PERSONAL DATA PROCESSING POLICY
1. Personal data controller
The controller of personal data is us, i.e. Railsformers s.r.o., ID No.: 24704440, with registered office Vřesinská 2371/33, 708 00 Ostrava - Poruba, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 36254.
● electronically to info@railsformers.com
● by phone at +420 774 699 670
2. Scope of personal data collected
If you choose to contact us, we will primarily process your e-mail or telephone number, depending on which of the contact details you enter in the contact form. In addition, we will process any data that you provide in the text of your message.
In addition, we will also process your electronic data, in particular your IP address, browser type, domain name and cookies.
The provision of your personal data is always completely voluntary in all cases.
3. Purpose, legal basis and duration of processing
We will process any personal data entered in the contact form for the purpose of processing your message and preparing a response to it, or to contact you directly. The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(g) of the GDPR, i.e. our interest in communicating with you about the matter on which you have contacted us. We will process personal data for this purpose for as long as we communicate with you, but for a maximum of 24 months from the last communication with you.
This is of course without prejudice to our right to process this data for other purposes and under other legal titles (e.g. for the performance of a contract if you choose to cooperate with us). However, we will inform you about such purposes and legal bases in our business partners' data processing policies, available below.
If you also give us your consent to the processing of your personal data, we will also process your contact data for the purpose of submitting an offer, arranging an appointment or for other normal business activities. The legal basis for such processing will be your consent within the meaning of Article 6(1)(a) GDPR, which is given voluntarily. You can of course withdraw your consent at any time. If you withdraw your consent, this will not affect the processing of your personal data based on such consent prior to its withdrawal. Your consent will also be time-limited, for a period of 2 years from the time it was given.
4. Categories of recipients of personal data
We may transfer your personal data to processors with whom we have entered into a processing agreement and who ensure proper security of personal data. These are in particular providers of web interface, information system, marketing software, services or applications.
5. Your rights
As a data subject, you have the right under the General Data Protection Regulation (GDPR) to request access to your personal data (under the terms of Article 15 GDPR); the right to rectification or erasure of personal data (under the terms of Article 16 or Article 17 GDPR); the right to restrict the processing of personal data (under the terms of Article 18 GDPR); the right to object to processing (under the terms of Article 21 GDPR), in particular to the processing of personal data on the basis of our legitimate interest; the right to data portability (under the terms of Art. 20 GDPR); the right to withdraw consent to the processing of personal data at any time. If you believe that your right to data protection has been violated, you also have the right to lodge a complaint with the supervisory authority, which is the Data Protection Authority.
REQUEST FOR DELETION OF PERSONAL DATA / CANCELLATION OF ACCOUNT
If you wish to cancel an account you have created with our service, please email us at info@railsformers.com. We will immediately cancel your account and delete all your personal data.
POLICY OF PROCESSING PERSONAL DATA OF PARTNERS OF RAILSFORMERS S.R.O.
1. Personal data controller
The controller of personal data is us, i.e. Railsformers s.r.o., ID No.: 24704440, with registered office Vřesinská 2371/33, 708 00 Ostrava - Poruba, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 36254.
• electronically to info@railsformers.com
• by phone at +420 774 699 670
2. Purposes and legal basis for processing
2.1 Contract negotiations
We process the personal data of partners for the purpose of concluding a contract. Such processing takes place at the initial stage of communication between us and the partners, i.e. in particular during the negotiations for the conclusion of the respective contract. The legal basis for this processing is Article 6(1)(b) GDPR - the implementation of measures taken prior to the conclusion of a contract at the request of the data subject.
We process the personal data of partners for the purpose of concluding a contract. Such processing takes place at the initial stage of communication between us and the partners, i.e. in particular during the negotiations for the conclusion of the respective contract. The legal basis for this processing is Article 6(1)(b) GDPR - the implementation of measures taken prior to the conclusion of a contract at the request of the data subject.
2.2 Performance of the concluded contract
Once a contract is concluded, we process personal data for the purpose of performing the concluded contract, e.g. to know to whom we are to provide our services. The legal basis for this processing is Article 6(1)(b) GDPR - performance of a contract to which the data subject is a party.
Once a contract is concluded, we process personal data for the purpose of performing the concluded contract, e.g. to know to whom we are to provide our services. The legal basis for this processing is Article 6(1)(b) GDPR - performance of a contract to which the data subject is a party.
2.3 Performance of legal obligations
We also process partners' personal data for the purpose of fulfilling our obligations under generally binding legal regulations. These include in particular the obligations arising from the Accounting Act and the VAT Act. The legal basis for this processing is Article 6(1)(c) GDPR - compliance with a legal obligation to which we are subject as a data controller.
We also process partners' personal data for the purpose of fulfilling our obligations under generally binding legal regulations. These include in particular the obligations arising from the Accounting Act and the VAT Act. The legal basis for this processing is Article 6(1)(c) GDPR - compliance with a legal obligation to which we are subject as a data controller.
2.4 Our legitimate interests
In addition to the above, we may process partners' personal data for the establishment, exercise or defence of our legal claims. The legal basis for this processing is Article 6(1)(f) GDPR - our legitimate interest.
In addition to the above, we may process partners' personal data for the establishment, exercise or defence of our legal claims. The legal basis for this processing is Article 6(1)(f) GDPR - our legitimate interest.
3. Categories of recipients of personal data
3.1 Public authorities
We will transfer the personal data of our partners to the relevant public authorities (e.g. tax authorities, etc.) if they ask us to do so within the scope of their powers. These authorities will further process the partners' personal data as independent controllers.
We will transfer the personal data of our partners to the relevant public authorities (e.g. tax authorities, etc.) if they ask us to do so within the scope of their powers. These authorities will further process the partners' personal data as independent controllers.
3.2 Processors
In addition, we may transfer partners' personal data to recipients with whom we have entered into a contract for the processing of personal data and who will process the personal data as our processors (e.g. entities providing accounting, tax consulting, printing and mailing services, legal services, IT services, cloud services, auditors, etc.). We recognise the importance of personal data security and will therefore only pass on partners' personal data to processors who guarantee to us that this personal data will not be passed on to any other processor who is unable to ensure sufficient personal data security.
In addition, we may transfer partners' personal data to recipients with whom we have entered into a contract for the processing of personal data and who will process the personal data as our processors (e.g. entities providing accounting, tax consulting, printing and mailing services, legal services, IT services, cloud services, auditors, etc.). We recognise the importance of personal data security and will therefore only pass on partners' personal data to processors who guarantee to us that this personal data will not be passed on to any other processor who is unable to ensure sufficient personal data security.
4. Period of processing of personal data
We will always process personal data for as long as is necessary for the purpose of processing. However, the termination of one of the legal bases for processing personal data does not affect the processing of personal data on the basis of another legal basis.
4.1 Contract negotiations
For this purpose, we will process the personal data of the partners during the period of negotiation of the terms of the contract until the conclusion of the relevant contract. If no contract (agreement) is concluded, we will process personal data for a maximum of 24 months from the last communication between us and the partner.
For this purpose, we will process the personal data of the partners during the period of negotiation of the terms of the contract until the conclusion of the relevant contract. If no contract (agreement) is concluded, we will process personal data for a maximum of 24 months from the last communication between us and the partner.
4.2 Performance of the concluded contract
For this purpose, we will process the personal data of the partners for the duration of the obligations under the concluded contract and subsequently until the last of the obligations agreed in the concluded contract has been terminated.
For this purpose, we will process the personal data of the partners for the duration of the obligations under the concluded contract and subsequently until the last of the obligations agreed in the concluded contract has been terminated.
4.3 Performance of legal obligations
For this purpose, we will process the partners' personal data for the duration of the relevant legal obligation. For example, we are required by law to keep tax documents for 10 years.
For this purpose, we will process the partners' personal data for the duration of the relevant legal obligation. For example, we are required by law to keep tax documents for 10 years.
4.4 Legal claims
For this purpose, we will process personal data for as long as the relevant legal claim exists (e.g. until the invoice is paid), but for a maximum of 1 year after the expiry of the limitation period under generally binding legal regulations. In the event of the initiation and continuation of judicial, administrative or any other proceedings in which the rights or obligations arising from the relevant legal claim are addressed, the period of processing of personal data for this purpose will not expire before the final conclusion of such proceedings.
For this purpose, we will process personal data for as long as the relevant legal claim exists (e.g. until the invoice is paid), but for a maximum of 1 year after the expiry of the limitation period under generally binding legal regulations. In the event of the initiation and continuation of judicial, administrative or any other proceedings in which the rights or obligations arising from the relevant legal claim are addressed, the period of processing of personal data for this purpose will not expire before the final conclusion of such proceedings.
4.5 Erasure of personal data
We will anonymise or delete the relevant personal data for which the purpose of processing has ceased without delay after the expiry of the personal data processing period.
We will anonymise or delete the relevant personal data for which the purpose of processing has ceased without delay after the expiry of the personal data processing period.
5. Rights of data subjects
Each partner has the following rights under the General Data Protection Regulation (GDPR), among others:
● the right to request access to their personal data (under the terms of Article 15 GDPR);
● the right to rectification or erasure of personal data (under the terms of Article 16 or Article 17 GDPR);
● the right to restrict the processing of personal data (under the terms of Article 18 GDPR);
● the right to object to processing (under the terms of Article 21 GDPR), in particular to the processing of personal data on the basis of our legitimate interest;
● the right to data portability (under the terms of Article 20 GDPR).
● the right to rectification or erasure of personal data (under the terms of Article 16 or Article 17 GDPR);
● the right to restrict the processing of personal data (under the terms of Article 18 GDPR);
● the right to object to processing (under the terms of Article 21 GDPR), in particular to the processing of personal data on the basis of our legitimate interest;
● the right to data portability (under the terms of Article 20 GDPR).
In the event that a partner believes that his or her right to data protection has been violated, he or she also has the right to lodge a complaint with the supervisory authority, which is the Data Protection Authority.
