Principles for the Processing and Protection of Personal Data

GDPR

These principles contain information on the processing of personal data that you provide either directly to the company Investice Strategie Management, a.s.
or through the website www.ismas.cz.

Information on data processing is provided within the following scope:

- who processes the data,
- how the data is processed,
- for what purpose,
- for how long,
- which types of data are processed for individual categories of natural persons.

These principles also specify what rights you have in relation to the processing of personal data and where you may exercise them.

Which regulations govern the processing of your data?

Your data is processed in accordance with applicable European and Czech legal regulations. In particular, this includes Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – the General Data Protection Regulation (GDPR), as well as Act No. 101/2000 Coll., on the Protection of Personal Data.

How do we process your data?

We process personal data both electronically and in paper form. We use advanced electronic information systems and tools. Processing is partially automated. We have implemented appropriate organizational and technical measures to ensure an adequate level of security of your data. These measures are regularly tested and their effectiveness evaluated. Any processors of your personal data (external entities) are bound by confidentiality obligations and are required to secure data processing to the same extent as we are.


INFORMATION ON THE PROCESSING OF PERSONAL DATA (GDPR ARTICLES 13 AND 14)

Who processes your data?

The controller of your personal data is Investice Strategie Management, a.s. The company is registered with the Regional Court in Brno, Section B, File No. 3158. The operator of the website www.ismas.cz is Investice Strategie Management, a.s.

The processors of your personal data include an external IT administrator, an external provider of accounting and tax services, and an external web hosting provider. All processors are established in the Czech Republic and process the data there. More detailed information will be provided to authorized persons upon request by the employee of Investice Strategie Management, a.s. responsible for personal data protection (see contact details below).

Our web technologies use the Google Analytics service. In this case, personal data is processed by Google LLC, Mountain View, USA.

Which data about you do we process? How, why, and for how long?

If you are our customer

(customer representative or consumer)
The purpose of processing is the management of customer relationships as well as standard order and contractual agendas. We process data to the following maximum extent: company name, first and last name, position, telephone number, mobile phone number, and email address. The data may be stored for a period of two years after the most recent interaction of the customer representative with Investice Strategie Management, a.s. The legal basis is processing necessary for the performance of or preparation for a contract.

If you are our supplier

(supplier representative)
The purpose of processing is the management of supplier relationships as well as standard order and contractual agendas. We process data to the following maximum extent: company name, first and last name, position, telephone number, mobile phone number, and email address. The data may be stored for a period of two years after the most recent interaction of the supplier representative with Investice Strategie Management, a.s. The legal basis is processing necessary for the performance of or preparation for a contract.

If you have sent us an email

(supplier representative, customer representative, cooperation applicant, job applicant)
The purpose of processing is internal and external communication. We process the data you have provided for a period reflecting both your reasonable expectations and ours, technically 12 months after the most recent interaction. The legal basis is our legitimate interest, consisting primarily in proper management of the communication system, electronic data, protection of industrial property, and the development and protection of our industrial activities.

We also comply with internal Rules for Internet Security and Ethics.

If you are a visitor to the website www.ismas.cz

(customer, supplier, information seeker, cooperation applicant, job applicant)
We monitor traffic on our website and evaluate it statistically. For this purpose, we use Google Analytics, which stores IP addresses from which users access the website. We also use cookies, which allow identification of computers but do not refer to any specific individual.

More information about Google Analytics cookies can be found at https://policies.google.com/technologies/cookies?hl=cs. You may block or delete cookies at any time through your browser settings or by using a browser add-on available at https://tools.google.com/dlpage/gaoptout. More information on personal data protection can be found at https://support.google.com/analytics/topic/2919631?hl=cs.
If you use the contact form on our website, we process the data you enter in the relevant form. The data is processed for a period of 6 to 12 months. The legal basis is our legitimate interest, consisting primarily in proper management of the presentation system, communication system, electronic data, and in the development and protection of our industrial activities.

If you are our employee

The purpose of processing is the management of standard employment agenda, settlements with public authorities and insurance companies, professional development of employees, provision of employee benefits, etc. The data is processed for a period of 6 to 12 months after termination of employment, unless legal regulations require a longer retention period. The legal basis is the fulfillment of legal obligations and our legitimate interest in building a qualified and stable workforce and in presenting and building a good reputation of the company. More detailed information on categories of personal data and other processors is contained in the internal directive on personal data processing and protection, available for inspection with the employee of Investice Strategie Management, a.s. responsible for personal data protection.

If you are a user of our computer network

(employee, contractor)
The purpose of processing is logging network access, access to the information system, and internet access. We process data to the following maximum extent: first name, last name, username (login), password, user group (department, security group), position, department, office (location), office phone number, mobile phone number, fax number, street, city, region, postal code, country or area. The data may be stored for the duration of the user account. The legal basis is our legitimate interest, consisting primarily in proper management of electronic data, protection of industrial property, and development and protection of our industrial activities.

What rights do you have in connection with data processing?

You may request information about the processing of your personal data. You have the right to request access to the data we process about you. If you believe or discover that we process your personal data in violation of the protection of your privacy or personal life, or contrary to the law, you have the right to object to the processing, request an explanation, or request correction. You may also request restriction of processing or deletion of your data. You may withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. You also have the right to data portability and the right to lodge a complaint with a supervisory authority. To exercise these rights, please contact us using the contact details provided in this document.

To whom do we provide your data?

We do not transfer your data to any third parties. Data is transferred only when required by law, particularly to public authorities.

What else is important to know about the processing of your personal data?

Your data is not subject to automated decision-making or profiling.

Within the EU, uniform protection of personal data is guaranteed in each Member State as stipulated by the GDPR.

How can you contact us?

If you have any questions regarding this privacy information or wish to exercise any of the rights listed above, please contact the employee of Investice Strategie Management, a.s. responsible for personal data protection at the email address [email protected] or by phone at +420 725 343 434.