In this document, you can find information about the processing of your personal data by MONET+,a.s. and AHEAD ITEC, s.r.o. You can also find out what rights result for you from such processing of personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data („the Regulation“).
Who is the controller of your personal data?
The subject collecting your personal data and its controller (the subject deciding how it is processed is one of the following companies:
MONET+,a.s., ID No.: 262 17 783, with its registered office at
Za Dvorem 505, Štípa, 763 14 Zlín, incorporated
in the Commercial Register administered by the Regional Court in Brno under File No. B 3351, email
contact for communication concerning personal data: security@monetplus.cz
AHEAD iTec s.r.o., ID No.: 293 59 058, with its registered office at
Za Dvorem 505, Štípa, 763 14 Zlín, incorporated
in the Commercial Register administered by the Regional Court in Brno under File No. C 74993, email
contact for communication concerning personal data: security@monetplus.cz
The controller of your personal data is always the company to which you provided the personal data or which obtained it from you in the manner described below. If you are in contact with both companies or are a contractual partner of both companies, each company processes your personal data separately (the relevant personal data controller hereinafter referred to as the "Company").
In the case of enquiries regarding your personal data or for exercising your rights, it is possible to contact the Company via the aforementioned contact details.
Who has access to your personal data?
Within the Company, your personal data is always only disclosed to persons who need personal data to fulfil the purposes of processing them as described below – in particular to the Company's employees.
To achieve the purposes set out below, your personal data may also in some cases be disclosed to third parties providing services to the Company (lawyers, consultants, operators of the IT systems in which the personal data is stored, etc.). Some of your personal data may also be provided to public authorities in cases where required by law or a decision of a public authority.
In the following cases, in which your personal data may be provided to so-called “Affiliated Company”, this subject is, depending on the controller, either MONET+, a.s., ID No.: 262 17 783, or AHEAD ITEC, s.r.o., ID No.: 293 59 058.
Up-to-date information about persons involved in the processing of your personal data may be provided to you on the basis of your request, addressed to the contact details referred to in point 1.
On what occasions and on what basis can your personal data be processed, what is it needed for and how long will the Company store (process) it?
If you are interested in a job position in the Company
Categories of personal data processed:
first name; surname; photograph; email address; telephone contact; any other personal information you provide in your CV
first name; surname; photograph; email address; telephone contact; any other personal information you provide in your CV
If you apply for a job in the Company, the Company will process your personal data for the purpose of a possible employment contract. Thus, personal data will be processed for the duration of the recruitment process. Based on the legitimate interest of the Company, your personal data may be processed up to three months (six months in the case of managerial position) after completion of the selection procedure, in case of reopening.
In the case you provide your express consent, your personal data will be stored (processed) for even longer in the event of future selection procedures, for the period indicated in your consent to the processing of personal data. In the case of your consent, your personal data may also be provided to the Affiliated Company for the purpose of participating in its selection procedures for employees. Your consent to the processing of personal data may be revoked at any time.
During your participation in (public) events organized by the Company and when expressing interest in the Company's marketing activities
Categories of personal data processed:
first name; surname; portrait (photos or audiovisual recordings from the event); address; email address; telephone contact
first name; surname; portrait (photos or audiovisual recordings from the event); address; email address; telephone contact
In the event of your participation in (public) events organized by the Company, the Company may, based on its legitimate interest, process your portrait for the presentation of the event via its website, social networks, professional magazines or other media and media outlets. If you object to the processing of your portrait based on the legitimate interest of the Company, you may object to such processing to the email address referred to in point 1.
Based on the legitimate interest of the Company, your personal data may be further processed for your full participation in the organized event, to get your feedback and to be able to inform you about other similar marketing activities of the Company.
Your personal data may also be processed for the purposes of direct marketing of the Company (sending news, newsletters, offers, participation in competitions, etc.), based on your express consent to such processing (e.g. through the Company's website, at events organized by the Company etc.). Data will be processed for the period specified in your consent. With your consent, your personal data may also be provided to the Affiliated Company for direct marketing purposes. Your consent to the processing of personal data may be revoked at any time.
If you are a contractual partner (supplier, customer, etc.) of the Company or act on behalf of such a contractual partner
Categories of personal data processed:
Natural persons:
first name; surname; address; ID No. (VAT ID No.); date of birth; bank connection; signature; email address; telephone number; telephone call record
Representatives of legal persons:
first name; surname; job title; signature;
email address; telephone number; telephone call record
If you communicate with the Company as its (potential) contractual partner, or act on behalf of a (potential) contractual partner, your personal data may be processed to the extent necessary for the negotiation of the contract and its proper performance. The processing shall take place for the period necessary for the conclusion of the contract, during the period of validity of the contract and after the end of the contract until the settlement of all rights and obligations arising from this contract.
Based on a legitimate interest of the Company, your personal data may also be archived for the purpose of maintaining a list of business contacts and for the purpose of sending relevant business communications to you for up to five (5) years from the moment of your last communication with the Company. Based on a legitimate interest, your personal data may also be provided to the Affiliate Company, for the purpose of keeping it in its list of business contacts or for the purpose of sending its business communication relevant to you.
In the case of use of telephone contact to technical support (hot-line), your telephone call may be recorded on the basis of the legitimate interest of the Company. The recording serves for the purpose of improving service quality and recording of reported defects or required service intervention. Phone call records are stored for 90 days.
Your personal data contained in documents, that is subject to statutory archiving obligations (e.g. tax documents), will be stored for the legal period intended for archiving (e.g. for the purposes of the VAT, the relevant documents are archived for 10 years).
When visiting the Company’s website, or during your activity on the Company’s social network profile
Categories of processed personal data:
cookies, personal data relating to social network profile
cookies, personal data relating to social network profile
In the event of your activity on the Company’s social network page/profile, the Company together with the given social network’s operator can become (depending on the specific case) a so-called joint controller of your personal data to the extent to which it’s made available on the Company’s given social network (e.g., anonymised visitor profiles and traffic demographic statistics). Such processing takes place on the basis of the Company’s legitimate interest, for the purpose of operating the given social network profile and planning future marketing activities.
When visiting a website operated by the Company, so-called cookies, i.e. small files containing various information regarding the website itself or your device, may be used. In the case of certain types of cookies, your personal data (e.g., identification of your device) may be processed at the same time. In the case of website traffic analysis, this personal data is processed on the basis of the Company’s legitimate interest. You can restrict the storage of cookies, and thereby also the processing of your personal data, in your web browser settings. For this purpose, you can also use your web browser’s incognito mode.
Cookies designated for direct marketing will only be used by the Company with your consent, expressed via the given Company’s website.
Right to file a complaint – you have the right to contact the Office for Personal Data Protection (www.uoou.cz) any time with a complaint relating to the processing of your personal data, if you believe that your rights regarding personal data are being breached.
During a personal visit to the Company's registered office and other premises
Categories of personal data processed:
first name; surname; number and validity of the identification document; company;
visit purpose; signature; portrait
first name; surname; number and validity of the identification document; company;
visit purpose; signature; portrait
Based on the legitimate interest of the Company, you may be required to be entered in the guestbook in order to ensure the protection of the health of visitors/employees and the Company's property. This record will be stored for 2 years. For the same reason and for the same purpose, your portrait (photographs, audiovisual recording) may also be recorded by security devices. Security devices recordings shall be stored for 90 days.
In the case of entry into some areas, you may also be asked to sign the entry declaration. In such a case, your personal data will be processed as described in point 3(c) of this Policy.
How does the Company process your personal data?
Your personal data is processed in both paper and electronic form. Access to your personal data is protected both by organizational system measures (restrictions on the access of authorized persons) and by specific barriers to access (physical or technical). If personal data is processed in paper form, these documents will be shredded after the processing period; electronically processed personal data will be deleted after processing. Recipients of personal data according to point 2 are contractually bound to their proper protection.
What rights do you have in connection with the processing of your personal data?
If you have any questions or comments regarding the processing of your personal data, do not hesitate to inform the Company via the contact details listed in point 1. You may also use this contact information to exercise the following rights:
Right to be informed and right of access – You have the right to request confirmation from the Company whether your personal data is being processed and, if so, information about: (i) purpose of processing, (ii) categories of personal data concerned, (iii) recipients, (iv) expected processing time, (v) your rights against the Company, (vi) your right to object, (vii) rights in relation to automated decision making, and (viii) in the case of transfer of data outside the European Economic Community area, information on security guarantees of your data.
Right to data portability – If your personal data is processed for the purposes of fulfilling the contract, you have the right to request a structured, machine-readable copy and, where appropriate, transfer to other controller.
Right to rectification – You have the right to keep your processed data up-to-date and accurate. You have the right to request the Company to correct or supplement any personal data.
Right to restrict processing – You have the right to request processing restrictions from the Company if: (i) you consider that your data is inaccurate until the accuracy of the data is verified by the Company; (ii) the processing is not based on a valid legal basis, but you do not want to request deletion of personal data; (iii) the Company no longer needs your data for the purposes defined above, but you require their processing to determine, exercise or defend your rights; or (iv) you have exercised your right to object as described below.
Right to erasure – You have the right to request the Company to delete any personal data, which the Company is not obliged to comply with in the cases listed in Article 17 of the Regulation, especially if personal data is still necessary to be processed for the purposes for which they were originally collected.
Right to object – If the Company processes your personal data on the basis of the legitimate interest of the Company or in the public interest, you have the right to object to such processing. In particular, when personal data is processed for direct marketing.
Right to withdraw consent – If the Company processes your personal data on the basis of your consent, you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing until its revocation.
This Personal Data Processing Policy is valid and effective from 1 February 2020