Protection of personal data

Cement Hranice, joint-stock company, seated at: Bělotínská 288, Hranice I – Město, 753 01 Hranice, Company ID: 155 04 077, registered in the Commercial Register kept by the Regional Court in Ostrava, Section B, Insert 140, as the personal data controller hereby informs about the manner and scope of personal data processing by this company including the scope of data subjects relating to the processing of their personal data by Cement Hranice, joint-stock company, hereinafter also referred to as “CH”.

CH processes personal data in accordance with the European Union law, particularly in accordance with the European Parliament and Council (EU) Regulation 2016/679 of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and in accordance with other legislation.

Identification data of the controller:
Cement Hranice, joint-stock company

registered office: Bělotínská 288, Hranice I – Město, 753 01 Hranice
Company ID: 155 04 077
registered in the Commercial Register kept by the Regional Court in Ostrava, Section B, Insert 140
data box ID: wnbcdh8
Tel.: +420 581 829 111, email: cement@cement.cz

Purpose and scope of personal data processing:

CH processes only accurate personal data obtained in accordance with applicable legal regulations, such personal data being collected and processed by CH only for the specified purpose in the scope as defined below, during the term of the contractual relationship and subsequently for the period necessary for exercising the rights and meeting the obligations under such contractual relationship and further for the period required by applicable legal regulations.

Primary purposes of personal data processing:

• performing contracts and providing services;
• ensuring operating activities;
• accounting and tax purposes;
• claim collection;
• fulfilling of statutory obligations;
• direct marketing;
• protection of property and persons.

Scope of personal data processing:

CH processes personal data in the scope as follows: identification data of the other contracting party indicated in the contract, any contact data, and further information relating to the subject of the contract (identification of the goods or services, payment information, etc.).

CH obtains personal information directly from the data subject upon execution of the contract.

Disclosure of personal data is absolutely voluntary with regard to contractual character of mutual relationships. However, CH cannot enter into the relevant contract if not provided the personal data necessary for execution of the contract.

Nor automatic decision-making or profiling takes place in terms of personal data processing for the above-mentioned purposes.

CH processes the personal data both manually and automatically. CH provides for technical and organisational protection of personal data in accordance with applicable legal regulations. CH requires the same security level from its personal data processors as well.

Camera systems are installed in the CH production premises in order to protect the property of the company, the employees and the business partners and to protect persons´ life and health. Data subjects are always informed about placement of the camera systems by information tables and pictograms at the entrance into such premises. Camera system records are archived for necessarily required period and they are not processed in any manner other than the specified purpose. Detailed information about the camera system can be obtained from IT department at CH.

Processors and recipients:

CH is entitled to designate a third person to ensure the above-mentioned purposes by performing certain activities, in terms of which personal data processing may take place. Such person, in certain cases, becomes personal data processor. This may apply particularly to providers of accounting, legal, postal and IT services.

CH is entitled to transfer personal data to other entities only provided that such entities rely on a statutory reason for access to such data (prosecuting and adjudicating authorities, other supervisory authorities with statutory authorisation to access information) or where it is necessary for protection of their legitimate interests.

Rights of data subjects:

In respect of personal data, the data subject may exercise:

• the right to obtain confirmation regarding the (non)processing of personal data and have access to the personal data relating thereto;
• the right to rectification or completion of personal data where it is inaccurate or incomplete; ;
• the right to erasure or restriction of personal data processing where the conditions given by legal regulations are satisfied; ;
• the right to object to processing any personal data relating to the data subject; ;
• the right to transfer personal data to another controller;
• the right to lodge a complaint with the competent supervisory authority, which is the Personal Data Protection Authority seated in Prague, whenever the data subjects believes that the data processing does not comply with legal regulations.