Vinteco s.r.o. (hereinafter the "Controller" or "Expedico") process as part of their Services within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (general regulation on the protection of Personal Data) (hereinafter the "Regulation") Senders’ or Recipients´ following Personal Data:
• individuals: name and surname, address, bank account number, e-mail address, telephone number;
companies: name and surname of contact persons, telephone number of contact persons, e-mail address of contact persons.
(hereinafter the "Personal Data")
The above Personal Data must be processed for the purpose of identifying contracting parties, for the performance of the contract, for contractual evidence, the possible future exercise and protection of the rights of contracting parties, and to fulfil legal dutier stipulated by accounting, taxation and other laws. Such processing is in compliance with:
• Article 6 (1) (b) of the Regulation - processing necessary for the performance of the contract and
Article 6 (1) (f) of the Regulation - processing necessary for the purposes of the legitimate interests of the Controller or third party.
Article 6 (1) (c) of the Regulation - processing is necessary for compliance with a legal obligation to which the Controller is subject;
Personal Data will be processed by Expedico for the above purposes throughout the duration of the contractual relationship and for 10 years after the termination of the contractual relationship, unless other the applicable legislation requires the preservation of contractual documentation for a longer period.
If a Sender wishes, Expedico will send commercial communication to the e-mail address of contact persons, as this procedure is in compliance with § 7 (3) Act no. 480/2004 Sb., on Information Society services. This commercial communication shall only relate to similar goods or services and can be withdrawn simply at any time by sending a letter to Expedico contact address, sending an e-mail to firstname.lastname@example.org or by clicking on the link in commercial communication. For the purpose of such a withdrawal, the e-mail address will be kept by Expedico for 3 years from the conclusion of the last contract between contracting parties
The processing of Personal Data is performed by Expedico; however, the following processers or third parties may also process such data:
Provider of the Information System of Expedico;
Provider of Expedico accounting software;
and other possible providers of processing software, services, and applications not presently used by Expedico.
Any servers or services that contain Personal Data are located within the EU. Personal Data are not provided to any subjects outside the EU.
The affected Data Subjects are entitled under the Regulation to:
demand information regarding which Personal Data of a Sender Expedico is processing,
request Expedico for access to this data and have it deleted or updated or corrected or demand restriction of the processing,
require Expedico to delete the Personal Data; Expedico will do so unless contrary to legislation or the legitimate interests of Expedico
effective judicial protection if the Sender considers his rights under the Regulation have been violated due to processing contrary to the Regulation,
portability of the data,
demand a copy of processed Personal Data
file a complaint with the Personal Data Protection Office,
make an objection against unjustified processing by Expedico.