Privacy policy

Prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data within the meaning of Articles 13 and 14 of the Regulation (hereinafter “GDPR”) and Act No. 110/2019 Coll. on the Processing of Personal Data (hereinafter the “Personal Data Processing Act”).

Who processes your data?

RK EXPO s.r.o.
No. 83, 680 01 Ludíkov, Czech Republic
Company ID: 083 22 279
Contact e-mail: radim@rkexpo.cz

Hereinafter referred to as “we”, the “controller” or the “organisation”.

What is personal data?

Personal data is essentially any information that can directly identify a living natural person or whose purpose is to reach such a person. Personal data can be divided into:

general (e.g. first and last name, age, telephone number, place of birth, marital status, etc.)
sensitive (today referred to as special categories of personal data, comprising only the following data – biometric data, trade union/political party membership, ethnic origin, philosophical beliefs, genetic data, information on convictions and criminal offences, religious beliefs, political opinions, racial origin, sexual orientation/life, health status).

What is the processing of personal data?

The processing of personal data refers to the systematic activity that the controller performs with personal data for a specific purpose. The activities referred to in the previous sentence include in particular: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Sources and categories of personal data

The controller processes personal data (directly from you) that you have provided, or personal data obtained on the basis of fulfilling your order. This includes your identification and contact data and data necessary for the performance of the contract.

Legal basis and purpose of processing

The legal basis for processing is:

Your consent to the processing of personal data for the purpose of providing direct marketing pursuant to Article 6(1)(a) of the GDPR.

For the purpose of concluding and performing the contract (i.e. in connection with the provision of our services), we process your personal data pursuant to Article 6(1)(b) of the GDPR. The legal basis for processing your general personal data is therefore the contract.

Once the contract has been performed, we must archive your personal data for the period prescribed by the relevant legislation. In this case, the legal reason for processing your general personal data is the fulfilment of a legal obligation, as set out in Article 6(1)(c) of the GDPR.

The purpose of processing personal data is:

Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the controller. When placing an order, personal data necessary for the successful processing of the order is required pursuant to Article 1(b) of the Regulation (this also relates to the subsequent execution of payment, delivery of services, complaint handling, etc.).

We use the personal data you provide to us in order to conclude a contract with you, and if a contract is already concluded between us, we use it to fulfil that contract. The processing of the customer’s personal data takes place without the customer’s consent, as the legal basis for processing personal data for the purposes of performing the contract is the specific contract between the customer and the operator.

The provision of personal data is a necessary requirement for concluding and performing the contract. Without the provision of personal data, it is not possible to conclude the contract or for the controller to fulfil its terms.

What personal data and to what extent will we process?

In order to provide our services, we need to know the following personal data:

General personal data: first and last name, address of permanent residence, delivery address for services or goods, your telephone number and e-mail.

How long will we retain the data?

We will retain your personal data for the entire duration of our mutual contract. After the termination of the contractual relationship, we will retain your personal data for as long as necessary to fulfil our archiving obligation under the legislation that provides for archiving (such legislation includes, for example, the Accounting Act, the Value Added Tax Act and the Archives and Records Act).

To whom else do we transfer your personal data?

Your personal data may be transferred to the following group of persons: providers of legal, tax and accounting services, and providers of technical solutions.

Your personal data may also be transferred to public authorities and courts, but only on the condition that a special legal regulation requires so, or that you give your express consent.

Personal data is always transferred to our processors on the basis of a data processing agreement and in accordance with the minimum required standard of personal data protection required by the GDPR.

The controller does not provide, disclose or make personal data accessible to third countries.

Conditions for securing personal data

The controller declares that it has taken appropriate personnel, technical and organisational measures to ensure the protection of personal data.

The controller has taken technical measures to secure data storage and storage of personal data in paper form.

The controller declares that only persons authorised by it have access to personal data.

Within the personal data processing activities we carry out in our business, no automated decision-making or profiling takes place.

What are your rights in connection with the processing of your personal data?

Under the conditions set out in the GDPR, you have:

The right of access to your personal data pursuant to Article 15 of the GDPR
The right to rectification of personal data pursuant to Article 16 of the GDPR
The right to restriction of processing
The right to erasure pursuant to Article 17 of the GDPR
The right to object pursuant to Article 21 of the GDPR
The right to data portability pursuant to Article 21 of the GDPR
The right to withdraw consent (electronically or by post)
The right to lodge a complaint with the supervisory authority for personal data protection if you believe that your rights to the protection of personal data have been violated.

How can you exercise your rights?

Right of access

At your request, we must inform you whether or not we are processing your personal data. If we are processing it, you have the right to be informed of:

a) the purpose for which we process your data,
b) the extent to which the data is processed,
c) how long it will be retained,
d) to whom it will be made available,
e) whether you can lodge a complaint with the Office for Personal Data Protection.

You can submit your request electronically to the e-mail address radim@rkexpo.cz or by post to: No. 83, 680 01 Ludíkov, Czech Republic.

Right to rectification

If you believe that we are processing incorrect (inaccurate) personal data about you, you have the right to have it rectified. If you discover such an inaccuracy in your personal data, please let us know and we will rectify it without undue delay. You can submit your request electronically to the e-mail address radim@rkexpo.cz or by post to: No. 83, 680 01 Ludíkov, Czech Republic.

Right to erasure

Under certain circumstances, you have the right to have your personal data erased. You can ask us to erase your data at any time. We will erase your personal data if:

we no longer need your personal data for the purpose for which you provided it to us,
you withdraw your consent,
you object to the processing of your personal data,
we are processing your personal data unlawfully,
the personal data must be erased in order to comply with a legal obligation,
you are a child, or a parent of a child who has consented to the processing of personal data online.

Right to restriction of processing

You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not work with it any further. The processing of your data will be restricted if:

your personal data is incorrect, until we verify its accuracy,
we are processing personal data unlawfully, but you do not agree to have it erased and instead request that we only restrict the processing of your personal data,
we no longer need your data, but you need it to prove, exercise or defend your rights,
you object to the processing of your personal data, until we verify whether our legitimate interests override your reasons.

Right to data portability

You have the right to request that we provide you with your personal data in electronic form (e.g. an XML or CSV file), which will allow you to easily transfer the data to another company. You can also ask us to transfer your personal data to the company of your choice directly. We will comply with your request if you have provided us with the personal data directly and have given us your consent to its processing.

Right to object

You have the right to object to our processing of your personal data. If we process your personal data in the following cases:

on the basis of our legitimate interest,
for creating a customer profile,

you may object to its processing if you have personal reasons to do so.

How can you exercise these rights?

You can contact us with your request in one of the following ways:

By e-mail: radim@rkexpo.cz
By post: No. 83, 680 01 Ludíkov, Czech Republic

If you believe that your rights to the protection of personal data have been violated, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, at the following address:

Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Company ID: 70837627

Phone:
Switchboard: +420 234 665 111 (does not provide consultations)
Information line: +420 234 665 800 (available on Tuesdays and Thursdays from 1:00 PM to 3:30 PM)

Website: https://www.uoou.cz
E-mail: posta@uoou.cz
Data box ID: qkbaa2n