Data Protection / GDPR

1. This document provides you with information on the processing and protection of personal data by X Production s.r.o., registered office at Filipínského 36, 615 00 Brno, ID No.: 26304422, registered in the Commercial Register maintained by the Regional Court in Brno, file number C 42851 (hereinafter referred to as the "Administrator")

2.    Processing of personal data means any systematic operation with personal data such as collection, recording, structuring, sorting, use, storage, alteration, retrieval, consultation, dissemination, erasure or disposal.

3.    Either the controller or the processor may process personal data. The controller of personal data is the one who determines the purpose of the processing of personal data, carries out the processing and is responsible for it.

4.    In the following sections, we will tell you what personal data we collect, how we handle it, where we obtain the personal data and outline your basic rights in the area of data protection. More detailed regulations are contained in the Personal Data Protection and Processing Directive.

4.1 We follow the following principles when processing personal data:

a) Personal data is always processed only for a clearly and comprehensibly defined purpose, by lawful means and only for the time necessary in relation to the purpose of processing.

b) The controller processes personal data accurately and only to the extent necessary for the performance of contractual and legal obligations or for the fulfilment of the purpose for which the personal data are processed.

c) Personal data shall be protected and processed in a manner that prevents any unauthorised or accidental access to, alteration, destruction, loss or other unauthorised processing of such personal data. For these purposes, appropriate technical and organisational measures are observed and all persons who come into contact with personal data are obliged to respect the confidentiality of information obtained in connection with the processing of personal data.

d) The controller shall inform the data subject of the processing of their personal data and of their rights in relation to that processing.

5.    The controller shall obtain personal data in electronic or paper form directly from the data subject and from public registers.

6. The controller processes personal data to the following extent for the following defined purposes.

6.1 Employees and job applicants

a) Personal data of employees are processed without consent.

    i) Compulsory data is processed for the purpose of maintaining payroll, personnel and tax records within the scope of the obligation to process personal data set out in the legislation:
First name, surname, residential address, ID card number, nationality, date of birth, place of birth, birth and former surname, sex, birth number, health insurance number, information on medical fitness, number of children (for women), type of pension received, if any, information on the employee's criminal record, if such data is required for the work performed, information on running one's own business, information on other regular gainful activity, information on the employee's membership of the management and supervisory bodies of a legal person carrying on a business activity, information on special authorisations or qualifications (driving licence, certificate of competence) if the employee has participated in a pension scheme abroad and the employer is the employee's first employer after the termination of the pension scheme abroad, also the name and address of the foreign insurance carrier and the foreign insurance number.
    (ii) The optional data shall be processed for the purposes of the legitimate interests of the competent controller:
bank account number, telephone, e-mail

b) Personal data of job applicants provided directly by the data subject are stored for the purpose of offering further employment.

6.2 The personal data of business partners are processed for the purpose of contract performance and marketing purposes of the controller:
Name and surname, date of birth, place of residence / domicile, invoice number, tax identification number, bank account number, telephone, e-mail

7.     Recipients of personal data on the basis of a legal obligation are public authorities.

8. Information on the personal data processed can be obtained by:
a) on the basis of a written request with an officially certified signature sent to the personal data controller, i.e. X Production s.r.o., registered office at Filipínského 36, 615 00 Brno, ID No.: 26304422, registered in the Commercial Register maintained by the Regional Court in Brno, file number C 42851,
b) or to the administrator's mailbox,
c) or in person by prior arrangement at the address of the administrator.

9.    Correction or modification of the processed personal data may be carried out on the basis of a request of the data subjects by means of a message sent to
a) with an officially certified signature sent to the personal data controller, i.e. X Production s.r.o., with its registered office at Filipínského 36, 615 00 Brno, ID No.: 26304422, registered in the Commercial Register maintained by the Regional Court in Brno, file number C 42851,
b) or to the administrator's mailbox,
c) or in person by prior arrangement at the address of the administrator.

10.    The subject may request the deletion of the data by e-mail to info@xproduction.cz.