SPO Zlín logo
SPO Zlín logo

Principles of Personal Data Processing

SPO spol. s.r.o. Nábřeží 674, 760 01 Zlín-Prštné Česká republikaIČ: 44005067DIČ: CZ44005067Customer address record management.

  • Management of customer address records
  • Management of job applicant records
  • Ensuring contractual relationships
  • Management of accounting and personnel records

Information on the processing of personal data

  1. The legal basis for processing personal data is based on consent under Article 6(1)(a) GDPR, the necessity for contract performance under Article 6(1)(b) GDPR, and compliance with legal obligations under Article 6(1)(c) GDPR.
  2. Your personal data will be accessible to the data controller, their employees, and, if necessary, third parties—processors who provide appropriate guarantees, ensure that their processing complies with all GDPR requirements, and adequately protect your rights and personal data. These individuals include, in particular, legal and marketing advisors and IT service providers. However, these persons will only have access to such data for the strictly necessary duration and to the extent required to provide the service and meet legal obligations.
  3. The processing of personal data does not involve automated processing that would result in actions or decisions affecting the rights or legitimate interests of individuals.
  4. Personal data is processed for the necessary duration, which varies depending on the specific purpose of processing. After this period, personal data is either destroyed or retained for the duration specified in the applicable File and Disposal Plan, issued in accordance with Act No. 499/2004 Coll., on Archiving and File Service.

You have the right to:

  1. Request access to personal data
  2. The data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on the consent given before its withdrawal.
  3. Request the correction of inaccurate personal data.
  4. Request the deletion of personal data, or request the restriction of processing.
  5. Object to the unlawful processing of personal data.
  6. Request the portability of personal data that you have provided.
  7. You can file a complaint regarding the processing of your personal data or the failure of the data controller to fulfill its obligations under the GDPR with the supervisory authority at any time. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz

Your requests will always be properly assessed and handled in accordance with the relevant provisions of the General Data Protection Regulation (GDPR). Your request will be processed, if time permits, within 30 days from the receipt of the request.

Exercise your rights with the organization through the data protection officer/representative.

The data protection officer/representative can be contacted at: spo@spo-zlin.cz.