GDPR Information Memorandum

1. General statement

1.1. The company HMH Vision, s.r.o. (hereinafter referred to as the Company) fulfills its obligations regarding the processing of personal data that were transferred to it for the purpose of fulfilling contractual and legal obligations.

1.2. The protection of personal data results mainly from the EU Regulation on the protection of personal data No. 2016/679/EU GDPR (General Data Protection Regulation).

1.3. The company acts as a personal data administrator in the event that it determines the purpose and means of personal data processing in accordance with Article 4, paragraph 7 of the GDPR.

1.4. The company acts as a processor of personal data in the event that, in accordance with Article 4, paragraph 8 of the GDPR, it processes personal data for the controller.

 

2. Principles of personal data processing

2.1. When processing personal data, we comply with the highest standards of personal data protection and in particular adhere to the following principles:

a) we always process personal data for a clearly and comprehensibly defined purpose, by defined means, in a defined manner, and only for the time that is necessary due to the purposes of their processing; we process only accurate personal data and their processing corresponds to the stated purposes and is necessary for the fulfillment of these purposes;

b) personal data is protected in a manner that corresponds to the current development of technology; the highest available option for the security of this data is ensured, which prevents any unauthorized or accidental access to personal data, their change, destruction or loss, unauthorized transmission, their other unauthorized processing, as well as other misuse;

c) data subjects are informed about the processing of personal data and about the claims for accurate and complete information about the circumstances of this processing, as well as about other related rights;

d) The company observes appropriate technical and organizational measures to ensure a level of security corresponding to all possible risks; all persons who come into contact with personal data are obliged to maintain confidentiality about information obtained in connection with the processing of such data;

 

3. Information on the processing of personal data

3.1. General information about the company:

HMH Vision, s.r.o

ID: 62 39 617

with headquarters in Prague 1, Rybná 716/24

Contact email for revocation of consent to the processing of personal data: ContractorProfile@hmhvision.com

3.2. The company processes personal data for the purpose of:

a) fulfillment of obligations established by law, when acting in the position of administrator of personal data;

b) fulfillment of contractual obligations, when personal data were transferred by data subjects on the basis of consent provided;

c) fulfillment of contractual obligations when personal data were transferred to the Company to the personal data manager;

d) protection of the rights and legitimate interests of the Company, especially marketing and direct marketing;

e) offering suitable job positions for candidates in accordance with the consent granted;

3.3. Scope of processed personal data:

The company processes personal data to the extent necessary to fulfill the above objectives. In particular, the following personal data are processed:

a) name and surname;

b) address;

c) email address;

d) telephone number;

e) date of birth;

f) and other personal data that the Company is required to manage based on legal regulations or performance of the contract, and which it obtained from data subjects or based on its own activities.

3.4. Method of personal data processing:

The way in which the Company processes personal data includes both manual and automated processing in the Company’s information systems.

Personal data is primarily processed by the Company’s employees and, to the extent necessary, also by third parties. Before any transfer of personal data to a third party, a contract is concluded with this person, which contains the same guarantees for the processing of personal data that the Company observes in accordance with its legal obligations.

3.5. Recipients of personal data

Personal data is made available especially to the Company’s employees in connection with the performance of their work duties, during which it is necessary to handle personal data, but only to the extent that is necessary in each case and in compliance with all security measures.

Personal data may be given to third parties who participate in the processing of personal data, or these personal data may be made available to them for another reason in accordance with the law.

Before any transfer of personal data to a third party, a written contract is always concluded with this person, which regulates the processing of personal data in such a way that it contains the same guarantees for the processing of personal data that the Company itself observes in accordance with its legal obligations.

In accordance with the relevant legal regulations, the Company is authorized or directly obliged to transfer your personal data:

a) to competent state administration bodies, courts and law enforcement authorities for the purpose of fulfilling their duties and for the purpose of executing decisions;

b) entities for the purpose of obtaining a suitable candidate as an employee or co-worker for an employment or similar contractual relationship.

c) to other persons to the extent stipulated by legal regulations, for example to third parties for the purposes of debt collection;

d) entities providing services to the Company on the basis of outsourcing;

3.6. Transfer of personal data abroad

Personal data is processed on the territory of the Czech Republic and on the territory of other European Union states that share the same personal data protection standards as the Czech Republic. Entities participating in the processing of clients’ personal data do not transfer clients’ personal data to countries outside the European Union or EU Commission approved adequate countries.

3.7. Time of personal data processing

The retention period of personal data results from individual legal regulations on the basis of which the Company processes personal data.

In the event that personal data is processed on the basis of the provided consent to the processing of personal data, the personal data is processed for a period of 10 years from the date of termination of the contract.

In the event that personal data is processed for the purpose of fulfilling a contractual obligation, it is necessary for the purpose of protecting the rights and legitimate interests of the Company to process personal data for a period of 10 years from the date of termination of the contract.

In the event that it processes personal data without consent to the processing of personal data due to the fulfillment of a contractual obligation, it processes them only for the period that is necessary due to the purposes of their processing, but for a maximum period of 6 months.

3.8. Rights of data subjects

Data subjects have, in particular, the following rights within the scope of individual GDPR articles:

a) the right to information about the personal data administrator, processor and personal data protection officer;

b) the right to information about the purpose of personal data processing;

c) the right to access personal data and whether personal data is processed or not;

d) the right to file a complaint;

e) the right to correct personal data;

f) the right to erasure of personal data (the right to be forgotten) by a written request sent to the email: ContractorProfile@hmhvision.com

g) withdraw consent to the processing of personal data; by written request sent to the email: ContractorProfile@hmhvision.com

h) the right to limit processing;

i) the right to portability of personal data;

j) the right to raise objections;

k) all other rights granted by the Regulation;

The rights according to the points mentioned above can be exercised, unless otherwise stated, by by email to ContractorProfile@hmhvision.com

 

4. Final statement

The company takes a responsible approach to the protection of personal data that it processes as part of its activities. In case of questions or suggestions from data subjects, it is possible to contact the management of the company.