Protection of personal data

BDP-WAKESTONE s.r.o., Laglerové 1075/4, 161 00 Prague 6, is the controller of personal data and processes personal data mainly for the following purposes:

1. keeping records of customer addresses,
2. keeping records of job applicants,
3. maintaining contractual relations,
4. keeping accounting and personnel records,

Information on the processing of personal data:

1. The legal basis for the processing of personal data is under Article 6(1)(a) GDPR, on the basis of the consent given, under Article 6(1)(b) GDPR, i.e. the processing is necessary for the performance of a contract, under Article 6(1)(c) GDPR, i.e. the processing is necessary for compliance with a legal obligation.
2. Your personal data will be accessed by the controller, its employees and, where applicable, by third party processors who provide appropriate safeguards and whose processing meets all the requirements of the GDPR and who will sufficiently protect your rights and your personal data. These parties are in particular legal and marketing consultants and IT service providers. However, these persons will only have access to this data for as long as necessary and to the extent necessary to provide the service and comply with legal requirements.
3. The processing of personal data does not involve automated processing on the basis of which acts or decisions are made that would interfere with the rights or legitimate interests of citizens.
4. Personal data are processed for the necessary period of time, which is individual depending on the individual purposes of the processing. After the expiry of this period, the personal data are destroyed or are further stored for the period specified in the applicable Filing and Shredding Plan issued in accordance with Act No 499/2004 Coll., on archiving and filing services.
5. You have the right to:

1. Request access to personal data,
the data subject has the right to withdraw his/her consent at any time.
2. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal,
3. to request the rectification of inaccurate personal data,
4. request the erasure of personal data or request a restriction of processing,
5. object to unlawful processing of personal data,
6. request the portability of the personal data you have provided,
7. You may at any time lodge a complaint regarding the processing of your personal data or the controller's failure to comply with its obligations under the GDPR with a supervisory authority. The supervisory authority in the Czech Republic is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, www.uoou.cz.

6. Your request will always be properly assessed and dealt with in accordance with the relevant provisions of the General Data Protection Regulation (GDPR). We will process your request, if time permits, within 30 days of receipt.

7. You should exercise your rights against the organisation by contacting the Data Protection Officer/Data Protection Officer.
8. Data Protection Officer/Data Protection Officer: Daniel Gregůrek, info@dgstudio.cz