Zásady ochrany osobných údajov

Stafio.cz s.r.o., with its registered office at Rooseveltova 400/25, Prague 6, postcode 160 00, Company ID: 072 072 21, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 296933 (the “Operator”).

As the controller of personal data, the Operator hereby informs users (each a “User”) of the website www.stafio.eu (the “Website”) about the manner and scope of processing of their personal data. Through the Website the Operator allows Users who express a general interest in the Stafio information system or other services provided by the Operator (the “Services”) to have the record of their interest and their contact details processed. This notice also describes the rights of the User in connection with this processing.

For any questions about privacy and the exercise of your rights, please use this contact: contact person Petr Jenček, managing director, email address petr.jencek@stafio.cz.

1. For what purposes do we process personal data?

1.1. Conclusion and performance of a contract

We process personal data for the purpose of communication about the possible provision of services.

We primarily process the personal data of Users who are natural persons so that we can offer our service to them or to the companies they represent. For this purpose we process:

• your contact details (first name, surname, telephone number, email),
• personal data generated automatically in the course of providing the Contact Handover service.

1.2. Legitimate interests

In justified cases we also process personal data to protect our interests, typically in legal disputes or proceedings before public authorities or courts. In such cases we must prove that we acted in accordance with the law when providing the Contact Handover service.

To protect our legitimate interests (in particular to find out how the Website is used and to improve it), we collect data on the use and behaviour of our Users by means of logging and tracking of activity on the Website.

1.3. Law

The processing of personal data is often also required by law, e.g. Act No. 89/2012 Coll., the Civil Code, as amended, Act No. 253/2008 Coll., and Act No. 563/1991 Coll., on Accounting, as amended. Personal data are processed to the extent and for the period required by these regulations.

1.4. Sending information and news about our services or products (commercial communications)

For Users whose email or telephone number we have obtained in connection with our services, we process these personal data for the purpose of sending information and news about our services and products. If you do not wish to receive these messages, you can unsubscribe free of charge at any time. The way to do so will always be stated in the message. If you do not want to receive such a message at all, contact us at the contact email given above.

2. From whom do we receive personal data?

We obtain personal data primarily from you. You are obliged to provide us only with accurate data and, if your personal data change, you must update them. We do not collect any data beyond those you provide to us yourself for the purpose of the Contact Handover service. In addition, we process data generated by your activity on the Website (logging).

3. To whom do we pass personal data?

Your personal data may be passed to:

• cooperating persons, e.g. marketing consultants;
• processors who provide us with server, web, cloud or IT services, or who are their business partners.

Your personal data will not be provided to third parties from countries outside the EU and the EEA.

4. How do we process personal data?

The User’s personal data are processed in electronic form by automated means, specifically through the Website or by the processors mentioned above for the purposes stated above. The User’s personal data may also be processed manually, by our employees or other persons working for us, among other things to correct errors, inaccuracies and the like. These persons may process personal data only under the conditions and to the extent stated above and are bound by an obligation of confidentiality about personal data and about security measures whose disclosure would endanger the security of personal data. We always process personal data in accordance with the applicable legislation and ensure their proper care and protection. We make sure that you do not suffer harm to your rights as a result of using the Website, in particular to your right to the preservation of human dignity. In connection with the use of the Website, we also protect you against unauthorised interference with your private and personal life.

We also process personal data to protect our legitimate interests, i.e. defence against possible claims of our customers, including before a court (e.g. for the duration of the relevant limitation periods, which in the Czech Republic may be up to 15 years from the relevant event). In this connection we process your identification data (first name and surname) and contact details (email, telephone), data on the use of the Website (the content of the contract with you, information on its performance) and logging information from the Website. Typically this period is 5 years from the end of the provision of the service.

5. What rights do you have?

First of all, you have the right to ask us for access to your personal data, including a copy of all your personal data.

We will always inform you about:

• a) the purpose of the processing of personal data,
• b) the personal data or categories of personal data being processed, including all available information about their source,
• c) the nature of automated processing, including profiling, and information about the procedure used, as well as the significance and the envisaged consequences of such processing for the data subject,
• d) the recipients or categories of recipients,
• e) the planned period for which the personal data will be stored or, if it cannot be determined, the criteria used to determine that period,
• f) all available information about the source of the personal data if they were not obtained from you.

Your other rights include the right to:

• a) ask us for an explanation,
• b) require us to remedy the situation, in particular by blocking, correcting, completing, restricting the processing of or erasing the personal data (the right to be forgotten),
• c) receive the personal data concerning you in a structured, commonly used and machine-readable format and transmit those data to another controller without any hindrance from us,
• d) lodge a query or complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů),
• e) object to the processing of personal data concerning you.

6. How do we protect your personal data?

We protect your data. The following security measures serve this purpose: antivirus protection, firewalls, encryption, authorisation credentials, backups, physical means of protection and organisational measures (training, confidentiality agreements).