In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - the “GDPR”), this document provides information on your personal data that is processed by Astrum LT, identification number: 304573858, with registered office at Sauletekio al. 15, Vilnius LT-10224, Lithuania, as data controller.
- The circumstances under which we collect and process your personal data;
- The types of personal data we collect;
- The reasons for collecting your personal data;
- How we handle your personal data;
- Contact details for requests for rectification of personal data or subject access requests;
Our contact details
Which data do we process?
We process personal data of:
- Clients, persons working with clients – such data may include identification data (name, surname, date of birth, address), contact data (telephone and e-mail contact), data pertaining to your purchase, data about visiting our web. Processing of such data is necessary to fulfil our legal or contractual obligations;
- Potential clients - such data may include identification data (name, surname, date of birth, address), contact data (telephone and e-mail contact), data about visiting our web. We process this data based on your consent or our legitimate interest in direct marketing activities;
- Event participators - such data are collected directly or through GoOut, s.r.o., registration number: 01901613, with address 917/28, 120 00 Praha 2 (gout.net) and may include identification data (name, surname, date of birth, address), contact data (telephone and e-mail contact) and other data that you provide in connection with your event participation. Processing of such data is necessary to fulfil our legal and contractual obligations;
- Business partners – such data may include identification data (name, surname, date of birth, address), contact data (telephone and e-mail contact), payment information (bank details, agreed amount and form of remuneration and its payment) and other details on the relevant contractual relationship, whose processing we are obliged by law (e.g. identification data) or by contract (e.g. contact e-mail and bank details). Processing of such data is necessary to fulfil our legal or contractual obligations;
- Former employees and job seekers – we process identification and other data about employees and about former employees that we are obliged to process by law. About job seekers we process data that may include identification data (name, surname, date of birth, address), contact data (telephone and e-mail contact) information on achieved education and qualifications, career advancement, previous employers and their contact information, and alternatively also other data provided by the job seeker, incl. a record from the interview with the candidate. Processing of such personal data is necessary for the participation of the candidate in the selection procedure and without their submission the job seeker cannot be included in the selection process.
On what basis and for what purpose do we process your personal data
We process the personal data that you provide in connection with your purchase or our website visit. The purpose of processing is:
- Processing necessary for performance of contract
It is necessary to process your identification data, information on your purchase so we can perform the contract.
- Processing based on your consent
In some cases, we also process personal data on the basis of the consent given to us by the data subject for a specific purpose. This may be the case, in particular, of job seekers who give us their consent to the processing of their personal data for a purpose of possible future job offer of another suitable position.
- Processing necessary for our legitimate interests
We process your identification data and email address on the basis of our legitimate interest in direct marketing activities, the sole purpose of which is to send you marketing and commercial correspondence in terms of news, discounts, etc.
- Processing necessary to comply with legal obligations
It is necessary to provide and process all of the above-mentioned personal data, save for email address and telephone number, so that we can comply with our legal obligations, in particular our obligations under the Act on Local Taxes.
- Data that we are under obligation to process by law, for the length of time required by law only (e.g. the accounting and tax documents we issue to you will also contain certain personal data regarding you (full name, purchase information, document issue date). We retain these documents for the sole purpose of fulfilling the obligations established in the relevant accounting and tax legislation, for the period set out in those regulations only;
- Your name, email address and purchase information for the direct marketing purposes (e.g. to send communications on news and sales of our products etc.) until we are notified by you that you object or no longer consent to this processing;
- Data necessary for the purposes of existing or threatened disputes. We will only process these data until a final decision has been made in the dispute and the obligations arising from the decisions have been fulfilled, or for the time in which a dispute regarding services provided could arise under applicable law.
Once this period has expired, we will periodically destroy your personal data both in paper and electronic form.
Recipients of your personal data
Your personal data will be disclosed to and processed by your selected business partners for the above purposes. The legal basis of transferring your personal data is our legitimate interest.
Note that we have no access to or control over these cookies that are used by third-party advertisers.
Third Party Privacy Policies
Transfer of personal data
In relation to our affiliates located outside of EEA, we will transfer your personal data with the basis of the Standard Contractual Clauses adopted by the European Commission.
Your statutory rights
In accordance with the legislation in force as regards personal data protection, you have the following rights:
- The right to access your personal data that we process, including the right to obtain the following information from us:
◦ confirmation as to whether we process your personal data;
◦ access to these personal data;
◦ information on the purposes of the processing;
◦ the categories of personal data processed;
◦ information on the recipients or potential recipients to whom your personal data will be disclosed;
◦ planned storage period and the criteria for establishing such period;
◦ the existence of the right to request the rectification or erasure of personal data or restriction of processing of personal data and the right to object to such processing;
◦ the right to file a complaint with the Supervisory Authority;
◦ where the personal data are not collected from the data subject (from you), all available information as to their source;
◦ whether or not any decision will be made based on automated processing, including profiling;
◦ a copy of personal data, where these do not adversely affect the rights and freedoms of others;
- the right to correct your personal data if it is in any way incorrect, inaccurate or incomplete; we will correct your data within its technical capabilities without undue delay;
- the right to request the erasure of your personal data where provided for by the GDPR - e.g. if you have refused consent or objected to processing, if the personal data is processed unlawfully or where the personal data are no longer necessary in relation to the purposes for which they were processed. In such an event, you may request the erasure of your personal data. However, this option does not apply if the processing is necessary to fulfil legal obligations and under certain other cases provided for by the GDPR;
- the right to request the restriction of the processing of your personal data where provided for by the GDPR - e.g. where you contest the accuracy of the personal data, object to the processing, etc;
- the right to the portability of the data you have provided to us, which we process by automated means on the basis of your consent, where their processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures taken at your request. In such cases, we will allow you to obtain your personal data in a structured, commonly used and machine-readable format or, if technically feasible, we will transmit them directly to the new controller determined by you;
- the right to object to the processing of your personal data where such processing is deemed necessary for the purposes of legitimate interests, including processing for direct marketing purposes. If we do not demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims, then we shall no longer process your personal data;
- the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except for the above-mentioned cases expressly stated in the GDPR;
- the right to withdraw consent;
- in addition to the above, where you feel that the processing of your personal data has been breached under the GDPR, you have the right to file a complaint with the supervisory authority, which is the Lithuanian Office for State Date Protection Inspectorate, which has its registered office at State Date Protection Inspectorate, L.Sapiegos str. 17, 10312 Vilnius https://vdai.lrv.lt/en/
Prague, 19. 9. 2019