Updated as of 1 September 2022
Personal Data Controller
The personal data controller, mia translate s.r.o., company ID 03650910, with its registered office at Pobřežní 249/46, 186 00 Prague 8, registered in the Commercial Register at the Municipal Court in Prague, Section C, File N. 235546 (hereinafter referred to as the “Controller”), declares that all personal data processed by the Controller are strictly confidential. The Controller handles them in accordance with national and European Union legislation applicable in the field of personal data protection.
The Controller collects, stores and uses your personal data under the Act N. 110/2019 Coll. on the Processing of Personal Data (hereinafter referred to as the “Personal Data Processing Act”), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of Such Data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”). The individual purposes for which the Controller processes personal data are defined below.
The controller also collects the personal data through its website atwww.miatranslate.cz(the “Website”).
This policy is issued by the controller to ensure that you are sufficiently informed about what personal data the controller processes about you, for what purpose, for how long, who will have access to your personal data and what your rights are. This policy appliesto all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or consent.
The controller is entitled to process the following personal data according to the purpose, category of personal data, according to the categories of data subject, as follows:
for the purpose of fulfilling the contractual relationship, the customer’s address and identification data for a period of 10 years from the termination of the contractual relationship
for marketing purposes customer address and identification data for a period of 10 years
The controller will only transfer your personal data in justified cases and only to the extent necessary to the following categories of recipients:
To contractual partners who are necessary for the performance of the contractual relationship, e.g.
To other entities in cases where the provision of your data to us is required by law or if it is necessary to protect its legitimate interests (e.g. courts, the Police of the Czech Republic, etc.).
The following are meant to be the purposes of processing:
performance of a contract or implementation of measures taken prior to the conclusion of a contract at your request for the purposes of implementing a contractual obligation, including related commercial and financial communications;
sending commercial messages and offers via email, SMS or telephone;
performing a legal obligation under the law for the purpose of providing assistance to government authorities under the law and within its limits, including the retention of data under the law and record keeping;
statistical purposes, which is the anonymized determination of website traffic to display relevant content;
displaying advertisements based on statistically determined customer preferences;
legitimate interest for the purposes of collecting payments due for services provided or our other receivables, assessing creditworthiness and trustworthiness, direct marketing, ensuring network and information security, etc.
Your personal data is processed by the controller for the period necessary to ensure the rights and obligations arising from the mutual legal transaction, at least for the period of order processing or service performance, etc., as well as for the period for which the controller is obliged to retain the personal data under generally binding legal regulations or for the period for which you have given your consent to the controller, if applicable. Otherwise, the processing period is based on the purpose for which the personal data is processed or is determined by legal regulations.
Personal data is processed manually and automatically by the controller. The controller is entitled to process some information automatically, for example, to create statistical information about traffic to its website.
Personal data processed on the basis of consent
If we have obtained consent from you to process your personal data, it is for one of the following purposes:
for communication within the scope of the requested service, for the processing of the offer and for the subsequent implementation of the ordered service
for sending commercial messages as part of our marketing communications
The processing of personal data with the data subject’s consent is as follows
identifying and contact information (first name, last name, address, ID number, phone number, e mail address);
details about the services provided and received;
data from our communications with each other (whether in person, in writing, by telephone or otherwise);
payment details (e.g. details of the amount paid or due, account number, etc.).
We will ask for your consent in the absence of a contractual relationship or for any other reason compliant with GDPR requirements. Giving consent to the processing of personal data is completely voluntary and you can withdraw this consent at any time. Consent to the processing of personal data can be withdrawn by written notice sent by email to email@example.com or by post to our address. Withdrawal of consent does not affect the legitimate processing based on consent prior to its withdrawal.
Data Subjects Rights
As a data subject, you have the following rights under the law, which you can exercise at any time. These are:
right of access to personal data, under which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is determined by Article 15 of the GDPR. The controller has the right to request a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;
right to rectification or erasure of personal data or to restriction of processing, whereby you have the right to have your personal data rectified if it is inaccurate or incorrect. If your personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not want to request the erasure of your personal data, but only to temporarily restrict its processing, you may request the restriction of processing;
right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;
the right to contact the Data Protection Authority in case of doubts about compliance with obligations related to the processing of personal data;
the right to data portability, i.e. the right to obtain personal data concerning you which you have provided to the controller in a structured, commonly used and machine-readable format, see more in Article 20 GDPR;
right to object to the processing of personal data which are processed for the purposes of carrying out a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing which overrides your interests, rights or freedoms;
right to withdraw consent to the processing of personal data at any time if you have given your consent to the controller.
Transfers of Personal Data to Third Countries
Your personal data will not be transferred to third countries.