GDPR

Personal data processing in MOSTRO a.s.

In April 2019, the Act No. 110/2019 Coll. on the processing of personal data, which incorporates Regulation 2015/679 of the European Parliament and the European Council, came into force.
The exclusive administrator of personal data is MOSTRO a.s.

Personal data processing principles

Your personal data are processed for several reasons. We use technical and organizational security systems and protect your data against accidental or unlawful damage, loss, change, unauthorized disclosure, or disclosure to third parties.

The company processes data of individuals while providing services, selling products and during visits of and contacts with existing and potential customers.

An internal regulation specifies for what purposes and for how long the company shall process personal data in accordance with the applicable legislation, to whom and for what reason data may be transferred, as well as information about the rights of natural persons related to the processing of personal data.

Categories of personal data

  1. Basic and important data necessary to conclude and fulfil contracts
  2. Contact information
  3. Information on the purchased product or provided service
  4. Other data created in connection with the provision of services
  5. Data ensuing from regular communication between the company and customer
  6. Camera recordings
  7. Data are processed based on consent

Personal data processing method and storage

MOSTRO a.s. processes personal data manually, or automatically. The company maintains record of all such activities which require processing of personal data.
Providing consent with the use of personal data for commercial purposes is voluntary and any customer may recall this consent at any time. The consent shall remain valid while the products and services provided by MOSTRO a.s. are used and then for the next 4 years following the delivery of the service or product, unless the customer removes his consent.

Therefore, personal data are processed while the properly concluded contract lasts. After this period has expired, the only data which shall be stored are subject to the respective legislature, such as the Act on archives and records.

Other rights

Each identified natural person who demonstrates their identity shall have the following rights:

  1. based on article 15 of GDPR, the right to access personal data,
  2. based on article 16 of GDPR, the right to corrections of inaccurate personal data,
  3. based on article 17 of GDPR, the right to deletion of personal data,
  4. based on article 18 of GDPR, the right to limit processing of personal data,
  5. based on article 19 of GDPR the right to receive notifications on corrections, deletions or restrictions on personal data processing,
  6. based on article 20 of GDPR, the company is not allowed to transfer personal data,
  7. based on article 21 of GDPR, the right to remove the consent with the processing of personal data,
  8. In case of any inquiries, please do not hesitate to contact the Office for Personal Data Protection (www.uoou.cz).

Authorized agent

As of 25 May 2018, direct contact with an authorized personnel handling personal data protection is available. Should you have any questions regarding the processing of your personal data, please contact us with a request for explanation through the authorized agent Mrs. Kopecká Navrátilová, and her email address at r.navratilova@mostro.cz.