PROTECTION OF PERSONAL DATA

  1. The operator, as the controller of personal data, undertakes to proceed in the fulfillment of its obligations according to the Agreement, during which it processes the personal data of the Customer, or contact persons Customers (hereinafter referred to as "personal data“ a „data subject"), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Regulation on personal data protection) and relevant legal regulations on personal data protection, in particular Act No. 110/2019 Coll., on the processing of personal data, as amended.  

  1. The operator determines how and for what purpose personal data is processed.

  1. Personal data means information relating to a certain natural person who can be identified on the basis of this information, or in connection with other information.

  1. Personal data of data subjects is processed by the Operator to the extent necessary for the fulfillment of its obligations under the Agreement, these GTC, the exercise of its rights, the fulfillment of legal obligations and related commercial communications.

  1. The operator undertakes to process personal data in a way that ensures proper security of personal data, including their protection using appropriate technical and organizational measures against unauthorized or illegal access to personal data.

  1. The operator confirms that it has adopted, observes and regularly checks the measures necessary to ensure the protection of personal data, in particular against unauthorized and accidental access to personal data, their change, destruction or loss, unauthorized transfers, their other unauthorized processing, as well as other misuse of personal data data.

  1. The Operator undertakes to ensure that the Operator's employees or other persons who process the Customer's personal data maintain the confidentiality of such personal data, even after the end of their employment or other relationship on the basis of which they processed the personal data.

  1. INFORMATION ON THE PROCESSING OF PERSONAL DATA

  1. The table below shows what personal data, for what reason and for what purpose the Operator processes:

Personal data

(category and example list)

Purpose of processing

Legal basis of processing

Identification data and contact data (especially name, surname, date of birth, address, e-mail and phone number).

  • negotiation and performance of the Contract and related communications,  
  • addressing Customers through direct marketing.

  • Conclusion and performance of the Contract,
  • the legitimate interest of the Operator in ensuring communication with Customers,
  • legitimate interest in addressing Customers through direct marketing.

Vehicle data related to the provision of the Service (RZ, vehicle location and parking time).

  • negotiation and performance of the Contract.
  • conclusion and performance of the Contract.

Data related to handling the complaint (e.g. account number, information contained in the fine decision).

  • performance of the Contract.
  • performance of the Contract.

  1. Personal data is obtained directly from the data subjects, namely at the time of the Order, or subsequently when resolving the complaint.

  1. Under certain circumstances, the operator is obliged to share personal data of data subjects with third parties, for the above purposes, or if this obligation results from the relevant legal regulations. Such third parties include in particular:

  • administrative and similar authorities (financial authorities),
  • financial institutions (banks, insurance companies),
  • police, public prosecutor's office,
  • external advisors.

  1. The operator shares information about the license plate number of the vehicle and its location at the time of parking with the operator of the parking spaces.

  1. The operator may use external service providers. For the purposes of fulfilling their obligations, the Operator may transfer certain personal data of data subjects to them or process them for the Operator. In such a case, the external service providers are vetted by the Operator and provide sufficient guarantees with regard to the confidentiality and protection of personal data of data subjects. With all these providers, the Operator has concluded written contracts on the processing or transfer of personal data, in which the external service providers have committed themselves to the protection of personal data and compliance with the Operator's standards for the security of personal data.

  1. Personal data of data subjects are not transferred outside the European Economic Area.

  1. The personal data of the data subjects are kept only for the period for which the Operator needs them to fulfill the purpose for which they were collected (see above), or for the protection of the legitimate interests of the Operator.  

  1. Under the generally binding legal regulations of the specified conditions, the data subject can exercise all the rights listed below:

  • the right to access personal data and provide additional information about the processing of personal data;
  • the right to correct incorrect and incomplete personal data;
  • the right to obtain personal data and transfer it to another controller;
  • the right to object to the processing of personal data;
  • the right to restrict the processing of personal data;
  • the right to erasure of personal data;
  • the right to revoke the given consent to the processing of personal data;
  • the right to file a complaint with the supervisory authority (Office for Personal Data Protection).

  1. In case of any questions or exercising rights, the data subject can contact the Operator via e-mail: support@parkingcard.cz.

  1. CONFIDENTIALITY OF INFORMATION

  1. The customer is obliged to maintain the confidentiality of all facts communicated, transmitted or communicated to him or which are known to him in any other way on the basis of the Contract or in connection with it or on the basis of the contractual relationship established by the Contract or in connection with it, especially with regard to all facts concerning the Operator, its employees and about technical and organizational matters of the Operator, and the Customer undertakes not to disclose or notify such facts and information to third parties or use them for his own benefit or for the benefit of a third party. These obligations remain in force even after the expiry of the Agreement concluded between the Customer and the Operator.

  1. The obligation to maintain confidentiality according to the previous paragraph of these GTC also applies to all facts that are the subject of trade secrets in accordance with the provisions of § 504 of the Civil Code, in particular to all facts of a commercial and technical nature, in tangible and intangible form, concerning the Operator, its know-how -how, technical solutions, strategic plans, and to all other facts related to the Operator that have real or at least potential tangible or intangible value for the Operator.