Privacy policy

I. Who controls the personal data?

According to Art. 4 Par. 7) GDPR a ‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

In case of Flera company such ‘Controller’ means Flera s.r.o., with its registered office at Za papírnou 239/3, Praha 7 Holešovice 170 00, IČ: 28956737, registered at the Municipal Court in Prague, section C file number 155737 (hereinafter as Controller or Flera).

II. What data do we process?

The Controller processes the personal data for the purposes based on the below stated titles.

To create projects for the Client the Controller processes the following data:

Name and surname
Address
E-mail address
Telephone number
Project information

For marketing purposes, the Controller processes the following data:

Name and surname
Address
E-mail address
Telephone number

In relation to Flera company employees:

Name and surname
Address
E-mail address
Telephone number

In relation to subjects that cooperate with Flera company:

Name and surname
Address
E-mail address
Telephone number

III. How do we acquire personal data?

Our company processes data acquired exclusively from the data subjects. We do not make use of any public domains.

IV. What is the purpose of information processing and what legal title is that based on?

In order to comply with legal provisions of personal data processing and to be in accordance with the GDPR requirements, any such processing may only be performed with respect to the following legal titles:

Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. That applies to Clients whom Flera company provides with projects, as well as to Flera company employees and other subjects that cooperate with Flera company,
Processing is necessary for compliance with a legal obligation to which the Controller is subject. That applies, in particular, to Flera company employees and to the legal obligations of the Controller as the employer towards the employees. Such purposes include e.g., the salary administration,
Processing is performed on a legitimate basis stipulated by the legal regulations of a given state,
The data subject has given consent to the processing of his or her personal data for one or more specific purposes. Such consent is, however, only required in cases where the personal data processing is not based on any of the aforementioned legal titles.

V. Who is the personal data recipient?

The personal data recipient is the Controller in particular, and the project engineers who prepare the projects for Clients. These persons have access to such personal data through the company, security password protected server. All persons concerned are bound by the duty of confidentiality.

We do not transfer your personal data to any other third parties, neither in third countries, nor to international organizations.

VI. How do we keep and secure personal data?

Personal data is saved on a company server and other memory devices. Such stored data is only accessible by the Controller and the project engineers solely for the project purposes. In addition to the internet security, the server is protected by a password that is required for any access to the server. Further memory devices are physically protected. The data is regularly backed up in order to prevent any complications in the event of data loss.

VII. How long is the data kept?

The data being processed on the basis of fulfilment of contracts is kept for the period strictly necessary for the fulfilment of obligations that arise from the contracts. The data being processed on the basis of legal obligations is kept for the period strictly necessary for the fulfilment of such legal obligations.

VIII. What are the data subject’s rights?

In accordance with Chapter III of GDPR, the data subject has the right to:

withdraw consent on which the processing is based,
provision of information concerning processing of your personal data in compliance with Articles 13 and 14GDPR,
access the personal data being processed, rectification and completion of such personal data,
erasure of such data in compliance with Article 17 GDPR or restriction of processing,
have the personal data transmitted directly from one Controller to another,
not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her,
address the supervisory authority for personal data protection in case of contradiction with the aforementioned or with the principles of personal data processing.

In case of exercise of any of the aforementioned rights, please contact the Controller by way of a written statement sent to the following address: Za papírnou 239/3, Praha 7 Holešovice 170 00 or e-mail to atelier@flera.cz.

Flera s.r.o.