1. Introductory Provisions
Company Czechwise s.r.o., corporate ID no: 117 95 433, with registered seat at Štefánikova 75/48, 150 00 Praha, Czech Republic, registered with the Commercial Register of the Municipal Court in Prague, file no. C 353501 (“Company”) is a personal data controller within the meaning of article 4(7) of the General Data Protection Regulation (Regulation of European Parliament and Council (EU) 2016/679 of the European Parliament and of the Council) (“GDPR”). The company protects all personal data as confidential, and the Company holds it in accordance with applicable data protection laws.
2. Personal Data Processing
We process personal data if you:
- communicated with us in writing or electronically (e.g. via e-mail) and provided us with personal data;
- are our client – a natural person or a self-employed person
- are an employee or other representative of our client
- attended an educational or other event organized by our Company
- are a self-employed person or an employee of a legal entity with whom we have concluded a contract as a customer of services or goods
- are our employees or job applicants in our Company
- you use the Company website czechwise.com (including its subdomains) or contact us through online forms, including newsletter sign-up or download of materials.
3 . Categories Of Personal Data
We process the following categories of personal data:
- Identification and address data: academic title, first name, last name, date of birth, identity card information, permanent address, delivery or other contact address, business address, corporate ID number.
- Electronic contact details: telephone, mobile phone, e-mail address, data box ID.
- Other personal data required for performance of the contract: bank account number, payment amounts, and history of payments, or other similar data.
- Other personal data provided by you in the contract or amendment or in other documents and in negotiations, including later updates.
- In case of processing employees’ and jobseekers’ personal data, we process a CV and information necessary for processing payroll and tax agenda.
- Employees’ and job applicants’ data necessary for payroll, tax, and HR administration, including CVs, qualifications, and employment records.
4. The Legal Basis And Purposes of Processing
We process personal data for the following reasons:
- Provision of services and fulfillment of obligations arising from contract or other arrangements.
- We process personal data because it is necessary to enter and execute a contract with you and exercise the rights agreed in the contract, and to take steps at your request before entering a contract (e.g. communication regarding a potential engagement).
- Fulfillment of legal obligations.
- Our legal obligations include issuing, receiving, and archiving tax documents, keeping employees’ files, payroll administration, maintaining and archiving the clients´ files, including e-mail communication, contact information, and records of provided services, and compliance with obligations under the AML Act.
- Reaching clients through direct marketing, sending invitations, and requests for feedback on our events.
- We process the personal data of clients and participants of our events as this is our legitimate interest. If you do not agree with that, please let us know as soon as possible.
- If you participate in an event we host, we may take photographs or video of the event and post it to our website, social networks, or other marketing materials to inform you of the event. The records are not intended for the processing of your personal data, but if you feel uncomfortable, please let us know as soon as possible.
- If we obtain your e-mail address in connection with the provision of our services, we may use it to send you information about our own similar services and events. You can opt out of such communication at any time, in particular by using the unsubscribe link in each e-mail or by contacting us directly.
Our direct marketing (including invitations to events and requests for feedback) is based on our legitimate interest in developing and promoting our services. If you object to such processing, we will stop using your personal data for this purpose.
Processing personal data based on your consent.
We may also process personal data if you give us explicit and free consent. You may revoke this consent at any time.
Protection of our legitimate interests and security of our services.
We may process personal data (including technical data from website logs) to protect our rights and legitimate interests, in particular to ensure IT and website security, prevent misuse of our services, exercise or defend legal claims, manage internal records and administration of the Company.
5. Processors, Recipients And Transmission Of Personal Data
For effective provision of our services and contract performance, we have contracts with other service providers to whom we may pass on your personal data for processing. In particular, your personal data may be processed manually or automatically by:
- postal service providers
- software and IT service providers
- accounting and HR service providers and tax advisors
- other service providers that our Company currently uses (Notion Labs, Inc., OpenAI Inc., Google LLC)
For the purpose of recovering claims, your personal data may be passed on to the subject that secures the recovery and enforcement of the claims.
The Company only discloses your personal data to authorized employees and cooperating with third parties. Third parties have access only to the extent of personal data necessary to fulfil the individual purposes of processing, and always based on an appropriate legal basis and contractual commitments regarding confidentiality and data protection.
6. Duration Of the Data Storage
We only process personal data for the time necessary to fulfill the purpose of processing, or for the period of time required by law. The storage period varies depending on the legal basis of the processing of personal data:
- If the legal basis for the processing of personal data is the fulfillment of contractual obligations, in the case of providing service, we process personal data for the duration of the contractual relationship and for a maximum period of 10 years from the termination of the contractual relationship; in other cases, we process personal data for as long as we are required by law.
- If the legal basis for the processing of personal data is the fulfillment of our legal obligations, we process the personal data for as long as we are required by law.
- If the legal basis for the processing of personal data is our legitimate interest, we process the personal data for the duration of the legitimate interest or until you inform us that you do not wish us to further process the personal data.
- If the legal title for the processing of personal data is your consent, we process personal data for as long as you have given us your consent.
After the expiry of the relevant storage period, we either anonymize your personal data so that they can no longer be linked to you or we securely delete them, unless we have another legal basis for their further processing.
7. Your Rights
You have the following rights in relation to personal data:
- Right of access to personal data – you can contact us at any time to ask if we are processing your personal data and if so, request further information about this processing.
- Right to correct or adjust personal data – if there is a change in your personal data or if you feel that the data we process is incorrect, please contact us.
- Right to request processing restrictions – in the cases referred to in Article 18 of the GDPR, you have the right to request processing restrictions on your personal data.
- Right to delete personal data – in the cases referred to in Article 17 of the GDPR, you have the right to require us to delete personal data concerning you without undue delay.
- Right to request the transfer of data – under the conditions set out in Article 20 of the GDPR, you have the right to ask us to transfer your personal data to a third party.
- Right to withdraw consent – if the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to object – if we process your personal data based on our legitimate interest, you have the right to object to such processing at any time.
- Right to file a complaint – in case of doubt about compliance with our obligations related to the processing of personal data, you have the right to file a complaint with the Office for Personal Data Protection (in Czech “Úřad pro ochranu osobních údajů“).
8. Contacts
If you want to contact us, ask us anything about personal data processing, or inform us that you do not want us to process your personal data, you can use the following contact information: info@czechwise.com
9. Other And Final Provisions
If you refuse to provide the personal data necessary for the purposes, we may not be able to provide you with the appropriate services.
Our Company does not carry out any personal data processing activities in the form of profiling.
We process personal data through software, which means that we process the personal data partially automatically.