Information on data processing

Information on data processing pursuant to art. 13
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27
April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data
(hereinafter “GDPR”)

I.

Below you may find information on the processing of your personal data (personal data of data subject) by

Vladimír Ambruz, LL.M. et LL.M.

Business ID: 08563900

Registered European Lawyer in the list of lawyers kept at the Czech Bar Association under no. No. 50281 and in the list of solicitors in England and Wales maintained by the Solicitors Regulation Authority under no. No. 554543.

Registered office at Průběžná 20, Zdiby-Přemyšlení, Czech Republic.

Contact details:

Email:   ambruz@ambruz.com

Phone: +420 777 048 748

(hereinafter “controller”).

II.

The controller processes the following personal data:

1. personal data received from the data subject, usually the client or
2. personal data received from the third parties (for example data received from the court when processing of such data is necessary for the performance of the contract).

The following categories of personal data are processed: name, surname, address, date of birth, email, phone, personal ID number, marital status, family situation, financial situation, bank account, IN, TIN, information on current/past/future court proceedings of any type

(hereinafter “personal data”).

Processing of personal data is lawful for the following reasons:

• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation which the controller is subject to;
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

III.

The purpose of processing personal data is:

1. to fulfil contractual obligations.
2. to fulfil legal obligations to which the controller is subject.
3. to protect the legitimate interests of the controller or the third parties.

IV.

The personal data will be stored by the controller no longer than is necessary in accordance with the legal obligations. For further information, please contact the controller.

V.

Personal data can be processed by:

• the controller;
• the third parties to fulfil contractual obligations to which the controller is subject to;
• providers of services necessary for compliance with a legal obligation to which the controller is subject to;
• Google;
• provider of IT services.

VI.

The personal data are stored securely and can be accessed only by the controller, the parties who get your consent (the consent of data subject) to access the personal data and the provider of IT services.

VII.

The controller will not transfer personal data to any third countries or international organisations.

VIII.

The controller will not use personal data for automated decision-making (including profiling).

IX.

With respect to the processing of personal data by the controller, you (the data subject) can request the controller:

• to give you access to your personal data, whereby you can obtain, in particular, information whether your personal data are being processed, for what purpose, what is the scope of processed data, retention periods, who is the source of personal data, who receives the personal data, and who has been given access to your personal data, if relevant. You can also be provided with a copy of your personal data undergoing processing;
• to rectify inaccurate or incorrect data or to complete incomplete personal data;
• to erase the personal data, e.g. if the purpose of processing ceases to apply or if your personal data are processed unlawfully;
• to restrict the processing of your personal data;
• to data portability, which allows you to obtain personal data concerning you, which you have provided to the controller, in a structured and machine-readable format either for yourself or for another controller; and
• to make sure that you are not subject to any automated decision-making.
• you can also raise an objection against the processing of your personal data by contacting the controller at email address: ambruz@ambruz.com or to lodge a complaint with the Office for Personal Data Protection, address: Pplk. Sochora 727/27, 170 00 Praha 7-Holešovice, web pages: https://www.uoou.cz/.

Please send your requests to the controller using the details shown above.

Where requests are manifestly unfounded or excessive, in particular because they are repetitive, a reasonable fee can be charged (taking into account the administrative costs of providing the information) or the controller can refuse to respond.

The controller may need your consent (the consent of data subject) to process your personal data. You may waive the consent by contacting the controller but the processing of personal data before the waiver remains to be lawful.

The above information is subject to change.

Effective date: 11. 12. 2020