Privacy Policy

Dear clients,

we would like to inform you about how we handle the personal data that we process in the course of our activities. We declare that we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council, hereinafter referred to as the “GDPR”.

WHO PROCESSES PERSONAL DATA?

Pursuant to Article 4(7) GDPR, the controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

QSB, s.r.o., with its registered office at Křižíkova 703/97d, Praha 8 – Karlín 186 00, Company ID (IČO): 24853950

(hereinafter referred to as the “Controller”).

WHAT DATA DO WE PROCESS?

The Controller processes personal data on the basis of the legal grounds set out below:

Provision of services and cooperation with the Controller’s clients:

  • Name and surname
  • Address
  • Email address
  • Telephone number
  • Company ID (IČO)
  • Project information

In relation to employees:

  • Name and surname
  • Address
  • Email address
  • Telephone number

For marketing purposes:

  • Name and surname
  • Address
  • Email address
  • Telephone number

HOW DO WE OBTAIN PERSONAL DATA?

We obtain personal data on the basis of an enquiry from a client and the establishment of cooperation. We do not actively seek out personal data. To meet the requirements of the GDPR, personal data are obtained on the basis of one of the following legal grounds:

  • the processing of personal data is necessary for the performance of a contract concluded between the Controller and the client. This applies to all employees of QSB, s.r.o. and all subcontractors
  • the processing is necessary for compliance with a legal obligation of the Controller. This applies in particular to the employees of QSB, s.r.o. and the legal obligations that QSB, s.r.o. has towards them.
  • These purposes include, but are not limited to, payroll administration and internal communication
  • the processing is always carried out only where necessary and in a legitimate manner laid down by the law of the state
  • the processing is based on the explicit consent of the client or data subject. Direct consent is only required in cases not covered by the legal grounds mentioned above.

RECIPIENTS OF PERSONAL DATA

The recipients of personal data are the Controller’s employees and its subcontractors. They have access to a secure server containing client data. Subcontractors are contractually bound to confidentiality. The server is protected by encryption and its access address is not public; it is known only to the Controller and its subcontractors. Access itself is password-protected. All data are backed up regularly.

All physical materials and other storage media containing personal data are kept in a locked room.

No personal data are transferred to third parties or other organisations.

RIGHTS OF DATA SUBJECTS

In accordance with Chapter III of the GDPR, data subjects have the following rights:

  • where personal data are processed on the basis of consent, to withdraw such consent at any time,
  • to be provided with information about the processing of your personal data pursuant to Articles 13 and 14 GDPR,
  • to access the personal data being processed and to have such data rectified and completed,
  • to have such data erased pursuant to Article 17 GDPR or to restrict their processing,
  • to have your personal data transferred to another controller,
  • to object to the processing of personal data, including profiling and decision-making based on automated processing,
  • to lodge a complaint with a supervisory authority in the event of a breach of the above or of the principles of personal data processing.

If you wish to exercise any of the above rights, please contact the Controller in writing at Křižíkova 703/97d, Praha 8 – Karlín 186 00, or by email at info@qs-b.cz