Personal Data Processing

Administrator

By granting this consent to the processing of personal data, you agree that DERMI, s.r.o., ID No.: 46990119, with registered office at Vinohrady 841/8a, Štýřice, 639 00 Brno, registered in the Commercial Register kept at the Regional Court in Brno, file number C 8434 (hereinafter referred to as the Administrator), will process your personal data according to the terms and conditions set out below.

Scope of processing

The controller will process your personal data to the extent that it has been voluntarily provided by you when filling in the form, by telephone, by e-mail or in person. In particular, the controller will process the following data: name, surname, e-mail address, telephone number, IP address.

Purpose of processing

The controller will process your personal data for the purpose of direct marketing (sending information about new products and services of the controller), for sending commercial communications within the meaning of Act No. 480/2004 Coll. and for analysing your behaviour regarding these commercial communications in order to personalise the service offer.

Legal basis for processing

The legal basis for the processing is your voluntary consent and the fact that your personal data is necessary for the fulfilment of the individual direct marketing purposes for which you have subscribed. Personal data is processed in accordance with the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – hereinafter referred to as GDPR.

Processing time

The controller will process your personal data for a period of 10 years, unless this consent to the processing of personal data is withdrawn by you.This does not affect the processing of your personal data to the extent necessary to comply with obligations arising from generally binding legal regulations.

Withdrawal of consent

You may revoke your voluntary consent to the processing of personal data at any time, free of charge, by sending an e-mail to [email protected] or by using the link provided in each commercial communication. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, legal obligation or for other reasons specified in applicable law).

Access to data

Your personal data will be accessible to the controller, its employees and, where applicable, third party processors who provide appropriate safeguards and whose processing complies with all the requirements of the GDPR. These parties are in particular marketing and IT consultants. These persons will only have access for as long as necessary and to the extent necessary to provide the service and meet the legal requirements. Under certain, precisely defined, conditions, we are then obliged to transfer some of your personal data on the basis of applicable legislation, e.g. to the Police of the Czech Republic, or other law enforcement authorities, including specialized departments (ÚOOZ, Customs Administration, etc.) and other public administration authorities.

Your rights

In particular, you have the following rights in relation to your personal data:

  • the right to withdraw their consent at any time;
  • the right to correct or supplement personal data;
  • the right to request restriction of processing;
  • the right to object to or complain about processing in certain cases (to the supervisory authority, which is the Office for Personal Data Protection www.uoou.cz/);
  • the right to request data portability;
  • the right of access to personal data;
  • the right to be informed of a personal data breach in certain cases;
  • the right to erasure of personal data (the right to be “forgotten”) in certain cases; and
  • other rights set out in the Data Protection Act and the General Data Protection Regulation 2016/679 once it comes into force.

Processor

The following companies process personal data:

  • DERMI, s.r.o., ID: 46990119, with registered office at Vinohrady 841/8a, Štýřice, 639 00 Brno,


Contact details of the processor

You can contact the processor by e-mail: [email protected] or in writing at the address of the controller’s registered office (Vinohrady 841/8a, Štýřice, 639 00 Brno). The processor is entitled to request proof of your identity in order to prevent unauthorised persons from accessing your personal data. All communications between you and the processor are monitored in order to improve the quality of service and to keep records of the processor’s compliance with its legal obligations.

Voluntary disclosure

All personal data is provided to us on a completely voluntary basis. You are under no obligation to provide it. If you do not provide it, you do not face any sanctions.

Contractual health insurance companies