GDPR

PRIVACY POLICY OF GOTIC, PŘÍSPĚVKOVÁ ORGANIZACE

INTRODUCTORY INFORMATION
Data Controller:
GOTIC, příspěvková organizace, with its registered office at Mosty u Jablunkova 381, 739 98 Mosty u Jablunkova
ID No. (IČ): 75143364The organization was registered with the Regional Court in Ostrava on October 8, 2008, Section Pr, File No. 1086 (hereinafter referred to as the "Controller" or "TIC").

Controller’s Contact Details:
Mailing address:
GOTIC, příspěvková organizace, with its registered office at Mosty u Jablunkova 381, 739 98 Mosty u Jablunkova
Address for electronic and telephone communication: This email address is being protected from spambots. You need JavaScript enabled to view it., +420 558 341 586
Data box: u3mkkek.

Data Protection Officer:
As the activities of the TIC do not fall within the scope of Article 37(1)(b) and (c) of the General Regulation, a Data Protection Officer has not been appointed.
This means that the TIC does not meet any of the following three conditions:

the processing is carried out by a public authority or body, except for courts acting in their judicial capacity;
the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects on a large scale;
the core activities of the controller or the processor consist of processing on a large scale of special categories of data and personal data relating to criminal convictions and offences.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The TIC processes personal data in accordance with European Union law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), as well as in accordance with international treaties by which the Czech Republic is bound, in particular the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data No. 108, promulgated under No. 115/2001 Coll. Int. Tr., and furthermore with national legal regulations, in particular Act No. 101/2000 Coll., on the Protection of Personal Data and on Amendments to Certain Acts, as amended (hereinafter referred to as "DPA").
The legal basis for the processing of your personal data is the fact that such processing is necessary for the performance of a contract between you and the TIC, or in order to take steps at your request prior to entering into a contract, within the meaning of Article 6(1)(b) of the GDPR.
In the event of a contractual relationship, the TIC sends commercial communications to its customers related to the goods and services offered, based on the legitimate interests of the TIC in the form of limited direct marketing. Therefore, the TIC does not require consent for sending these commercial communications, but allows the recipient to unsubscribe from the newsletter or object to such processing at any time.

For the purpose of pursuing the legitimate interest of the TIC, the TIC processes personal data of individuals in order to handle and respond to inquiries submitted by individuals filling out a form on the organization's website. Therefore, the TIC does not require consent for processing personal data for this purpose.
In the case of direct marketing by the TIC without the existence of a contractual relationship, the TIC is entitled to process your personal data only on the basis of your consent.
The TIC, as a contracting authority for small-scale public contracts, also processes the personal data of bidders – natural persons – in order to comply with a legal obligation.
For better targeting of advertising and promotion, the TIC processes data about website visits, viewed products, and other activity on the websites managed by the TIC organization through the use of cookies. This processing is only possible based on your consent to the use of the respective cookies. More information about cookies can be found on our website in the GDPR section.

WHAT DATA WE PROCESS

Performance of a contractual obligation – personal data processed is that which customers provide themselves during registration, when creating an order, or during the performance of a contract. This usually includes: first name, surname, address, telephone number, and e-mail address.
Contact forms on the organization's website or in printed form to be filled out at the TIC, processed data includes: first name, surname, e-mail address, or telephone number.
In the event that consent is granted for receiving commercial communications from the TIC: first name, surname, e-mail address, or telephone number.
In the case of a bidder – natural person: first name, surname, address, telephone contact, and e-mail address.
If you have enabled cookies in your browser and consent to their use, the Company obtains data about website visits, viewed products, and other activity on the website.
Special categories of personal data (sensitive data) are not processed by the TIC.

FOR WHAT PURPOSE WE PROCESS YOUR PERSONAL DATA

In connection with the provision of its services via the website, electronic mail, and personal contact, the Data Controller processes and stores the personal data of Data Subjects under the conditions and within the limits set by applicable legal regulations, in particular in accordance with the provisions of Article 6(1)(a) and (b) of the GDPR, for the following purposes:

contacting and providing information requested by the Data Subject (first name, surname, e-mail address, or telephone number are used);
performance of a contractual obligation (first name, surname, address, e-mail address, and telephone number are used);
maintaining a database for direct marketing (first name, surname, address, telephone number, or e-mail address are listed);
direct marketing based on the consent of the Data Subject (first name, surname, e-mail address, or telephone number are used);

HOW LONG WE WILL PROCESS YOUR PERSONAL DATA

Personal data will be processed for the period strictly necessary to ensure the mutual rights and obligations arising from the contractual relationship, i.e., for the entire duration of order processing or contract performance. By law, the TIC subsequently retains certain data contained in accounting documents.

Commercial communications are sent for the entire duration of the consent to receive them. In the case of customers, commercial communications are sent until they unsubscribe, or until an objection is raised against the processing of personal data for this purpose. However, commercial communications are sent for a maximum period of 7 years. After that, the Company will request consent again.

Data obtained for marketing purposes through cookies will be processed for the duration of the consent to the use of cookies, i.e., for the period during which the storage of cookies is enabled in your browser, or until an objection is raised against the processing of your data for this purpose.

Any further processing of personal data beyond the scope mentioned above is carried out only if it is necessary for the compliance with legal obligations applicable to the TIC.

As soon as the purpose of processing ceases to exist or the Controller no longer has any legal ground for the processing of personal data, the Controller will erase the personal data.

FURTHER INFORMATION ON THE PROCESSING OF PERSONAL DATA

The personal data of the Data Subject is processed manually by TIC staff.

The personal data of the data subject will be further processed by the following personal data processors: processors who provide the Controller with accounting, server, web, cloud, or IT services;

RIGHTS OF DATA SUBJECTS
The Controller hereby informs Data Subjects of the core tenets and principles in accordance with the provisions of Article 13 et seq. of the GDPR, on the basis of which the TIC, as the Data Controller, handles your personal data.

The Data Subject has the right to obtain from the Controller confirmation as to whether or not personal data concerning them is being processed, and, where that is the case, access to the personal data.

The Data Subject has the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the Data Subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The Data Subject has the right to obtain from the Controller the erasure of personal data if the personal data is no longer necessary in relation to the purposes of the processing, or if the Data Subject withdraws consent on which the processing is based, or if the Data Subject objects to the processing and there are no overriding legitimate grounds for the processing.

The Data Subject has the right to obtain from the Controller restriction of processing if the accuracy of the personal data is contested by the Data Subject, for a period enabling the Controller to verify the accuracy of the personal data; or if the Controller no longer needs the personal data for the purposes of the processing, but they are required by the Data Subject for the establishment, exercise, or defense of legal claims; or if the Data Subject has objected to processing.

The Data Subject has the right to withdraw their consent to the processing of personal data at any time without any penalty. The Data Subject may withdraw consent by any of the methods listed above via the individual contact details of the Controller. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The Data Subject has the right to lodge a complaint with a competent supervisory authority if the Data Subject considers that the processing of personal data infringes legal regulations. The competent supervisory authority in the Czech Republic is the Office for Personal Data Protection.

The Data Subject has the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, for direct marketing purposes, or for scientific or historical research purposes or statistical purposes.

SECURITY

The TIC hereby declares that the handling of personal data is carried out in full compliance with applicable legal regulations. The personal data of the data subject is secured by the TIC through established technical and organizational measures.

All personal data in electronic form is stored in databases and systems accessible only to persons who need to handle the personal data directly for the purposes specified in this policy, and only to the extent strictly necessary. Access to this personal data is protected by a password and a firewall.

EFFECTIVENESS

This policy is effective as of May 25, 2018.

GDPR Policy of GOTIC available for download here.
Justification for the non-appointment of a GDPR Officer available for download here.

PRIVACY POLICY OF GOTIC, PŘÍSPĚVKOVÁ ORGANIZACE – INFORMATION ON THE USE OF COOKIES

INTRODUCTORY INFORMATION
Data Controller:
GOTIC, příspěvková organizace, with its registered office at Mosty u Jablunkova 381, 739 98 Mosty u Jablunkova,
ID No.: (IČ): 75143364
The organization was registered with the Regional Court in Ostrava on October 8, 2008, Section Pr, File No. 1086 (hereinafter referred to as the "Controller" or "TIC").

Data Protection Officer:
As the activities of the TIC do not fall within the scope of Article 37(1)(b) and (c) of the General Regulation, a Data Protection Officer has not been appointed.

WHAT ARE COOKIES?

In order to improve the functionality of the website, evaluate website traffic, and optimize marketing activities, the Controller uses so-called cookies on its website. Cookies are small text files that are stored locally via the browser on the computer or mobile device used to display the website. Cookies cannot be used to determine the identity of website visitors, nor can they be used to misuse login credentials.
Types of cookies that the Controller collects on its website:

Session cookies – temporary cookies that remain stored on the device until you leave the website;
Persistent cookies (login) – used for keeping the customer logged in. The cookie is retained for the duration of the [session expiration] or until logging out;
Third-party cookies – Google Analytics used to obtain statistical information; expiration is determined by browser settings or until removed.

HOW TO REMOVE COOKIES

You can always remove cookies and any stored data about your person. The procedure for removing cookies in your browser can be found in the links below:

To analyze websites using cookies, the Controller also uses the Google Analytics service, developed and operated by Google Inc., with its registered office at Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google").
The analysis performed by Google Analytics works in such a way that information about the use of the website generated by the collected cookies is transmitted to a Google server in the USA and subjected to the relevant analysis there. As a result of the IP address anonymization configuration on the Controller's website, Google truncates the IP address within one of the member states of the EU or the European Economic Area before the data is transmitted to the Google server in the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated (anonymized) there.
Google will not associate the transmitted data, including the truncated IP address, with any other data. Google's privacy policy is available for review here.
A website visitor can prevent the collection of cookies and their analysis via Google Analytics either by changing their browser settings as described above, or by clicking on the following link, which will place a so-called opt-out cookie on their computer, preventing future storage of data about visits to the website;
As part of the Google Analytics service, the Controller also utilizes related advertising features provided by Google, such as impression reporting in the Google Display Network, advanced reporting of anonymous demographic data (e.g., age, gender, interests), or displaying advertisements in the content network based on viewed products (so-called remarketing), including the Google AdWords service used to personalize advertising and improve ad targeting and remarketing. Thanks to this, the Controller can offer website visitors advertising content that is as interesting as possible to them.
A visitor to the Controller's website can turn off or adjust ad personalization via their Google account.

GDPR Policy - Cookies of GOTIC available for download here.