Information on the processing of personal data of clients and business partners

Dear clients, this document contains basic information on how we process your personal data.

• Personal Data Controller

  The Controller is the person who, alone or jointly with others, determines the purposes and decides how personal data will be processed. The controller of your data is Virtuos Print s.r.o. – Company ID 01715445, with its registered office at Hartigova 857/47, 130 00, Prague 3, registered in the Commercial Register maintained by the Municipal Court in Prague under file number C 210661/MSPH. You can reach your administrator through these contacts: Tel.: +420 778 089 554, e-mail: info [at] virtuos-print.cz

• The purpose for which we need the personal data and the legitimacy of their processing

  We process your personal data for the purpose of:

  • Ensuring the conclusion and subsequent performance of a contractual obligation and you on the basis of Art. Art. 6 para. 1, lit. b) Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as amended (hereinafter referred to as the "GDPR").

  • For marketing purposes, in order for the controller to best adapt the offer of its products and services and commercial communications regarding them to your needs, for this purpose of processing, the controller obtains your unambiguous consent (Article 6(1)(a) of the GDPR, if you are already our customer, our legitimate reason for marketing is our genuine interest (Article 6(1)(f) of the GDPR). By providing personal data to Virtuos Print, the data subject agrees to receive commercial communications (marketing offers), to carry out other marketing activities and to improve the quality of the services provided.

  • Protection of your legitimate interests (Art. 6 (1) (f) GDPR), which is to ensure the protection of the data you have entrusted to us for processing, the protection of our property.

  The provision of personal data to the controller is generally a legal and contractual requirement. Your consent is required for the provision of personal data for marketing purposes (with the exception of marketing to our existing customers, where we use our legitimate interest), which does not constitute the fulfilment of the contractual and legal obligations of the controller. If you do not give your consent to the processing of personal data for marketing purposes, it does not mean that the controller would refuse to provide you with its product or service on the basis of a contract. Our legitimate interests include, in particular, the proper performance of all contractual obligations, the provision of business information to customers, the proper fulfilment of all legal obligations, the protection of our business and property and, last but not least, the protection of the environment and ensuring sustainable development. The lawfulness of the processing is determined by Article 6 para. 1 GDPR, according to which the processing is lawful if it is necessary for the performance of a contract, for the fulfilment of a legal obligation of the controller, for the protection of the legitimate interests of the controller, or the processing takes place on the basis of the consent you have given us. The lawfulness of the processing is also based, for example, on Act No. 563/1991 Coll., on Accounting, under which invoicing data are processed and stored, on Act No. 89/2012 Coll., the Civil Code, according to which the administrator defends its legitimate interests, or Act No. 235/2004 Coll., on Value Added Tax.

• Personal data and their processing

  We process the following personal data of yours:

  • basic identification data – name and surname, or name and address of the company and its ID and VAT number for self-employed persons

  • contact details – telephone number and e-mail address (which is your unique identifier for us)

  • information about the services we provide to you

  • information about mutual communication – information from e-mails or contact forms

  • billing and transaction data – this is mainly information appearing on invoices, the agreed invoicing terms and payments received

  • location data – addresses that you provide to us for the performance of services

  • Source of personal data

    We have obtained personal data directly from you, in particular from completed forms, mutual communication or concluded contracts. In addition, personal data may also come from publicly available sources, registers and records, such as the Commercial Register or the Trade Register.

  • Period of processing

    We store information that we have to archive on the basis of legal deadlines for the period specified by law (this applies in particular to accounting documents). We store other information about orders for a period of 5 years from the end of the contract or the handover of the order, while we dispose of the supplied documents for individual orders immediately after the handover of the order. Your identification and contact data, communication records are disposed of 5 years after the last mutual contact. Personal data processed only for marketing purposes will be processed until the consent is withdrawn, for a maximum period of 5 years. After the expiry of this period, the personal data will be securely and irretrievably destroyed so that it cannot be misused.

  • Transfer of data

    Personal data must be provided to state administration bodies, such as tax administrators, courts, law enforcement authorities, within the legal limits. In addition, we will pass on the necessary personal data (address, contact person and his/her phone number) in the case of using contractual suppliers – transport companies or postal service suppliers, external collaborators or other subcontractors. When processing orders, we use various systems that we usually have installed on our equipment. If this is not the case and the system is operated by an external supplier, we have concluded appropriate contracts with them and we make sure that they also take care of your data with due responsibility, and in accordance with the GDPR.Pro of sending business offers via e-mail and SMS, we also use external suppliers, to whom we pass on only the absolutely necessary data (name and surname, e-mail, phone number). We make sure that all processors process your personal data securely and fully in accordance with the GDPR. We will not transfer personal data to countries outside the European Union or the European Economic Area, or to any international organization.

• Your rights

  In connection with the processing of your personal data, you are guaranteed the rights described in this article. The administrator will provide you with a statement and, if necessary, information on the measures taken as soon as possible, but no later than within one month. The administrator is entitled to extend the deadline by two months if necessary and taking into account the complexity and number of requests. The administrator will inform you about the extension, including the reasons.

  • Right to obtain the information about the processing of your personal data

    You are entitled to request information from the controller as to whether or not your personal data is being processed. If personal data is processed, you have the right to request information from the controller, in particular about the identity and contact details of the controller, its representative and, where applicable, the data protection officer, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of personal data, the authorized administrators, the list of your rights, and the possibility of contacting the Office for Personal Data Protection with its registered office at pplk. Sochora 27, 170 00 Prague 7, on the source of processed personal data and on automated decision-making and profiling. If the controller intends to further process your personal data for a purpose other than the one for which it was obtained, it will provide you with information about this other purpose and other relevant information prior to such further processing. The information provided to you in the exercise of this right is already contained in this document, but this does not prevent you from requesting it again.

  • Right of access to personal data

    You are entitled to request information from the controller as to whether your personal data is being processed or not, and if so, you have access to information about the purposes of processing, the categories of personal data concerned, recipients or categories of recipients, the period of storage of personal data, information about your rights (rights to request rectification or erasure from the controller, restriction of processing, to raise an objection against such processing), the right to lodge a complaint with the Office for Personal Data Protection, information about the source of personal data, information about whether automated decision-making and profiling takes place and information regarding the procedure used, as well as the importance and expected consequences of such processing for you, information and guarantees in the event of transfer of personal data to a third country or international organization. You have the right to be provided with copies of the personal data being processed. However, the right to obtain such a copy shall not adversely affect the rights and freedoms of others.

  • Right to rectification

    In certain situations, you generally have the right to have your personal data rectified. In the case of CCTV recordings, however, this right is not relevant.

  • Right to be forgotten

    In certain specified cases, you have the right to request that the controller erase your personal data. Such cases include, for example, that the processed data is no longer necessary for the above-mentioned purposes. The controller automatically deletes personal data after the expiry of the period of necessity, but you can contact the controller with your request at any time. Your request is then subject to an individual assessment (despite your right to erasure, the administrator may be obliged or have a legitimate interest to keep your personal data) and you will be informed in detail about its processing.

  • Right to restriction of processing

    The Administrator processes your personal data only to the extent necessary. However, if you feel that the Controller exceeds the above-specified purposes for which it processes personal data, you can submit a request that your personal data be processed exclusively for the most necessary legal reasons or that the personal data be blocked. Your application is then subject to an individual assessment and you will be informed in detail about its processing.

  • Right to data portability

    If you wish the controller to provide your personal data to another controller or another company, the controller will transfer your personal data in an appropriate format to the entity designated by you, unless there are any legal or other significant obstacles preventing the controller from doing so. In the case of CCTV recordings, this right is not relevant.

  • Right to raise an objection and automated individual decision-making

    If you find out or just believe that the Controller is processing your personal data in violation of the protection of your private and personal life or in violation of legal regulations (provided that the personal data is processed by the Controller on the basis of public or legitimate interest, or is processed for direct marketing purposes, including profiling, or for statistical purposes or for purposes of scientific or historical significance), you may contact the controller and ask him or her for an explanation or remedy of the defective state of affairs. You can also raise an objection directly against automated decision-making and profiling (in the case of camera recordings, automated decision-making and profiling do not take place, so this right is not relevant).

  • Right to lodge a complaint with the Office for Personal Data Protection

    You can contact the supervisory authority at any time with your suggestion or complaint regarding the processing of personal data, namely the Office for Personal Data Protection, with its registered office at pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/.

  • Right to withdraw consent

    You have the right to withdraw your consent to the processing of personal data at any time, either by filling in the form on the website or by sending the revocation to the e-mail address or address of the controller's registered office or by using the link in the e-mail communication.

• Personal Data Processor

  If you entrust us with the processing of documents that contain personal data or if we process a contract for the implementation of which the personal data of other persons are necessary (preparation of various events, production of personalized materials, etc.), then we are in the position of a processor in relation to these personal data. During the implementation of the order, we act fully in accordance with the instructions of the client. These are usually part of the contract or order for more complex orders. We process the documents for such orders (which may contain personal data) for the necessary period of time and delete/dispose of them after the execution of the order (no later than 30 days after the handover of the order, unless there are any problems).

• Validity

  This document is valid from 12.05.2024 and was last updated on 12.05.2024. The current version will always be published on the company's website.

I confirm that I have read all of the above and by my confirmation I consciously agree to the processing of my personal data to the extent specified above.