At unitedpassion.cz, we wish to create the best possible experience by ensuring that you enjoy our service at all times. In order to achieve such results, we need to deliver personalized service particularly for you. Therefore, a great importance for us in achieving this task is keeping your privacy and any personal data secure.
We kindly ask you to help us make our service a great experience for you, and read this Privacy Policy carefully. Privacy Policy will be regularly updated for security reasons.
Over time, we may offer new or develop additional services which could cause a change in the collection or processing of your data. In this case, we will provide you with additional information along with other terms or policies.
Introductory provisions
The operator and owner is United Passion s.r.o., with an Id. No. 07177941, Tax Id. No. CZ07177941, and officially registered office located in Czech Republic, postcode 140 00, Prague 4, Pujmanové 1753/10a. (hereinafter the ‘Company’).
“Website” is www.unitedpassion.cz operated and owned by United Passion s.r.o.
“Customer” is a party that has contracted with United Passion to obtain Services that are an output of United Passion’s ordinary activities in exchange for consideration.
“Performance obligation” means a promise in a Contract with a Customer to transfer to the customer either: a Service (or a bundle of Services) that is distinct; or a series of distinct Services that are substantially the same and that have the same pattern of transfer to the Customer.
Customer’s personal data are processed by United Passion s.r.o. To ensure maximum protection, the personal data is governed by legal regulations such as: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, together with appealing to the Directive 95/46/EC (hereinafter ‘General Data Protection Regulation’.
This Privacy Policy is public with the aim of providing the Customer with information about the extent, purpose and duration of the personal data that are processed in accordance with Article 13 of the General Data Protection Regulation.
The Company is the Controller of the personal data of Customer. Customer can contact Company either:
- In writing sent to address of Company’s registered office in Czech Republic, Prague 4, Pujmanové 1753/10a, 140 00 or
- By contact form on the Website
Use of Services
This may include the type of Services the Customer chose in the individual contracts, the data he usually accesses, or the cooperation with the Company to improve our services. In addition, it can include all of the technical data, meaning the URL information, cookie data, IP address, language, etc. The scope of processed data is incorporated in the specific contract.
We may also use randomly accumulated data in order to test out our IT systems, improving our Services as well as developing new, improved features of the services.
Additional Voluntary data
The Company may collect the Customer’s personal information or data if the Customer submit it to the Company in other contexts.
Third Parties
The Company don’t abuse or sell Customers’ email addresses to any third parties.
The Company may use the Customer’s data in an anonymous format in activities such as statistical analysis or business related studies. However, the Company will share his personal data if it is necessary due to a legal obligation or to respond to a valid legal process (as for instance a court order, subpoena or search warrant). This may also be the case if it concerns national security, criminal investigation, law enforcement, or protecting the safety of any person. Lastly, the Customer’s data may also be shared if the Company sells or negotiates to sell United Passion s.r.o. to a potential buyer. Even in this case, the confidentiality of all our clients will remain ensured during the transfer of personal data to the buyer, resulting in a different Privacy Policy.
Legal basis and purpose of personal data processing
The Customers’personal data is processed on the following legal bases and for the following purposes:
- Performance obligation
- Compliance with legal obligations
Personal Data Retention Period
Personal data will be processed for the duration of the Service Contract and for one year after its termination.
In case of the use of paid Services, the personal data of the Customer will be stored in order to fulfill the statutory obligation to archive accounting documents pursuant to Act No. 563/1991 Coll., as amended, for a period of 10 years starting from the year following the year, in which the invoice for the Service was issued.
More information about processing personal data
Personal data is processed automatically in electronic form.
In order to provide Services worldwide, we may share personal data with our group companies, but only for the purposes described in this Privacy Policy. This means that we may transfer the personal data of the Customer to companies in countries within and outside the European Union and the European Economic Area. However, we will not do so without ensuring adequate safeguards for the protection of the personal data, such as the existence of the Commission’s “adequacy decision” or the inclusion of the so called “standard contractual clauses” (as approved by the European Commission).
Transfer to other countries
If personal data is collected inside the European Union and needs to be transferred or processed by third parties located in a country outside of European Union, then the Company must ensure that the transfer of the personal data is carried out in accordance to applicable privacy laws such as the Standard Contractual Clauses approved by the European Union Commission.
Awareness
United Passion secures some of your data with anonymity, encryption and policies to protect our users’ data from people with unauthorized access.
Right to the protection of personal data
The Customer has the right to require the Company to provide information about the processing of his personal data.
The Customer has the right to require the Company to correct or update his inaccurate or incomplete personal data without undue delay.
The Customer has the right to require the Company to delete his personal data in the cases stipulated by the General Data Protection Regulation.
The Customer has the right to require the Company to restrict the processing of his personal data in the cases stipulated by the General Data Protection Regulation.
The Customer may object against the sending of commercial communications relating to the Services provided. In this case, the Company will not send a commercial communication to the Customer.
If the Customer believes that the Company processes his personal data in violation of personal data protection and / or applicable law, especially if personal data are inaccurate in regard to the purpose of the processing, the Customer may contact the Company by contact form on the Website.
If the Customer believes that there has been a breach of law in connection with the protection of his personal data, the Customer has also the right to file a complaint with a supervisory authority. The Supervisory Authority in the Czech Republic is the Office for Personal Data Protection.
In case of repeated and unjustified requests to provide a physical copy of the processed personal data, the Company may charge an appropriate administrative fee.
Final provisions
All legal relationships arising in connection with the processing of personal data are governed by the laws of the Czech Republic, regardless of where they were accessed from. The competent Czech courts shall have jurisdiction to resolve any disputes arising in connection with the protection of your personal data between the Customer and the Company.
GDPR Compliance Principles
Our data processing activities adhere to the following GDPR principles:
– We ensure all processing activities are explicitly described and agreed upon.
– Your data is processed only for specified purposes.
– We only collect data necessary for the specified purposes.
Consent for Data Processing
We obtain explicit consent for processing your personal data where required. You can withdraw this consent at any time through the methods described above.
Data Processing Agreements
If we process data on behalf of other parties or vice versa, a Data Processing Agreement compliant with GDPR Article 28(3) will be established.
Retention Periods
Personal data will be retained only as long as necessary for the specified purposes. For legal obligations, data may be retained as per statutory requirements.
Your Rights
You have the right to access, correct, erase, and restrict the processing of your personal data. Contact us using the methods provided to exercise these rights.
Third-Party Transfers
Transfers of data to third parties, including outside the EU, will only occur under adequate safeguards, such as EU Standard Contractual Clauses.
Complaints
You may lodge complaints with the Czech Office for Personal Data Protection if you believe your rights are violated.