Privacy Notice for Contact Persons under Art. 14

of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC („GDPR“)

In view of the fact, that you or a third party provided us (for the purposes of this Privacy Notice: “controller”, “we” shall mean the entity specified in the Agreement (100 Towers Holding a.s.), of which you are in the position of the contact person or signatory) with your personal data, we are obliged to inform you, as a data subject, that while processing your personal data we are, in fact, the controller under the GDPR and all applicable laws and therefore we provide you with further information regarding such processing.

What lawful reasons do we have for processing your personal data?

We process your personal data under provision of Art. 6 (1) (f) GDPR – our legal basis is a legitimate interest.

What is our legitimate interest?

We process your personal data to ensure that our contractual obligations arising from the contract with a third party, of which you are in the position of the contact person (technical, legal, other contact) or signatory on behalf of the contractual party, are effectively fulfilled.

Why do we need your personal data?

We aspire to be transparent when we collect and use your personal data and tell you why we need it. Since we conducted a contract with a third party, of which you are in position of the contact person or signatory, we need to process your personal data to ensure effective, flawless and clear communication jointly with fulfilling our obligation towards such third party.

What categories of personal data do we collect?

To fulfill our purpose the best way we can, we need to collect following personal data: Name, Surname, E-mail, position, Telephone Number.

How long do we store your personal data?

As soon as we no longer need your personal data for the processing purposes for which the personal data were collected, it will delete them unless the statute-barred period applies. Certain details and correspondence may be retained until the time limit for claims (contractual and statutory liability), in respect of the pre-contractual or contractual relationship has expired or in order to comply with regulatory requirements regarding the retention of such data (in such cases the legal basis shall be an applicable was imposing statutory duty to process a personal data).

Do we share your personal data with third parties?

We may share your personal data with trusted third parties to help us fulfill our purpose. These recipients are contractually bound to safeguard your personal data that we entrust to them. We may engage with several or all the following categories of recipients:

  • Business partners (such as cloud service providers, accountants, tax, legal advisers, subcontractors, affiliates, and subsidiaries)
  • In the event of a statutory duty or an effective administrative or judicial decision, judicial, administrative or police authorities may be the recipients of such data.
  • Transmission of personal data to third countries or third parties:
  • Your personal data are processed within the territory of the country of the registered seat of the 100 Towers Holding a.s. and within the territory of the European Union. Your personal data can be processed by a country outside of European Union if this third country has been confirmed by the European Commission as a country with adequate level of data protection or if other appropriate data protection safeguards exist (for example, binding corporate privacy rules or EU standard data protection clauses).

Is there any automated decisions-making?

No.

What are your rights?

Under GDPR you have the following rights to process your personal information:

  • Access to personal data we process about you;
  • Rectification of incorrect or inaccurate personal data and add incomplete personal data;
  • Restriction, i.e. blocking of processing of your personal data;
  • The deletion of personal data in case the purpose absence or unauthorized data processing;
  • Submission of an objection to the processing of personal data if you believe that our data processing is not justified; (for example, in cases of legitimate interest, in such case we have to perform a balance analysis and inform you if our legitimate interest overrides your right to privacy);
  • Right to portability of the personal data (if applicable);
  • Be excluded from automated decision making.

How can you exercise your rights?

We strive to protect your privacy as much as possible and therefore We process your personal data in compliance with GDPR and all other relevant laws. However, if you disagree with the way we handle your personal information, you can file a complaint with our data protection officer to protect your rights.

Who can you contact for privacy questions or concerns?

If you have any questions or comments or you want to report your concerns or enjoy your rights, please contact us. E-mail: contact@100towers.cz or in writing to 100 Towers Holding a.s., Moulíkova 3286/1b, 150 00 Praha 5 – Smíchov

Or you can file a formal complaint with the local data protection supervisory authority; further information about the different EU Supervisory Authorities and how to contact them is available at https://edpb.europa.eu/about-edpb/board/members_en