General principles of personal data processing in the FAVEA group

“Principles”

Companies belonging to the FAVEA group (hereinafter referred to as the Group) process personal data in the position of controller or processor in accordance with the relevant legal regulations of the Czech Republic, in particular REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR” or the “Regulation”).

These Principles are of a general nature only, serving to inform the public (i.e. data subjects, which include, for example, users of website applications, potential clients of the Group or job applicants, etc.) about the possibilities and method of processing personal data by the Group. This Policy does not contain a comprehensive picture of the processing of personal data by the Group. This results from the internal regulations (guidelines) of the Group companies, which are issued and updated in accordance with legal regulations and the Regulation, which concern the processing of personal data, for example in relation to employees and internal needs within the Group companies.

The processed personal data of the data subject that the Group processes  in the sense of this Policy are therefore in particular: name and surname (e.g. when using the applications of the Group's websites; fulfilling a contractual obligation in relation to a client/supplier; in the case of a CV sent by a job applicant), e-mail address, position in the company (e.g. in the case of fulfilling a contractual obligation for a client/supplier), etc.

Personal data processed by the Group in accordance with these Principles is processed solely on the basis of:

the consent of the data subject (user, client, job applicant, etc.), or
for the legitimate interest of the Group - e.g. provision of services, security of services or technologies provided, protection of the Group's rights, exercise of legal claims, etc., or
for the purpose of fulfilling contractual obligations with the Group's clients/suppliers, or
for the purpose of fulfilling legal obligations imposed on the Group by the relevant legal regulations.
The Group processes the data processed about the data subject in accordance with these Principles only for the period strictly necessary to fulfil the purpose for which the data is processed.  They will then be destroyed.

Data subject rights

In the case of processing of personal data received from the data subject on the basis of his/her consent, the data subject is entitled to withdraw the consent at any time. Other rights of the data subject include: to request access to the processed data,  their correction or deletion, or restriction of processing, as well as to raise an objection to processing, or the right to data portability within the meaning of the relevant articles of the Regulation. The subject can exercise these rights via the electronic address: info@favea.cz. The data subject also has the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection.