DECLARATION OF PROTECTION AND PROCESSING OF PERSONAL DATA

Protection and processing of personal data. Date of update: 17th May 2018, Version: 1.0, Changes: None. The purpose of this document is to provide you, our clients, and all individuals who have entered into a contractual relationship with us, with clear and understandable information primarily about:

• What personal data we collect and for what purposes,
• How we process personal data and ensure their protection,
• To whom we disclose the personal data of our clients and under what conditions,
• What rights you have in relation to the personal data processed by us and how you can exercise them.

If you do not find answers to your questions regarding personal data or if you want to further explain certain information, please write to us at privacy@fenomenalni.cz. Processing of personal data involves various types of systematic activities in relation to personal data. This includes, in particular, the collection, storage on data carriers, access, modification or alteration, retrieval, use, transmission, dissemination, publication, retention, exchange, sorting or combining, blocking, and erasure of personal data. We process personal data exclusively with the consent of our clients, except in cases where the processing of personal data does not require your consent as stipulated by law. According to applicable legal regulations, we are obliged to process personal data of clients, carry out our activities with due care, and protect the interests of our clients. Processing of personal data is therefore necessary for the performance of a contractual relationship with us, for the fulfillment of contractual obligations and legal obligations, as well as for the purpose of unambiguous identification of your person for the protection of clients and ourselves. However, the disclosure of your personal data for purposes other than those required by law is voluntary and depends solely on your willingness to provide us with such information for such purposes. In the case of your explicit expression of interest in our services, personal data that allows us to contact you is stored. This includes:

• Name,
• Surname,
• Telephone,
• Identification number,
• Bank account number,
• Email address.

Processing of personal data without the client's consent, which is necessary for the fulfillment of legal rights and obligations arising from specific laws, is carried out in particular for the following purposes:

• Imposed by the Copyright Act No. 121/2000 Coll.
• Imposed by the Civil Code Act No. 89/2012 Coll.
• Imposed by the Labour Code Act No. 262/2006 Coll.
• Imposed by the Accounting Act No. 462/1991 Coll.

Fulfillment of contractual obligations from a contract concluded with the client; this purpose also includes the disclosure of personal data to third parties we use to fulfill contractual obligations – the list of these individuals and companies can be found in the final section of this document,

• For the protection of rights and legally protected interests,
• Retention and archiving of data according to legal requirements.

Processing of personal data that is not required by legal regulations can only be carried out with your consent. Providing such consent is entirely your decision and is part of the contract being concluded and relates primarily to the following purposes:

• Ensuring your individual awareness of our offers and services,
• General notification about our products, services, and offers,
• Profiling your person based on the concluded contract for the suitability of offering our services.

Consents from clients regarding the processing of personal data for these purposes are provided when entering into a contractual relationship. You can revoke consents for the specified purposes at any time during the contractual relationship, and we will ensure the cessation of processing and removal of data within 30 days. Revoking such consent does not hinder the further use of services. Other consents can be revoked only for technical and organizational reasons after the termination of all contractual relationships with us. Upon termination of the contractual relationship with us, periods begin to run automatically, and upon their expiration, we will automatically terminate the processing of your personal data. These periods are determined by the aforementioned legal requirements. The default period for terminating targeted processing after the termination of the contractual relationship is 1 year (internal purposes), with a maximum of 10 years (accounting), or 70 years (copyright law) if applicable. Personal data of clients are consistently protected by us. We process your personal data manually and in electronic information systems that are subject to constant and strict physical, technical, and procedural controls. All individuals who come into contact with personal data in the course of fulfilling their work or contractually assumed obligations are bound by confidentiality.