Information for Contractual Partners
What personal data do we process about you and for what purpose? What is the legal basis for this processing?
If you are our contractual partner, i.e. a supplier or customer, please note that we basically process only the necessary identification data about you: your name, surname, date of birth, address of residence, and in the case of natural persons who are entrepreneurs, also the ID number and the address of the seat of business.
These data serve to adequately identify the contracting party. The legal basis for their processing is therefore the fact that it is processing necessary to fulfil the contract, or to take measures adopted before the conclusion of the contract. The provision of the aforementioned personal data is a contractual requirement, and you have the obligation to provide us with these data. Otherwise, it will not be possible to conclude a contractual relationship.
If you additionally provide us with your other contact details, which include in particular an e-mail, the address of your profile on social networks and a telephone number, you will thus facilitate communication between you and the organization, whereby the legal basis for the processing of such data will be either the performance of the contract or our legitimate interest, which consists precisely in facilitating communication with contractual partners.
Who can we provide your personal data to?
We manage your personal data within our organization, and we provide it to third parties basically with your consent. In some cases, however, we are obliged to provide your personal data to other recipients even without your consent.
We are in some cases authorized to further disclose your data on the basis of the law. In particular, this may be the disclosure of your data to state administration bodies.
In some cases, we also use external suppliers, especially as regards the technical support of our information system. In these activities, some of your personal data may be processed. External suppliers are in the position of so-called processors and have a written contract with us that obliges them to comply with strict principles in handling your data. In such a case, your consent is not required for the purpose of performing processing activities, as such processing is permitted directly by a legal regulation. Please note that we select our suppliers according to strict criteria, so you do not need to worry about your data. At present, the following categories of processors process your personal data: Archival services processor.
We do not generally transfer your personal data abroad. This can only happen exceptionally if you give your consent, or if it is provided for by a legal regulation.
In what form is my personal data processed?
We process your data in both electronic and paper form.
How long do we keep your data?
We keep your data only for as long as necessary. Tax and accounting documents are kept in accordance with applicable legislation for a minimum of 10 years. We also archive most other documents for 10 years, taking into account the legal limitation periods in case it becomes necessary to present them as evidence in court proceedings. If court proceedings are initiated, we keep these data beyond these periods for the entire duration of the court proceedings.
What rights do you have in relation to your personal data?
As a data subject, the legal system grants you a number of rights. Since in some cases the law requires us to process personal data of our contractual partners, some of your rights are limited by law. However, as our contractual partner, you have the following rights in relation to your personal data.
Right of access to personal data
You certainly have the right to know what data is being processed about you, for what purpose, how long, where we obtained this data, whether and to whom we provide it. At the same time, you have the right to be informed about other rights relating to this data. This document is intended in particular to serve your information, however, we are prepared to provide you with confirmation or clarification on any point of this information.
If you request it, we will provide you without undue delay with a copy of the processed personal data as well. For this copy, especially if requested repeatedly, we are authorized to charge a reasonable fee, in connection with administrative costs. If you submit this request in electronic form, we will automatically assume that you are interested in receiving information also in electronic form. However, you have the option to request a different method. Please note that the right to obtain a copy of the processed personal data cannot be prejudicial to the rights of other persons.
Right to rectification of personal data
In the event that you find that the personal data we process about you are inaccurate or incomplete, you have the right to request that we supplement or correct them without undue delay.
Right to restrict processing of personal data
This right allows you in certain cases to request that certain of your personal data be marked and these data are no longer subject to further processing, for a certain period. This is not the same as the right to erasure, since restriction of processing is not permanent. You have the right for us to restrict the processing of your personal data in the case that:
- you contest the accuracy of the data we process about you, for the period necessary for the accuracy to be verified,
- the processing is without a legal basis (e.g. beyond the data we are authorized to process), but instead of erasure you prefer restriction of processing, for example because you expect that you will provide us with these data in the future anyway,
- we no longer need to process your personal data, but you require them for the establishment, exercise or defence of your legal claims,
- you object to processing (see the following point for information on this right).
If processing is restricted, data may only be processed with your consent, or for the purpose of establishing, exercising or defending legal claims, for the purpose of protecting the rights of another person, whether natural or legal, or for reasons of important public interest.
Right to object to processing of personal data
You can exercise the right to object to processing of personal data only in the situation where we process some of your personal data in the public interest or on the basis of our legitimate interest. If this happens, we will continue to process your personal data only if we demonstrate compelling legitimate reasons for doing so (in particular if we need them for the establishment, exercise or defence of our legal claims).
Right to lodge a complaint with the supervisory authority
The exercise of the rights which have been mentioned so far does not in any way affect your right to lodge a complaint with the Office for the Protection of Personal Data, through the contact details provided at the beginning of the document. You will find current information directly on the website of the Office for the Protection of Personal Data (www.uoou.cz). You can lodge a complaint at any time when you have doubts about whether your personal data is being processed as it should be, i.e. unlawfully or in breach of legal regulations.
Right to erasure
In some cases, you as a data subject also have the right to have your personal data erased. We generally proceed with the erasure of your personal data when we no longer need them and have no legal reason to process them. Furthermore, we will erase your data if they were processed on the basis of consent and this consent has been withdrawn.
Please note that even if it is one of the reasons for erasure, it does not mean that we immediately delete all your personal data. This right does not apply in the event that the processing of personal data is still necessary for the fulfilment of our legal obligations, for archiving purposes, scientific or historical research or for statistical purposes, or for the establishment, exercise or defence of our legal claims.
Right to withdraw consent
If it is cases where your personal data is processed on the basis of consent, you also have the right to withdraw your consent at any time. However, the withdrawal of consent will not in any way affect the previous processing we carried out before its withdrawal.
How can individual rights be exercised?
In all matters related to the processing of your personal data, whether it is a question, exercise of a right, lodging a complaint or anything else, you can contact our Data Protection Officer in the following ways:
- by post or in person at the address U Nemocnice 1, 128 00 Prague 2,
- by e-mail at the e-mail address poverenec@uhkt.cz,
We will process your request without undue delay, but at the latest within one month. In exceptional cases, particularly due to the complexity of your request, we are authorized to extend this period by a further two months. We will of course inform you of any such extension and its justification.