Source: https://www.arbitas.com/privacy/
Timestamp: 2019-04-19 17:23:57+00:00

Document:
Thank you for your interest in the website(s) of Arbitas s.r.o. (hereinafter referred to as the "Company"). We take the matter of data protection and confidentiality extremely seriously and comply with the applicable national and European data protection regulations, especially the General Data Protection Regulation (GDPR).
For this reason, with this policy we would like to inform you about our data protection measures and tell you about which personal data we store where applicable and how we use this data.
2. Which data is recorded and how is it used?
2.1 Data collected by this website.
This data is collected, processed and used for the purpose of enabling the use of the website (establishing a connection), system security and the technical administration of the network infrastructure. The data is not compared with other databases, nor is the data or extracts of it forwarded to third parties. The legal basis for the processing is Art. 6 Par. 1 (b) GDPR.
The data that is collected within the voluntary entries under "Contact" is used and processed exclusively for the purpose of processing the request and to perform any services that you may have requested via it.
2.2 Use of Google Analytics.
The legal basis of the data processing is Art. 6 Par. 1 (f) GDPR, whereby the entitlement of the company results from the company’s interest in analyzing the website data for the purpose of optimizing the pages on the one hand, and on the other that a person concerned at the time when the personal data was collected and in view of the circumstances in which it occurred (in particular the measures mentioned above) can reasonably expect that the data may possibly be processed for this purpose.
4.Use of social media plug-ins.
We currently use the following social media plug-ins: Facebook, LinkedIn.
In doing so, we use the two-click solution. In other words, when you visit our site, initially no personal data is forwarded to the provider of the plug-ins. You can identify the provider of the plug-in from the mark on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in by using the button. The plug-in provider receives the information that you have called up the corresponding website of our online offering only when you click on the selected field, thereby activating it. The data specified in figure 2.1 of this policy is also transmitted. In the case of Facebook, according to information from the respective providers in Germany, the IP address is immediately anonymized after it is collected.
By activating the plug-in, personal data is transmitted by you to the respective plug-in provider where it is stored (in the USA in the case of US providers). Since the plug-in provider collects data via cookies in particular, we recommend that before clicking on the grayed out box or the logo for the plug-in provider, you delete all cookies by using your browser’s security settings.
We do not have any influence over the data that is collected and the data processing operations, nor are we aware of the full scope of the data collection, the purposes of the processing, or the storage periods. Nor do we have any information regarding the deletion of the data that is collected by the plug-in provider.
The plug-in provider stores the data collected about you as a usage profile and uses this for the purpose of advertising, market research and/or to design its website to meet the needs of users. Such an assessment is carried out especially to display appropriate advertisements (even for users who are not signed in), in order to inform other users of the social network about your activities on our website.
You have a right to object to the creation of this user profile, but you have to contact the respective plug-in provider to exercise this right.
The plug-ins give you the opportunity to interact with the social networks and other users so that we can improve our offering and make it more interesting to you as a user. The legal basis for the provision and use of the plug-ins is the first sentence of Art. 6 Par. 1 (f) GDPR.
The data is forwarded regardless of whether you have an account with the plug-in provider and are signed in there. If you are signed in with the plug-in provider, your data that is collected by us is allocated directly to your account with the plug-in provider. If you press the activated button and link to the page, for example, the plug-in provider also stores this information in your user account and publicly shares it with your contacts. After using a social network, we recommend that you regularly sign out especially before you activate the button. In this way you can avoid the plug-in provider allocating this data to your profile.
Additional information regarding the purpose and scope of the data collection and its processing by the plug-in provider is available in the privacy policies of these providers as listed below. Here you also obtain additional information about your rights and settings options to protect your privacy.
a) [Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; additional information relating to data collection: http://www.facebook.com/help/186325668085084 , http://www.facebook.com/about/privacy/your-info-on ... and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
We have incorporated YouTube videos into our online offering which are stored on http://www.YouTube.com and can be played directly from our website.
When you visit the website or click on the YouTube logo, YouTube receives the information that you have called up the corresponding sub-site of our website. The data specified in figure 2.1 of this policy is also transmitted. This is done irrespective of whether YouTube provides a user account that you are signed in to, or whether no user account exists.
If you are signed in to Google, your data is allocated directly to your account. If you do not want to allow the YouTube allocation to your profile, you have to sign out before you activate the button. YouTube stores your data as a usage profile and uses this for the purpose of advertising, market research and/or to design its website to meet the needs of users. Such an assessment is carried out especially to provide appropriate advertisements (even for users who are not signed in), in order to inform other users of the social network about your activities on our website.
You have a right to object to the creation of this user profile, but you have to contact YouTube to exercise this right.
The plug-in gives you the opportunity to interact with YouTube and other users so that we can improve our offering and make it more interesting to you as a user. The legal basis for the provision and use of the plug-ins is the first sentence of Art. 6 Par. 1 (f) GDPR.
6. Is other personal data collected and processed?
We collect and process your personal data otherwise only if you access specific services and we require your data for this purpose, or if you have voluntarily granted us your express consent to do so. The legal bases for the processing of the data are Art. 6 Par. 1 (b) GDPR and Art. 6 Par. 1 (a) GDPR.
You can do this as part of the registration process by completing a corresponding form or by sending us an e-mail, ordering products or services, sending us an inquiry, or by requesting materials or submitting a registration. Insofar as no statutory obligations to the contrary exist, we will use your personal data only for the purposes for which you have granted your consent.
7. Is my data forwarded to third parties such as authorities?
In certain cases, we are legally obligated to transmit data to a requesting government authority.
We are obligated under 618/2003 Coll. ACT of 4 December 2003 on copyright and rights related to copyright (Copyright Act), upon presentation of a corresponding court order, to provide holders of copyrights and ancillary copyrights with information about customers who may have offered copyrighted works on Internet file sharing sites. In these cases, our information contains the user ID of an IP address assigned at the requested time, as well as the customer’s name and address, if known.
Otherwise personal data is transmitted to government institutions and authorities only as part of mandatory national legislation or if the forwarding of this data is required in the event of attacks on our network infrastructure in order to pursue legal rights or support criminal investigations. The legal basis for the processing is Art. 6 Par. 1(c) GDPR or Section 24 Par. 2 No. 1 German Data Protection Act.
If service providers come into contact with your personal data, this usually occurs in the context of order processing of personal data. This is expressly provided for under law. The Company remains responsible for protecting your data nonetheless, where applicable in addition to the order processor. The order processor works exclusively in accordance with our instructions, which we ensure by means of corresponding contractual agreements, technical and organizational measures and by means of additional controls.
The Company employs service providers as order processors especially in the categories of IT services (such as for technical and administrative tasks and for usage analysis), telecommunications, advice and consulting as well as sales and marketing.
The data protection requirements for order processing of personal data that complies with instructions are complied with.
The Company transmits your personal data where applicable to Group companies within the Company for the performance of an existing business relationship with you or to safeguard its legitimate interests.
If data transfers take place abroad, they are based within the EU or the EEA or in a state that has an adequate level of data protection in accordance with a decision taken by the EU Commission. With data transfers to Group companies of the Company based in other countries, the Company ensures by way of guarantees that the data-importing Group company of the Company was obligated to comply with an adequate level of data protection.
Furthermore, we do not forward any data to third parties unless you have expressly given your consent to this, the transmission is recognizably necessary for the performance of one of the offers or services requested by you, or this is provided for by law. An additional transmission of your data to a third country or an internal organization is not intended.
We store data for as long as this is required by law or for the provision of the service you requested, or for the duration of time that was defined in the consent granted by you.
9. Do I have a right to information and correction of my stored data? Which other rights do I have relating to my stored data?
At any time you can request free information relating to the scope, origin, and the recipient of the stored data as well as the purpose of the data storage; subject to data protection law, you also have the right to correction, deletion or restriction of the processing of your data, a right to object to the processing and a right to data portability. The right to complain to a supervisory authority also exists.
10.Where applicable, can I withdraw the consent I have granted to the use of my data?
The data processing that was carried out on the basis of your consent is lawful until the point when this consent is withdrawn.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6