Processing of your personal data

Information memorandum on the processing of personal data

Leite group s.r.o., Company ID: 041 64 920, with its registered office at Kabešova 943/2, Vysočany, 190 00 Prague 9, registered in the Commercial Register maintained by the Municipal Court in Prague, under file number C 243533 (hereinafter referred to as “we”) consider the protection of personal data to be an integral part of our obligations not only towards our clients and employees, but also towards you, our suppliers and customers, their subcontractors, members of statutory bodies and contact persons and other employees, members of implementation teams and their subcontractors (hereinafter referred to as “business partners” or “you“). We therefore pay due attention to the protection of personal data and act in accordance with legal regulations when ensuring the protection of personal data.

In this document, you will find information about what personal data we process within the framework of our relationship with you. You will find information on whether we process personal data based on your consent or on another legal basis (reason), for what purposes we process the data, whether we transfer it to anyone, and what rights you have in connection with the processing of your personal data. Therefore, please consider this document an important source of information about how we process your personal data.

A. What personal data do we process?

We process the following personal data:

1. Identification data, which mainly includes your first name, last name, date of birth, job title, and, if you are our customer as a self-employed individual, your company ID number and VAT number.
2. Contact details, which are personal data that enable us to contact you, in particular your contact address, telephone number, email address, etc.
3. Records of mutual communication, which mainly means written correspondence or records of other forms of communication;
4. Information necessary for the performance of the contract, which means, in particular, data on the services used and the extent of their use, login identifiers, and, if you are our customer as a self-employed natural person, also your bank account number.

B. Why do we process personal data and what authorizes us to do so?

We process personal data for the following purposes:

1. concluding and performing contracts with business partners, based on the performance of the contract if the business partner is a natural person, or based on our legitimate interest in the performance of such a contract if it concerns a natural person who represents the business partner or otherwise participates in the performance of the contract (e.g., employees of our business partners and customers who are users of our services);
2. internal administrative needs, creation of records of services provided, based on our legitimate interest in ensuring proper records of contracts concluded with business partners and our legitimate interest in managing relationships with business partners and optimizing processes;
3. security and maintenance of IT infrastructure, protection of our equipment and other assets, based on our legitimate interest in taking technical measures to ensure cybersecurity and protect our assets;
4. protection of legal claims, based on our legitimate interest in ensuring the proper protection and effective enforcement of our rights and claims;
5. compliance with legal and other obligations, particularly in the area of taxation and accounting, based on the legal obligation that applies to us as administrators.

C. From what sources do we obtain personal data and how long do we process it?

We obtain personal data directly from you when you fill it in when requesting our services and in contractual documentation. We also obtain and further process personal data provided to us about you by your employer for the purpose of using our services.

We store personal data to the extent necessary for the following periods:

1. the duration of the contract in the case of the purpose referred to in point (a) above;
2. for the duration of the limitation period, including any period covering its possible suspension or interruption, but typically no longer than 16 years after the termination of the contract in the case of the purposes under points (b) to (d) above;
3. fulfilling relevant legal obligations in the case of the purposes under e) above.

D. Who processes your personal data and to whom do we transfer it?

We process all of the aforementioned personal data as the controller. This means that we determine the purposes for which we collect your personal data, specify the means of processing, and are responsible for its proper execution.

We also use the services of other processors who process personal data on our behalf. These processors include, in particular:

1. Suppliers of related IT services providing hardware and software support.

All processors are bound by a processing agreement to comply with the requirements of personal data protection legislation, in particular to protect your personal data.

Furthermore, we are obliged to transfer the processed personal data to state authorities, courts, law enforcement authorities, supervisory authorities if they request it, or to audit companies if required by law.

E. What are your rights regarding the processing of personal data?

Just as we have rights and obligations when processing your personal data, you also have certain rights when your personal data is processed.

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it outside of our company, and what other rights you have in relation to the processing of your personal data. You can find all this information in this Personal Data Processing Notice. However, if you are unsure what personal data we process about you, you can ask us to confirm whether or not we process personal data relating to you, and if so, you have the right to access this personal data. As part of your right of access, you may request a copy of the personal data being processed, with the first copy provided free of charge and subsequent copies subject to a fee.

Right to rectification

If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented without undue delay.

Right to erasure

In some cases, you have the right to have your personal data deleted. We will delete your personal data without undue delay if any of the following reasons apply:

1. We no longer need your personal data for the purposes for which we processed it,
2. you exercise your right to object to the processing of personal data that we process on the basis of our legitimate interests, and we find that we no longer have any legitimate interests that would justify such processing, or
3. it becomes apparent that our processing of personal data is no longer in accordance with generally binding regulations.

However, please note that even if one of these reasons applies, it does not mean that we will immediately delete all your personal data. This right does not apply if the processing of your personal data is still necessary for:

1. fulfillment of our legal obligation,
2. archiving purposes, scientific or historical research purposes, or statistical purposes, or
3. determination, exercise, or defense of our legal claims.

Right to restriction of processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you, in certain cases, to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:

1. you dispute the accuracy of your personal data, until we agree on what data is correct,
2. We process your personal data without sufficient legal basis (e.g., beyond what we are required to process), but you will prefer to restrict such data rather than delete it (e.g., if you expect to provide us with such data in the future anyway).
3. We no longer need your personal data for the above-mentioned processing purpose, but you require it for the establishment, exercise, or defense of your legal claims, or
4. you object to the processing of personal data. For the duration of our investigation, if your objection is justified, we are obliged to restrict the processing of your personal data.

Right to object to processing

You have the right to object to the processing of personal data that is based on our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds to continue doing so.

Right to lodge a complaint

Exercising your rights in the manner described above does not affect your right to file a complaint with the Office for Personal Data Protection. You may exercise this right in particular if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations.

You can file a complaint against our processing of personal data with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7.

F. How can individual rights be exercised?

For all matters related to the processing of personal data, whether it be a query, exercising your rights, filing a complaint, or anything else, you can contact us using the following contact details:

Email: info@leite-group.eu

Correspondence address: Leite group s.r.o., Kabešova 943/2, Vysočany, 190 00 Prague 9

Current contact information is available on our website.

We will process your request without undue delay, but within one month at the latest. In exceptional cases, particularly due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.