RESERVATIONS

GDPRHow we care for your data

Le Mimosa s.r.o., Fügnerovo nábřeží 1797, 760 01, Zlín, IČO 21221626 is the data controller and processes personal data primarily for the following purposes:

  1. maintaining a record of customer addresses,
  2. maintaining a record of job applicants,
  3. ensuring contractual relationships,
  4. maintaining accounting and personnel records,
  5. sending commercial communications and newsletters to the email address provided in the contact form

Information about personal data processing:

  1. The legal basis for processing personal data is Article 6(1)(a) of the GDPR, based on your given consent, Article 6(1)(b) of the GDPR, meaning processing is necessary for the performance of a contract, and Article 6(1)(c) of the GDPR, meaning processing is necessary for compliance with a legal obligation.
  2. Your personal data will be accessible to the data controller, its employees, and possibly also third parties – processors – who provide appropriate safeguards and whose processing complies with all GDPR requirements and who will adequately protect your rights and personal data. These parties include in particular legal and marketing advisors and IT service providers. However, these parties will have access to this data only for as long as necessary and to the extent necessary, if required for the provision of services and compliance with legal requirements.
  3. Personal data processing does not involve automated processing on the basis of which actions or decisions would be made that would affect the rights or legitimate interests of individuals.
  4. Personal data is processed for as long as necessary, which is individual depending on the specific purpose of processing. After this period expires, personal data is destroyed or further retained for the period specified in the current Records Management and Disposal Schedule, issued in accordance with Act No. 499/2004 Coll., on archival services and records management.
  5. You have the right to:
    1. request access to your personal data,
    2. withdraw your consent at any time (withdrawal of consent does not affect the lawfulness of processing before its withdrawal),
    3. request correction of inaccurate personal data,
    4. request deletion of personal data or restriction of processing,
    5. object to unlawful processing,
    6. request portability of personal data that you have provided.
    7. You may at any time lodge a complaint concerning the processing of your personal data or the failure of the data controller to fulfil its obligations under the GDPR with the supervisory authority. The supervisory authority in the Czech Republic is the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
  6. Your requests will always be properly reviewed and resolved in accordance with the relevant provisions of the General Data Protection Regulation (GDPR). Your request will be processed within 30 days of receipt, if time permits.
  7. Exercise your rights against the organisation through the data protection officer/representative.
  8. Data protection officer/representative: info@lemimosa.cz.

Personal data is processed for as long as necessary, which is individual depending on the specific purpose of processing. After this period expires, personal data is destroyed or further retained for the period specified in the current Records Management and Disposal Schedule, issued in accordance with Act No. 499/2004 Coll., on archival services and records management.

The legal basis for processing personal data is Article 6(1)(a) of the GDPR, based on your given consent, Article 6(1)(b) of the GDPR, meaning processing is necessary for the performance of a contract, and Article 6(1)(c) of the GDPR, meaning processing is necessary for compliance with a legal obligation.

Your personal data will be accessible to the data controller, its employees, and possibly also third parties – processors – who provide appropriate safeguards and whose processing complies with all GDPR requirements and who will adequately protect your rights and personal data. These parties include in particular legal and marketing advisors and IT service providers. However, these parties will have access to this data only for as long as necessary and to the extent necessary, if required for the provision of services and compliance with legal requirements.