PRIVACY POLICY
Data Controller:
Proefo Conaas s.r.o.,
File No.: C 314322 filed with the Municipal Court in Prague, Seat: Rohanské nábřeží 717/4, Karlín, 186 00 Praha 8, Identification number: 05923336, michal.belan@proefo.com
In the provision of our services, the operation of the proefo.com website and symfio.app, we process personal data of our clients to the extent described below, in accordance with Regulation (EU) No 216/679 of the European Parliament and of the Council n the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “GDPR“).
This Privacy Policy provides our clients (you) with a comprehensive understanding of the ways in which we process your personal data as well as your related rights. This policy fulfils the terms of the information obligation under Article 13 of the GDPR.
By entering into a contract, accepting an offer, using our services, checking the appropriate box or receiving this policy or a link to it during communication with us (and continuing in it), clients consent to the processing of personal data for which Proefo Conaas s.r.o. has no other legal basis.
Basic processing principles
We follow the following principles when processing personal data:
- we always proceed correctly and transparently;
- we only process data for legitimate purposes;
- we limit the processing to the extent necessary to achieve the purpose set out below;
- we update the data continuously,
- we only store data for the time necessary to achieve the purpose set out below;
- we do not trade data;
- we responsibly provide the necessary security.
Legal basis for processing
We process data on the basis of:
- the conclusion and performance of a contract with clients, or the need to process a request for our services pursuant to Article 6(1)(b) GDPR
- the performance of our legal obligations (in particular accounting, tax and other legal obligations) pursuant to Article 6(1)(c) of the GDPR.
- consent given by the client when visiting our websites, when using the app and our services, or in a contract pursuant to Article 6(1)(b) GDPR, which only applies to data for which we have no other legal title (previous 2 items);
You may withdraw your consent to the processing of data that we process solely on the basis of your consent at any time by contacting us at the address or email address listed above.
Scope of processing of personal data
If you want to use our services, we need your personal data, especially for the successful processing of your requests, the conclusion of the contract and the fulfilment of our legal obligations (accounting, archiving, etc.). Without providing certain personal data, it is not possible to conclude and perform the contract.
We process the following personal data:
- name, surname, academic title,
- residential, delivery or billing address,
- date of birth or birth number (if provided),
- email address and phone number,
- bank account number,
- in the case of a customer-entrepreneur, also the address of its registered seat, identification number and VAT number,
- other information relating to the customer or third parties that is necessary for the proper provision of our services;
- information about user behaviour on the website and app (cookies and Google Analytics).
We process data electronically and automatically. We take appropriate security measures (in particular technical and organisational) to protect your personal data from any accidental loss, destruction, misuse, damage and unauthorised or unlawful access.
Purpose of processing personal data
We process data for the following purposes:
- order processing, conclusion and performance of the contract and the exercise of related rights and obligations;
- sending commercial communications and performing other marketing and PR activities;
- analysis of client behaviour and needs and subsequent individualisation of our services.
Period of processing of personal data
We process personal data for the following periods:
- before you withdraw your consent to the processing;
- 3 years from the termination of the contract or the provision of a one-off service;
- necessary to exercise the rights and obligations arising from the contractual relationship and to assert claims arising from these contractual relationships;
- the duration of our obligations under Act No. 499/2004 Coll., on archiving and filing services, as amended.
Recipients of personal data
Our company only discloses clients’ personal data:
- to their employees if they must have access to them;
- processors with whom we have contracts necessary for our business (e.g. IT services, accounting, etc.) and those involved in:
- providing our services and making payments;
- our marketing and PR activities.
- public authorities such as authorities, courts, etc;
- to other beneficiaries, if such disclosure is made:
- in accordance with the needs, interests and instructions of clients;
- necessary or appropriate for the provision of our services;
- suitable for our marketing and PR activities.
If any of our contractual partners listed above are from abroad, we also transfer personal data abroad.
What clients are responsible for
Visitors to the website, users of the app and our other clients are responsible for the accuracy of the data provided, the ongoing updating of the data and the consent of all persons whose data they provide to us.
Rights of clients
Anyone who provides us with personal data has the following rights:
- Right of access to personal data. You are entitled to obtain information from us about whether we process your personal data and, if so, what data it is and how we process it. You also have the right to request that we correct your inaccurate personal data without undue delay. You have the right to complete incomplete personal data at any time.
- Right to erasure. At your request (subject to compliance with the GDPR), we are obliged to delete and destroy the personal data we process about you.
- Right to restriction of processing of personal data. In cases specified by law, you have the right to request that we restrict the processing of your personal data. In addition, you have the right to object to processing that is based on our legitimate interests, the interests of a third party, or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
- Right to portability of personal data. You have the right to receive all your personal data from us in a common and machine-readable format. You may subsequently transfer this personal data to another controller or request (if technically feasible) that we transfer it to the new controller ourselves.
If you are dissatisfied with the processing of your personal data, you can file a complaint either directly to our address listed above or contact the Office for Personal Data Protection, ID No.: 70837627, located at Pplk. Sochor 27, 170 00 Prague.
Proefo Conaas s.r.o.