INFORMATION ON THE PROCESSING OF PERSONAL DATA

The company SO.REIN s.r.o., ID No.: 496 19 071, with registered office at Spálená 90/17, Nové Město (Prague 1), 110 00 Prague, registered in the Commercial Register maintained by the Municipal Court in Prague under sp.nr. C 24169, e-mail: realestate@sorein.cz (hereinafter referred to as the “Company”) hereby, in accordance with Regulation (EU) No. 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the “Regulation”), we would like to inform all our clients and business partners, if they are natural persons (hereinafter referred to as “Data Subjects”) about the processing of their personal data.

However, this information does not concern the personal data of legal persons, including the name, legal form and contact details of the legal person.

THE TYPES AND SOURCES OF PERSONAL DATA PROCESSED BY THE COMPANY

The Company hereby informs Data Subjects that the following types of personal data are processed in relation to them:

(a) identification and contact details;

(b) billing information;

(c) payment details;

(d) details of business activities (in particular details of pending/completed/threatened legal/enforcement/administrative proceedings, details of any criminal proceedings and criminal cases, information regarding financial situation, bank account,);

e) information on participation in events organised by the Company;

(f) data from mutual communications (whether in person, in writing, by telephone or otherwise).

The provision of the data a) to f) above (at least to the basic extent) is necessary for the purpose of fulfilling the contractual obligations. The provision of this information is thus mandatory.

THE ABOVE PERSONAL DATA PROCESSED BY THE COMPANY COMES FROM THE FOLLOWING SOURCES:

a) the data was provided by the client himself when concluding the contract with the Company or during its duration;

(b) the data come from public sources, lists and registers such as. commercial register, trade register, insolvency register, court file; or

c) the data was provided by the client on the basis of consent to the processing of personal data and the sending of commercial communications.

HOW AND FOR WHAT PURPOSE IS PERSONAL DATA PROCESSED BY THE COMPANY?

The processing of personal data by the Company is carried out both automatically in information systems and manually by its employees or employees of the recipients.

The processing of personal data is necessary for the implementation of the contract concluded between the Company and the client, on the basis of which the related rights and obligations of the Company and individual clients are fulfilled. The company does not use the above data for decisions based purely on automated processing or profiling, see Art. 22 para. 2 Regulation.

Data may also be used for direct marketing purposes (in particular in the form of electronic commercial communications) on the basis of the legitimate interest of the Company. The company uses personal data for direct marketing purposes after prior consent has been given. The client may object to such processing free of charge or withdraw consent in writing, by sending a communication by post to the Company’s registered office or electronically to the Company’s e-mail address.

WHO ARE THE RECIPIENTS OF PERSONAL DATA?

If provided for in the contract, the Company may disclose the Client’s or Client’s representative’s identifying information on its promotional materials and other related documents.

The Company, in justified cases and only to the extent necessary, transfers the personal data of its clients to the following recipients:

1. The Company’s contractual partners who ensure the Company’s day-to-day operations and the implementation of the Company’s contractual relationship with its clients, which are primarily:

• IT service providers;
• providers of our information system;
• postal service providers (the name and address of the client is provided here);
• translation and marketing agencies;
• and other providers of legal, administrative and technical services, which we use to ensure the fulfilment of our contractual obligations towards our clients;

2. Alternatively, to other entities in situations where the provision of such data to the Company is required by law or if it is necessary to protect the legitimate interests of the Company (e.g. to courts, the Police of the Czech Republic, etc.);
3. In justified cases and again only to the extent necessary, the Company may also transfer personal data abroad. In the context of this cooperation, personal data may be transferred within the European Union in connection with the legal proceedings in question, in particular when communicating with the competent courts and authorities.

THE PERIOD FOR WHICH THE PERSONAL DATA IS PROCESSED AND STORED

The Company processes and stores the aforementioned personal data of clients for the duration of the contractual relationship between the Company and the client. After the termination of this contractual relationship, the processing and storage of this data shall continue for the duration of the limitation period of any related claim of the Company or its clients. After the expiry of this period, the personal data of clients is destroyed by the Company, unless the Company is entitled or obliged to further process and store such data on the basis of another legal title.

For the purposes of direct marketing carried out on the basis of the legitimate interest of the Company or the consent of the Data Subject, the above-mentioned personal data of clients will be stored with the Company for a period of 3 years from the end of the contractual relationship or until the consent is withdrawn.

The Company will archive documents containing personal data of its clients for the prescribed period of time where required by mandatory regulations.

CLIENT RIGHTS

The Company hereby informs its Clients that, pursuant to the Regulation, each Data Subject has from 4.3.2021 to the Company:
1. the right of access to your personal data and the right to obtain a copy of the personal data processed (unless the rights and freedoms of others are adversely affected);

2. the right to rectification or completion of inaccurate personal data concerning the client, including by providing an additional statement; and

3. the right to have your personal data erased if one of the following situations occurs:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(b) the client has withdrawn the consent on the basis of which his/her personal data were processed and there is no other legal basis for processing them;

(c) the client has objected to being the subject of a decision based on automated processing of his/her personal data and there are no overriding legitimate grounds for such processing or has objected to the processing of his/her personal data for direct marketing purposes;

(d) the client’s personal data has been processed unlawfully;

(e) the personal data of the client must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject;

(f) the client’s personal data was collected in connection with the offer of information society services
4. the right to request that the Company restrict the processing of his/her personal data if:

(a) the Client denies the accuracy of his or her Personal Data for such time as is necessary to enable the Company to verify the accuracy of such Personal Data;

(b) the processing is unlawful and the client refuses the erasure of his/her personal data and instead requests a restriction on its use;

(c) the Company no longer needs the Client’s personal data for the purposes of the processing but the Client requires it for the establishment, exercise or defence of legal claims; and

(d) the client has objected to processing pursuant to Art. 21 para. 1 of the Regulation until it is verified that the legitimate grounds of the Company outweigh the legitimate grounds of the Client;

5. the right to the portability of his/her personal data processed on the basis of consent or contract and also by automated means;

6. the right to object free of charge to processing carried out on the basis of the legitimate interest of the Company, in particular to direct marketing carried out on the basis of the legitimate interest of the Company;

7. the right to be informed in the event of a breach of the security of the client’s personal data where the breach is likely to result in a high risk to the rights and freedoms of natural persons, including the client; and

8. the right not to be the subject of a decision based solely on automated processing, including profiling, which has legal effects concerning him or her or similarly significantly affects him or her.

In case of any questions or uncertainties regarding the Company’s handling of the personal data of the Clients, the Client may contact the Company in writing at its registered office or at its e-mail address. The client also has the right to contact the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7 (further contact details here: www.uoou.cz) or to file a complaint with him. Each Client hereby acknowledges that he/she has been advised of his/her rights and their protection under Art. 13 and 15 to 22 of the Regulation.