Personal Data Protection Policy
This document provides information about the processing of your personal data by MONET+, a.s., as governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, about the protection of natural persons with regard to the processing of personal data and on the free movement of such data (further referred to as ‘General Data Protection Regulation – GDPR’).
1. Who is the controller of your personal data?
MONET+, a.s., as the company to which you provided your personal data or which obtained it from you in a manner described below (further referred to as the ‘Company’), is the controller of your data under GDPR.
The company’s official identifiers are as follows:
MONET+, a.s., ID No.: 262 17 783, with registered offices at Za Dvorem 505, Štípa, 763 14 Zlín, Czech Republic, incorporated in the Commercial Register of the Regional Court in Brno under File No. B 3351. The controller’s contact address for communication concerning personal data is security@monetplus.cz.
In case of enquiries regarding your personal data or to exercise your rights under GDPR, you are welcome to contact the Company via the contact details outlined above.
2. Who has access to your personal data?
Within the Company, your personal data is always disclosed only to persons who need personal data to fulfil the purposes specified below – in particular to the Company's employees.
To achieve the purposes set out below, your personal data may also in some cases be disclosed to third parties that provide services to the Company (lawyers, consultants, operators of IT systems in which personal data is stored, etc.). Some of your personal data may also be provided to public authorities where required by law or by a decision of a public authority.
If your personal data is provided to an Affiliated Company as specified further below, the Affiliated Company will in this case be AHEAD ITEC, s.r.o., ID No.: 293 59 058.
Up-to-date information about persons involved in the processing of your personal data will be provided to you in response to a request submitted to the contact details referred to in point 1.
3. In which situation, on what basis, and for what purpose can your personal data be processed? How long will your data be kept by the Company?
a. If you are interested in an employment opportunity with the Company, the Company will process the following data: first name, surname, email address, telephone contact, and any other personal information you provide in your CV.
If you apply for a position in the Company, the Company will process your personal data for the purpose of a possible employment contract for the duration of the recruitment process. Based on the legitimate interest of the Company, your personal data may be processed for up to three months (six months in the case of a managerial position) after the completion of the selection process, should the position become readvertised.
If you provide your express consent, your personal data will be stored (processed) for even longer for the purpose of future recruitment processes, for the period indicated in your consent. If you provide your consent, your personal data may also be provided to the Affiliated Company for the purpose of their employee recruitment processes. Your consent to the processing of personal data may be revoked at any time.
b. As part of your participation in (public) events organised by the Company, and when expressing interest in the Company’s marketing activities, the Company may process the following data: first name, surname, your image (photo or audiovisual recording from the event), address, email address, and telephone contact.
In the event of your participation in (public) events organised by the Company, the Company may, based on its legitimate interest, process your image for the purpose of documenting the event via its website, social networks, professional magazines or other media and media outlets. If you object to the processing of your image based on the legitimate interest of the Company, you may send your objection to the email address listed in point 1.
Based on the legitimate interest of the Company, your personal data may be further processed to facilitate your engagement in the organised event, to obtain your feedback on the event, and to inform you about the Company’s similar marketing activities.
Your personal data may also be processed for the purpose of the Company’s direct marketing efforts (sending news items, newsletters, offers, participation in competitions, etc.), based on your express consent to such processing (e.g. through the Company's website, at events organised by the Company, etc.). Data will be processed for the period specified in your consent. Subject to your consent, your personal data may also be provided to the Affiliated Company for direct marketing purposes. Your consent to the processing of personal data may be revoked at any time.
c. If you are the Company’s contractual partner (supplier, customer, etc.), or act on behalf of such a contractual partner, the Company may process the following data:
i. Natural persons: first name, surname, address, ID No. (VAT ID No.), date of birth, bank details, signature, email address, telephone number, telephone call record
ii. Representatives of legal persons: first name, surname, job title, signature, email address, telephone number, telephone call record
If you communicate with the Company as its (potential) contractual partner, or act on behalf of a (potential) contractual partner, your personal data may be processed to the extent necessary for the negotiation of the contract and its proper performance. The processing shall take place for the period necessary for the conclusion of the contract, during the period of validity of the contract, and after the end of the contract until the settlement of all rights and obligations arising from the contract.
Based on a legitimate interest of the Company, your personal data may also be archived for the purpose of maintaining a list of business contacts and for the purpose of sending relevant business communications to you for up to five (5) years from the moment of your last communication with the Company. Based on a legitimate interest, your personal data may also be provided to the Affiliate Company, for the purpose of keeping your data in its list of business contacts or for the purpose of sending its relevant business communication to you.
If you use the Company’s technical support (hotline), your telephone call may be recorded on the basis of the Company’s legitimate interest. Recordings serve the purpose of improving service quality and as records of reported defects or required service interventions. Phone call records are stored for 90 days.
Personal data contained in documents that are subject to statutory archiving obligations (e.g. tax documents) will be stored for the legally prescribed period of archiving (e.g. for the purpose of VAT, the relevant documents are archived for 10 years).
d. When visiting the Company’s website, or during your activity on the Company’s social networking profile, the Company may process the following data: cookies, personal data relating to your social network profile.
If you are active on the Company’s social network page/profile, the Company together with the given social network’s operator can become (depending on the specific case) a so-called joint controller of your personal data to the extent to which it is made available on the Company’s given social network (e.g., anonymised visitor profiles and traffic demographic statistics). Such processing takes place on the basis of the Company’s legitimate interest, for the purpose of operating the given social network profile and planning future marketing activities.
When visiting a website operated by the Company, small files called cookies may be used. These contain various information regarding the website or your device. In the case of certain types of cookies, your personal data (e.g., identification of your device) may be processed at the same time. In the case of website traffic analysis, this personal data is processed on the basis of the Company’s legitimate interest. You can restrict the storage of cookies, and thereby also the processing of your personal data, in your web browser settings. For this purpose, you can also use your web browser’s incognito mode.
Cookies designated for direct marketing will only be used by the Company with your consent, expressed via the Company’s website.
e. During a personal visit to the Company’s registered office and other premises, the Company may process the following data: first name, surname, number and validity of identification document, company, purpose of visit, signature, your image.
Based on the legitimate interest of the Company, you may be required to be entered in the Company’s guestbook in order to ensure the protection of the health of visitors/employees and the Company's property. This record will be stored for 2 years. For the same reason and for the same purpose, your image (photograph, audiovisual recording) may also be recorded by security devices. Security device recordings shall be stored for 90 days.
If you enter certain areas, you may also be asked to sign an entry declaration. In such a case, your personal data will be processed as described in point 3(c) of this policy.
4. How do we process your personal data?
Your personal data is processed in both paper and electronic form. Access to your personal data is protected both by organisational measures (restrictions on access for authorized persons only) and by specific barriers to access (physical or technical). If personal data is processed in paper form, the documents will be shredded after the processing period; electronically processed personal data will be deleted after the processing period. Recipients of personal data pursuant to point 2 are contractually bound to ensure that data are properly protected.
5. What rights do you have in connection with the processing of your personal data?
If you have any questions or comments regarding the processing of your personal data, please do not hesitate to inform the Company via the contact details listed in point 1. You may also use the contact information to exercise the following rights:
Right to be informed and right of access – You have the right to request confirmation from the Company whether your personal data is being processed and if so, information about: (i) purpose of processing, (ii) categories of data being processed (iii) recipients, (iv) expected processing time, (v) your rights vis a vis the Company, (vi) your right to object, (vii) your rights in relation to automated decision making, and (viii) in the case of transfer of data outside the European Economic Community area, information on security guarantees relating to your data.
Right to data portability – If your personal data is processed for the purpose of fulfilling a contract, you have the right to request a structured, machine-readable copy and, where appropriate, transfer to another controller.
Right to rectification – You have the right to keep your processed data up-to-date and accurate. You have the right to request that the Company correct or update any of your personal data.
Right to restrict processing – You have the right to restrict the Company from processing your data if: (i) you feel that the data held by the Company is inaccurate, until the accuracy of the data is verified by the Company; (ii) the processing is not based on a valid legal basis, but you do not wish to request deletion of your personal data; (iii) the Company no longer needs your data for the purposes defined above, but you require their processing to determine, exercise or defend your rights; or (iv) you have exercised your right to object as described below.
Right to erasure – You have the right to request the Company to delete any of your personal data. The Company is not obliged to comply with your request in cases outlined in Article 17 of GDPR, especially if personal data is still required to be processed for the purposes for which they were originally collected.
Right to object – If the Company processes your personal data on the basis of the Company’s legitimate interest or in the public interest, you have the right to object to such processing. This is especially the case when personal data is processed for the purposes of direct marketing.
Right to withdraw consent – If the Company processes your personal data on the basis of your consent, you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing until its revocation.
Right to file a complaint – If you believe that your rights regarding personal data protection have been breached, you have the right to contact the Czech Office for Personal Data Protection (www.uoou.cz) at any time with a complaint relating to the processing of your personal data.
This Personal Data Processing Policy is valid and effective from 1 February 2020.