Conditions on Processing of Personal Data to the General Terms and Conditions for access to [ALTCLUB BLOG] service

TEAMWORK s.r.o.
with its seat at:         Vojtěšská 211/6, Nové Město, 110 00 Praha 1
identification no. :    24748587
TIN:                             CZ24748587
registered in the commercial register maintained by the Municipal Court in Prague, File no. C 171081

  1. Introductory Provisions
    1. For the purposes of this Conditions on Processing of Personal Data the terms stated below have the following meaning:
      „Regulation“ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as amended;
      „Conditions“ mean these Conditions on Processing of Personal Data; and
      „General Conditions“ mean the General Terms and Conditions for access to [ALTCLUB BLOG] service.
    2. In these Conditions, the capitalised terms used in the General Conditions have the same meaning and construction.
    3. These Conditions form an integral part of the General Conditions, even though they are stated in a separate document.
    4. Any and all general provisions of the General Conditions apply in full to the legal relationship between the User and the Provider under these Conditions.
  2. Provisions on processing of personal data
    1. The Provider hereby informs the User, within the meaning of the Personal Data Protection Act, that it collects and processes personal data provided in connection with the Registration or use of the Services (in particular the email address) to the extent necessary to fulfil the Provider’s obligations. The User agrees with processing the data provided by the User to the Provider (such as collecting, storing, accessing, modifying, searching, using, transmitting, spreading, sorting, combining, blocking and liquidating).
  3. Consent to the processing of personal data
    1. By performance of the Registration, or the conclusion of an Agreement and the use of the Services, the User grants to the Provider explicit consent (i) to the processing of his/her personal data for the purposes stated in these Conditions and to the extent provided for within the Registration or use of the Services for further marketing purposes (i.e., the offering of products and services) for a period until the purpose for which the personal data has been processed ceased to exist in accordance with the Personal Data Protection Act; (ii) with sending of commercial communications via electronic means pursuant to Act no. 480/2004 Coll., on Information Society Services and on Amendments to Certain Acts, as amended; and (iii) to use certain the personal data communicated by the User in full for the purposes described above and to process such data by a processor authorized by the Provider.
  4. Term of processing of the personal data and its termination
    1. The provision of personal data is voluntary. The consent to the processing of the data is granted for an indefinite period and the User may recall the consent at any time and free of charge at the address given in the footer of the respective email of the Provider or via the Website interface. The User has other rights under the Personal Data Protection Act, in particular the right of access to the data concerning him/her and the right to correct, block or request the liquidation of the data. The User has the right to be informed about the processing of his/her personal data. In case the User believes that the Provider is processing the personal data in violation of a generally binding legal regulation, the User is entitled to ask the Provider for an explanation and request a remedy of the defective conditions. Furthermore, the User has the right to contact the Office for Personal Data Protection.
    2. The Provider is entitled to process personal data for the entire period from the Registration, or for the duration of the Agreement. The User acknowledges that a withdrawal of consent with the processing of personal data shall be treated as immediate termination of the Agreement by the Provider and the cancellation of the Registration. Upon withdrawal of consent with the processing of personal data, the Provider shall cease to the process the personal data within a reasonable time taking into account the technical and administrative possibilities.
  5. Purpose of processing personal data
    1. Personal Data the User shall be processed for the following purpose and for the following reasons: (i) allowing the Provider to provide the Service to the User in a timely manner, (ii) to allow the correct and optimal use and setting of the Website, (iii) the implementation of the general customer administration in relation to the Users, (iv) the communication about the Website and other products and services (including Services) of the Provider to the Users, so that the User is informed in particular of the extension of the Services, (v) the timely use of such extended Services, (v) the provision of advertising so that the User is not unreasonably bothered by such advertisement he/she is not interested in, (vi) the investigation of breach of the Conditions, (vii) the creation of anonymous User statistics for the purpose of developing of the Website, Services, or provision of statistical information to the third parties (viii) registering the User on other social sites owned by the Provider and allowing the User to use the other services of the Provider by the User.
    2. The above-mentioned scope of use of personal data is limited to the extent necessary to minimize the processing of personal data.
    3. The personal data are processed by the Provider based on the User’s consent, which the User expresses during the Registration, or later on when these Conditions are amended.
  6. Scope of processing of personal data
    1. By registering or using the Services, the User gives the Provider the consent to receive and archive (for the duration of the Agreement and for three years thereafter) information for access to the Website, Registration, use of the Services, i.e. information uploaded to the Website, settings and administrative data such as username and password, User settings, history and records, time, date and URL of all web pages visited via the Website, web search history and technical information about the web browser. During the Registration, the User provides certain personal data to the Provider. If the User decides to provide additional personal data or makes such data available to the Provider, it shall be considered as a permission to process the additional personal data by the Provider.
    2. The Web uses cookies to identify Users, to memorize language preferences and facilitate Website navigation and the User agrees with it. Cookies can be disabled in the web browser, however it may prevent some of the Website features from proper functioning
    3. The User acknowledges that his/her personal data may be processed in accordance with the Personal Data Protection Act by third parties, such as the companies of the Provider’s Group, in order to provide technical and administrative support, as well as entities in contractual relation with the Provider, in particular for ensuring of fulfilment of the rights and obligations arising from these Conditions. The Provider shall only transfer the User’s personal data to processors provided a contract for the processing of personal data has been concluded and the data may only be transferred for the abovementioned purposes to the extent strictly necessary and only if the processor proves that it has sufficient technical security to prevent unauthorized access to or loss of data or other unauthorized use of personal data, unless otherwise provided by legally binding legislation.
    4. The User agrees that when accessing the Website or during the use of the Services, the Provider will display advertisements and other commercial communications on the Website.
    5. By the Registration, the User agrees that data may be made available from countries outside the Czech Republic, and acknowledges that in non-EU countries lower privacy standards than in the Czech Republic may apply.
  7. Obligations of the Provider when processing of personal data
    1. The Provider is obliged to collect and store personal data through electronic information storage units in a secured database. Only authorized persons of the Provider may access personal data. Backups of the data are made to a separate disk and server and may only be accessed by authorized persons of the Operator.
    2. The access of the Provider, its senior staff, employees, co-workers and other similar entities to the personal data and other data of the User is greatly limited and all of the above entities are bound by the obligation under standard non-disclosure arrangements.
    3. The Provider is obliged to adequately ensure the updating of personal data, i.e. ensure (to the extent appropriate) that all personal data that are found out to be inaccurate are erased or corrected without delay.
    4. The Provider is obliged to ensure, regardless of the processing time agreed in these Conditions, that the personal data are processed only for the necessary period corresponding to the purpose of the processing of personal data.
    5. Other obligations of the Provider derive directly from Article 8 of these Conditions and other generally binding legal regulations, in particular from the Regulation.
  8. Mandatory notice to Users in accordance with the Regulation
    1. Following information are provided by the Provider to the User in accordance with Article 13 of the Regulation:
      1. the identity and contact details of the controller are listed in the header of these Conditions;
      2. the Provider has not appointed a data protection officer;
      3. the purposes of the processing for which the personal data are intended as well as the legal basis for the processing are stated under Article 5;
      4. the processing is not based on point (f) of Article 6(1);
      5. the recipients or categories of recipients of the personal data are stated under Article 6;
      6. the Provider does not intend to transfer personal data to a third country or international organisation;
      7. the period for which the personal data will be stored is stated under Article 4;
      8. the User is entitled to request from the Provider access to and rectification or erasure of personal data or restriction of processing concerning the User or to object to processing as well as the right to data portability;
      9. the User is entitled to withdraw consent with processing of personal data at any time;
      10. the User has the right to lodge a complaint with a Data Protection Office at any time;
      11. the provision of personal data is based on the consent with the processing of personal data and without giving the consent the User will not be allowed to perform the Registration and to conclude the Agreement;
      12. automated decision-making, including profiling is not performed when processing the data.
    2. [Right of access by the data subject] The Provider hereby informs the User in accordance with the Article 15 of the Regulation that:
      1. The User has the right to obtain from the Provider confirmation as to whether or not personal data concerning him/her are being processed, and, where that is the case, access to the personal data and the following information:
        1. the purposes of the processing;
        2. the categories of personal data concerned;
        3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
        4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
        5. the existence of the right to request from the Provider rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
        6. the right to lodge a complaint with a Data Protection Office;
        7. where the personal data are not collected from the data subject, any available information as to their source;
        8. information on the existence of automated decision-making, including profiling.
    3. [Right to rectification] The Provider hereby informs the User in accordance with the Article 16 of the Regulation that:
      1. The User has the right to obtain from the Provider without undue delay the rectification of inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the User shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
      2. [Right to erasure (‘right to be forgotten’)] The Provider hereby informs the User in accordance with the Article 16 of the Regulation that:
      3. The User has the right to obtain from the Provider the erasure of personal data concerning him/her without undue delay and the Provider shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
        1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
        2. the User withdraws consent on which the processing is based  and there is no other legal ground for the processing;
        3. the User objects to the processing and there are no overriding legitimate grounds for the processing;
        4. the personal data have been unlawfully processed;
        5. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Provider is subject.
    4. [Right to restriction of processing] The Provider hereby informs the User in accordance with the Article 18 of the Regulation that:
      1. the User has the right to obtain from the Provider restriction of processing where one of the following applies:
        1. the accuracy of the personal data is contested by the User, for a period enabling the Provider to verify the accuracy of the personal data;
        2. the processing is unlawful and the User opposes the erasure of the personal data and requests the restriction of their use instead;
        3. the Provider no longer needs the personal data for the purposes of the processing, but they are required by the User for the establishment, exercise or defence of legal claims;
        4. the User has objected to processing.
    5. [Notification obligation regarding rectification or erasure of personal data or restriction of processing] The Provider hereby informs the User in accordance with the Article 19 of the Regulation that:
      1. the Provider shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Provider shall inform the User about those recipients if the User requests it.
    6. [Right to data portability] The Provider hereby informs the User in accordance with the Article 20 of the Regulation that:
      1. the User has the right to receive the personal data concerning him/her, which the User has provided to the Provider, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Provider to which the personal data have been provided, where the processing is based on consent or the processing is carried out by automated means.
    7. [Right to object] The Provider hereby informs the User in accordance with the Article 21 of the Regulation that:
      1. the User has the right to object, on grounds relating to his/her particular situation, at any time to processing of personal data concerning him/her. The Provider shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the User or for the establishment, exercise or defence of legal claims. The User has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
    8. [Automated individual decision-making, including profiling] The Provider hereby informs the User in accordance with the Article 22 of the Regulation that:
      1. The User has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him/her or similarly significantly affects the User.
  9. Validity and effectivity of the Conditions
    1. These Conditions shall become valid and effective on the date the General Conditions become effective.