HYPOXIA Group s.r.o., with its registered office at Dělnická 213/12, 170 00 Praha Holešovice, ID No.: 02971721 (hereinafter referred to as the “Company”), in accordance with Regulation (EC) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), and in accordance with its provisions Article 13 et seq.

The company processes personal data manually, in paper and electronic form, as a data controller and handles it in accordance with the applicable Czech legislation, in particular in accordance with the GDPR.

PURPOSE OF PROCESSING

The Company processes the personal data of its clients and business partners, if they are natural persons (“data subjects”), solely for the purposes set out below, on the basis of the legal titles set out in the GDPR and to the extent necessary to fulfil the purpose for which they were collected, namely:

– Performance of a contract – in particular, contracts for the provision of legal services and the fulfilment of client requirements, i.e. performance under applicable law;

– Fulfilling legal obligations – in particular, the obligations imposed by accounting and tax regulations and the related transmission of personal data to public authorities;

– Protection of legitimate interest – protection of the rights and legally protected interests of the company, third parties and clients;

– Sending commercial communications and offering services via e-mail The company sends commercial communications or newsletters on the basis of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services), as amended, and always only with the consent of the data subject;

PERSONAL DATA PROCESSED

The Company processes mainly the following categories of personal data:

– identification data – name, surname, title, date of birth, ID number, VAT number, ID number;

– contact data – address, telephone number, e-mail address;

– financial data – bank account number;

– data on the relationship between the data subject and the company;

– data necessary for the fulfilment of the company’s registration and reporting obligations as an employer;

– data on the qualifications and work experience of the data subject as an applicant for employment with the company;

– data provided to the company by clients or their legal representatives in the context of the performance of a contract for the provision of legal services and in the performance of activities directly related thereto.

PERIOD OF PROCESSING OF PERSONAL DATA

Personal data are processed by the company for the duration of the contract with the data subject or for the duration of the binding legal relationship in connection with which the personal data of the data subject are processed. Personal data shall be processed for longer periods only if this is provided for by law or if such processing is justified by the need or potential for full settlement of claims arising from the legal relationship concluded between the company as the controller and the data subject or a third party, if the personal data of the data subjects are processed in this context.

RECIPIENTS OF PERSONAL DATA

The company only discloses personal data to authorised employees and cooperating companies or individual contractual processors of personal data or other controllers, but only to the extent necessary for the fulfilment of the individual purposes of processing and on the basis of the corresponding legal title for processing personal data.

In cases provided for by law, the Company is entitled or obliged to transfer certain personal data to public authorities or entities entrusted with the performance of tasks in the public interest on the basis of applicable legislation.

In the event that the transfer of personal data is strictly necessary for the provision of services by another service provider, the Company shall proceed in accordance with the law, according to which the Company is bound by the obligation of confidentiality when providing legal services.

USE OF COOKIES

When you visit our website, information is stored in your browser in the form of cookies (small text files). These files store information about how you use the site (identifiers, date of visit, etc.). By using cookies, we make it easier for you to use our website. You can prevent the storage of cookies and you can delete existing cookies through the corresponding settings of your browser. The help function of most browsers will explain how these settings can be made. If cookies are deactivated, you will not be able to use all elements of our website. Most newer web browsers offer the possibility to control the cookies stored via the browser settings. Each browser has different settings for this.

DATA SUBJECT RIGHTS

Data subjects have the following rights under data protection legislation:

– Right of access – the data subject has the right to obtain information about whether the company processes his or her personal data and, if so, what data is involved and how it is processed;

– the right to rectification – the data subject has the right to have inaccurate personal data concerning him or her rectified by the company without undue delay at his or her request;

– the right to erasure (right to be forgotten) – the data subject has the right to have the company erase the personal data it processes about the data subject if the conditions set out are met and the data subject so requests;

– the right to restriction of processing – the data subject has the right to have the company restrict the processing of his or her personal data in certain cases;

– the right to data portability – the data subject has the right, where the conditions set out are met, to obtain from the company the personal data he or she has provided to the company and to transmit it to another controller or, where technically feasible, to request that the controllers transmit the personal data between themselves;

– the right to object to processing – the data subject has the right to object at any time to processing which is based on the legitimate interests of the company, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;

– the right to withdraw consent – if the company processes the data subject’s personal data on the basis of his or her voluntary consent, the data subject has the right to withdraw his or her consent at any time.

In case of any questions or complaints regarding the processing of personal data carried out by the company, you can contact the company directly in writing at its registered office or by e-mail at beranek@hypoxia.cz, or contact the Office for Personal Data Protection.