I. Personal Data Controller

Our company rejman logistics, s.r.o., business ID number: 025 44 229, registered office: Na Návrší 2029/5, 350 02 Cheb, entered in the Commercial Register maintained by the Regional Court in Plzeň, section C, entry 29332, as the personal data controller (hereinafter the “Controller”), hereby informs you about the processing of your personal data and your rights, in accordance with Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

II. Legal Grounds for Processing

• conclusion or performance of contracts for carriage, logistics and related services and lease agreements to which the data subject is a party
• performance of legal duties that apply to the Company, as the controller

III. Purpose of Processing

Performance in accordance with the contracts described above concluded with a customer and performance of legal duties.

IV. Recipients of Personal Data

• public authorities where the duty to hand over personal data about a customer results from the relevant legislation
• providers of information system maintenance
• providers of tax and legal services
• other recipients in accordance with a customer’s needs and instructions

V. Scope of Processing

In order to ensure the performance of a contract, the Controller processes the following personal data about customers:

a) customer’s identification data, which are first name(s), surname, date of birth, e-mail address, telephone number, business ID number if a customer is a natural person - entrepreneur and tax ID number if a customer is a VAT payer, address of the place of permanent residence in the Czech Republic, if he/she is a foreigner the place of declared residence in the Czech Republic and in the case of a person without permanent residence in the Czech Republic the address of residence outside the Czech Republic, the registered office of a natural person that is an entrepreneur, delivery address, payment data and other personal data necessary for the performance of a contract.

VI. Method of Processing and Personal Data Protection

The Controller processes personal data, the processing is carried out at its registered office by individual authorised employees of the Controller.Processing is carried out using computers and manually in the case of personal data in paper form, in compliance with all security principles for the management and processing of personal data.For this purpose, the Controller has adopted technical and organisational measures to ensure personal data protection, in particular measures to prevent unauthorised or random access to personal data, their alteration, destruction or loss, unauthorised transfers, unauthorised processing and other misuse of personal data.All entities to which personal data may be disclosed should respect data subjects’ right to the protection of privacy and are obliged to proceed in accordance with applicable legal regulations on personal data protection.

VII. Personal Data Processing Period

Personal data will be processed for the period necessary to ensure the rights and duties resulting from a contractual relationship, and for a period of 3 years from the termination of an obligation under this contract, unless a different period results from the relevant legal regulations governing the archiving period.

VIII. Client’s Rights

1. The right to access personal data means that a customer has the right to obtain information from the Controller about whether it processes his/her personal data and, if it does, what data this concerns and how they are processed, where this applies to data that he/she provided to the Controller.If data are obtained from another data subject based on the law, this right is limited.A customer also has the right to have inaccurate personal data concerning him/her corrected by the Controller without undue delay on request.A client has the right to supplement incomplete personal data at any time.
2. The right to erasure of personal data represents the Controller’s duty expressed in other words to erase personal data it processes about a customer if certain conditions are met and this is not prevented by other facts (e.g. see the aforementioned archiving of personal data under the law, public interest, performance of a contractual duty, defence of legal claims, ...) and a customer requests it.
3. A customer is entitled to have the Controller restrict the processing of his/her personal data in certain cases.A customer has the right to object at any time to processing based on the legitimate interests of the Controller or a third party or necessary for the performance of a task carried out in the public interest or the exercise of public authority.
4. The right to data portability gives a customer the option to obtain personal data he/she provided to the Controller in a commonly-used and machine-readable format.He/she may subsequently transfer such data to another controller or, if technically possible, ask that the data be transferred between controllers, provided that two conditions are met: the processing of the personal data is based on consent or a contract and it is automated processing.
5. A customer has the right to rescind consent to personal data processing at any time if the personal data is processed based on consent to processing concluded with a client and not due to a legal duty or the performance of a contract concluded with a client.
6. In the event a customer is in any way dissatisfied with the processing of his/her personal data by the Controller, he/she may submit a complaint directly to it or contact the Office for Personal Data Protection, registered office: Pplk.Sochora 27, 170 00 Prague 7, e-mail address: posta@uoou.gov.cz.More information about clients’ rights is available at the website of the Office for Personal Data Protection (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276).

In case of any proposals, questions or uncertainties regarding personal data processing, including complaints, you can contact the Controller, specifically the contact person:

Alena Kolditzová, by completing the request below and sending it to the contact address at the Controller’s registered office by registered letter.