GDPR
ICT NWT s.r.o.
Company ID: 08217661
Data protection officer (DPO): Vilém Šmidt
telephone: +420 724 365 366
e-mail: vilem.smidt@ictnwt.cz
pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (the "GDPR")
Identity and contact details of the data controller
The controller of personal data is ICT NWT s.r.o., with its registered office at Tomáše Bati 269, 760 01 Zlín – Prštné, Company ID: 08217661 (the "Controller").
Contact details of the data protection officer
The role of data protection officer is held by Vilém Šmidt, telephone: +420 724 365 366, e-mail: vilem.smidt@ictnwt.cz (the "DPO").
Purposes of processing and the legal basis for processing personal data
The personal data of a contractual partner who is a natural person (the "Data Subject") which has been provided to the Controller is processed for the purpose of carrying out the contractual relationship with the Data Subject in the provision of the agreed services, that is in particular assessing an application to conclude a contract, negotiating the conclusion of a contract or a change to it, the performance of rights and obligations under the contract by both parties, and further the protection of the rights and legally protected interests of the Controller (in particular the securing and enforcement of legal claims under the contract). The legal basis for processing the personal data of the Data Subject is the performance of the relevant contract.
Scope of the processing of personal data
Personal data is processed to the extent to which the relevant Data Subject has provided it to the Controller, in connection with the conclusion of a contractual or other legal relationship with the Controller, or which the Controller has collected otherwise and processes in accordance with applicable legal regulations or for the performance of the Controller's statutory obligations.
Categories of personal data that are the subject of processing
Address and identification data serving to identify the Data Subject unambiguously and unmistakably (for example name, surname, title, date of birth, address of permanent residence, Company ID, VAT ID) and data enabling contact with the Data Subject (contact details — for example contact address, telephone number, e-mail address and other similar information), descriptive data (for example bank account details), and other data necessary for the performance of the contract.
Recipients of personal data
The Controller does not intend to transfer the Data Subject's personal data to a third country, to an international organisation, or to anyone other than persons in a contractual relationship with ICT NWT s.r.o..
Protection of forms against automated submissions
Forms on this website are protected by Cloudflare Turnstile, a service of Cloudflare, Inc. When a form is submitted, your IP address and basic information about your browser are transmitted to Cloudflare for the sole purpose of assessing whether the submission comes from a person or from an automated script. Cloudflare acts as a processor for that purpose; the data is not used for advertising or profiling.
More detail is in the Cloudflare privacy policy at cloudflare.com/privacypolicy.
Retention period for personal data
Personal data will be processed for the period necessary to secure the mutual rights and obligations arising from the contract, that is always at least for the duration of the contract, and thereafter for the period for which the Controller is obliged or entitled to keep the given data under generally binding legal regulations.
Rights of the Data Subject
The Data Subject has the right to request from the Controller and the DPO information about and access to their personal data, its rectification or erasure, or restriction of processing. The Data Subject may raise an objection to profiling and automated decision-making, where the Controller carries it out, has the right to data portability to another controller, and also the right to lodge a complaint with the Office for Personal Data Protection if they consider that the Controller is processing personal data in breach of the GDPR.