Privacy Policy

Compliance with the information obligation under Article 13 GDPR

Since ATTIS software s.r.o., ID No.: 25894978, with its registered office at Hanušova 100/10, 779 00 Olomouc, registered in the Commercial Register maintained by the Regional Court in Ostrava, under file No. C 24596 (hereinafter also referred to as the “Controller“) as a personal data controller processes personal data within the meaning of the General Data Protection Regulation[1](hereinafter referred to as the “GDPR“), it is in the position of a personal data controller for most processing activities. Exceptionally, ATTIS software s.r.o. may also be in the position of a processor of personal data.

The protection and security of processed personal data is a priority for ATTIS software s.r.o. Therefore, ATTIS software s.r.o. pays due attention to personal data and its protection. For this reason, this document informs data subjects about the processing of personal data and their rights in connection with the processing of their personal data.

ATTIS software s.r.o. hereby fulfils the information obligations towards the subjects in accordance with Article 13 GDPR.

Administrator’s email address: attis@attis.cz

Postal address: Hanušova 100/10, 779 00 Olomouc

Mailbox: xwin5te

The personal data processed are not transferred by the controller to a third country or an international organisation. The personal data provided may be used for decision-making based on automated processing, profiling.

If your personal data is processed on the basis of a legal ground of legitimate interest of the controller (according to Article 6(1)(f) GDPR), this interest is the proper performance of obligations arising from contracts concluded between the controller, business partners, customers or other entities, the possible assertion of legal claims by the controller and the performance of activities within the scope of the controller’s business. The video surveillance system is used by the administrator on its premises for the protection of persons and property located on the administrator’s premises. Monitoring and registration of customers in relation to their payment behaviour is carried out in order to protect the financial interests of the administrator and to prevent the conclusion of contracts with entities that have repeatedly failed to meet their obligations.

The controller hereby informs the data subjects of their right to request access to the processed personal data, rectification of the processed personal data, erasure of the processed personal data, restriction of the processing of the processed personal data and the right to portability of the processed personal data under the conditions set out in Articles 15 to 20 of the GDPR.

The controller hereby informs the data subjects of their right to object to the processing of their personal data under the conditions set out in Article 21 of the GDPR.

The complainant is entitled to exercise the above-mentioned rights and objections in written documentary form (request with a certified signature) or in electronic form (e-mail with a recognised electronic signature or data message) at the contact details of the controller indicated above.

If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the Office for Personal Data Protection.

Personal data processing policy ATTIS software s.r.o.

ATTIS software s.r.o., IČO: 25894978, with its registered office at Hanušova 100/10, 779 00 Olomouc, registered in the Commercial Register maintained by the Regional Court in Ostrava, under file No. C 24596, declares that when processing personal data of data subjects, it always acts in accordance with the following principles resulting from Article 5 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”):

• principle of lawfulness, correctness and transparency of processing – personal data of data subjects are always processed by ATTIS software s.r.o. on the basis of a valid legal title, in a correct and transparent manner;
• principle of purpose limitation of processing – personal data of data subjects are collected and processed by ATTIS software s.r.o. exclusively for legitimate purposes. Personal data are not processed by ATTIS software s.r.o. in a way that is incompatible with these purposes;
• the principle of minimization of processed personal data – ATTIS software s.r.o. processes personal data only to the extent that is reasonable, relevant and necessary in relation to the purpose for which it is processed;
• the principle of accuracy of processed personal data – ATTIS software s.r.o. processes personal data in an accurate and, if necessary, updated form. ATTIS software s.r.o. shall implement reasonable measures to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are erased or rectified without delay;
• the principle of limitation of the storage and processing period of personal data – personal data are stored and processed by ATTIS software s.r.o. in a form that allows identification of data subjects for no longer than is necessary to achieve the purposes for which they are processed;
• the principle of integrity and confidentiality of processed personal data – ATTIS software s.r.o. processes personal data in a manner that ensures appropriate security of personal data, including its protection by means of appropriate technical or organizational measures against unauthorized or unlawful processing and against accidental loss, destruction or damage;
• Employees, members of the company’s bodies and other persons cooperating with ATTIS software s.r.o. follow the rules and procedures set out in the GDPR and the internal data protection directive, including the security measures put in place to protect personal data.

Exercise of data subjects’ rights at ATTIS software s.r.o.

Under the conditions set out in Articles 15 to 22 of the GDPR, data subjects may exercise the following rights in relation to their personal data processed by ATTIS software s.r.o.:

• Right of access to processed personal data
  The right of access is the right of the data subject to be provided with the following information by ATTIS software s.r.o.: (a) whether his/her personal data are processed, (b) for what purpose, (c) what personal data are processed, (d) whether his or her personal data are transferred to other recipients, (e) for how long his or her personal data is processed, (f) information about his/her rights in relation to the personal data processed. At the same time, he/she has the possibility of obtaining a copy of the personal data processed.

• Right to rectification of processed personal data
  The right to rectification includes the right of the data subject to request ATTIS software s.r.o. to rectify incorrectly processed personal data or to complete incomplete processed personal data.

• Right to erasure of processed personal data
  The right to erasure includes the right of the data subject to request ATTIS software s.r.o. to erase the processed personal data in the absence of a valid legal title for their processing. The data subject does not have the right to request ATTIS software s.r.o. to erase the personal data processed in the event that ATTIS software s.r.o. has a valid legal title for their processing (i.e. in particular for the period when ATTIS software s.r.o. is entitled to process them for the performance of a contract or the fulfilment of obligations under the law).

• Right to restriction of processing of personal data
  The right to restriction of processing includes the right of the data subject to request ATTIS software s.r.o. to restrict the scope of processing of personal data in the following cases: (a) the data subject denies the accuracy of the personal data processed – processing may be restricted until a decision is made; (b) the processing is unlawful but the data subject only requests a restriction of the processing; (c) ATTIS software s.r.o. no longer needs the personal data solely for the establishment, exercise or defence of legal claims; (d) the data subject has objected to the processing, pending its settlement.

• The right to portability of processed personal data
  The right to portability includes the right of the data subject to request from ATTIS software s.r.o. the processing of personal data in a structured, commonly used and machine-readable format for the purpose of transferring it to another controller (the right to request, in technically feasible cases, its transfer directly to another controller). This right can only be exercised on condition that the processing is based on the legal title of performance of a contract or consent of the data subject and is carried out by ATTIS software s.r.o. via inf. system (automated).

• Right to object to the processing of personal data
  The right to object is granted to the data subject in cases where the processing of his/her personal data by ATTIS software s.r.o. is carried out on the basis of a legal title of legitimate interests of the controller or for the purpose of direct marketing. ATTIS software s.r.o. shall not be entitled to further process the personal data of the data subject after the objection has been lodged, unless it demonstrates compelling legitimate grounds for further processing which override the interests or rights and freedoms of the data subject, or demonstrates the necessity of the processing for the establishment, exercise or defence of legal claims.

The aforementioned rights must always be exercised with the controller of the personal data, so it is not possible to exercise the aforementioned rights against ATTIS software s.r.o. in cases where it is only a processor for the purpose of processing.

The data subject is entitled to exercise the aforementioned rights at ATTIS software s.r.o. in written documentary form with an officially certified signature at Hanušova 100/10, 779 00 Olomouc, in electronic form via electronic message with a recognized e-mail address. signature delivered to the e-mail address attis@attis.cz or via the mailbox ID: xwin5te.

ATTIS software s.r.o. hereby informs the data subjects that they have the possibility to submit to the Office for Personal Data Protection under the conditions set out in Art. 77 GDPR complaint if they believe that the processing of their personal data by ATTIS software s.r.o. has violated the GDPR.

ATTIS software s.r.o. hereby informs the data subjects that they have the right, under the conditions set out in Art. 79 GDPR the right to effective judicial protection if they believe that their rights have been violated as a result of the processing of their personal data by ATTIS software s.r.o. in violation of the GDPR.