Dear Client,
We would like to inform you how PSN s.r.o. (hereinafter referred to as “we” or “our company”) processes your personal data in connection with the performance of our business activities.
The purpose of this notice is to provide you with information in particular about what personal data we collect, how we handle it, from what sources we obtain it, for what purposes we use it, to whom we may disclose it, where you can obtain information about your personal data, and what your individual rights are in the field of personal data protection. In processing personal data, we comply with generally binding legal regulations, and the processing of personal data always takes place only to the extent determined by the specific service and/or purpose of processing.
Please familiarize yourself with the contents of this notice, and be assured that we will be happy to answer any questions you may have at our registered office at Seifertova 823/9, 130 00 Prague 3, by e-mail at [email protected], and/or by telephone at +420 221 088 111.
You can also contact our Data Protection Officer, Mr. Marek Vavřina, at [email protected] or by telephone at +420 221 088 111.
I. General Information
In view of its business activities, our company is required to process certain personal data, in particular for the purposes of fulfilling legal and contractual obligations. Without the provision of your personal data, we would not be able to provide our products/services at all.
We also process your personal data beyond our statutory obligations, namely for the purpose of customer care and maintaining relationships with our clients, so that we can further develop our business relations and address you with targeted offers of our products/services. For this, we need to obtain your consent. With regard to the nature of our products/services, the age limit for granting valid consent to the processing of personal data without the consent of a legal guardian will be respected.
I.1. Principles of Personal Data Processing When processing your personal data, we adhere to and respect the highest possible standards of personal data protection and in particular observe the following principles:
- We always process your personal data for a clearly and comprehensibly defined purpose, by designated means and in a designated manner, and only for as long as necessary in relation to the purposes for which they are processed. We process only accurate personal data of clients and ensure that their processing corresponds to the stated purposes and is necessary for fulfilling these purposes.
- We protect your personal data as confidential information; therefore, we process clients’ personal data in a manner ensuring the highest possible security of such data and preventing any unauthorized or accidental access, alteration, destruction or loss, unauthorized transmission, any other unauthorized processing, as well as any other misuse.
- We always provide clear information about the processing of your personal data and about your rights to precise and complete information on the circumstances of such processing, as well as about your other related rights. In our company we have implemented and comply with appropriate technical and organizational measures to ensure a level of security corresponding to all possible risks; all persons coming into contact with clients’ personal data are obliged to maintain confidentiality about the information obtained in connection with such processing.
II. Information on Personal Data Processing
II.1. Information about the Controller The controller of your personal data is us, i.e. PSN s.r.o., registered office: Seifertova 823/9, 130 00 Prague 3, ID No. 170 48 869, company registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 1671.
II.2. Purposes and Legal Grounds for Processing
II.2.1. Processing without Your Consent This usually concerns situations where you are obliged to provide certain personal data as a condition for us to provide you with our product/service, or where we are entitled to process your personal data obtained otherwise. We are entitled by law to process your personal data without your consent for the following purposes of complying with our legal obligations, in particular:
- prevention of damage to our company’s property;
- prevention of fraudulent conduct to which our company may be exposed;
- fulfillment of obligations in connection with client identification and control under the Act on Certain Measures against Money Laundering and Terrorist Financing;
- fulfillment of identification obligations towards clients under the Act on the Residence of Foreign Nationals.
- Conclusion or performance of a contract with you.
- This mainly concerns the factual implementation of a contractual relationship or other performance between our company and you. Personal data are necessary, among other things, in order to carry out the contractual relationship without disproportionate legal risks, including negotiations on conclusion or amendment of a contract with you.
Protection of rights and legally protected interests, in particular:
- protection of rights and legally protected interests of our company, enforcement of claims, realization of security or other exercise of claims, development and improvement of provided services;
- negotiations with third parties regarding the assignment of a claim of our company against a client or other transfer, including related performance, and other related dealings, in particular informing providers of related security, etc.;
- handling of any contentious matters, especially for the purposes of litigation or other disputes.
- Our legitimate interests.
- This mainly concerns situations where a contractual/customer relationship exists between you and our company.
II.2.2. Processing with Your Consent This usually concerns situations where you voluntarily agree that we process your personal data. On the basis of your consent, our company processes your personal data for the following purposes:
- Client care – activities not representing contractual performance or another statutory basis, including:
- market research,
- obtaining feedback on the controller’s products and services,
- monitoring client behavior on our company’s websites in relation to offered services (this purpose does not concern mere acquisition of information on website use via cookies, which is described below).
- Offering of products and services – dissemination of information, offering of products and services of our company through various channels (mail, electronic means including email and SMS/MMS, telephone calls, and via websites).
- Provision of personal data for client care purposes is our contractual requirement and failure to provide them may result in non-conclusion of a contract or failure to provide adequate care.
II.3. Scope of Processed Data We process contact data (addresses, phone numbers, emails, fax numbers or other similar data), identification data (name, surname, date of birth, permanent address, type, number and validity of ID; for entrepreneurs also ID No. and VAT No.) and CCTV footage.
II.4. Method of Processing We process data both manually and automatically in our IT systems and physically. Employees of our company and, to the necessary extent, third parties process the data. Before any transfer of data to a third party, we always conclude a written agreement ensuring the same guarantees as required by law.
II.5. Recipients Your personal data are made available primarily to our employees in the scope necessary for their duties. In addition, they are disclosed to third parties involved in processing, especially: our legal counsel JUDr. Rostislav Doleček, attorney-at-law, ID No. 662 13 011; providers of accounting services; processors providing server, web, cloud and IT services.
II.7. Transfers Abroad Your personal data are processed in the Czech Republic and are not transferred outside the EU.
II.8. Retention Period Personal data are processed only as long as necessary. Once they are no longer needed, they are erased. Usual periods:
- contract performance – for the duration of the relationship and typically up to 10 years afterwards,
- product/service offers – for the duration of the relationship and typically up to 10 years afterwards,
- client care – for the duration of the relationship and typically up to 10 years afterwards,
- CCTV footage – typically up to 30 days.
II.9. Right to Withdraw Consent You are not obliged to grant consent, and you may withdraw it at any time. However, some processing may continue where permitted or required by law. Consent withdrawal requests may be addressed to our registered office or by email at [email protected].
II.10. Sources of Data We obtain personal data mainly from:
- clients themselves,
- publicly available sources,
- potential clients during marketing campaigns,
- our own activities by evaluating other client data,
- CCTV footage.
II.11. Your Rights You may exercise your rights at our registered office or by email at [email protected]. You may also lodge a complaint with the supervisory authority, the Office for Personal Data Protection (www.uoou.cz).
- Right of access – to confirmation, purposes, extent, recipients, duration, sources, and to receive a copy.
- Right to rectification – to correct or complete inaccurate or incomplete data.
- Right to erasure – to have data erased if no longer needed, unlawfully processed, objected to, or if required by law.
- Right to restriction – to have data only stored while disputes are resolved.
- Right to object – to processing for direct marketing or on grounds of legitimate interests.
III. Electronic Communication Tools
III.1. Social Networks We can be contacted via various social networks, which we use mainly as marketing tools; currently, they are not used to provide products/services.
III.2. Cookies We use cookies (small text files saved on your device) to analyze website usage and target marketing more effectively.
III.3. Types of Cookies Technical cookies – necessary for website functionality and legal compliance. Personalized cookies – save preferences (e.g., login, theme, products). Analytical cookies – track visitor data (region, browser, duration, pages viewed). Marketing cookies – third-party cookies (Facebook, Instagram, Google Ads, Sklik, Google Tag Manager, Google Analytics, Hotjar).
III.4. Cookie Control You can adjust your cookie preferences in accordance with applicable legislation.
IV. Final Provisions
This notice is issued for an indefinite period and takes effect on 1 June 2018.
We may change this notice at any time by issuing a new full version; the current version is published on our website and available at our registered office.
Unless otherwise stated, all information here also applies to processing of data of potential clients and other persons with whom we are in contact, even if no contractual relationship exists (e.g., representatives of legal entities).