Data protection

• Informace a souhlas se zpracováním osobních údajů.
• Splnění informační povinnosti dle zákona č. 643/1992 Sb. o ochraně spotřebitele ve znění pozdějších předpisů.

DATA PROTECTION

Information about and consent with the processing of personal data.

Fulfilling the obligation of information pursuant to Act No. 643/1992 Sb. on consumer protection, as amended.

INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA BY THE TRADE COMPANY VODŇANSKÁ DRŮBEŽ, A.S.

Vodňanská drůbež, a.s., place of business Radomilická 886, Vodňany II, 389 01 Vodňany, Identification No. 253 96 480, registered in the Register of Companies administered by the Regional Court in České Budějovice under ref. No. B 1953 (hereinafter “VD” or “the VD company” or “our VD company”), is the administrator of your personal data, which means that it lays down the purpose and means of your personal data, processes your personal data and bears responsibility for this processing.

This document contains general information about the manner of the processing of your personal data by our company, and further information about some of the most frequently processed kinds of personal data that is conducted during the activity of the trade company Vodňanská drůbež, a.s. and that is processed by the company in accordance with the regulations for personal information protection, especially General Data Protection Regulation (EU) 2016/679 (hereinafter “the Regulation”).

Please find below:

1. GENERAL INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA BY THE VD COMPANY
2. INSTRUCTIONS ON THE PROCESSING OF PERSONAL DATA FOR THE CONTRACTUAL PARTNERS OF VD

• INSTRUCTIONS ABOUT THE PROCESSING OF PERSONAL DATA FOR THE CONTACT PERSONS OF THE CONTRACTUAL PARTNERS OF VD

1. INSTRUCTIONS ABOUT THE PROCESSING OF PERSONAL DATA OF PERSONS SEEKING EMPLOYMENT WITH THE VD CONCERN
2. INSTRUCTIONS ABOUT THE PROCESSING OF PERSONAL DATA OF VISITORS OF THE WEB PAGES OF VD
3. RISKS AND RECOMMENDED PROCEDURES

Our company also conducts further the processing of personal data but the instructions on this processing are provided only for particular persons concerned.

1. GENERAL INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA BY THE VD COMPANY

Principles of the processing of personal data

When the processing of personal data, we respect all rights of the subjects of the data, and our company observes especially the following principles:

• Personal data are processed correctly, lawfully and transparently;
• Collecting personal data is conducted exclusively for legitimate purposes and the actual processing proceeds in a manner compatible with purposes;
• When processing personal data, we limit ourselves to the indispensable minimum sufficing for the purposes laid down;
• To secure personal data in the course of processing them, we adopt all reasonable and available measures;
• We process only precise and updated personal data, while imprecise and superfluous data are corrected or deleted;
• Personal data are kept for a period necessary for the purpose for which the data are processed;
• The processing of personal data proceeds only in a manner that secures appropriate security of personal data, including their protection by means of suitable technical and organizational measures against unauthorised or unlawful processing, accidental loss, destruction or damage.

What kind of personal data do we process?

To meet the purposes laid down by us we process especially the following categories of personal data:

• Identification and address data: name, surname, degree, date of birth, address (domicile, postal or any other contact address), for the legal person of an entrepreneur also the company name or an addition attached to his / her name, place of business and the identification number;
• Electronic contact data: telephone, mobile telephone, fax, e-mail address, data box ID;
• Other electronic data: IP address, location data, data transferred from the customer’s internet browser etc.;
• Further personal data required to perform the contract: bank account number, amount invoiced etc.;
• Information on solvency and trustworthiness: records on fulfilling payment obligations including information from public registers.

How do we obtain your personal data?

We obtain your personal data from you, from third parties, from publicly accessible sources or from our own activities. In the event that we obtain your personal data from you, we always inform you whether providing your personal data is a legal or contractual requirement and whether you are obliged to provide your personal data, as well as about possible consequences of not providing your personal data.

From you, especially:

- on the basis of your applications and on the basis of discussions of entering into a contract;

- from telephone communication;

- from personal or written communication with you, including the communication by electronic means (e-mail).

• From third parties, especially:

- from state administration bodies or from third parties in performing our legal obligations or on the basis of special legal regulations;

- from cooperating third parties.

• From publicly accessible sources, especially:

- from social networks and the internet, provided that you disclose your data by yourselves;

- from the Commercial Register;

- from the Insolvency Commercial Register.

• From our own activities:

- in assessing data that provide us with in connection with using our products or services.

What purposes do we process your personal data for?

We process your personal data merely to the extent necessary for the purpose in question and for the time required for accomplishing the purpose in question. After this purpose has been accomplished, we may process your personal data for purposes other than those for which they were collected. We always inform you about these other purposes as well.

We process your personal data especially:

1. a) for the purposes of entering into agreements, for the purposes of fulfilling a contract that we entered into with you, and when settling your requests,
2. b) for the purposes of our legal duties,
3. c) for the purposes of our legitimate interests,
4. d) for marketing purposes.

In which way do we process your personal data and how are your personal data secured?

When processing your personal data our company always proceeds in such a manner to keep your personal data secure and to protect them against misuse.

Processing your personal data may be carried out manually or by means of an automated operation. Automated operation takes place in the VD information systems, or in the information systems of our processors.

Your personal data are processed by appointed VD employees who need access to your personal data to be able to perform their work duties and who are bound to secrecy about all facts and all data that they learn while performing their work. Besides, access to your personal data is provided to the employees of our processors, limited to the extent necessary for the performance of their activity for our company. We enter into a written contract about processing personal data with all our processors, which contains guarantees for the security of your personal data.

What are your rights?

You can make use of the following rights at any time in the course of processing your personal data:

• The right of access to your personal data and to making a copy of your personal data that we process about you,
• The right to correct and complete your personal data in the event that you find out that we are processing incorrect or imprecise personal data about you,
• The right to delete your personal data in the event that conditions laid down by legal regulations are fulfilled,
• The right to limit the processing of your personal data, when we can, following your request, limit handling your personal data, under certain conditions laid down by legal regulations
• The right of transferability of your personal data to another administrator in the event that we are processing your personal data on the basis of your consent or for the purpose of fulfilling a contract, while the processing is automated at the same time,
• The right to object to your personal data being processed if your personal data are being processed for the purpose of legitimate interests of our company. In the event that you raise an objection, we will not process your personal data until we prove serious reasons to process these data that prevail over your interests or rights and liberties, or to determine, perform or defend legal claims. After an objection is raised in the case of processing your personal data for the offer of our products and services, we will stop processing your personal data for this reason immediately.

If we receive a request for exercising your right above, we will inform the requesting person about the measures taken without delay, in any case within one month after receiving the request. This time limit may be, if necessary and with regard to the difficulty and number of requests, prolonged by two more months. Our company is not obliged, in some cases defined by the Regulation, to satisfy the request partly or completely. This will be the case mainly if the request is evidently not justified or inadequate, for instance because it is repeated. In such cases, we can (i) impose an appropriate fee taking into account the administrative costs related to providing the information requested or to conducting the acts requested or (ii) to refuse to satisfy the request.

If we receive the above request but have reasonable doubts about the requesting person’s identity, we can ask him/her for providing additional information needed to confirm his/her identity.

Information about the fact that the subject of the data exercised his/her rights with us and how we settled his/her request, will be stored for an appropriate period (usually 3-4 years) for the purpose of documenting this fact, for statistical purposes, improving our services and protection of our rights.

In the event that the subject of the data assumes that VD processes his/her personal data unlawfully or otherwise infringes his/her rights, he/she is entitled to lodge a complaint with a supervising authority (Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7) or he/she is entitled to ask for judicial protection.

We also want to inform you that we conduct no decisions exclusively based on automated processing, including profiling, which would have legal effect for you.

1. INSTRUCTIONS ABOUT THE PROCESSING OF PERSONAL DATA FOR CONTRACTUAL PARTNERS OF VD

This instruction sums up the basic principles of the processing of personal data by VD, provided that it concerns personal data of real or potential contractual partners – natural persons.

Overview of (types of) data being processed and their sources

Personal data of contractual partners – natural persons (hereinafter “the partner”) that VD will process include especially data provided by such persons [usually the name and surname, place of business, identification number (IČ), tax identification number (DIČ), account number, contact data (e-mail address and telephone number), date of birth, data stated in the contract, invoiced and paid (owed) amounts, data about performances carried out and communications with partners (or with their employees)]. In connection with a communication with a partner, VD may also store some technical data, i.e. the time of a realised communication with a partner and the IP address, from which it will be sent. In the case of potential contractual partners – entrepreneurs – our company may process data obtained from open sources (for instance their web pages or advertisements ordered by them) to be able to contact them telephonically with offers of services. Our company may store such basic data into its CRM system for the purpose of a further contact.

Purposes of processing

The primary purpose of the processing of personal data of a contractual partner shall include entering into a contract and fulfilling this contract. In connection with this fact, the data shall be further used to register and duly perform the contractual relationships of VD, to check the activities of our employees, for statistical purposes, for a further development of service of VD, either as services relating to the contract entered into, or internal administrative procedures of VD, to recover debts and to protect the rights of VD and third parties (for instance other contractual partners), especially against unlawful activities. The data (especially those obtained from communications with a partner, such as the IP address and the time of the communication) shall also be used for the purpose of the IT safety of VD. Further, the personal data of the partner shall be used by VD for the purpose of fulfilling its legal obligations, especially according to the regulations regulating the bookkeeping and taxes, regulations relating to personal data protection (both of the partner and the persons acting on his behalf), regulations on regulating commercials etc. and for the purposes of direct marketing (i.e. especially sending offers of our further products and services, i.e. by contacting by e-mail or by telephone).

Legal basis of the processing of personal data

The legal basis of the processing of personal data of partners is the necessity to fulfil the contract (including recovering the debts arisen), legitimate interests of VD (resulting from the interest in registering the contractual relationships and the interest in protecting their rights against unlawful activities, including IT safety, and a further development of products and services of VD, processing for direct marketing) and of third parties (especially of other contractual partners participating in the fulfilment in which the partner shall also take part) and the fulfilment of legal requirements (especially preventing offences, the fulfilment of requirements according to regulations on personal data protection (especially Act No. 101/2000 Sb and the Regulation, accounting and the fulfilment of obligations according to tax regulations.

Right of objection

If the legal reason for processing the personal data of the partner is a legitimate interest of VD (this concerns especially the processing of personal data for the purposes of IT safety, for statistical purposes and a further development of the customer-supplier relationships of VD and the protection of the rights of VD and of third parties), the partner is entitled, at any time, to raise an objection against such processing of personal data for reasons concerning his/her particular situation. In such cases, VD shall not continue processing such personal data, unless there are serious reasons for such processing that will prevail over the partner’s interests or rights and liberties or unless they are processed for the determination, fulfilment or defence of legal claims. The partner may raise objections to the processing by means of contact data below or better, by means of the e-mail address osobni.udaje@voddrubez.cz. When sending your e-mail, please specify a concrete situation that leads you to the conclusion that VD should not process the data.

In the event of the processing of personal data for the purposes of direct marketing (sending marketing messages), it is always possible to raise an objection without further reasons, so that in such a case you need not provide any reasons why you do not wish marketing messages any longer. In these cases, the best way to raise your objection is to unsubscribe from marketing messages on the link that will usually be attached to them for this purpose.

We point out that even in the above cases, parallel processing of personal data will sometimes continue for different purposes that will give reasons for further processing of such data by VD.

Period during which the processing of personal data will continue

Contact data of partners for purposes of sending commercial communications will be processed by VD as long as the partner expresses his/her disagreement with sending them. However, even then VD will process basic data about why it sent commercial communications to its partner, for an appropriate time to prove the reasons of this messaging.

Personal data will be processed for an appropriate time with regard to the purpose of the processing (for instance, contracts will be registered for 10 years after their termination). If the processing period is laid down by legal regulations, personal data will be processed for such a period, unless the purposes stated further give reasons for a longer processing period. To determine the appropriate time for processing personal data, we will primarily take into account the following points of view (i) the length of the period of limitation, (ii) the probability of raising legal claims, (iii) usual market procedures, (iv) the probability and importance of risks and (v) possible recommendations of the supervising bodies.

Data update

To update the data, VD may be contacted by means of the contact details below, best by e-mail: osobni.udaje@voddrubez.cz.

Commercial communications

We can also process data of our potential, present or former partners for the purposes of the so-called direct marketing, which includes sending e-mails or telephone contacts with offers of similar products or services that you subscribed to from us. Sending offers has no time limit, but if you ask us not to send you such offers any more, we will stop sending them. We will, however, continue processing the basic data of this messaging for an appropriate time to be able to prove why we sent you these offers. Your data will not be forwarded to any third parties for the purpose of sending offers (except for our subcontractors – processors, who will conduct the processing for us).

Our partner takes into account that he/she will be notified of commercial communications from VD, in the meaning of sec. 7 of Act No. 480/2004 Sb, on his/her address (including e-mail), and will be contacted by an unsolicited direct mail containing commercial communications concerning products, business and services of VD. Our partner may refuse this messaging at any time on the business address of VD or by the e-mail address osobni.udaje@voddrubez.cz. This refusal has – unless our partner expressly decides otherwise – no impact on sending other kinds of commercial communications than those that our partner reacts to.

The manner of processing and its consequences

Most processing procedures are computerised, therefore we will usually process your data in a computer system (for instance in our CRM system, in the Outlook application for e-mails, in our accounting system if it concerns data required for invoicing etc.). Processing documents in files, such as the system for storing paper contracts or files of visiting cards kept by our individual employees.

VD will process personal data especially in its computer systems and in the computer systems of its processors. Documents will be processed in the files of VD. Providing the data processed by the partner is voluntary (however, the contract will not be entered into without providing certain data, while some data are required by law, primarily by accounting regulations).

Birth number

We will process your birth number only if you specify it in the contract by yourselves or if it is required by a legal regulation (our company does not insist on you stating your birth number in the contract, unless it is expressly stipulated by a legal regulation, so for that reason, do not include it in contracts).

In the event that the partner – a natural person – makes his/her birth number available to VD on the basis or in connection with a contract entered into, he/she agrees, as the holder of this birth number in the meaning of sec. 13c par. 1 of Act No. 133/2000 Sb that VD may use his/her birth number for the purposes of registration of contracts, fulfilments provided and the protection of the rights of VD, that VD may archive, process and use it. Consent withdrawals have no impact on the right of VD to process information and data resulting from relevant legal regulations or for other purposes, unless it is expressly stipulated otherwise.

Transferring personal data to other persons (recipients of personal data)

Not all kinds of personal data processing are carried out by our company. To do the processing we sometimes hire third parties, the so-called personal data processors. We make every effort to choose adequately trustworthy processors.

VD may disclose personal data to third parties only in the cases when the disclosure is assigned or enabled by a legal regulation, or with the partner’s consent. VD discloses personal data only to the usual extent to processors and other recipients – suppliers of external services (usually programming or other supporting technical services, suppliers of computer systems, server services, e-mail messaging, and to suppliers of archiving services), operators of (backup) servers or to operators of technologies used by VD, who process them for the purpose of guaranteeing the functionality of relevant services. Further, personal data may be disclosed, in so far as is strictly necessary, to legal, economic and tax advisors and auditors, who process them for the purpose of providing advisory services, or to persons that constitute a concern with VD. Personal data concerning debtors may also be disclosed to a company insuring debt claims or to other companies for the purpose of recovering debt claims. Your personal data may also be made available, upon request or in the event of suspicion of unlawful acts, to public authorities.

Transferring personal data abroad

Although the Regulation lays down the principle of a free movement of persons within the EU, the Regulation limits the transfer of personal data to countries outside the EU. Basically, our company does not transfer personal data to countries outside the EU. However, it may happen that your personal data will be processed in a computer system whose servers will be situated outside the EU territory, although we make every effort to avoid such situations. With regard to the systems usually used in the business sphere, this would concern only systems using servers situated in the United States of America. In such a case, we would choose as our contractual partner a company meeting the conditions approved by the European Commission for a safe data transfer between the EU and the USA, the Privacy Shield. If we transfer your personal data outside the EU, we will inform you about this transfer, if necessary, in an appropriate manner.

• INSTRUCTIONS ABOUT THE PROCESSING OF PERSONAL DATA FOR CONTACT PERSONS OF CONTRACTUAL PARTNERS OF VD

Within the scope of processing personal data of present or potential contractual partners, VD also processes data on their contact persons (for instance their statutory bodies or employees who deal with VD). Within the scope of these data, we usually process the data of the name and surname of such persons, their e-mail addresses, job positions, telephone numbers and as the case may be, records of appointments with them. These data are processed for the same purposes and to a similar extent and with a similar duration as the data of contractual partners. Individual employees of VD may keep their own lists of contact persons, for instance in the form of telephone address books or catalogues of visiting cards. Telephone numbers with which communication was conducted from company apparatuses are also stored for a relevant time, for the purpose of a dutiful settlement of telecommunication services, protection of the rights of VD and a possible differentiation between private and business calls. Apart from administrators, access to such data is granted only to employees from whose devices the communication was conducted.

1. INSTRUCTIONS ABOUT THE PROCESSING OF PERSONAL DATA OF PERSONS SEEKING EMPLOYMENT WITH VD

This document sums up the principles of the processing of personal data of persons seeking employment with VD. In the relationship to persons seeking employment, the VD company acts in the position of the administrator.

Which data will we process about you?

We will process your personal data that you provide us with or concerning which you agree with the transfer thereof, for instance within the scope of a server for sharing data of applicants (basically, data from your CV, i.e. apart from your name and surname and contact data, also data about your previous work experience, your language knowledge etc. and further data obtained from the correspondence with you), or data that we obtain during the basic verification of your personal data from public sources, for instance the LinkedIn network (however, even this will concern the necessary data serving for the screening of the applicant, to the extent permitted by law, especially the data stated in your CV). In connection with a personal meeting with you or a telephone conversation with you, we may also take a record of what impression you made on us or how your behaviour corresponds to the data stated in your CV.

If we contact you without your prior consent, we will do this only on the basis of the data that you made available for this purpose.

In connection with your reaction to our job advertisement published on our website, we may also store some technical data, i.e. the time of your answer and the IP address from which your answer will be sent.

If you give us your consent to using your data, we will also store data about how and when this consent was given and when it was withdrawn.

How will we obtain the data about you (what are their sources) and how will we process them?

Your data will be primarily obtained directly from you.

Concerning specialised positions, we may also contact persons to whom we obtain contact from public sources, for instance the LinkedIn network, without having been contacted by these persons. In such cases, we will address you as a possible candidate with an offer to participate in a relevant competition or to be included in our applicant database. If you agree, you will be included in a list for the position in question or in our database. If you do not agree, the processing of your data will be stopped (we may, however, for an adequate period, store the basic information about contacting you and for what reason).

If you provide us with data of your references (contacts to your previous colleagues etc.) and if you agree that we may contact them, we will also process data obtained from them, to an appropriate extent.

We also use our web pages for job applicants.

If you make your personal data available (for instance as an answer to our advertisement or by filling in a form on our internet page) or if you agree to be included in a selection procedure, you enable our company to use your personal data for the selection of a suitable candidate for a position in an ongoing selection procedure or for another ongoing selection procedure for a comparable position. If we also wanted to use your personal data for other positions or for future selection procedures, we will ask you for your consent with using your personal data.

Please remember that you may withdraw your consent with your participation in a selection procedure free of charge at any time using the contact information below. We recommend you to use either the direct contact to a person from our personnel division, who will deal with you, or to use the e-mail address osobni.udaje@voddrubez.cz.

In the event that you withdraw your consent or that you request cancelling your participation in a selection procedure, you will be removed from the selection procedure in question. The withdrawal of your consent does not affect the legality of the processing based on your consent, which was given before its withdrawal.

Further, you can be contacted by means of your CV, which is available through the service of sharing of CVs, in which you are registered (for instance the servers jobdnes.cz or jobs.cz). CVs are shared with your consent, as part of such services.

What (for what purpose) will we use your data for?

Your personal data will be primarily used for the selection of a suitable candidate for a position within ongoing selection procedures (including external cooperation). If you are chosen for the position in question and a contract is entered into with you, the data provided by you (especially your CV) may become part of your personal file.

Your basic identification data, obtained about you from your e-mail correspondence with us or from your activity on our website (for instance the data obtained from your reaction to an advertisement) will be used by us for the purpose of protecting the rights of our company or of third parties against possible unlawful acts that could be committed within the scope of such activities and for the purposes of IT safety of our internet pages and network.

The data about how you gave us your consent and your basic data and about how we obtained the data about you will also be used for the fulfilment of our legal duties, especially our duties according to the regulations on personal data protection (documenting your consent with processing personal data etc.) and possibly for the purpose related to checking the fulfilment of contracts entered into with the operators of the above services of sharing CVs.

How long will we process your data?

The processing of the personal data for the basic purpose, i.e. for the selection of a suitable candidate to fill a position in an ongoing selection procedure, will be conducted until the position in question is filled, and further for the period of approximately 6 months after this position was filled (to be able to contact you with the offer of this position if the candidate selected in the first place proved unsuccessful; after this period, e-mails exchanged with you may be archived for an appropriate time for the purpose of the protection of our rights of the rights of third parties). If we employ you, your CV provided by you and other similar data concerning you will be included in your personal file and we will process it during the time of keeping this personal file.

If you give us your consent to use your data for the offers of other positions even in future, we will continue processing your data for the purpose above until the withdrawal of your consent.

To prove the fulfilment of our obligations according to the regulations about personal data protection, we can, even after the withdrawal of your consent, store information about how we obtained your consent and what it concerned, for an appropriate period (usually max. 4 years).

The above period may be exceeded in individual cases justified by circumstances, for instance in a lawsuit.

Concerning the other purposes above (protection of rights, IT security, fulfilment of legal obligations) the necessary data about you (as a rule, however, not the CV provided by you) will be processed for an appropriate period, and the determination of the appropriate period to process personal data is based especially on the following factors: (i) the length of the period of limitation with a reserve for finding out whether a legal action or other proceedings have been taken, (ii) the probability of making legal claims against our company, (iii) expected time limits for the detection of an attack on our network or other security breaches found out, (iv) the usual procedures in the market, (v) the probability and significance of threatening risks and (vi) recommended procedures of the supervising bodies.

What is the legal basis on which we process your data?

In terms of law, the above processing is based on your consent (for the purpose of including you in a selection procedure or into our CV database for the purpose of offering job positions in future) and on the legitimate interests of our company (especially in the case of the primary obtaining of a contact to you others in a different way than with your consent, for processing your data for the purpose of the protection of the rights of our company or of third parties against possible unlawful acts and for the purpose of IT security).

We want to point out that providing your personal data for processing with your consent is voluntary on your side, however, we will not be able to include you in relevant selection procedures without your consent.

The legal basis of the above processing also includes the fulfilment of the legal obligations of our company, especially in the field of the regulations on the personal data protection (Regulation (EU) No. 2016/679).

We want to point out that if the basis of the processing of your personal data is your consent, you are entitled to withdraw this consent at any time. The withdrawal of your consent does not affect the legality of the processing based on your consent, which was given before its withdrawal.

Right of objection

If the legal reason for the processing of your personal data is based on a legitimate interest of our company (this concerns mainly the data about your activity obtained within our website that are processed for the purpose of the protection of rights and of IT security, and the data about your correspondence with us), you are entitled, for reasons concerning your concrete situation, to raise an objection against such processing of your personal data at any time. In such cases, we will not continue processing your personal data any more, unless there are serious justified reasons to do so that prevail over your interests or rights and liberties, or unless they are processed for the determination, performance or defence of legal claims. Objections to the processing may be raised by means of the contact data below or better on the e-mail osobni.udaje@voddrubez.cz. When e-mailing us please specify your concrete situation that leads you to the conclusion that we should not process your data.

Data update

If there is a change in the CV data or other data provided by you (for instance, if you obtain higher qualifications, learn more languages etc.), please inform us about such changes. Then we will be able to choose a job position offered to you better.

Who may we disclose the data concerning your person to?

We may disclose your personal data, to the usual extent, to the processors or other recipients – providers of external services for our company (usually, programming and other supporting technical services, including the Registration system of applicant database, e-mail messaging), operators of our servers or operators of technologies used by us, who process them for the purpose of providing the functionality of the relevant services. Your personal data may also be disclosed, to the usual extent, to legal, economic and tax advisors and auditors, who process them for the purpose of providing consultancy services. Your personal data may also be transferred, upon request or in the case of suspicion of unlawful acts, to public authorities.

1. INSTRUCTIONS ABOUT THE PROCESSING OF THE PERSONAL DATA OF VISITORS TO THE VD WEBSITE

What purposes do we process your data for?

Our company does not process our users’ personal data in any other way than for the purposes permitted by law or for purposes to which the users have given their consent, especially to the purposes below:

• Measuring of the web traffic of our website
• Improving the content of our website and the development thereof
• Securing the safety of our systems and network against attacks from outside or against misuse by the users, in the customary standard
• Organising consumer contests

For the purposes of keeping accounting registers and the fulfilment of other legal obligations (for instance, documenting your consent to the processing of your personal data etc.).

We usually process your personal data in our own computer systems, or we can use the systems of third parties (the so-called processors).

Legal basis of the processing

The legal basis of the processing of your personal data consists of the necessity to fulfil the contract (including the recovery of debt claims arisen), legitimate interests (resulting from the interest to protect our rights, processing for statistical purposes, measuring of the web traffic of our website and from the interests of third parties (especially those of our contractual partners participating in the performance for you and the fulfilment of legal requirements (especially the prevention of offences, the fulfilment of requirements according to regulations of personal data protection (especially Act No. 101/2000 Sb and Regulation No. (EU) 2016/679, bookkeeping, the fulfilment of obligations according to tax regulations).

If your consent to the processing of your personal data is needed, you will be asked for such consent.

What kind of data do we process, how long and what are their sources?

For the purposes above, we process especially the data about your activity on our website, your IP address, the date and time of access, the basic geographical location etc.

If we need your consent and the data about you giving us such consent and in which way this consent was given (by storing the information about the way and time of giving the consent, including your IP address, from which you marked the appropriate field) and when you withdrew it.

All personal data are processed only to the extent necessary for the fulfilment of the above purposes, and only for the period necessary for achieving the purposes laid down by us, however for the maximum period laid down by relevant legal regulations or in accordance with them. Your personal data processed with your consent are processed until the withdrawal of your consent, and after that your personal data may be processed only if there is another legal reason to do so (for instance to document your consent, for protection against legal claims etc.).

To determine the length of the processing time we use especially the viewpoint of (i) the length of the limitation period, (ii) the probability of legal claims made against our company, (iii) the expected time for detecting attacks on our network or any other findings of security breach, (iv) the procedures usual in the market and the recommendations of the supervising bodies, and (v) the probability and importance of threatening risks.

If we need your data that directly identify you or that enable us to contact you, we will expressly ask you for these data.

The source of the personal data that we process about you is especially your activity on our website.

Who may we disclose data about you to?

VD may disclose your personal data to third parties only in cases when it is prescribed or enabled by law or with your consent, especially:

To the suppliers of external services (usually programming or other supporting technical services, server services, services related to the measuring of the web traffic on our website and adapting its content to the users’ preferences),

To the operators of backup servers or to the operators of technologies used by the VD company, who process them for the purpose of securing the website functionality,

Your personal data may also be made available, upon request or in the event of suspicion of unlawful acts, to public authorities.

Are you obliged to provide us with your data?

You provide your personal data to VD voluntarily. If there is a legal obligation to provide us with your personal data in some cases, we will inform you about this fact.

Consent

If your consent appears to be a legal reason for the processing of your personal data, you can withdraw such consent free of charge at any time on the contact below. The withdrawal of your consent does not affect the legality of the processing based on your consent, which was given before its withdrawal.

Right of objection

The right of objection is an important right of yours. It enables you to have the processing based on your legitimate interest examined. This means that the actual processing is permissible but from your point of view there are specific reasons for which you do not want the processing to be carried out. In such a case, VD will not continue processing your personal data any more, unless there are serious reasons for such processing that will prevail over your interests or rights and liberties or unless they are processed for the determination, fulfilment or defence of legal claims. However, the possibility to raise an objection does not relate to cases in which we process data necessary for the fulfilment of the contract or if the processing of the data is prescribed by law. The right of objection is stipulated in Article 21 of the Regulation.

You may raise an objection to the processing by means of data specified below or better by the e-mail address osobni.udaje@voddrubez.cz. When e-mailing us, please specify your concrete situation that leads you to the conclusion that the VD company should not process your data. We point out that even in the above cases, parallel processing of your personal data will continue for different purposes that will give reasons for further processing of such data by VD.

Cookies

To differentiate individual computers and the individual setting of some services, we use files of cookies or other similar network identifiers on our website. Cookies are small text files that are stored by our servers in individual computers by means of the web browser. Cookies may be presented as the memory website that recognizes the user of the same computer on his next visit according to them.

Cookies do not serve for obtaining any sensitive personal data.

Standard web browsers support the administration of cookies. For more detailed information please use the help of your browser. If your browser allows the use of cookies, we will assume that you agree with the use of standard cookies by our servers.

3. RISKS AND RECOMMENDED PROCEDURES

Every case of the processing of personal data carries certain risks. These risks may differ with regard to the extent of the data being processed and the manner of their processing. Below, you can find some recommended procedures that may help you protect your data:

• If you provide us with your data, always consider whether it is necessary to provide them. You should especially consider providing data that concern your personal life and its aspects not related to the purposes for which you are providing them or data intended for publishing (for instance your comments on articles etc.). If you have the impression that we ask you to provide too many data, contact us please, and we will examine the appropriateness of our requirement.
• If you provide us with the data of third parties (the members of your family or other employees of your company etc.), give some thought to whether it is necessary to provide them. If necessary, ask for the permission of such third parties.
• If a colleague of ours asks you to provide your data, do not hesitate to ask whether it is necessary and whether the processing may be carried out without these data.
• Persons under 18 years of age are especially vulnerable. If providing personal data concerns these persons, it is necessary to consider all circumstances very carefully. At the same time, it is necessary to consider whether the consent of these persons or that of their legal representative (for instance the parents) is required to provide such data. If you are a person under 18 years of age, in the event that you have doubts whether you are able to make up your mind correctly, discuss the whole matter with your parent or contact us.
• If you are logging in with your password, make sure you are using a strong unique password that you will not use for other devices and accesses. Never tell or disclose your password to anyone, not even to our employees. We will never ask you to tell us your password, therefore be careful about various requests to provide your password, even if they are signed as VD. These are most probably false identities trying to make you disclose your password and to misuse it.
• If you are sending us confidential data, make sure that you are using a safe manner of communication, for instance by protecting your file with a password combined with encoding and sending the password through a different communication canal.
• If you feel that not all obligations are fulfilled on our side, that there has been a data leak or that someone poses as our employee, inform us about this as soon as possible, either electronically to our e-mail address udaje@voddrubez.cz, or by post to our address Vodňanská drůbež, a.s. with place of business at Radomilická 886, Vodňany II, 389 01 Vodňany.
• We are doing our best to keep these instructions up-to-date. For that reason, we will carry out modifications of these rules from time to time. We will inform you about essential modifications, still it is useful to read these rules again.

HOW CAN YOU GET IN CONTACT WITH US?

To send us your comments and questions about personal data protection and to contact us concerning your legal rights, you can use the following contacts:

Vodňanská drůbež, a.s. Radomilická 886 Vodňany II, 389 01 Vodňany.

e-mail: osobni.udaje@voddrubez.cz

Tel.: 383838001

Data box ID: 9ksjxp6

This information about the processing of personal data is valid and in force as of 25 May 2018. The current version of this document is published on our website www.voddubez.cz.