Personal data protection

These principles of personal data processing and protection (the “Policy”) set out the basic principles that BILLANC PARTNERS ČR, s.r.o., Company ID: 25115839, with its registered office at Vinohradská 93, Prague 2, 120 00 (the “Company”) follows when obtaining and processing personal data. This Policy implements the rights and obligations of the Company arising in particular from the following generally binding legal regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”);
• Act No. 480/2004 Coll., on Certain Information Society Services and on Amendments to Certain Acts (Act on Certain Information Society Services), as amended (the “Act on Certain Information Society Services”);
• Act No. 127/2005 Coll., on Electronic Communications and on Amendments to Certain Related Acts (Electronic Communications Act), as amended (the “Electronic Communications Act”).

This Policy applies to all persons visiting the Company’s website https://www.billancpartners.cz (the “Website”), regardless of whether or not they are in a contractual relationship with the Company.

What is personal data
In accordance with the GDPR, personal data means any information relating to an identified or identifiable natural person (i.e. not a legal entity). In principle, this is any information which, either on its own or in combination with other information, can be used to identify a specific natural person (“Personal Data”).

What personal data the Company processes
The Company may collect the following Personal Data about you:
1. Personal Data you provide to the Company yourself
Such Personal Data includes in particular the data you enter in a completed registration, order or other form, or which you provide to the Company by e-mail, telephone, fax or other similar means. You may also provide Personal Data to the Company [in competitions], [by posting a review of a product or service] or [by booking a place on a training course]. This mainly includes your first name, surname, correspondence address, e-mail address, telephone number, bank account details, details of the chosen payment method, etc.
The Company will process the above Personal Data for the purpose of:

• providing the service, product or information you have expressed interest in;
• if you are an existing customer, also providing information about other services or products similar to those you previously purchased;
• if you are a new customer, the Company will send you commercial communications and offers of products and services only if you have given the Company your explicit consent;
• assessing and evaluating your application for a job position.

2. Personal Data the Company collects about you itself
When you visit our Website, the Company may collect certain information necessary to ensure the proper and convenient operation of the Website. Such information includes your Internet Protocol (IP) address used to connect your computer to the Internet, your registration data, browser type and version, time zone setting, browser plug-ins, information about your visit including the full Uniform Resource Locator (URL), the path to, through and from the Website (including date and time), products you viewed or searched for, response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and the way you leave the page.
The Company uses this personal data to administer and improve the Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical purposes and recording the number of views. This Personal Data may also be used to measure the effectiveness of advertising and to deliver relevant advertising.

Disclosure of personal data
Personal Data the Company obtains about you may be transferred [within the [●] group, i.e. to persons related to the Company;] and to third parties (“Processors”) who help the Company fulfil its contractual obligations by providing certain services (e.g. delivery of a service). The Company transfers Personal Data only to Processors who provide guarantees of a sufficient level of security for your Personal Data and who process such Personal Data exclusively on the basis of a data processing agreement. In this sense, the Company may transfer Personal Data to the following Processors:

• external collaborators and suppliers in order to fulfil the Company’s contractual obligations;
• payment service providers and payment processors in order to secure the transfer of funds and carry out payments;
• postal and delivery service providers in order to deliver products or services offered by the Company;
• the Website administrator.

In certain circumstances, the Company may be obliged to provide your Personal Data to third parties (e.g. law enforcement authorities) in accordance with generally binding legal regulations.

Means of personal data protection
In order to protect Personal Data and minimise the risk of unauthorised access to it, the Company has adopted organisational and technical measures. These measures include:

• organisational restrictions limiting the group of persons authorised to come into contact with Personal Data; and
• technical protection of the Company’s servers and Website against unauthorised manipulation.

Persons who come into contact with Personal Data are instructed in the principles of personal data protection and are bound by confidentiality when processing it.

Period of retention of Personal Data
The Company retains Personal Data only for the period strictly necessary to fulfil its contractual obligations and the obligations arising for the Company from the relevant legal regulations. Personal Data processed on the basis of your consent is retained by the Company only for the duration of the purpose for which the consent was given.
Once the legal ground on which your Personal Data is processed ceases to exist, the Company will destroy this Personal Data and all existing copies of it.

Cookies
When operating its Website, the Company uses cookies, which are small text files (“Cookies”) sent from the Company’s server to your browser and sent back to the Company’s server when you visit the Website again. Cookies thus allow the Company to recognise your browser, remember information about your previous activity on the Website and adapt the content of the Website to your needs.
The Company uses the following types of Cookies:

• [first-party Cookies that enable the basic operation and functionality of the Website and without which the content of the Website could not be displayed correctly;]
• [technical Cookies that make it possible to analyse the use of the Website, ensure secure login, remember the progress of filling in your order, and store registration data and the contents of the shopping basket;]
• [advertising Cookies that enable targeted advertising to be displayed, the Website to be shared on social networks or comments on products to be posted.]

Cookies can be deleted in your browser settings. Your browser can also be set so that Cookies are not stored automatically. However, if you block, disable or otherwise refuse some Cookies, the Website may not be displayed correctly or some services or functions of the Website may not be available.

Rights of data subjects
In connection with the processing of your Personal Data by the Company, you have the following rights guaranteed by personal data protection regulations:

• the right to withdraw consent to the processing of Personal Data where the processing is based on consent;
• the right to request access to Personal Data and to information about which of your Personal Data the Company processes;
• the right to rectification of inaccurate Personal Data and, where applicable, to completion of incomplete Personal Data;
• the right to erasure of the Personal Data processed;
• the right to restriction of the processing of Personal Data;
• the right to receive the Personal Data you have provided to the Company in a structured, commonly used and machine-readable format, and the right to transmit such data to another person;
• the right to be informed of a Personal Data breach;
• the right to object to the processing of Personal Data; and
• the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, or via data box at the address qkbaa2n.

The above rights and any complaints may be exercised with the Company, as the data controller, in writing at the address below or by e-mail at headoffice@billancpartners.com.

BILLANC PARTNERS ČR, s.r.o., Vinohradská 93, Prague 2, 120 00

This Policy is valid and effective from 20 May 2018.