Personal Data Protection

Personal Data Processing Principles

By attending events organized by the Administrator, visitors consent to the taking of photographs and audio and audio-visual recordings of themselves. These photographs, audio, and audio-visual recordings may be used by the organizer for any advertising, promotional, and similar purposes, free of charge.

I. Basic Provisions

1. The data controller according to Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is:

• HELI CZECH s.r.o.
• Company ID: 274 90 271
• Located at Formánkova 436/2, 500 11 Hradec Králové
• hereinafter referred to as (“the controller”).

2. The contact details of the controller are:

• Address: Formánkova 436/2, 500 11 Hradec Králové
• Email: info@heliczech.cz
• Phone: +420 777 206 480 (CZ), +420 733 238 074 (EN)

3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier, or to one or more specific elements of that person's physical, physiological, genetic, mental, economic, cultural, or social identity.
4. The controller has not appointed a data protection officer.

II. Sources and Categories of Processed Personal Data

1. The controller processes personal data that you have provided or personal data that the controller has obtained based on your inquiry or the fulfillment of your order, whether made through an online contact form or otherwise.
2. The controller processes your identification and contact details, as well as the content of your inquiry, and possibly data about purchased goods and services received, cookies from the controller's website www.heliczech.cz, and data necessary for the performance of the contract.

III. Legal Basis and Purpose of Processing Personal Data

1. The legal basis for processing personal data is

• consent to the processing of personal data according to Article 6(1)(a) GDPR for handling your inquiry sent through an online contact form or otherwise,
• performance of a contract between you and the controller according to Article 6(1)(b) GDPR, if concluded through an online contact form or otherwise,
• compliance with legal obligations based on Article 6(1)(c) GDPR,
• protection of vital interests of the data subject based on Article 6(1)(d) GDPR.

2. The purpose of processing personal data is

• to handle your inquiry sent through an online contact form or otherwise,
• to perform rights and obligations arising from a contractual relationship between you and the controller if concluded through an online contact form or otherwise,
• to comply with applicable legal norms such as retention of tax and accounting documents,
• to protect our rights and legally protected interests such as debt collection, asserting legal claims, and ensuring the security and optimization of services.

3. The controller does not engage in automated individual decision-making within the meaning of Article 22 GDPR.

IV. Data Retention Period

1. The controller retains personal data

• for up to two years from handling your inquiry for the purpose of improving services, particularly evaluating the extent of published information based on the frequency of inquiries, protection against unsolicited inquiries, or other cyberattacks,
• for the period necessary to perform rights and obligations arising from a contractual relationship between you and the controller and to assert claims from such contractual relationships if concluded through an online contact form or otherwise,
• until consent to the processing of personal data is withdrawn, if the personal data is processed based on consent,
• for the period necessary to protect the vital interests of the controller.
• for the period specified by applicable legal regulations.

2. After the retention period has expired, the controller will delete the personal data.

V. Recipients of Personal Data (Subcontractors of the Controller)

1. Recipients of personal data are persons

• involved in handling your inquiry,
• involved in the delivery of goods/services/payment processing and other activities based on a contract if concluded through an online contact form or otherwise,
• providing website operation services and other services related to website operation.

2. The controller does not intend to transfer personal data to a third country (a country outside the EU) or an international organization.

VI. Your Rights

1. Under the conditions set out in GDPR, you have

• the right of access to your personal data according to Article 15 GDPR,
• the right to rectification of personal data according to Article 16 GDPR, or restriction of processing according to Article 18 GDPR,
• the right to erasure of personal data according to Article 17 GDPR,
• the right to object to processing according to Article 21 GDPR, and
• the right to data portability according to Article 20 GDPR.
• the right to withdraw consent to processing in writing or electronically to the address or email of the controller specified in Article I of these principles.

2. You also have the right to lodge a complaint with the Data Protection Office if you believe your right to personal data protection has been violated.

VII. Data Security Conditions

1. The controller declares that they have taken all appropriate technical and organizational measures to secure personal data.
2. The controller has taken technical measures to secure data storage and personal data storage in paper form.
3. The controller declares that only authorized persons have access to personal data.

VIII. Final Provisions

1. By sending your inquiry through an online contact form or otherwise, you confirm that you are familiar with the personal data processing principles and that you accept them in their entirety.
2. You agree to these principles by checking the consent box through the online contact form. By checking the consent box, you confirm that you are familiar with the personal data processing principles and that you accept them in their entirety.
3. The controller is entitled to change these personal data processing principles. The new version of the personal data processing principles will be published on their website and will also be sent to you at the email address you have provided to the controller.

These personal data processing principles come into effect on March 17, 2020.