I. Introductory provisions

1. For the purposes of this Policy, the following definitions shall apply:
   • Operator: Ladislav Mordovanec, with its registered office at Děčínská 15, 400 03, Ústí nad Labem, Czech Republic, e-mail: info@ladislavmordovanec.eu
   • Personal data: name and surname, address of residence, e-mail address, telephone number, identification number of the natural person doing business and tax identification number of the natural person doing business.
2. The Operator, as the administrator of Personal Data, hereby informs about the manner and scope of the processing of Personal Data, including the scope of the User’s rights (as defined below) related to the processing of their Personal Data.
3. The operator is a consultant in the field of personal data protection and for this purpose operates an information website ladislavmordovanec.eu, which includes the Contact section. As part of this service, personal data are processed by the Operator:
   • to the extent that they were provided in connection with the order of the Operator’s products and/or services, or in the context of negotiations on the conclusion of a contract with the Operator, as well as in connection with the concluded contract;
   • and for the purpose(s) set out in point 4 below.
4. The Operator processes Personal Data for the following purposes:
   • performance of the contract and provision of services;
   • fulfillment of legal obligations (in particular accounting, tax and archiving);
   • marketing and business offers of the Operator’s services;
   • protection of the rights and legally protected interests of the controller (legitimate interest).
5. The Operator is the controller of Personal Data. Personal data is not processed by any other entity. Only the controller will have access to the processed Personal Data.

II.Protection of personal data and information on processing

1. Natural persons who fill in and send to the Operator a completed contact form from the ladislavmordovanec.eu information website  (hereinafter referred to as the “User“) are subject to Act No. 101/2000 Coll., on the Protection of Personal Data, as amended, and other relevant legal regulations.
2. The User acknowledges that by sending the completed order form, the processing of Personal Data by the Operator begins.
3. If the User does not provide his/her Personal Data, it is not possible to conclude a contract with the Operator and/or provide him with the services resulting from it. In this context, personal data are necessary for the provision of a specific service or product of the Operator.
4. Personal data will be processed for the duration of negotiations on the conclusion of a contract between the Operator and the User, for the purpose of concluding the contract, as well as for the duration of the contractual relationship.
5. In the event of the conclusion of a contract under the Terms and Conditions of the Operator, Personal Data will be processed and stored for the next 36 months in the event of a dispute arising concerning the relationship between the Operator and the User, in order to protect the legitimate interests of the Operator. The legitimate interest of the Operator is the proper and timely performance of the agreed contractual obligation between the Operator and the User and the fulfillment of legal obligations arising from the contractual relationship between the Operator and the User.
6. In order to fulfil the legal obligation to archive accounting documents based on Act No. 563/1991 Coll., on Accounting, as amended, Personal Data (except for e-mail address and telephone number) will be further processed and stored for a period of 5 years starting from the year following the year in which the contract between the Operator and the User was concluded.  
7. Personal data – telephone number and e-mail – will be processed for the purposes of marketing and commercial communications for the duration of the User’s registration pursuant to Article II. 5 and for a period of 12 months after its termination, unless the consent is revoked by the User at any time.
8. On expiry of the period referred to in Article II. Article 4, para. 5, 6 and 7 The Operator shall destroy the Personal Data.
9. The User is obliged to provide the Operator only with true and accurate Personal Data.
10. The Operator shall make every effort to prevent unauthorized processing of Personal Data.
11. Users’ personal data will not be passed on to any third parties, to a third country or to an international organization.
12. Personal data are and will be processed in electronic form in a non-automated manner.
13. The User acknowledges that his/her personal data are stored in the datacenters of WEDOS Internet a.s., the operation of which is in accordance with European standards of personal data protection.
14. The User acknowledges that cookies may be stored by Google LLC on his device.

III. Rights of the User related to processing

1. The User has the right to withdraw his/her consent (in cases where the processing of Personal Data takes place on the basis of consent) to the processing of the Personal Data provided at any time. However, the withdrawal of consent to the processing of Personal Data is not possible to the extent and for the purpose of fulfilling a legal obligation by the Operator. Withdrawal of consent is without prejudice to the lawfulness of processing based on consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of Personal Data that the administrator processes on the basis of a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, a legal obligation or for other reasons specified in applicable law).
2. The user also has the right to:
   • request from the Operator access to his Personal Data;
   • to correct the Personal Data provided;
   • the deletion of the Personal Data provided;
   • to restrict the processing of Personal Data; and
   • file a complaint with the Office for Personal Data Protection.
3. In the event that the User believes that the Operator carries out the processing of his Personal Data that is contrary to the protection of his private and personal life or contrary to the relevant legal regulations, especially if the Personal Data are inaccurate with regard to the purpose of their processing, he may:
   • ask the Operator for an explanation by e-mail to the address info@ladislavmordovanec.eu;
   • to object to the processing and request by e-mail sent to the address of the info@ladislavmordovanec.eu that the Operator ensures the removal of such a situation (e.g. by blocking, correcting, supplementing or deleting personal data). The Operator shall immediately decide on the objection and inform the User. If the Operator does not comply with the objection, the User has the right to contact the Office for Personal Data Protection directly. This provision is without prejudice to the User’s right to contact the Office for Personal Data Protection directly with his/her complaint.
4. If the User requests information about the scope or method of processing their Personal Data, the Operator is obliged to provide this information immediately, but no later than one month after receipt of the request by the Operator at the address info@ladislavmordovanec.eu.
5. If the User exercises the right to access Personal Data in electronic form, the Operator shall also provide the requested information in electronic form, unless the User requests another way of providing information.
6. The Operator is entitled to charge a reasonable fee for the administrative costs associated with this in the event of a repeated and unjustified request for the provision of a physical copy of the processed Personal Data.

IV. Final provisions

1. All legal relationships arising in connection with the processing of Personal Data are governed by the laws of the Czech Republic, regardless of where the access to them was made from. Czech courts are competent to resolve any disputes arising in connection with the protection of privacy between the User and the Operator.
2. Users who provide their Personal Data through the order form for the purpose of concluding a contract with the Operator or provide consent to the processing of Personal Data do so voluntarily, on their own behalf and the Operator does not control their activities in any way.
3. The Operator may change or supplement the wording of the Principles. The Operator shall inform the User of any such change by e-mail at least 30 days before the changes take effect.
4. This Policy comes into effect on 1 January 2019.