Privacy policy
Statement on the processing of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data, and information for data subjects (hereinafter the “GDPR”).
The company SMWORKS s.r.o. (Company ID: 22801421, VAT ID: CZ22801421), with its registered office at nám. Českých bratří 36/1, 460 05 Liberec, Czech Republic, entered in the Commercial Register kept by the Regional Court in Ústí nad Labem, file no. C 32429 (hereinafter the "Controller"), hereby provides you with information on which personal data of natural persons it processes, for what purposes and for how long it processes such personal data in accordance with applicable legislation, to whom and for what reason it may transfer them, and what rights natural persons have in connection with the Controller's activities.
Contact e-mail address for matters concerning personal data: info@smworks.cz
The Controller has not appointed a Data Protection Officer.
Source of personal data
- Directly from the data subject (order form, e-mail, telephone, chat)
Purpose of personal data processing
- Performance of a contract;
- communication with the customer in the course of contract performance;
- e-mail communications offering the Controller's supplementary services;
- fulfilment of the Controller's legal obligations.
Legal basis for personal data processing
- Article 6(1)(b) – processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract;
- Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject;
- Article 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Recipients of personal data (who further processes the personal data)
- Our processors, who act on our instructions and are involved in the delivery and provision of our services (photography, design and development services, bookkeeping).
- The web hosting provider Webglobe, s.r.o., Company ID: 26159708
Transfer of personal data to a third country
The Controller transfers personal data to a third country (a country outside the EU) or to an international organisation. The recipient is The Rocket Science Group LLC, Atlanta, GA, United States (provider of the Mailchimp mailing service).
Period of personal data processing
For the duration of the contract between the data subject and the Controller. Upon termination of the contract, the personal data are erased. An exception applies to personal data that must continue to be processed under applicable legislation.
Automated decision-making
The company does not process any personal data in this manner.
Rights of the data subject
- To request from the Controller access to personal data concerning the data subject;
- to request from the Controller their rectification or erasure;
- to request from the Controller restriction of processing;
- to object to processing;
- the right to data portability;
- to lodge a complaint with the supervisory authority (the Office for Personal Data Protection, Úřad pro ochranu osobních údajů) and to seek judicial protection.
