Consent to Personal Data Processing

INFORMATION ON THE PROCESSING OF PERSONAL DATA AND INSTRUCTIONS ON RIGHTS IN CONNECTION WITH THE PROTECTION OF PERSONAL DATA

INTRODUCTORY INFORMATION

Please pay attention to the following document, through which we provide you with information on the processing

of your personal data and on the rights related to the processing of your personal data within the framework of our activities. Any handling of personal data is governed by applicable legal regulations, in particular Act No. 47/2019 Coll., on the processing of personal data and Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”). In accordance with the legal provisions, we provide you, as the so-called data subjects, with the following information. This document is public and serves to properly inform you about the scope, purpose, and duration of personal data processing and to inform you about your rights in connection with their protection.

WHO IS THE CONTROLLER OF PERSONAL DATA?

The controller of your personal data is HEDVA, a.s. with its registered office at Na Stráni 572/6, Předměstí, 571 01 Moravská Třebová, Company ID: 288 28 291, entered in the Commercial Register kept by the Regional Court in Hradec Králové under file number B 3048 (hereinafter referred to as the “Company”).

ON WHAT BASIS CAN WE PROCESS YOUR PERSONAL DATA?

Processing is lawful only if at least one of the following conditions is met and only to the extent appropriate: the data subject has given consent to the processing of his or her personal data for one or more specific purposes; the processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract; the processing is necessary for compliance with a legal obligation to which the Company is subject; the processing is necessary to protect the vital interests of the data subject or of another natural person; the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company; processing is necessary for the purposes of the legitimate interests of the Company or a third party, except in cases where these interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data, in particular if the data subject is a child

SCOPE OF PERSONAL DATA PROCESSED BY COMPANIES

Personal data is processed to the extent that you provide it to the Company, in connection with the conclusion of a contractual or other legal relationship with the Company, or that the Company has otherwise collected and processes in accordance with applicable legal regulations, or to fulfill the Company's legal obligations. Furthermore, the Company processes data provided beyond the scope of applicable laws within the framework of your consent. If you fill out the contact form on our website www.hedva.cz, we process the following personal data: name, surname, e-mail, telephone number.

PURPOSE OF PROCESSING PERSONAL DATA

The Company, as the controller of personal data, processes and stores personal data within the scope of its activities under the conditions and within the limits set by applicable law, in particular in accordance with the Personal Data Protection Regulation, for the following purposes: negotiation of a contractual relationship performance of the contract protection of the rights of the controller, recipient or other affected persons archiving conducted on the basis of the law performance of legal obligations by the controller protection of the vital interests of the data subject selection procedures for vacant positions purposes included in the data subject's consent Providing data for the purposes specified in points a) to f) is mandatory. Your consent is not required to process personal data for these purposes. Processing of this data cannot be refused. If your personal data is processed for a purpose other than the purpose specified in points a) to f), the Company is authorized to process this personal data only with your consent. If you fill out the contact form on our website www.hedva.cz, we process your personal data for the purpose of recruiting new employees or for the purpose of non-binding demand for goods and services based on your consent.

PERIOD OF PROCESSING PERSONAL DATA PROVIDED THROUGH THE COMPANY'S WEBSITE:

3 years

INFORMATION ON THE SOURCE OF PERSONAL DATA

We process the personal data that you have provided to us, data from available public registers and other public sources, and data that we have obtained from state authorities and databases. Based on your consent, we may also process other data that is specified in your consent to the processing of personal data.

FURTHER INFORMATION ON THE PROCESSING OF PERSONAL DATA

Your personal data is processed manually in written and electronic form by the company's employees. There is no automated decision-making, including profiling, in the processing of your personal data.

INFORMATION ABOUT YOUR RIGHTS IN CONNECTION WITH THE PROTECTION OF YOUR PERSONAL DATA

You have the right to ask the Company for information about what personal data we process about you, to what extent and for what purpose. This information will be provided to you. We will provide it free of charge within 30 days at the latest. If you request the disclosure of information that we have registered about you, we will first have to verify that you are indeed the person to whom this information belongs. Therefore, please provide sufficient identification of your person in your request. Our Company may, with justification, reject your requests for information that are unfounded or excessively repetitive, or that would require disproportionate effort to obtain, or that would be difficult to obtain. You have the right to have the Company correct inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an additional statement. If you have given your consent to the processing of your personal data, you have the right to have the Company erase personal data concerning you without undue delay, and the Company is obliged to erase personal data processed on the basis of your consent without undue delay. The right to erasure of personal data does not apply to personal data processed within the framework of the obligation to perform a contract or other legitimate interests. You have the right to have the Company restrict the processing of your personal data until the resolution of the initiative of the right to restrict processing, if it denies the accuracy of the personal data, the reasons for their processing or if you file an objection to their processing, in writing to the address of the registered office of the Company. You have the right to be notified of the correction, deletion or restriction of the processing of your personal data. The Company will inform you of these facts, except in cases where this proves impossible or requires disproportionate effort. If you believe that the Company is not processing your personal data in accordance with the applicable legislation of the Czech Republic and the EU, you have the right to object to the processing of personal data concerning you and the Company will verify the legitimacy of your request. If the Company does not demonstrate that there is a compelling reason for the processing which overrides the interests or rights and freedoms of the data subject, the Company shall terminate the processing without undue delay upon objection. You have the right to the portability of your personal data concerning you which you have provided to the Company in a structured, commonly used and machine-readable format, and you have the right to request the Company to transmit these data to another controller, in cases specified by law. If the rights and freedoms of other persons are not adversely affected, you have the right to a copy of your personal data. If you believe that there has been a violation of legal regulations in connection with the protection of your personal data, you have the right to file a complaint with the relevant supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7. You can exercise the rights specified above in writing to the address of the Company’s registered office, i.e. at HEDVA, a.s., with its registered office at Na Stráni 572/6, Předměstí, 571 01 Moravská Třebová, Company ID: 288 28 291, where application forms are also available, or electronically at [email protected]. Further information about your rights regarding the protection of personal data can also be found at the website www.uoou.cz.