Contact us

GDPR - processing of personal data

I. PREAMBULE

This information is for all individuals who submit their personal data ('Personal Data') toprocessing and storage by Fastest Solution s.r.o., registered office Radlická 3201/14, 150 00 Prague, ID No. 28591232,registered in the Commercial Register maintained by the Regional Court in Ostrava.

Information is provided in particular

Requirement to disclose Personal Data, its storage, processing or transfer to third parties as well as protectionPersonal Data is carried out by the Company in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Councilof 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such dataof such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as 'GDPR').

II. INFORMATION ON THE PROCESSING OF PERSONAL DATA BY THE COMPANY

SECTION A

Processing of Personal Data of employees and persons in a similar relationship

  1. For the purposes of this section, the subject of personal data means the Company's employees or persons with whom the concluded an employment agreement or an agreement for the performance of work (in accordance with the relevant provisions of Act No.262/2006 Coll., Labour Code).
  2. The Company only requests, stores and processes Personal Data that is necessary for the proper performance of its activities. The provision of Personal Data is required because it is necessary for the performance of the obligations under the contractor agreement, or where the provision is required by law. Failure to provide such data may result in failure to enter into a contract or agreement.
  3. Personal data is stored and processed by the Company only for the following purposes and on the basis of the following legal titles
    • fulfilling the employer's obligations arising from the concluded employment contract or agreement (legal title: Performance of contractual obligations under Article 6(1)(b) GDPR)
    • fulfilling the Company's legal obligation as an employer towards the administrative authorities, in particular in the context of labour and tax law or sickness and social security standards (legal title: Compliance with the legal obligation of the data controller pursuant to Article 6(1)(c) GDPR)
  4. In the event that the Company uses the Personal Data for a purpose other than that set out in paragraph 3,it shall promptly provide the data subject with information about this other purpose and other necessary information, or, where appropriate, obtain the data subject's prior consent to such use, unless the purpose of such use is for other lawful authority of the Company as the controller of the personal data.
  5. Personal data will be disclosed by the Company to the following third parties:
    • external accounting companies
    • to the administrative authorities in the performance of the Company's legal obligations as an employer
    • to an external law firm (in the case of legal matters where the provision of Personal necessary and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company or who are its business partners
    • to the Company's clients, suppliers and contractors (in the event that the disclosure of Personal Data in legitimate interest of the Company and to the extent necessary for the matter, i.e. typically a first name, last name and telephone or e-mail contact details of the data subject)
  6. Personal data will not be disclosed to third parties from outside the EU and EEA.
  7. There is no automated decision-making or profiling based on the Personal Data processed.
  8. Personal data will be processed by the Company for the duration of the contractual relationship and thereafter for the time necessary toto fulfil the Company's archiving obligations under applicable law.
  9. The rights of personal data subjects and the possibilities of exercising them are specified in Article III of this document

SECTION B

Processing of Personal Data of Job Seekers

  1. For the purposes of this section, a personal data subject means any applicant for employment or similar employment relationship (employment contract or work performance agreement), regardless of whether the applicant will be employment contract or agreement.
  2. The Company only requests, stores and processes Personal Data that is necessary for the proper performance of its activities.
  3. Personal data is stored and processed by the Company only for the following purposes and on the basis of the following legal titles:
    • the legitimate interest of the Company as an employer -- for record-keeping purposes and the ability to contact the job applicant or similar employment relationship (legal title: performance of contractual obligations under Article 61 (b) GDPR)
  4. In the event that the Company uses the Personal Data for a purpose other than that set out in paragraph 3,it shall promptly provide the data subject with information about this other purpose and other necessary information, or, where appropriate, obtain the data subject's prior consent to such use, unless the purpose of such use is for other lawful authority of the Company as the controller of the personal data.
  5. Personal data will not be disclosed to any third parties.
  6. There is no automated decision-making or profiling based on the Personal Data processed.
  7. Personal data will be processed by the Company for the duration of the selection procedure. In case of an explicit written consent of the data subject, the Personal Data (in particular, the name, surname and telephone and e-mail contact details) will be kept for a maximum of 2 years after the end of the selection procedure for the purpose of contacting the subject Company in the event of a vacancy.
  8. The rights of personal data subjects and the possibilities of exercising them are specified in Article III of this document

SECTION C

Processing of Personal Data of the Company's clients

  1. For the purposes of this section, the subject of personal data means the Company's clients, i.e. natural persons entering into a contract with the Company for the provision of project documentation and/or related activities(author's supervision, engineering activities, etc.)
  2. The Company only requests, stores and processes Personal Data that is necessary for the proper performance of its activities. The provision of Personal Data is required because it is necessary for the performance of contractual obligations, or is required by law. The consequence of not providing the data may be that the contract is not concluded.
  3. Personal data is stored and processed by the Company only for the following purposes and on the basis of the following legal titles:
    • performance of the Company's obligations as a contractor or agent under the contract (statutory title: performance of contractual obligations under Article 6(1)(b) GDPR)
    • compliance with the Company's legal obligation towards the administrative authorities, in particular in the context of tax standards (statutory title: compliance with the legal obligation of the data controller pursuant to Article 6(1)(c) GDPR)
  4. In the event that the Company uses the Personal Data for a purpose other than that set out in paragraph 3,it shall promptly provide the data subject with information about this other purpose and other necessary information, or, where appropriate, obtain the data subject's prior consent to such use, unless the purpose of such use is for other lawful authority of the Company as the controller of the personal data.
  5. Personal data will be disclosed by the Company to the following third parties:
    • external accounting companies
    • to the administrative authorities in the performance of the Company's legal obligations as a tax entity (in the case of control by such administrative authorities)
    • to an external law firm (in the case of legal matters where the provision of Personal necessary and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company or who are its business partners
    • to the Company's suppliers and contractors (in the event that the disclosure of Personal Data is in a legitimate interest of the Company and to the extent necessary for the matter and performance of the contract, i.e. typicallyt he name, surname and telephone or email contact of the data subject)
  6. Personal data will not be disclosed to third parties from outside the EU and EEA.
  7. There is no automated decision-making or profiling based on the Personal Data processed.
  8. Personal data will be processed by the Company for the duration of the contractual relationship, for the warranty period and thereafter for the period necessary to fulfil the Company's archiving obligations under applicable law.
  9. The rights of personal data subjects and the possibilities of exercising them are specified in Article III of this document

SECTION D

Processing of Personal Data of the Company's suppliers and contractors

  1. For the purposes of this section, the personal data subject means the Company's suppliers or contractors, i.e. natural persons entering into a contract with the Company for the construction of part of the project documentation and/or partial performances related to the Company's contract as a general contractor
  2. The Company only requests, stores and processes Personal Data that is necessary for the proper performance of its activities. The provision of Personal Data is required because it is necessary for the performance of contractual obligations, or is required by law. The consequence of not providing the data may be that the contract is not concluded.
  3. Personal data is stored and processed by the Company only for the following purposes and on the basis of the following legal titles:
    • performance of the Company's obligations as a contractor or agent under the contract (statutory title: performance of contractual obligations under Article 6(1)(b) GDPR)
    • compliance with the Company's legal obligation towards the administrative authorities, in particular in the context of tax standards (statutory title: compliance with the legal obligation of the data controller pursuant to Article 6(1)(c) GDPR)
  4. In the event that the Company uses the Personal Data for a purpose other than that set out in paragraph 3,it shall promptly provide the data subject with information about this other purpose and other necessary information, or, where appropriate, obtain the data subject's prior consent to such use, unless the purpose of such use is for other lawful authority of the Company as the controller of the personal data.
  5. Personal data will be disclosed by the Company to the following third parties:
    • external accounting companies
    • to the administrative authorities in the performance of the Company's legal obligations as a tax entity (in the case of control by such administrative authorities)
    • to an external law firm (in the case of legal matters where the provision of Personal necessary and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company or who are its business partners
    • to the Company's clients (where the disclosure of Personal Data is in the legitimate interest of the Company and into the extent necessary for the matter and the performance of the contract, i.e. typically name, surname andtelephone or email contact details of the data subject)
  6. Personal data will not be disclosed to third parties from outside the EU and EEA.
  7. There is no automated decision-making or profiling based on the Personal Data processed.
  8. Personal data will be processed by the Company for the duration of the contractual relationship, for the warranty period and thereafter for the period necessary to fulfil the Company's archiving obligations under applicable law.
  9. The rights of personal data subjects and the possibilities of exercising them are specified in Article III of this document

SECTION E

Processing of personal data of the Company's contractual partners

  1. For the purposes of this section, the subject of personal data shall mean the natural person entering into a contract with the Company, which is not directly related to the Company's business but which creates a relationship between the data subject and the Company a legal relationship requiring the storage and processing of Personal Data
  2. The Company only requests, stores and processes Personal Data that is necessary for the proper performance of its activities. The provision of Personal Data is required because it is necessary for the performance of contractual obligations, or is required by law. The consequence of not providing the data may be that the contract is not concluded.
  3. Personal data is stored and processed by the Company only for the following purposes and on the basis of the following legal titles:
    • performance of the Company's obligations as a contractor or agent under the contract (statutory title: performance of contractual obligations under Article 6(1)(b) GDPR)
    • compliance with the Company's legal obligation towards the administrative authorities, in particular in the context of tax standards (statutory title: compliance with the legal obligation of the data controller pursuant to Article 6(1)(c) GDPR)
  4. In the event that the Company uses the Personal Data for a purpose other than that set out in paragraph 3,it shall promptly provide the data subject with information about this other purpose and other necessary information, or, where appropriate, obtain the data subject's prior consent to such use, unless the purpose of such use is for other lawful authority of the Company as the controller of the personal data.
  5. Personal data will be disclosed by the Company to the following third parties:
    • external accounting companies
    • to the administrative authorities in the performance of the Company's legal obligations as a tax entity (in the case of control by such administrative authorities)
    • to an external law firm (in the case of legal matters where the provision of Personal necessary and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company or who are its business partners
  6. Personal data will not be disclosed to third parties from outside the EU and EEA.
  7. There is no automated decision-making or profiling based on the Personal Data processed.
  8. Personal data will be processed by the Company for the duration of the contractual relationship and thereafter for the time necessary toto fulfil the Company's archiving obligations under applicable law.
  9. The rights of personal data subjects and the possibilities of exercising them are specified in Article III of this document

HANDLING AND PROTECTION OF PERSONAL DATA

  1. The Company processes Personal Data and ensures its protection in accordance with the adopted internal directive, which developed on the basis of the GDPR and related regulations.
  2. In accordance with data protection regulations, each data subject has the following rights:
    • RIGHT OF ACCESS to Personal Data at the Company
      • The data subject may at any time request confirmation from the Company as to whether the Personal Data, concerning him or her is or is not being processed and, if so, for what purposes, in what extent, to whom they are disclosed, for how long they will be processed, whether they have the right to rectification, erasure, restriction of processing or objection, where the Personal Data was obtained from, and whether there is automated decision-making occurs as a result of the processing of Personal Data, including, where applicable profiling.
      • The right to obtain a copy of all Personal Data, the first provision of which is free of charge, and the subsequent provision, the Company may require reasonable reimbursement of administrative costs.
    • RIGHT TO CORRECTION OF PERSONAL DATA
      • The Personal Data Subject may request the Company to correct or supplement the Personal Data if is inaccurate or incomplete.
    • RIGHT TO DELETION OF PERSONAL DATA
      • The Company must delete Personal Data if (i) it is no longer needed for the purposes for which it was collected or otherwise processed, (ii) consent has been withdrawn and there is no other reason for processing (iii) an objection to processing has been raised and there are no overriding legitimate grounds for processing (iv) the processing is unlawful or (v) it is required by law obligation.
    • RIGHT TO LIMIT THE PROCESSING OF PERSONAL DATA
      • until the disputed issues regarding the processing of Personal Data are resolved, specifically if (i) theaccuracy of the Personal Data is disputed, (ii) the processing is unlawful but instead of erasing the Personal Data the Personal Data is requested only to restrict the processing, (iii) the Company no longer does not need the Personal Data for the purposes of the processing, (iv) or where an objection to the processing has been raised, the Company may only hold the Personal Data and further processing is subject to consent of the data subject, or that the data is needed for the purpose of determining, exercising or the defense of legal claims,
    • RIGHT TO DATA PORTABILITY,
      • the right to obtain Personal Data that has been provided to the Company with consent to processing or for the purposes of performance of a contract, in a structured, commonly used and machine-readable format, and, where technically feasible, the Company shall also transmit such Personal Data on the instruction of the data subject to another controller.
    • RIGHT TO OBJECT to the processing of Personal Data
      • the possibility to lodge with the Company a written or electronic objection to the processing of Personal data, which will cause the Company to no longer process the Personal Data unless it demonstrates compelling legitimate grounds for processing which override the interests or rights and freedoms of the subject of the Personal Data Subject
  3. All rights under paragraph 2 may be exercised with the Company either in writing by registered letter sent to the address of its registered office, or electronically at the e-mail address info@fastest.cz (for dealing with personal data where Fastest Solution s.r.o. is the data controller)
  4. The Company fails to comply with the requirements for the processing and protection of Personal Data and/or the rights of the data subject are violated or compromised, the data subject has the right to lodge a complaint against processing of Personal Data to the Office for Personal Data Protection at: www.uoou.cz.
  5. This information is communicated to all affected personal data subjects and is available at the Company's registered office, on the Company's website at www.fastest.cz and, if interested and requested, may be sent toby e-mail communication to the e-mail address provided.