Data Protection (GDPR)

Reporting.cz is responsible for the protection and security of the personal data of its customers, supporters and website visitors. Please familiarise yourself with the data protection, policies and rights in relation to the GDPR (General Data Protection Regulation).

Administrator

We are a registered company REPORTING.cz, s.r.o., ID No. 24248991, with main office at Zirkon Office Center, Sokolovská 131/86, Prague 8 - 186 00, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insertion 197204. We process your personal data as a controller, i.e. we determine how it will be processed and for what purpose, for how long and we select any other processors who will assist us with the processing. If you wish to contact us in the course of data processing, you can contact us.

We declare

We declare that as a data controller we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:

We will only process personal data on the basis of a valid legal ground, namely legitimate interest, performance of a contract, legal obligation or consent.

We comply with the information obligation under Article 13 of the GDPR before we start processing personal data.

We will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.

Scope of personal data and purposes of processing

We process the personal data you entrust to us for the following purposes:

Provision of services, performance of contract - your personal data in the following scope: name and surname, birth number/birth date, permanent address, telephone contact, email address.

Communication, marketing and sending newsletters - we use your data in the range of email address, first and last name, gender, what you click on in the email and when you open it most often for direct marketing, remarketing and social media advertising. We only send you newsletters on the basis of your consent, for a period of 3 years after granting it. In both cases, you can withdraw this consent by using the unsubscribe link in each email sent.

We retain your personal data for the duration of limitation periods, unless the law provides for a longer period to retain it or we have specified otherwise in specific cases.

Cookies

When you browse the website we record: your IP address, how long you stay on the site and which page you come from. We view the use of cookies to measure website traffic and to customize the display of the website as a legitimate interest of the data controller.

Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and protection of personal data

We protect personal data to the maximum extent possible by using modern technologies that correspond to the latest state of the art innovations. We have adopted and maintained technical and organisational measures to prevent the misuse, damage or destruction of personal data.

Transfer of personal data to third parties

Our employees and collaborators have access to your personal data. For specific processing operations, we use the services and applications of processors. These are providers of the following platforms:

MailChimp

Transfer of data outside the European Union

We only process data in the European Union or in countries that provide an adequate level of protection based on a decision of the European Commission.

Your rights in relation to data protection

You have a number of rights in relation to data protection. If you wish to exercise any of these rights, please contact us.

You have the right to information, which is already fulfilled by this information page with the personal data processing policy.

Thanks to the right of access, you can challenge us at any time and we will document within 30 days which of your personal data we process and why. If something changes or you find your personal data outdated or incomplete, you have the right to have your personal data completed and amended.

You can exercise your right to restrict processing if you believe that we are processing your inaccurate data, that we are processing your data unlawfully, but do not want to delete all your data, or if you have objected to the processing. You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter you limit the purpose of processing for sending commercial communications.)

Right to portability - If you would like to take your personal data and transfer it to someone else, we will follow the same process as when you exercise your right of access - except that we will supply the information to you in machine-readable form. We will need at least 30 days to comply with your request.

Right to erasure (to be forgotten) - Your other right is the right to erasure (to be forgotten). We do not want to forget you, but you have the right to do so if you wish. In this case, we will erase all of your personal data from our system and from the system of all sub-processors and backups. We need 30 days to secure the right to erasure.

In some cases, we are bound by a legal obligation. For example, we need to keep records of tax documents issued for a period of time specified by law, or we need the personal data in order to establish, exercise or defend legal claims, or another exception to the obligation to erase data within the meaning of Article 17 GDPR applies. In such a case, it will not be possible to comply with your request to erase your personal data in whole or in part. We will inform you by e-mail about the deletion and the scope of the personal data to be deleted.

The right to withdraw consent to the processing of your personal data. To exercise this right, please contact us. Any withdrawal of your consent will not affect the lawfulness of processing based on consent given prior to the withdrawal.

Complaint to the Data Protection Authority - If you feel that we are not treating your data in accordance with the law and the GDPR, you have the right to complain to the Data Protection Authority at any time. We would be very happy if you first inform us of this suspicion so that we can do something about it and correct any wrongdoing.

Unsubscribing from newsletters - We send you emails with information, news, articles, etc. on the basis of legitimate interest. If you are not our client, we send them to you on the basis of your consent. In either case, you can stop receiving our emails by pressing the unsubscribe link in each email sent.

Confidentiality - Our employees and associates who will process personal data are required to maintain confidentiality of personal data and security measures, the disclosure of which would compromise the security of personal data. This confidentiality continues even after the end of the contractual relationship with us. Personal data will not be released to third parties without consent.

This personal data processing policy applies from 1 May 2023.