In accordance with the principle of transparency, the personal data administrator is obliged to inform the data subject about the processing of personal data concerning that data subject. The administrator has an information obligation according to 13) and 14) regulation (EU) 2016/679 of the European Parliament and of the council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and according to Act. no. 110/2019 Sb.

Name and address of the administrator
The administrator in the sense of the above legal regulations is the company:

Optiflow Solutions s.r.o.
Trojská 782/53,
182 00 Praha 8
IČ: 08226695
SZ: C 315064 kept at the Municipal Court in Prague

Purpose of personal data processing

• Communication through nominated persons
• Marketing comunication
• Protection of own claims
• Fulfillment of legal obligations
• Fulfillment of the contractual relationship
• Fraud prevention and defense
• Accounting and tax purposes
• Debt collection
• Network and information systems security
• Customer support
• Sending offers of other products and services

Personal data processing

• Personal identification data (name, surname)
• Contact details (address, e-mail, telephone)
• Bank details
• Other data necessary for the performance of the contract or generally binding legal regulations, depending on the purpose for which the administrator obtained personal data from the subject of personal data.

Method of processing and protection of personal data

The processing of personal data is performed by the administrator, or processor on the basis of a contract for the processing of personal data, in the field of wages, accounting, and healthcare. The administrator processes personal data by individual authorized employees, or processors’ employees. The processing takes place through computer technology, or also manually for personal data in paper form in compliance with all security principles for the management and processing of personal data. To this end, the administrator has taken technical and organizational measures to ensure the protection of personal data, in particular measures to prevent unauthorized or accidental access to personal data, their change, destruction or loss, unauthorized transfers, their unauthorized processing and other misuse of personal data. All subjects to whom personal data may be disclosed respect the right of data subjects to privacy and are obliged to comply with applicable legislation on personal data protection.

Period for which the personal data is stored

The administrator processes and retains personal data for the time necessary to ensure all rights and obligations arising from the relevant contractual relationship and for the period during which the controller is obliged to retain personal data in accordance with generally binding legal regulations. The data provided in the context of negotiations on the contractual relationship and business relationship shall be retained by the administrator for a period of three consecutive calendar years after the receiving of the personal data. Data provided during the selection procedure within the search for new employees for the duration of the selection procedure in question. Data provided on the basis of consent for the duration of the consent. In other cases, the processing time is determined by the purpose of processing or by legal regulations in the field of personal data protection.
Data subject to archiving according to special legal regulations will be processed for the period stipulated by special legal regulations.

Rights of the data subject

Each data subject shall have the following rights under applicable law, which he may exercise at any time:

• The right to be informed about the processing of your data – this is mainly information about the purpose of processing, the legitimate interests of the administrator, the recipients of personal data if they are passed on to other persons.
• The right to access personal data – upon request, we will provide you with information about your personal data that we have obtained.
• Right to correct or supplement – if you request modification of this information, we will do so
• Right to delete – we will delete your data at your request unless it conflicts with other purposes for which we must continue to store data.
• Right to restrict processing – you can define restrictions on the processing of your data, as long as it does not conflict with other purposes of the processing.
• Right to data transfer – We may transfer your data to another person based on your instruction.
• The right not to be the subject of automated individual decision-making with legal or similar effects, including profiling – We do not automatically process or profile your data.
• Right to object – contact us whenever you disagree. You have the right to withdraw your consent to the processing of personal data at any time and the right to lodge a complaint with the supervisory authority (Office for Personal Data Protection address: Lt. Col. Sochora 27, 170 00 Prague 7, tel .: 234 665 111, web: www.uoou.cz) .

We would like to emphasize that whatever your relationship with the administrator, there is no risk to you from exercising these rights and the administrator will not treat you any worse in the future than before the exercise of your rights. It is in our interest to process personal data legally and properly and not to infringe your rights. If you have doubts that we are doing well, we will be happy if you notify us.