Privacy policy valid from 1 July 2021

In the case of processing of personal data of a natural person, which is necessary for the fulfillment of the contract by the controller or for the implementation of the measures taken before the conclusion of the contract, and which is necessary for the performance of the controller's obligations under public law.

1. Identity and contact details of the controller

1.1. The controller of personal data is the company PINYA Ltd., with its registered office at Tuřanka 1222/115, 602 00 Brno-Slatina, identification no. 293 129 22, registered in the Commercial Register maintained by the Regional Court in Brno, section C, file 73455.

1.2. The contact details of the administrator are as follows: address for delivery Tuřanka 1222/115, 602 00 Brno — Slatina, e-mail address gdpr@pinya.cz, telephone +420 734 558 090.

1.3. The controller did not appoint a data protection officer.

2. Legal framework

2.1. The legal basis for the processing of your personal data is that this processing is necessary for:

a. the fulfilment of a contract between you and the controller or for the implementation of measures by the controller prior to the conclusion of such a contract within the meaning of Article 6 (1) (b) of Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation”);

b. fulfilment of the legal obligations applicable to the controller within the meaning of Article 6 (1) (c) of the Regulation, namely, in particular the fulfillment of obligations imposed on the trustee by generally binding legislation, in particular Act No. 235/2004 Coll., on value added tax, as amended, Act No. 586/1992 Coll., on income taxes, as amended, Act No. 262/2006 Coll., Labor Code, as amended, and Act No. 563/1991 Coll., on Accounting, as amended.

3. Purpose of processing personal data

3.1. The purpose of processing your personal data is the performance of a contract between you and the controller or the implementation of measures by the controller prior to the conclusion of such a contract and the performance of related public law obligations by the controller.

3.2. There is no automatic individual decision making on the part of the controller within the meaning of Article 22 of the Regulation.

4. Period of storage of personal data

4.1. Your personal data will be processed for the duration of the negotiation of the contract and, in the event of the conclusion of the contract, for the duration of the effects of the rights and obligations under the contract, as well as for the period necessary for archiving purposes according to the relevant generally binding legislation, but not longer than the period stipulated by generally binding legal regulations.

5. Other recipients of personal data

5.1. Other recipients of your personal data will be persons providing accounting services for the controller, IT hosting and software providers, postal and delivery service providers, other third parties acting for the controller as a processor of personal data with whom the controller has concluded a corresponding contract.

5.2. The recipients of your personal data for the fulfilment of legal obligations may also be financial administration authorities or other competent authorities in cases where the controllers impose generally binding legal regulations.

5.3. The controller does not intend to transfer your personal data to a third country (a country outside the EU) or to an international organization.

6. Your rights

6.1. Under the conditions set out in the Regulation, you have the right to request access to your personal data, the right to rectification or erasure of your personal data, or restriction of their processing, the right to object to the processing of your personal data, as well as the right to the portability of your personal data.

6.2. If you believe that the processing of your personal data has been or is in violation of the regulation, you have the right, inter alia, to lodge a complaint with the supervisory authority.

6.3. You are under no obligation to provide personal data. The provision of your personal data is a necessary requirement for the negotiation of the contract, the conclusion and performance of the contract and without the provision of your personal data it is not possible to conclude the contract or fulfill it by the controller.