Demand

PRIVACY POLICY

developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data within the meaning of Articles 13 and 14 of the Regulation (hereinafter referred to as the “GDPR”) and Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the “Act on the Processing of Personal Data”)

Who processes your personal data?

Business name:MRB Sazovice, spol. s r.o.
Registered office:U dubu 691/48, Braník, 147 00 Prague 4
Company Registration Number:634 88 051
Legal form:Limited Liability Company
Registered in:Commercial Register under file no. C 280908 maintained by the Municipal Court in Prague
Statutory body:Ing. Pavel Miklík
Contact:kozikova@mrb.cz , +420 606 672 237

hereinafter referred to as the “Controller”

What is personal data?

Personal data is practically any information that can directly identify a living natural person, or whose purpose is to reach such a person. Personal data can be divided into general (e.g., name and surname, age, phone number, place of birth, marital status, etc.) and sensitive (classified as a special category of personal data, including only the following: biometric data, membership in a trade union/political party, ethnic origin, philosophical beliefs, genetic data, information about convictions and criminal offences, religious beliefs, political opinions, racial origin, sexual orientation/lifestyle, and health status.

What is personal data processing?

Personal data processing means the systematic activities carried out by the Controller with personal data for a specific purpose. The activities as per the previous sentence include, in particular: collection, recording, organization, structuring, storing, adjustment or amendment, searching, preview, use, disclosure by transfer, dissemination, or any other form of making data available, sorting or combining, restriction, deletion or destruction.

Sources and categories of personal data:

The Controller processes personal data (directly from you) that you provide or that is obtained in connection with fulfilling your order.

This includes your identification and contact details and details necessary to implement the contract.

Legal basis and purpose for processing

The legal basis for processing is:

Your consent to the processing of personal data for the purpose of providing direct marketing pursuant to Article 6(1)(a) of the GDPR

For the purpose of executing and performing the contract (i.e., in accordance with the provision of our services), we process your personal data pursuant to Article 6(1)(b) of the GDPR. The legal basis for processing your personal data is therefore a contract.

As soon as the contract is fulfilled, we have to archive your personal data for the period envisaged by the relevant legal regulations. In this case, the legal basis for processing your personal data is compliance with the legal obligations, as stipulated by Article 6(1)(c) of the GDPR.

The purpose of personal data processing is:

“Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Controller. Making an order requires personal data necessary for the successful processing of the order pursuant to Article 6(1)(a) of the regulation (which also relates to the subsequent execution of payments, delivery of services, handling of complaints, etc.). The personal data you provide to us are used to execute the contract with you, and if a contract is executed, then we use them to fulfil it. The processing of a customer’s personal data is carried out without the consent of the customer, as the legal basis for processing a customer’s personal data for the purpose of fulfiling a contract is a specific contract concluded between the customer and the Controller. The provision of personal data is a necessary requirement for the conclusion and fulfilment of the contract, as it is not possible to conclude a contract or to fulfil its terms by the Controller if the data is not provided.”

Which personal data and to what extent will we process?

In order for us to provide you with our services we need to have the following information:

How long will we store your data?

We will store your personal data for the period of performance of our mutual contract. After the termination of our contractual relationship, we will store your personal data for the period required to comply with our archiving obligations under applicable law that envisage the archiving (these include the Act on Accounting, Value Added Tax Act, Act on Archives and Records Management).

To whom will we provide your data?

Your personal data may be provided to providers of legal, tax, and accounting services, as well as technical service providers.

Your personal data can also be provided to public authorities and courts. However, this is only on condition that it is stipulated by a special legal regulation or that you give your express consent.

Your data are provided to our processor only under a data processing agreement and in compliance with minimum required standard of personal data protection required by the GDPR.

The Controller does not provide, disclose or make personal data available to third countries.

Personal data security terms

The Controller declares that appropriate personal, technical and organizational measures to secure personal data were implemented.

The Controller implemented technical measures to secure data storages and storages of personal data in paper form.

The Controller declares that only persons exclusively authorized by the Controller have access to personal data.

Within the personal data processing activities we carry out during our business activity, there is no automated decision-making nor profiling.

What are your rights regarding the processing of your personal data?

Under the conditions stated in GDPR, you shall have:

How can you exercise your rights?

Right to access

Upon request, we must inform you whether we process your personal data or not. If we do process them, then you have the right to be informed by us about the following:

You can send us the request electronically, to the e-mail address kozikova@mrb.cz or by mail to: U dubu 691/48, Braník, 147 00 Prague 4.

Right to rectification

If you believe that we process incorrect (inaccurate) personal data then you shall have the right to rectification. If you detect such inaccuracy of your personal data, please inform us and we will remedy the situation without undue delay. You can send us the request electronically, to the e-mail address kozikova@mrb.cz, or by mail to: U dubu 691/48, Braník, 147 00 Prague 4.

Right to erasure

Under certain circumstances you have the right to have your personal data erased. You can request the erasure of your data at any time. We will erase your personal data if:

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. If we comply with your request, we will store your personal data only and cease further processing. Processing of your personal data will be restricted if:

Right to data portability

You are entitled to request that we provide you with your personal data in an electronic format (e.g., XML or CSV file) which will allow you to transfer your data to another company. You can also request that we transfer your personal data directly to the company of your choice. We shall conform to your request provided that the data were provided directly by you and you gave us your consent with their processing.

Right to object

You have the right to object to the processing of your personal data by us. If we process your personal data in the following cases:

How can you exercise these rights?

You can contact us with your request in one of the following ways:
E-mail: kozikova@mrb.cz, or by mail to: U dubu 691/48, Braník, 147 00 Prague 4.


If you believe that your rights to personal data protection have been violated, you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection at the following address:


Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Company Registration Number: 70837627

Phone:central: +420 234 665 111 (not for consultations)
Information: +420 234 665 800 (information line is available every Tuesday and Thursday from 1 p.m. to 3:30 p.m.)
WWW:https://www.uoou.cz
Email:posta@uoou.cz
Data box ID:qkbaa2n


This privacy policy is valid and effective from: 24. 04. 2019
Updated on 20. 08. 2025