Information about

Processing of personal data

Information about

Processing of personal data

INFORMATION ON THE PROCESSING OF PERSONAL DATA
according to Article 13 of the Regulation of the European Parliament and of the Council (EU) No. 2016/679
of April 27, 2016, General Regulation on the Protection of Personal Data (hereinafter referred to as "GDPR")
In accordance with the principle of transparency, we hereby inform you as our job applicants, employees, contractors,
visitors, and other persons about the processing of your personal data and your rights.


  1. Information about the data controller
    KASPER TS S.r.o.
    with registered office at Ječná 550, Poříčí, 541 03 Trutnov, IC: 259 22 891, (hereinafter referred to as "Controller")


  2. Contact details for personal data protection
    More information about personal data protection under GDPR can be obtained at the phone number: +420 736771597
    or via email: buldoq@seznam.cz.


  3. Purpose of processing and legal basis, categories of personal data
    The purpose of processing personal data is to fulfill the legal obligations of the Controller (employer) arising
    from the employment relationship with the employee and generally binding legal regulations towards the relevant authorities
    and bodies. For suppliers and customers, the purpose of processing is the proper fulfillment of the contract, including
    requests and orders. We process personal data both in written and electronic form, to an appropriate
    extent.


    We process the following data about employees:
    Based on the fulfillment of the legal obligation of the Controller, we process your identification and contact details necessary for your
    clear and unmistakable identification (title, first name, surname, personal identification number, date of birth, permanent
    residence address, or contact address), and further data enabling contact with you (phone number, email address),
    data related to the provision of employer benefits, data about your bank connection, health
    insurance, and social security, data of a special category concerning your health status (e.g., health examinations,
    work incapacity, vaccinations, testing).


    On the basis of our legitimate interest in the case of using a service vehicle with GPS, then your coordinates for the purpose
    of ensuring the logbook, protecting vehicles against theft, preventing illegal rides, etc. Based on your consent
    in such a case for approved private trips in the service vehicle.


    If no other legal reason is fulfilled, we process personal data based on the free consent of the data subject
    for one or more specific purposes (e.g., consent in accordance with § 84 and 85 of the Civil Code). Photographs,
    video recordings, and expressions of a personal nature intended for publication, e.g., on the website and on social networks
    of the Controller, we process only based on express consent.


  4. Description of categories of recipients
    The above-mentioned personal data of data subjects may be provided to public authorities and other entities
    in connection with the fulfillment of rights and obligations imposed on the Controller by law, maintenance providers of the Controller's
    information system, as well as private law entities in the context of ensuring insurance, catering, and other needs.
    The processing of personal data is performed by the Controller. However, the processing of personal data may also be conducted
    by processors with whom the Controller has entered into a personal data processing agreement in accordance with Article 28 of GDPR and who
    provide sufficient guarantees of implementing appropriate technical and organizational measures so that the processing
    meets GDPR requirements, including the condition of mandatory confidentiality of all its concerned employees.
    Personal data will not be provided to recipients from third countries or international organizations.


  5. Information on planned deadlines for the deletion of individual categories of personal data
    Personal data will be processed for the duration of the employment relationship, and upon its termination, it will be
    handled according to applicable legal regulations, especially Act No. 499/2004 Coll. (Act on Archives and Filing Services
    and on Amendments to Certain Acts) and GDPR. If the legal basis for processing personal data is the consent of the data subject,
    personal data will be deleted without undue delay after the purpose for which the data was processed has been fulfilled,
    or without undue delay after the consent has been revoked by the data subject.


  6. Information about rights under GDPR


    This includes your following rights:

Right of access = the right to request the Controller at any time to confirm whether personal data relating to you,
is or is not being processed, and if so, the right to access your personal data
and to the information mentioned in Article 15 of GDPR;


• Right to rectification = the right to request the Controller at any time to rectify personal data;
Right to erasure ("right to be forgotten") = the right for the Controller to erase personal data,
especially in cases where such data are no longer necessary for the purposes for which they were collected or otherwise
processed, or when the consent to their processing is revoked; unless prevented by a legal reason.


• Right to restrict processing = the right to request the Controller at any time to restrict the processing of personal data,
if the accuracy or lawfulness of its processing is disputed;


• Right to data portability = the right to obtain data in a structured, commonly used, and machine-readable
format, where processing is based on consent or a contract and processing is carried out
automatically.


The right to object = the right to object at any time to the Controller against the processing of personal data in the case,
that the processing is conducted on the basis of legitimate interest, for reasons relating to your particular situation;
The right not to be subject to automated individual decision-making = the right not to be subject to
any decision based solely on automated processing, including profiling,
except in cases of machine evaluation of the results of entrance examinations, tests, etc.;


• Right to withdraw consent = the right to withdraw consent to the processing of personal data at any time, if consent
is the legal basis for its processing;


The right to lodge a complaint = the right to lodge a complaint with the Office for Personal Data Protection at any time, www.uoou.cz.


Updated on June 12, 2025