GDPR

INTERNAL REGULATION

CONCERNING PERSONAL DATA PROTECTION

according to the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC

in company

JP Global Services s.r.o.

This Privacy Policy (hereinafter referred to as “Policy”) is the policy of JP Global Services s.r.o. with its registered office at Kaprova 42/14, Prague 1 – Old Town, Company number: 040 33 485, registered in the Commercial Register keptby the Municipal Court in Prague, Section C, File 241199. JP Global Services s.r.o. is committed to the protection of personal data in accordance with the applicable legislation in force, since 25 May 2018, especially with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “Regulation”).

The Policy applies to all personal data processed by JP Global Services s.r.o. based on the fulfilment of the contractual relationship, legal obligation, legitimate interest or granted consent. The Policy describes the ways JP Global Services s.r.o. uses and protects personal data.

Controller and their contact details

The controller, within the meaning of Art. 4 para. 7 of the Regulation is JP Global Services s.r.o..

JP Global Services s.r.o. did not appoint a Data Protection Officer within the meaning of Art. 37 of the Regulation.

Personal data processed by JP Global Services s.r.o.

Personal data means all information about an identified or identifiable natural person. An identified natural person is a natural person that can be directly or indirectly identified, especially with reference to a particular identifier, e.g. name, identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing of personal data for the performance of contract

Where necessary, personal data shall be processed in accordance with Art. 6 para. 1 point b) of the Regulation – provision of personal data as a necessary requirement for the performance of contract or for the implementation of measures taken prior to the conclusion of the contract at the request of the data subject. Without the provision of personal data, it is not possible to carry out pre-contractual negotiations, to conclude the contract or to fulfil it by JP Global Services s.r.o..

Granting consent

One of the legal reasons for the processing of personal data is the granting of consent to the processing of personal data within the meaning of Art. 6 para. 1 point a) of the Regulation.

The consent to the processing of your personal data granted to JP Global Services s.r.o. can be withdrawn at any time by sending an e-mail to the e-mail address of JP Global Services s.r.o. —- j.nemas@jpglobalservices.com, p.novotny@jpglobalservices.com, stating your name, surname and address for identification. The withdrawal of consent shall not affect the lawfulness of the processing activities carried out before its withdrawal.

Time of processing of personal data

Personal data the processing of which is based on the granting of consent will be processed by JP Global Services s.r.o. since the consent was granted and until it has been withdrawn.

After the retention period of personal data expires, JP Global Services s.r.o. shall delete the personal data.

Provision of personal data to third parties

The recipients of personal data are employees and other persons working with JP Global Services s.r.o. if these third parties need access to the data in order to carry out their activities.

JP Global Services s.r.o. does not, without prior consent, provide personal data to third parties other than the ones stated above, nor does it share them with other persons or unassociated companies, except in the following cases:

compliance with legislation or in response to regulatory requirements;
protection of the rights and property of JP Global Services s.r.o. , its representatives, users and other persons, especially for the purpose of enforcing their contracts, policies and terms of use and, in urgent cases, to protect the security of JP Global Services s.r.o., the users of its services or any other persons;
in connection with any merger, sale of company assets, financing or acquisition of the business (or a part thereof) of JP Global Services s.r.o. by another organisation, company, or during this process.

JP Global Services s.r.o. shall not transmit personal data without prior consent to a third country or international organisation, if not necessary for the performance of contract between the given person and JP Global Services s.r.o., or unless such obligation is imposed on JP Global Services s.r.o. by law.

Rights of the data subject

As a data subject whose personal data is being processed, each person has rights that they can exercise at any time. These include:

the right to access own personal data (i.e. the right to obtain information, whether the data is being processed, and if so, you have the right to access it);
the right to rectify personal data (i.e. to request rectification if you find out JP Global Services s.r.o. processes inaccurate or false data);
the right to request clarification (i.e. if you suspect the processing of personal data affects the protection of personal and private life, or the processing is being carried out in violation of law);
the right to restriction of processing personal data (i.e. the right to request a temporary restriction of processing personal data);
the right to erasure of personal data (i.e. if your data are no longer needed for the purposes for which they have been processed);
the right to object to the processing of personal data (JP Global Services s.r.o. is obliged to prove there is a valid legitimate reason for the processing of personal data, which outweighs other interests or rights and freedoms);
the right to data portability (i.e. the right to request that a third party receives your data);
the right to withdraw consent to the processing of your personal data at any time;
the right to file a complaint with the Office for Personal Data Protection (i.e. if you believe your right to privacy has been violated).

Security measures and communication of personal data

JP Global Services s.r.o. is not responsible for the misuse of provided data that occurs as a result of unauthorised access of a third party or during data transfer within the communication network.

JP Global Services s.r.o. retains personal data in accordance with the highest safety standards. Personal data are protected by firewalls and are only accessible by a limited number of persons who are required to keep this information confidential.