Principles of personal data processing
Who we are
We are the company Trustence s.r.o., ID No.: 22544534 , with registered office No. 725, 664 67 Syrovice, registered in the Commercial Register kept at the Regional Court in Brno, Section C, Insert No. 143497.
We operate the https://www.trustence.cz/ website (the ‘Website’) and provide services that may involve the processing of personal data.This document tells you how we process your personal data, why we do so, with whom we share your personal data and what your rights are in relation to the protection of your personal data. The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (‘GDPR’).
In this document you will learn how we process your personal data, why we do so, with whom we share your personal data and what your rights are in relation to the protection of your personal data.
The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (‘GDPR’).
1. Personal data that we process
We process your personal data only to the extent necessary for the purposes described below. We obtain your personal data primarily from our communications with each other, in particular via email, contact forms on our website or other communications.
As we may act in different capacities towards you in the course of our business, the scope of the personal data we process about you may vary depending on which of the following categories of data subjects you belong to:
Clients and customers
Identification data, which are your name, surname, title, company or municipality name.
Contact information, which are the residential address, e-mail address, telephone number and contact person's details.
Billing information, which are the organization identification, ID number, address, zip code, city, data related to payments.
Data related to demand and provision of services, which is information about the services you require and want us to deal with, which you fill in the contact forms on the website.
Data contained in the communication, i.e. the information you provide in the e-mail communication, contact form, or other information that we exchange in our mutual communication.
Information contained in references and case studies, that we will receive from you in mutual cooperation.
Website visitors and newsletter subscribers
E-mail address, to which we send our newsletter and other communications.
Cookies and other technical data - data obtained from technical files and similar tools and technologies. The specific cookies and technical information used are set out in the Cookie Statement, which is available on our website
2. Purposes of the processing of personal data
As a data controller, we process your personal data for the following processing purposes:
2.1 Provision of services and performance of contractual obligations
We process your personal data primarily for the purpose of providing our services to you, our Clients and customers. We provide our services to you on the basis of a contract, an agreement under which we subsequently perform our obligations.
If you are Clients and Customers, we process Identification Data, Contact Data, Invoicing Data, Data related to the request and provision of services and Data contained in communications about you.
The legal basis for this processing is the performance of a contract between you and us and the need to take steps prior to entering into the contract, or where you are not directly a party to that contract (if you are, for example, an employee of the Client and Customer), our legitimate interest in the performance of any contract entered into, or a mandated business partner.
The data is processed for the duration of the concluded contract and for the period necessary for the performance of the obligations under such contract.
2.2 Protecting our rights legal interests
Various claims, complaints, legal defects or disputes may arise in the course of providing our services. Therefore, we may use personal information to protect our own rights. For this reason, we also process your personal data on the Platform to protect our own legal claims.
If you are Clients and Customers, we process all the data listed for your category in Article A of this Privacy Policy about you for this purpose.
The legal basis for this processing is our legitimate interest in protecting our rights and claims. The processing period for individual personal data depends on how long the data is used to protect our rights and legal interests. After this period, the individual personal data will be deleted. In the event that a dispute is initiated, the specific period of storage of personal data will vary depending on the type of dispute and its severity. In the case of processing of Photographs, videos and other records.
2.3 Compliance with legal obligations
We may also process your personal data in order to comply with our legal obligations, particularly in the areas of accounting and tax. At the same time, we need to be prepared to provide assistance to government authorities if we are required to do so by law.
If you are Clients and Customers, we process all the data about you listed for your category in Article A of this Privacy Policy.
The legal basis for this processing is the performance of our legal obligations. The data is processed for a period of time specified by law, for example, in the field of taxation up to 10 years.
2.4 Ensuring communication
In the course of our business, we may contact you via contact email or the contact form available on our website, in communications related to the provision of our services, the organisation of events, the preparation of podcasts, etc. Subsequently, there may be mutual communication between you and us. In this case, we will process your personal data for the purpose of ensuring mutual communication.
If you are Clients and Customers, we process your Identification Data, Contact Data and Data contained in communications for this purpose.
The legal basis is our legitimate interest, which is to ensure communication with you.The personal data is stored for the time necessary for the processing of mutual communication. Where the data provided is relevant to the provision of our services, we process your data for the time necessary to provide the services.
2.5 Sending commercial communications
If you subscribe to our newsletter on our website, we will also process your personal data in order to send you newsletters and other communications in which we inform you about our services, events, podcasts and which promote our activities.
If you are a website visitor and newsletter subscriber, we process your e-mail address for this purpose.
Právním základem pro toto zpracování je Váš souhlas udělený při přihlášení k odběru newsletteru nebo náš oprávněný zájem na přímém marketingu v případech, kdy od Vás souhlas nepožadujeme (v takovém případě Vám umožníme odmítnout zasílání dalších obchodních sdělení). Vaše osobní údaje budeme zpracovávat po dobu 5 let nebo dokud nám zasílání obchodních sdělení neodmítnete, což můžete učinit v každém jednotlivém e-mailu.
2.6 Cookies
If you visit our website, your personal data may be processed through cookies and other technical data. We process cookies to ensure the functioning of our website, to enhance your security when visiting the website, for analytical purposes, for marketing purposes and to personalise the content on the website.
The legal basis for the processing of necessary technical and functional cookies is our legitimate interest. The legal basis for the processing of analytical, marketing and personalisation cookies is your consent.
If you would like to know more about the processing of your personal data related to cookies (e.g. which specific cookies we use, the duration of processing or how you can withdraw your consent to the processing of cookies), you can read our Cookie Statement available at this link: https://www.trustence.cz/cookies .
3. Sharing of personal data
We process the above personal data as a data controller. Thus, we determine the purposes and means of processing. It may happen that we also use third parties for the processing of personal data that we use in the course of our business. These third parties act as so-called recipients of personal data. Specifically, these are:
- the persons who create and maintain our website;
- the company that provides us with the forms available on our website and when registering for our events;
- a company that sends us newsletters and commercial communications;
- persons who take photographs or other recordings at our events;
- people who help us produce the podcast;
- companies providing legal, accounting or tax services;
- the public by publishing podcasts, photos, videos or other recordings, testimonials and case studies;
- companies that provide us with analytics tools and cookies;
- Google Ireland Limited, which provides us with analytics tools. If personal data would be shared with Google LLC, this company is registered with the Data PrivacyFramework;
- LinkedIn Corporation, which provides us with analytical tools. This company is registered with the Data PrivacyFramework;
- Meta Platforms Ireland Limited, which provides us with analytical tools. If personal data is shared with Meta Platforms, Inc., that company is registered with the DataPrivacy Framework;
- Microsoft Ireland Operations Limited, which provides us with the tools to work with data. If personal data is shared with Microsoft Corporation, that company is registered with the Data Privacy Framework;
- Webflow Inc., a company that provides us with hosting services and a tool for recording and structuring data. This company is registered with the Data Privacy Framework;
- Smartlook.com, s.r.o., which provides heatmapping and other cookie-related services.
Where we share your personal data with controllers and processors in third countries (outside the EEA), we only do so where there is a decision by the European Commission that a particular country outside the EEA provides an adequate level of data protection, including where controllers or processors have adopted additional data protection measures such as Binding Corporate Rules (BCRs) or Standard Contractual Clauses (SCCs).
4. Your rights in processing and the possibility of exercising them
You have the right to (i) request access to your personal data; (ii) withdraw your consent; (iii) request the rectification of your personal data; (iv) request the erasure of your personal data; (v) request the restriction of the processing of your personal data; (vi) request the portability of your personal data; (vii) object to the processing of your personal data; or (viii) lodge a complaint with the relevant supervisory authority.
For all issues related to the processing of your personal data, whether it is a question, exercise of rights, sending a complaint to us, etc., you can contact us via email at trustence@trustence.cz.
4.1 Right of access
You have the right to obtain confirmation from us as to whether or not we are processing your personal data.
If we process your personal data, you also have the right to request access to information about the purpose and scope of the processing, the recipients of the data, the duration of the processing, the right to rectification, erasure, restriction of processing and objection to processing, the right to lodge a complaint with a supervisory authority and the sources of the personal data (this information is already provided in this document).
You can also ask us for a copy of the personal data we process. We provide the first copy free of charge; further copies may be subject to a fee. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.
4.2 Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data at any time. However, the withdrawal of consent does not affect the lawfulness of the processing prior to such consent, nor does it lead to the termination of the processing of personal data that has already been anonymised.
4.3 Right of rectification
You have the right to request us to correct inaccurate personal data concerning you. Depending on the purpose of the processing, you may also have the right to have incomplete personal data completed, including by providing an additional declaration.
4.4 Right to erasure (right to be forgotten)
You have the right to request the deletion of your personal data in cases where:
- We no longer need your personal data for the purposes for which it was collected or processed;
- you withdraw the consent on the basis of which the personal data was processed and there is no further reason for processing it:
- you object to processing and there are no other overriding reasons for processing, or you object to processing for direct marketing purposes;
- personal data is processed in violation of legal regulations.
However, you cannot exercise this right where the processing is necessary for compliance with our legal obligations or tasks entrusted to us in the public interest or for the establishment, exercise or defence of legal claims.
4.5 Right to restriction of processing
You have the right to request restriction of the processing of your personal data where:
- you contest the accuracy of your personal data; in this case, you may request a restriction of processing until the accuracy of the personal data has been verified;
- the processing is unlawful and instead of erasure, you request a restriction on the processing of personal data;
- We no longer need your personal data for the purposes for which it was collected or processed, but you require it for the establishment, exercise or defence of legal claims;
- you have objected to the processing of your personal data; in this case, you may request a restriction of processing until it is verified that our legitimate interests prevail.
4.6 Right to portability
You have the right to obtain a copy of your personal data that we process by automated means on the basis of your consent or for the performance of a contract. We will transmit this data in a commonly used and machine-readable format to you or to a controller designated by you, if technically feasible.The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.
4.7 Right to object
You have the right to object to the processing of your personal data that we process on the basis of our legitimate interest. We will stop processing your data if there are no other overriding reasons for processing or if the processing is not necessary for the establishment, exercise or defence of legal claims or if you object to processing for direct marketing purposes.
5. Changes to this processing information
We are entitled to change this processing information from time to time, so please check it regularly. We will post any changes to this document on our website.
