Personal Data Processing Policy

A. Personal Data Controller

The controller of personal data is Bc. Anastasia Spiridonova, located at Praha – Kyje, Lipnická 1448, Postal Code 19800, ID No.: 03454380 (hereinafter referred to as “AS”). AS hereby informs you of the basic principles and rules in accordance with Article 13 and subsequent provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation”) and Act No. 110/2019 Coll., on the processing of personal data, based on which the Ministry of Labour and Social Affairs (MPSV) as the controller handles personal data (hereinafter referred to as the “data subject”).

B. Purpose of Processing

AS as the controller of personal data (hereinafter referred to as the “controller”), in connection with email, telephone, and other communications within the activities on the website https://astransform.net/, processes and stores personal data of the data subject under conditions and within the limits established by applicable legal regulations, especially in accordance with Article 6 (1)(a) and (b) of the General Data Protection Regulation, for the following purposes:

Email, telephone, and other communications related to activities presented on the website https://astransform.net/.

Scope of Processed Personal Data: The personal data of data subjects are processed to the extent of: name, surname, email, phone.

Duration of Personal Data Processing: Consent is given for the duration of registration on the website https://astransform.net/ or until the consent is withdrawn by the data subject.

C. Who Processes and Transfers Your Personal Data?

All the mentioned personal data are processed by AS as the controller. The controller determines the means of processing and is responsible for its proper execution. Generally, we do not transfer your personal data to other controllers. Exceptions are cases where we are obliged to transfer these data by law, and cases where we transfer these data to state authorities or third parties (especially persons harmed by unlawful acts) to achieve the aforementioned purposes.

For the aforementioned purposes, no external processors are used. In case of an inspection according to the above-mentioned legal regulations, personal data may be transferred to other controllers.

D. What Are Your Rights in Relation to the Processing of Personal Data?

Just as AS has its rights and obligations when processing your personal data, you also have certain rights when processing your personal data. These rights include:

a. Right to Request Access to Personal Data Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it besides us, and what other rights you have related to the processing of your personal data. You have learned all this in this Information on Personal Data Processing. However, if you are unsure which personal data we process about you, you can ask us to confirm whether personal data concerning you are being processed by us, and if so, you have the right to access this personal data. As part of the right of access, you can request a copy of the processed personal data, with the first copy provided free of charge and additional copies for a fee.

b. Right to Request Correction of Personal Data If you find that the personal data we process about you are inaccurate or incomplete, you have the right to have them corrected or completed without undue delay.

c. Right to Request Erasure of Personal Data In some cases, you have the right to have your personal data erased. We will erase your personal data without undue delay if one of the following reasons is met:

We no longer need your personal data for the purposes for which we processed them,
You use your right to object to processing (see below the chapter “Right to Object to Processing”) for personal data processed based on our legitimate interests, and we find that no legitimate interests justify such processing, or
It turns out that the processing of personal data by us has ceased to comply with generally binding regulations.

This right does not apply if the processing of your personal data is still necessary for:

Compliance with our legal obligation,
Purposes of archiving, scientific or historical research, or statistical purposes, or
Establishment, exercise, or defense of legal claims.

d. Right to Request Restriction of Processing of Personal Data In some cases, in addition to the right to erasure, you can use the right to restrict the processing of personal data. This right allows you, in certain cases, to request that your personal data be marked and not be subject to any further processing operations – in this case, not forever (as in the case of the right to erasure), but for a limited period. We must restrict the processing of personal data when:

You dispute the accuracy of the personal data, until we agree on what data are correct,
We process your personal data without sufficient legal basis (e.g., beyond what we must process),
We no longer need your personal data for the above-mentioned processing purposes, but you require them for establishing, exercising, or defending your legal claims, or
You object to processing. The right to object is described in more detail below in the chapter “Right to Object to Processing”. For the period during which we investigate whether your objection is justified, we are obliged to restrict the processing of your personal data.

e. Right to Object to Processing of Personal Data You do not have the right to object to the processing of your personal data, as their processing is carried out based on a legal requirement. However, an objection can be made in case of a potential exceedance of the purpose introduced by the legal requirement.

f. Right to Data Portability You have the right to obtain all your personal data that you have provided to us and that we process based on the performance of a contract. We will provide your personal data in a structured, commonly used, and machine-readable format. To facilitate easy transfer of your data at your request, it can only include data we process automatically in our electronic databases. Therefore, we cannot transfer all data we keep in paper form in this manner.

g. Right to Object to Processing You have the right to object to the processing of personal data processed based on our legitimate interest. We will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.

h. How Can You Exercise Your Rights? For all matters related to the processing of your personal data, whether it is a question, exercising a right, filing a complaint, or anything else, you can contact our Data Protection Officer. Current contact information is available on our website https://astransform.net/.

The Data Protection Officer can be contacted by:

Email at: as@astransform.net
In writing at: Lipnická 1448, Praha 14, 198 00

We will process your request without undue delay, but no later than within one month. In exceptional cases, especially due to the complexity of your request, we are entitled to extend this period by an additional two months. We will inform you about any such extension and its justification.

If the data subject exercises any of the rights of the data subject according to legal regulations governing the protection of personal data and the identity of the applicant cannot be verified from the request or the controller has legitimate doubts regarding the identity of the person submitting the request, the controller reserves the right to request the provision of additional information necessary to confirm the identity of the person exercising this request.

i. Right to Lodge a Complaint with the Supervisory Authority Exercising the rights in the above-mentioned manner does not affect your right to lodge a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Praha 7. You can exercise this right especially if you believe that we process your personal data unlawfully or in violation of generally binding legal regulations.