In accordance with the General Data Protection Regulation (EU Regulation No. 2016/679 of April 27, 2016 (hereafter referred to as “GDPR”), our company acts as the controller of your personal data. The processing of personal data is necessary to fulfill legal obligations arising from EU Regulation No. 2016/679 of April 27, 2016 (hereafter referred to as “GDPR”). With regard to this processing, we hereby inform you pursuant to Article 13 of the GPDR as follows:

the controller of personal data is: DEXTRAcz VMD s.r.o., Identification Number: 07890044, with registered office at Rybářská 674, 788 13 Vikýřovice. The controller of personal data can be contacted at the registered office address, or via email at b2b@dextra.cz, or by phone at +420 770 621 123. The controller’s website is www.dextra.cz.

• the legal basis for processing your personal data is the consent granted by you.
• the purposes of processing for which your personal data are intended include: Customer records management, customer outreach, archiving.
• your personal data may be disclosed to the following categories of recipients: contractual suppliers, external accountants. These recipients also provide sufficient and reliable guarantees regarding the technical and organizational security of your personal data.
• the controller does not intend to transfer your personal data to a third country or international organization.
• your personal data processed for the purpose of contract performance will be stored for the duration of the contract and for a further period of five years after the termination of the contract. Data processed for the purpose of fulfilling legal obligations will be processed for the period determined by law.
• you have the right to request access to your personal data from the controller in accordance with Article 15 of the GDPR – to obtain confirmation from the controller as to whether your personal data are being processed, and if so, you have the right to access this personal data and the following information:
  • purposes of processing,
  • categories of personal data concerned,
  • recipients of your personal data,
  • planned duration for which your personal data will be stored, or if it is not possible to determine, the criteria used to determine this period,
  • existence of the right to request from the controller rectification or erasure or restriction of processing or to object to such processing,
  • right to lodge a complaint with a supervisory authority,
  • any available information about the source of personal data,
  • the fact that automated decision-making, including profiling, occurs and, at least in these cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
• you have the right to request rectification of your personal data from the controller in case of inaccuracies in accordance with Article 16 of the GDPR
• you have the right to erasure of your personal data under the conditions set out in Article 17 of the GDPR
• you have the right to restrict processing of your personal data in accordance with Article 18 of the GDPR
• you have the right to object to the processing of your personal data processed for the purposes of performing a task carried out in the public interest or in the exercise of official authority or for the purposes of the legitimate interests pursued by the controller. If the controller does not demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, the processing based on your objection shall be terminated without delay.
• you have the right to data portability in accordance with Article 20 of the GDPR
• in case of doubts regarding compliance with obligations related to the processing of your personal data, you have the right to lodge a complaint with the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, in accordance with Article 77 of the GDPR
• providing your personal data is a contractual requirement, or a requirement that must be specified in the contract, and you are not obliged to provide personal data. Failure to provide your personal data will mean that the controller will not be able to conclude the contract with you.
• there is no automated decision-making – decisions based solely on automated processing of personal data, including profiling.

In Šumperk, March 1, 2024.