data processing related to the internal administration of previous, current and potential clients of our company, systematics of managing the client’s files and individual cases.

6. LEGAL BASIS OF PERSONAL DATA PROCESSING

Our company shall process the Personal data exclusively based on the Legal basis pursuant to the art. 6 sec. 1, GDPR. Personal data may be processed by our company pursuant to the following Legal basis:

granting a consent with Personal data processing – if the consent with Personal data processing has been granted, the Personal data shall be processed by our company for one or more particular purposes the particular the consent relates to and only during the time frame the consent was limited to;
performance of agreement, whose Party is the Data subject or measures accepted prior to conclusion of an agreement on the request of the Data Subject – the Personal data may be processed by our company in relation to the provision of services and related consultancy based on the agreement on provision of services, or another agreement concluded by and between you and our company, or eventually in relation to the conduct on conclusion of such an agreement;
performance of legal obligations by our company – if there is any obligation of our company to process the Personal data determined by the respective legal regulations, the Personal data shall be processed in line with such obligation;
Eligible interests of our company – for details of this legal basis see the clause No. 7. hereof.

7. PERSONAL DATA PROCESSING BASED ON THE ELIGIBLE INTEREST

Protection of Eligible interests of our company is one of the Legal bases for the Personal data processing. Our company is authorized to process the Personal data based on this Legal basis of the processing only if during such Personal data processing there is not an inadequate intervention to your privacy or your rights and if such processing is expectable by you.

If the Personal data processing is performed on the basis of protection of the Eligible interest of our company, you are entitled to raise an objection against the Personal data processing, due to the reasons regarding your particular situation. Our company is obliged to take into consideration your objections always with regard to the reason of raising the objection.

If you raise an objection against the Personal data processing by our company for the purposes of the direct marketing, we will agree with your objection without further concerns and your Personal data shall not be further processed for this purpose.

In this regard, we would like to add a remark that termination of the Personal data processing based on the objection raised actually does not necessarily mean erasing of the Personal data; the Personal data may be further processed by our company for other Purposes and pursuant to the Legal bases of processing.

For transparency and for your information we have determined the list of Purposes of processing below conducted on the basis of our Eligible interest:

protection of our rights and interests protected by law;
protection of the property of our company;
addressing our current clients (direct marketing);
client administration.

8. PROCESSING CARRIED OUT ON THE BASIS OF A CONSENT

Granting consent to Personal data processing is entirely voluntary. An eventual failure to grant consent shall not have any adverse consequences for you.

In case you have granted consent to the Personal data processing to our company, you have the right to withdraw this consent at any time by sending a notice to the contact addresses stated above.

Upon the withdrawal of the consent, our company shall terminate Personal data processing for which it has no other Legal basis of processing. Withdrawal of consent shall not affect the lawfulness of processing based on consent granted before its withdrawal.

Our company processes Personal data on the basis of consent to the following Purposes of processing:

application of direct marketing in the Czech Republic in relation to prospective clients;
processing of photos/video recordings for the purpose of propagation and presentation of our company.

9. DIRECT MARKETING IN THE CZECH REPUBLIC

Personal data processing for direct marketing purposes means Personal data processing for the purpose of sending commercial communications within the meaning of the Act No. 480/2004 Coll., on certain information services society and on amendments to certain acts, as amended (hereinafter also referred to as “Act No. 480/2004”).

Commercial communication is any form of communication, including advertisements and offer of services, intended for direct or indirect support of services or image of our company (particularly so-called newsletters).

Personal data processing for the purposes of sending commercial communications to existing clients is possible even without their consent on the basis of Eligible interest of our company. Our company is also entitled to send commercial communications without the consent of the respective existing client (in accordance with Section 7(3) of Act No. 480/2004 Coll.), however only under condition the respective existing client has not rejected sending of commercial communications.

For the purpose of sending commercial communications, our company processes name and surname, company name, position in a company and email address of existing / prospective clients.

Our company shall terminate Personal data processing for direct marketing purposes immediately after an existing / prospective client expresses their disapproval to such processing by:

withdrawal of consent to Personal data processing
expressing disapproval to Personal data processing in the same manner the consent to Personal data processing may be withdrawn
so-called unsubscribing from sending commercial communications, which may be done in every sent commercial communication.

10. CATEGORY OF PROCESSED PERSONAL DATA

Our company shall process the Personal data in line with the aforementioned Purposes of processing, and only such Personal data that is necessary in particular for the proper provision of services and fulfilling the respective obligations by our company. Our company shall process the following categories of the Personal data:

identification data – Personal data intended for unambiguous and unmistakable identification of the Data subject (particularly the first and the last name, university degree, date of birth, signature etc.);
contact details – the Personal data enabling contact with the Data subject (particularly delivery address, phone number, e-mail address etc.);
payment details – Personal data necessary for book keeping of remunerations for provision of our services (e.g. account number, bank institution and other transaction details);
profile data – general physiological characteristics (age, gender), socio-economic data (e.g. income data, ownership of movable as well as immovable assets), socio-demographic characteristics (family status, number of children, information on accommodation and the household, education, employment position etc.);
sensitive data – Personal data of special categories (e.g. data indicating your health state or sexual life or orientation, information on the political opinion, religious denomination or membership in trade unions) and the data regarding judgment in criminal proceedings and crimes;
Personal data arisen by our activities – these are in particular identifiers assigned by us for evidence purposes (e.g. the number under which you are registered in our information system), records on your preferred language for communication or your particular requirements announced to us;
Personal data of third parties – Personal data of family members that you usually announce to us during employment period (e.g. data regarding your husband/wife, children and other persons);
other data – data that do not belong to any of the aforementioned category that concerns your person (e.g. data on the fact that there is execution, insolvency or other proceedings against your).

11. RESOURCES OF THE PERSONAL DATA

Our company gains the Personal data from various resources whereas the basic resource is the Data subject.

Most often, you inform us about your Personal data as part of the provision of our services, during the following communication or processing of your requests and instructions but in some situations, we are made to supplement such provided Personal data from public resources or third parties. We also gain the Personal data through our own activities as part of provision of our services.

The basic resources of the Personal data include the following:

public resources – theseare in particular publicly accessible registers, lists and records (e.g. commercial register, insolvency register, land registry, central registry of executions etc.);
internal resources – Personal data arisen directly as part of provision of our services and other internal activities;
third parties – Personal data received from third parties

12. OBLIGATION TO PROVIDE PERSONAL DATA TO OUR COMPANY

Provision of the Personal data to our company is voluntary; in some cases, however, our company would not be able to provide you with its services without obtaining the Personal data. In some cases, we are obliged to collect the Personal data by the respective legal regulations (e.g. processing of the personal identity number for the purposes of your identification).

If the respective legal regulations require granting your consent with Personal data processing, the Personal data shall be processed by our company only based on your consent with the Personal data processing granted from free will. Such consent may be withdrawn at any time.

13. PERSONAL DATA RECIPIENTS

Your Personal data shall be processed exclusively by our company. In cases determined by the respective legal regulations or justified by the Eligible interest of our company, or the consent granted by you with the processing of your Personal data, your Personal data may be processed also by the subjects different than our company.

We make the Personal data accessible most often to the cooperating attorneys-at-law and other employees of our company as well as individual Processors of your Personal data that are in the contractual relationship with our company. Our company cooperates exclusively with such partners who follow the strictest requirements in the area of the Personal data protection.

Among the Recipients of the Personal data there are most frequently IT service providers, bank institutions, auditing companies, experts, interpreters, accounting and tax advisors etc.

14. TIME FRAME NEEDED FOR PERSONAL DATA PROCESSING

Our company shall process the Personal data only during the time frame necessary due to the Purpose of the processing and further during the time frame our company as the Controller of the Personal data is obliged to process the Personal data pursuant to the generally binding legal regulations. Our company shall strictly comply with the internal rules of archiving that ensure that the Personal data is not processed for longer time than necessary.

In case of granting the consent with the Personal data processing for a particular Purpose of processing, your Personal data shall be processed during the time, which is in line with the time for which you granted the consent with the Personal data processing. Following the Eligible interest of our company, the time of the Personal data processing has been set up in such a way that it is in line with the particular Purpose of processing.

After termination of our cooperation, we significantly limit the use of your Personal data, whereas we shall further store the Personal data due to fulfilling obligations determined by the respective legal regulations (i.e. particularly fulfilling the archiving obligation) and due to protection of the Eligible interests of our company in the form of protection of our rights and application of the claims in any possible legal or other proceedings. If we find out that your Personal data is not needed any more for any of the determined Purposes of their processing, we automatically delete such Personal data.

15. Security of personal data

Security of your Personal data is a crucial priority of our company. The Personal data is under stable physical, electronic as well as procedural review whereas our company has at disposal control, technical as well as security mechanisms that ensure Personal data protection against any unauthorized access, transmit, loss, destruction or any other possible misuse.

16. Rights of the data subject

In order to have more overview and control of your Personal data which our company shall process about you, you are entitled to utilize the below mentioned rights.

You are entitled for some rights under any circumstances (e.g. the right to access the Personal data or the right for rectification), whereas some rights may be claimed only when meeting some certain conditions (e.g. you have the right to raise an objection against Personal data processing only if it is done on the basis of the Eligible interest of our company, you have right to portability only if the Personal data processing is based on your consent or during processing necessary for performance of the contract).

Right to access the Personal data: if you request our company for information regarding the processing of your Personal data, we will provide you without undue delay with the information on what Personal data we shall process regarding you and further related information (e.g. the Purpose of processing, category of the Personal data, timeframe of processing, resource of the Personal data). You are entitled to require a copy of the processed Personal data. Nevertheless, for a repeated provision thereof our company is entitled to request an adequate fee related to the administrative costs.
Right to rectification of inaccurate information and supplementing incomplete Personal data:if you find out that we process inaccurate or incomplete Personal data, you are entitled to require its rectification and supplementation. Rectification or supplementation of the Personal data shall be conducted by us without undue delay, always with regard to the technical possibilities of our company.
Right to erasure: we automatically erase your Personal once we lose authorization for its processing (typically by lapse of time of processing for the last purpose for which your Personal data shall be processed). You do not need to take care of erasure of the Personal data. If you anyway ask our company for erasure of the Personal data, we will accept your request under the condition that (i) the Personal data is not needed any more for the purposes for which it was collected or otherwise processed or (ii) Personal data processing is against the law or (iii) you raise an objection against the Personal data processing and there are not any prevailing eligible reasons for processing of your Personal data or (iv) the statutory obligation for the Personal data processing determined by the European Union law or domestic regulations was seceded or (v) you withdraw your consent with the processing of the Personal data. On the other hand, you are not entitled for the right to erasure of the Personal data if the Personal data processing is necessary for meeting the legal obligation or determination, execution or defence of legal claims of our company or for archiving purposes.
Right to raise an objection against processing: if you wish us not to continue in processing of your Personal data done on the basis of protection of the Eligible interest of our company, you are entitled to raise an objection against the Personal data processing. When raising such an objection, our company is always obliged to assess whether the interest in the protection of your Personal data prevails over the Eligible interest of our company for which we process your Personal data. If we reach the conclusion that your interest in the protection of your Personal data prevails, we terminate processing of your Personal for this purpose. If you raise an objection against the Personal data processing by our company for the purposes of direct marketing, we will approve your objection without further comments and your Personal data will not be further processed for this purpose.
Right to restrict Personal data processing: you are entitled for the right to restrict Personal data processing only if (i) an objection was raised against the Personal data processing implemented on the basis of the Eligible interest of our company, or (ii) challenging the accuracy of the Personal data processed by us or (iii) Personal data processing against the law as well as rejection of its deletion by you or (iv) when we do not need the Personal data for the Purposes of processing, but despite that, you will need the Personal data for determining, performance or defence of your legal claims. If the below mentioned conditions are met your Personal data will be temporarily locked up and we will not process it during a certain period of time.
Right to Personal data portability: if you need it, for instance, for facilitation of communication with another Controller, you are entitled to gain the Personal data in the structured and commonly used electronic format. You are entitled for this right in case of the Personal data processing conducted on the basis of your consent or when the respective agreement is performed.
The right to withdraw a consent: if you have granted our company with the consent with processing of the Personal data, you have the right to withdraw it at any time. Once the consent is withdrawn, we will terminate the processing of your Personal data for the processing of which we do not have another Legal basis of processing any more. Withdrawal of the consent does not concern the lawfulness of the Personal data processing based on the consent granted prior to its withdrawal.
The right to file and complaint: you are entitled to raise a complaint or a concern regarding the processing of your Personal data at any time to the supervisory body of the respective state which is the following

Office of Personal Data Protection, with its registered office at Praha, Pplk. Sochora 27, Zip Code 170 00, www.uoou.cz;

17. INFORMATION REGARDING ADOPTED MEASURES

We will inform you about the adopted measures in relation with the application of your rights without undue delay, however, not later than within 1 month. In the exceptional cases (in particular due to complexity of your request) our company is entitled to prolong such a time frame by 2 more months. We will of course inform you in time about any possible prolongation.

18. VALIDITY AND EFFECT

This information on the Personal data processing is valid and effective as of 3.9.2024. The current wording has been announced at our website www.optimal.eco