INFORMATION ON PERSONAL DATA PROCESSING
Introductory provision, Copyright
The owner and operator of the website www.tarpanlegal.com is the company TARPAN Legal s.r.o., advokátní kancelář, having its registered office at Na Strži 1702/65, 140 00 Prague 4 Nusle, IČO 056 56 729, registered in the Commercial Register maintained by the Municipal Court in Prague, section C, insert 268473 (hereinafter referred to as the “Company”). The Company holds all copyrights to all content which the Company places on the website www.tarpanlegal.com (hereinafter referred to as the “Website”).
Links to other sites
Links are presented on the Website to websites over which the Company has no control. Should a User visit one of these websites, he/she should acquaint him/herself with the rules of using the website and with security standards. The Company is not liable for the expressions and procedures of the operators of such websites.
Information about personal data processing
What are personal data?
Personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation”), means any information that relates to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. According to the specific situation, personal data may include, among others, the name and surname, address, telephone number or e-mail address of an individual (natural person). Personal data does not include information such as e.g. the number of users of the website.
Compliance with data protection regulation
As a personal data controller, the Company in its activities processes certain personal data of its clients, the Website users, job seekers and employees. As a personal data controller, the Company determines the purposes and means of processing the personal data and establishes measures related to the processing of the personal data, in particular of their security. When processing personal data, the Company proceeds strictly in accordance with the relevant legal regulations, in particular the Regulation.
Data subjects and purposes of personal data processing
Recipients of personal data
The Company only provides the personal data processed by itself to partners who have appropriate technical and organizational measures in place to protect data and other obligations under the Regulation. The Company's partners only have access to personal data to the extent necessary to perform their tasks.
Subject to all laws and contractual obligations, the Company provides personal data to the following recipients:
Transmission of personal data abroad
The Company may transfer personal data to other countries in the European Union, especially when the servers on which personal data are stored are outside the Czech Republic. The Company does not transmit personal data outside the European Union and outside the scope of the Regulation. Thus, the transfer of personal data to other countries does not affect the legal status of the data subjects.
Retention of personal data
The Company keeps personal data only for the time needed to fulfil the purpose of their processing according to the rules below:
Withdrawal of consent to the processing of personal data
If the Company processes personal data on the basis of the data subject's consent, the data subject has the right to withdraw his consent to the processing of personal data at any time. He may do so by sending a notice to the registered office or any establishment of the Company, or by sending an e-mail message or other appropriate means.
If the consent to the processing of personal data is withdrawn, the personal data provided will be erased unless the data can be processed without the consent of the person concerned under applicable law. However, withdrawal of consent will not affect the processing of personal data until consent has been withdrawn.
Other rights of data subjects
According to the specific situation, each data subject (i.e. clients, business partners, their representatives, users of the Website, job seekers or employees of the Company) may have other rights resulting from the Regulation, i.e. in particular:
How to contact us
In case of any questions or remarks, please contact the Company at the above-mentioned address, telephone +420 277 007 055 or email [email protected].
The owner and operator of the website www.tarpanlegal.com is the company TARPAN Legal s.r.o., advokátní kancelář, having its registered office at Na Strži 1702/65, 140 00 Prague 4 Nusle, IČO 056 56 729, registered in the Commercial Register maintained by the Municipal Court in Prague, section C, insert 268473 (hereinafter referred to as the “Company”). The Company holds all copyrights to all content which the Company places on the website www.tarpanlegal.com (hereinafter referred to as the “Website”).
Links to other sites
Links are presented on the Website to websites over which the Company has no control. Should a User visit one of these websites, he/she should acquaint him/herself with the rules of using the website and with security standards. The Company is not liable for the expressions and procedures of the operators of such websites.
Information about personal data processing
What are personal data?
Personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation”), means any information that relates to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. According to the specific situation, personal data may include, among others, the name and surname, address, telephone number or e-mail address of an individual (natural person). Personal data does not include information such as e.g. the number of users of the website.
Compliance with data protection regulation
As a personal data controller, the Company in its activities processes certain personal data of its clients, the Website users, job seekers and employees. As a personal data controller, the Company determines the purposes and means of processing the personal data and establishes measures related to the processing of the personal data, in particular of their security. When processing personal data, the Company proceeds strictly in accordance with the relevant legal regulations, in particular the Regulation.
Data subjects and purposes of personal data processing
- Website users: Based on its legitimate interest, the Company processes the following users’ personal and other data. If you send us a message by filling in the contact form on the Website, the information provided by you (including contact details) will be processed to answer the message and other related questions.
- Personal data processed when you visit the Website: When visiting the Website, the Company stores the abbreviated IP address of the user's computer and information about the website from which the entry was made. During the visit, information about the date and time of access, the names of the files available, the URL, the HTTP response code, the access status, and the amount of data transmitted within the connection are stored. These data are used exclusively for statistical purposes. The Company uses Google Analytics tool from Google LLC, located at 1600 Amphitheater Parkway, Mountain View, 94043 California, United States. This tool allows the Company, as a website owner, to obtain statistical data about its website users.
- Cookies: The Company uses cookies on the Website, i.e. data information that allows each user's browser to communicate with the Company's server to create an individual connection between each user's computer and the Company's computer. In general, cookies help you to browse the web faster and more efficiently and customize content delivery to the individual interests and specific needs of the user. Cookies are used to compile anonymous aggregated statistics to understand how users use the Website to optimize their structure and content, and to provide some Website functionality. The information obtained through the use of cookies are collected only for the purpose of mediating and performing certain user functions. The Company uses a predominantly "session" type of cookies, i.e. cookies that are temporary and remain stored on the user's device until they log out of the Website or close the web browser (then they are removed from the user's browser). In general, the application used to browse web pages by default allows you to store cookies on the user's device. This mode can be changed either by completely blocking cookies in the web browser settings or by partially limiting them - the user is then informed whenever his device stores cookies. More detailed information about the options and ways to handle cookies are available in settings of the application (web browser). However, in the event of a complete blocking of cookies, it is possible that the content will not be displayed optimally to the user when viewing the Site, especially when using online services. During the first visit on the Website, the user is notified by the so-called cookie banner of the use of cookies and is asked to consent to their use and processing of personal data through the Website.
- Server log files: The Company automatically collects and stores information in so-called server-log-files, which are passed on to the Company by the user’s web browser. These data include: Internet browser type and version; Operating system; Referring URL; IP address; Hostname of the accessing computer; Server request time, etc. The Company reserves the right to retain this information in the event that a user's illegal conduct is suspected.
- Google Maps: The Website uses Google Maps API to visually display geographic information. When using Google Maps, Google LLC, located at 1600 Amphitheater Parkway, Mountain View, 94043 California, processes the Website user’s data of Google Maps functionality use. For more information on Google LLC's data processing, users may refer to Google LLC's privacy policy.
- SSL encryption: The site uses SSL encryption for security reasons and to protect transmitted sensitive information (e.g. user requests). The user can recognize the encrypted connection by using a different address listed in the Page address bar (where "http://" is changed to "https://") and also the lock symbol. If the SSL encryption is used, data provided to the Company cannot be read by third parties.
- Clients and business partners: The Company processes the personal data of clients and their representatives, or business partners and their representatives to the extent necessary to negotiate the contract and to perform the contract which it concludes with the relevant persons for the purpose of providing its services or subscribing to products and services. Other personal data of clients beyond the data necessary for the performance of the contract is processed by the Company only on the basis of duly given consent. The processed personal data are obtained directly from these data subjects or by the company from public sources. Within the framework of providing and receiving services, the Company processes personal data to the extent resulting from the relevant contract and relevant legal regulations, i.e. in particular, in the following extent: name and surname, date of birth, residence, telephone number, e-mail address. The personal data are processed by the Company in accordance with the concluded contract.
- Job seekers: For the purpose of organizing and evaluating recruitment procedures for recruiting new employees, the Company processes personal data of job seekers. The processed personal data are obtained directly from these data subjects by the Company. The legal reason for the processing of personal data in a given case is a tender (or negotiations on the conclusion of a contract of employment following a request for participation in a tender); beyond the tender, the personal data of the job seeker are processed only with his consent.
- Employees: The Company processes personal data of employees to the extent necessary for the fulfilment of its legal obligations (e.g. the obligation to withhold or pay taxes, keep records for the purposes of health insurance and social security, etc.). The employee is obliged to provide this information to the Company; failing to do so would result in employee and / or company law breach and the possibility of sanctions by competent governmental authorities. Beyond its legal obligations, the Company processes employee personal data for the purpose of enforcing its legitimate interests or performing a contract concluded between the Company and an employee, in particular for the purpose of maintaining the Company's employees' database, preparing promotional materials, informing about corporate events, protecting the Company's assets or securing entry of authorized persons into the Company's premises. In other cases, the Company only processes personal data with the consent of its employees, and employees may freely decide whether or not to grant consent. Any failure to give consent to the Company does not affect the Company in any way.
Recipients of personal data
The Company only provides the personal data processed by itself to partners who have appropriate technical and organizational measures in place to protect data and other obligations under the Regulation. The Company's partners only have access to personal data to the extent necessary to perform their tasks.
Subject to all laws and contractual obligations, the Company provides personal data to the following recipients:
- Public authorities (e.g. courts, administrative authorities)
- Providers of information technology systems and maintenance of information technology systems
- Advisers of the Company, in particular tax and accounting advisors
- Companies of the TARPAN Group
- Other recipients according to needs and instructions of the Company's client
Transmission of personal data abroad
The Company may transfer personal data to other countries in the European Union, especially when the servers on which personal data are stored are outside the Czech Republic. The Company does not transmit personal data outside the European Union and outside the scope of the Regulation. Thus, the transfer of personal data to other countries does not affect the legal status of the data subjects.
Retention of personal data
The Company keeps personal data only for the time needed to fulfil the purpose of their processing according to the rules below:
- personal data of clients and business partners and / or personal data provided by the Company's clients and business partners in connection with the provision or acceptance of the Company's services are maintained for the duration of the contractual relationship with the Company and, to the extent necessary, after its termination until the expiry of the relevant limitation periods in the event of any claim under the contractual relationship;
- the personal data of the users of the Website are kept only for the duration of the Website browsing and the statistics of the use of the Website;
- personal data of unsuccessful job seekers are kept only for the duration of the recruitment process, unless the candidate has given his or her consent for longer retention of his / her personal data;
- employees' personal data are kept for the duration of the employment relationship and then, to the extent applicable, for the statutory retention periods, or until the relevant limitation / limitation periods have expired in the event of any claims arising from the employment relationship.
Withdrawal of consent to the processing of personal data
If the Company processes personal data on the basis of the data subject's consent, the data subject has the right to withdraw his consent to the processing of personal data at any time. He may do so by sending a notice to the registered office or any establishment of the Company, or by sending an e-mail message or other appropriate means.
If the consent to the processing of personal data is withdrawn, the personal data provided will be erased unless the data can be processed without the consent of the person concerned under applicable law. However, withdrawal of consent will not affect the processing of personal data until consent has been withdrawn.
Other rights of data subjects
According to the specific situation, each data subject (i.e. clients, business partners, their representatives, users of the Website, job seekers or employees of the Company) may have other rights resulting from the Regulation, i.e. in particular:
- the right to access personal data, i.e. the right to obtain confirmation from the Company whether personal data relating to the data subject are being processed or not and, if so, has the right to access such personal data and information about:
- processing purposes;
- categories of personal data concerned;
- recipients or categories of recipients to whom personal data have been or will be made available;
- the scheduled time of storing personal data or the criteria used to determine that time;
- the existence of a right to require the Company to correct or delete personal data or to limit its processing and / or to object to the processing of personal data;
- right to lodge a complaint with the supervisory authority;
- sources of personal data, if not obtained from the applicant;
- conducting automated decision making, including profiling, and information regarding the process used, as well as the relevance and implied consequences for the applicant;
- on the transfer of personal data to countries outside the European Union (so-called third countries) or to an international organization and to appropriate safeguards for the processing of personal data provided in connection with their transfer.
- the right to rectify personal data if his personal data are inaccurate;
- the right of personal data erasure ("the right to be forgotten") if one of the following reasons is given:
- personal data are no longer needed for the purposes for which it was collected or otherwise processed;
- the processing of personal data are revoked and there is no other legal reason for processing;
- there are legitimate objections to the processing of personal data;
- personal data were unlawfully processed;
- personal data must be erased to fulfil a legal obligation binding the Company;
- personal data were collected in connection with the offer of information society services to the child.
- the right of data processing limitation in the following cases:
- the accuracy of personal data is denied for the time needed for the Company to verify the accuracy of personal data;
- the processing of personal data is unlawful, but instead of deleting personal data, their use is restricted;
- the Company no longer needs personal data for processing purposes, but the applicant requires them to determine, execute or defend legal claims;
- the processing of personal data for the purposes of the Company's legitimate interests has been challenged until it has been verified that the Company's legitimate reasons prevail over the legitimate reasons of the opponent.
- right to data portability, i.e. the right to obtain personal data relating to him in a structured, commonly used and machine-readable format, and the right to transmit such data to another controller (or request the transfer of data directly by the Company to another manager) if the processing of personal data is based on agreement or contract and is carried out automatically;
- right to object, i.e. the right to object to the processing of personal data for the purposes of the Company's legitimate interests; and
- the right to file a complaint with the Office for Personal Data Protection or the competent authority of another EU state.
How to contact us
In case of any questions or remarks, please contact the Company at the above-mentioned address, telephone +420 277 007 055 or email [email protected].