Source: http://www.kalas.co.uk/general-data-protection-regulation
Timestamp: 2018-08-16 14:26:12
Document Index: 130083629

Matched Legal Cases: ['Art. 4', 'Art. 26', 'Art. 13', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 21', 'Art. 22', 'Art. 77', 'Art. 6', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 4', 'Art. 9', 'Art. 17', 'Art. 18', 'Art. 20']

Information provided by data subjects – clients
KALAS Sportswear, s.r.o., ID No.: 62525093, registered office: Měšická 276, 390 02 Tábor, Property 276, s.r.o., ID No.: 04472462, registered office: Měšická 276, 390 02 Tábor, Sports Brands & Domains, s.r.o., ID No.: 04472471, registered office: Botičská 419/2, Nové Město, 128 00 Praha 2, KALAS Wear Ltd., ID No.: 08697266, registered office: Flat 2, Somerton House, Broad Street, Somerton, Somerset, England, TA11 7ND and KALAS Benelux Bvba., ID No.: BE 0549.775.709, registered office: Bouwelsesteenweg 10 D 2560 Nijlen(hereinafter “KALAS”), as the joint controllers of your personal data pursuant to Art. 4(7) in conjunction with Art. 26 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “GDPR”), would like to inform you in accordance with Art. 13 of GDPR that:
KALAS will process your personal data indicated in your order to the following extent:
name, surname, sizes, address, bank account number, phone number and e-mail address if you are a natural person, and
name, surname, title, phone number and e-mail address of the person authorised to act on behalf of the client if the client is a legal person.
Your personal data are processed on legal grounds and for the purpose of the necessity to fulfil the contract concerned that is to be concluded between you and KALAS. Therefore, KALAS is entitled to process the aforementioned personal data without your consent pursuant to Art. 6(1b) of GDPR.
KALAS will process your personal data as long as it is necessary to achieve the purpose for which they are processed, but no longer than for 15 years[1] from the conclusion of the contract concerned, for the purpose of protection of legitimate interests of KALAS in a potential legal dispute regarding claims arising from the contract that was concluded between you and KALAS.
The provision of your personal data is a requirement that must be indicated in the contract concerned. You are not obliged to provide your personal data, however, if you do not provide them, you may not conclude a contract with KALAS.
When processing your personal data, automated decision-making, including profiling, will not occur. Your personal data will be processed exclusively by KALAS employees or another person who processes personal data for KALAS based on an agreement concluded with KALAS. Your personal data will be provided to other recipients, in particular to companies providing transport services.
In connection with the protection of personal data, you have the following rights under GDPR:
Under Art. 15 of GDPR, you have the right to obtain confirmation from KALAS at your request as to whether or not your personal data are being processed. If your personal data are being processed, you have the right to be provided with the information on: the purpose and scope of their processing, possible recipients to which your personal data have been or will be disclosed, the period for which your personal data will be stored at KALAS, the possibility of exercising the right to request KALAS to rectify or erase your personal data or restrict their processing, the right to object to the processing of your personal data and the right to lodge a complaint with the Office for Personal Data Protection. You also have the right to be provided with all available information on the source from which your personal data have been obtained and information on whether automated decision-making, including profiling, is used based on the processing of your personal data.
You have the right to be provided with a free first copy of your personal data being processed. For each additional copy, KALAS is entitled to charge a reasonable fee corresponding to related administrative costs.
Right to rectification of inaccurate data
Under Art. 16 of GDPR, you have the right to rectification of your inaccurate personal data, as well as to the completion of incomplete personal data related to your person.
Under Art. 17 of GDPR, you have the right to erasure of your personal data if the personal data are no longer needed to fulfil the purpose of the contract concerned, if you raise objections to the processing of your personal data for a specific reason, and if there is no prevailing legitimate reason for the processing of your personal data. You also have the right to erasure of your personal data if your personal data are processed unlawfully or if your personal data must be erased in order to meet a legal obligation applying to KALAS.
Right to restriction of personal data processing
Under Art. 18 of GDPR, you have the right to restriction of processing of your personal data, i.e. in particular the right to transfer the data to another system and to prevent the public from accessing the data, and for particular data, the right to the provision of a record that a restriction applies to them, provided that you contest the accuracy of your personal data for a period enabling KALAS to verify the accuracy of your personal data, the processing of your personal data is unlawful but you oppose the erasure of your personal data and request the restriction of their use instead, KALAS no longer needs the personal data for the purposes of fulfilling the contract concerned but your data are required for the establishment, exercise or defence of legal claims, or if you have objected to processing of your personal data because of your specific situation, and your personal data are processed due to the need to meet the purposes of legitimate interests of KALAS or a third party until it is verified that the legitimate interests of KALAS take precedence of your legitimate reasons.
Where processing of your personal data has been restricted as described above, KALAS may only process such personal data, with the exception of storage, with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Under Art. 20 of GDPR, you have the right to obtain from KALAS your personal data that you have provided for the purpose of fulfilling the contract concerned in a structured, commonly used and machine-readable format, and request their transfer to another controller if the processing of your personal data is automated and this transfer is technically possible. In this case, KALAS does not process your personal data in an automated manner.
Right to object to personal data processing
Under Art. 21 of GDPR, you have the right to object to the processing of your personal data for reasons related to your particular situation if your personal data are processed for purposes of legitimate interests of KALAS or a third party. As a result of such objections, KALAS will no longer be authorised to process your personal data unless it proves that its interests (legitimate reasons for processing) take precedence over your fundamental rights and freedoms.
Right not to be subject to a decision based on automated processing, including profiling
Under Art. 22 of GDPR, you have the right not to be subject to a decision based on automated processing, including profiling. In the case of your personal data provided to KALAS, however, such decision-making will not occur.
Under Art. 77 of GDPR, you have the right to lodge a complaint with a supervisory authority, i.e. the Office for Protection of Personal Data, if you believe that the processing of your personal data infringes GDPR.
You may exercise all the above rights by sending a letter to KALAS, Měšická 276, 390 02 Tábor, for the attention of Vladimír Šmol, or by e-mail to gdpr@kalas.cz.
KALAS is obliged to respond to your request relating to the above rights or to comply with the request without undue delay after its receipt, but no later than within one month of the receipt of the request.
Information provided by data subjects – potential clients
KALAS processes your personal data entered in the form for sending offers of KALAS products and services on its website, to the following extent:
name, surname and e-mail address
Your personal data are processed on legal grounds and for the purpose of legitimate interests of KALAS in offering the sale of products and services, advertising and marketing. Therefore, KALAS is entitled to process the aforementioned personal data without your consent pursuant to Art. 6(1f) of GDPR.
KALAS will process your personal data for a period strictly necessary to achieve the purpose for which they have been processed, until the conclusion of the contract concerned between you and KALAS when you become a client of KALAS, but no longer than for .... [VŠ1] years from the first time when KALAS contacted you for the above purpose unless you exercise your right to erasure of your personal data.
Providing your personal data is not a legal or contractual requirement of KALAS. You are not required to provide your personal data, if you do not provide them, KALAS will not send you offers of products and services, advertising or other marketing communications of this company.
When processing your personal data, automated decision-making, including profiling, will not occur. Your personal data will be processed exclusively by KALAS employees or another person who processes personal data for KALAS based on an agreement concluded with KALAS. Your personal data will not be provided to other recipients.
Under Art. 17 of GDPR, you have the right to erasure of your personal data if the personal data are no longer needed for the purpose above, if you raise objections to the processing of your personal data for a specific reason, and if there is no prevailing legitimate reason for the processing of your personal data. You also have the right to erasure of your personal data if your personal data are processed unlawfully or if your personal data must be erased in order to meet a legal obligation applying to KALAS.
Under Art. 18 of GDPR, you have the right to restriction of processing of your personal data, i.e. in particular the right to transfer the data to another system and to prevent the public from accessing the data, and for particular data, the right to the provision of a record that a restriction applies to them, provided that you contest the accuracy of your personal data for a period enabling KALAS to verify the accuracy of your personal data, the processing of your personal data is unlawful but you oppose the erasure of your personal data and request the restriction of their use instead, KALAS no longer needs the personal data for the purpose above but your data are required for the establishment, exercise or defence of legal claims, or if you have objected to processing of your personal data because of your specific situation, and your personal data are processed due to the need to meet the purposes of legitimate interests of KALAS or a third party until it is verified that the legitimate interests of KALAS take precedence of your legitimate reasons.
Under Art. 20 of GDPR, you have the right to obtain from KALAS your personal data that you have provided for the purpose above in a structured, commonly used and machine-readable format, and request their transfer to another controller if the processing of your personal data is automated and this transfer is technically possible. In this case, KALAS does not process your personal data in an automated manner.
Right not to be subject to a decision based on automated processing, including profiling.
Information provided by data subjects – camera recording
KALAS will use a surveillance system to process your video recordings, which are considered personal data pursuant to Art. 4(1) of GDPR. Video recordings of your person will only be processed if you move around the monitored area.
The monitored area is the KALAS premises. The cameras make recordings continuously. The monitored area is always marked with information boards so that you are warned in advance of the video recording of your person before you enter the monitored area.
If you do not wish the video of your person to be recorded by the surveillance system, do not enter the monitored area.
Your video recording is processed on legal grounds and for the purpose of protection of legitimate interests of KALAS to protect the property owned by KALAS and safety of people moving around the area monitored by the surveillance system.
Recording videos is not considered processing of a special category of personal data (sensitive data) pursuant to Art. 9(1) of GDPR. In fact, it is the visual identification of a person in relation to certain conduct. This will enable KALAS to use the surveillance system to identify a recording capturing a committed crime, regardless of the nationality, race, ethnicity, religion, health status of the recorded person or regardless of biometric characteristics of this person. A special category of personal data (sensitive data) would be processed if, when recording or processing videos, some biometric characteristics of data subject were stored and/or compared (e.g. facial features/minutiae, biometric characteristics of the walk, a facial recognition system etc.)[1].
KALAS will process your video recording and store it in its system as part of a time loop for a period of 7 days. If the video surveillance does not capture conduct the recording of which will be necessary to use as evidence to defend a legitimate interest of KALAS, a data subject, a third party or public interest, the recording will be automatically deleted by overwriting upon the expiry of the specified period. If the video surveillance captures such conduct, the recording will be kept for as long as necessary to protect the legitimate interest of KALAS, a data subject, a third party or public interest.
When processing video recordings of your person, automated decision-making, including profiling, will not occur. Your video recording will be processed by KALAS or another person based on an agreement concluded with KALAS. Your video recording will only be provided to other recipients if it is necessary to use the recording as evidence to defend the legitimate interest of KALAS, a data subject, a third party or public interest. In such a case, it can be submitted to the Czech Police, courts or another public authority, or another authorised entity.
You also have the right to a free first copy of your video recording. For each additional copy, KALAS is entitled to charge a reasonable fee corresponding to the costs of making this copy.
In the case of processing of personal data which is a video recording of a data subject, this right may only be exercised to a limited extent as video recordings are usually not associated with a particular data subject and are stored only as long as necessary.
In the case of your video recording, this right cannot be objectively exercised.
Under Art. 17 of GDPR, you have the right to erasure of your personal data if the personal data are no longer needed for the purpose for which they were processed, if you raise objections to the processing of your personal data for a specific reason, and if there is no prevailing legitimate reason for the processing of your personal data. You also have the right to erasure of your personal data if your personal data are processed unlawfully or if your personal data must be erased in order to meet a legal obligation applying to KALAS.
With regard to the method of processing of video recordings of your person and the period for which such recordings are stored, this right may be exercised only to a limited extent.
Under Art. 18 of GDPR, you have the right to restriction of processing of your personal data, i.e. in particular the right to transfer the data to another system and to prevent the public from accessing the data, and for particular data, the right to the provision of a record that a restriction applies to them, provided that you contest the accuracy of your personal data for a period enabling KALAS to verify the accuracy of your personal data, the processing of your personal data is unlawful but you oppose the erasure of your personal data and request the restriction of their use instead, KALAS no longer needs the personal data for the purpose for which the data have been processed but your data are required for the establishment, exercise or defence of legal claims, or if you have objected to processing of your personal data because of your specific situation, and your personal data are processed due to the need to meet the purposes of legitimate interests of KALAS or a third party until it is verified that the legitimate interests of KALAS take precedence of your legitimate reasons.
With regard to the method of processing of your video recordings and the period for which such recordings are stored, this right may be exercised only to a limited extent.
Under Art. 20 of GDPR, you have the right to obtain from KALAS your personal data that are processed by KALAS for the purpose of protection of property and safety of people in a structured, commonly used and machine-readable format, and request their transfer to another controller if the processing of your personal data is automated and this transfer is technically possible.
With regard to the period for which your video recordings are stored, this right may be exercised only to a limited extent.
With regard to the fact that the entire area is monitored by a surveillance system, this right can only be exercised to a limited extent.