Protection of personal data

I. Data Controller

Ing. David Vyšata, registered office: Prague – Nusle, Pujmanové 1556/20, 14000, Company ID: 10673920, Data Box: 63ajd3j (Natural Person – Tax Advisor) (hereinafter referred to as the "Controller"), declares that all personal data processed by the Controller is strictly confidential. The Controller handles personal data in accordance with national legislation and European Union regulations on personal data protection.

The Controller collects, stores, and uses your personal data in accordance with Act No. 110/2019 Coll., on the Processing of Personal Data (hereinafter referred to as the “Personal Data Processing Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”). The specific purposes for which the Controller processes personal data are defined below.

II. Scope of Personal Data Processing

Personal data is processed to the extent provided by the data subject to the Controller in connection with the establishment of a contractual or other legal relationship, or data otherwise collected and processed by the Controller in accordance with applicable legal regulations or to fulfil the Controller’s legal obligations.

The Controller also collects personal data through its website at https://www.taxnova.cz/ (hereinafter referred to as the “Website”).

III. Sources of Personal Data

• directly from data subjects (name, surname, email, address, date of birth, personal identification number, IP address, phone, chat, websites, contact form on the website, social networks, business cards, etc.)

• Company ID, VAT ID, publicly available registers, lists and databases (e.g., Commercial Register, Trade Register, Land Register, public phone directories, etc.)

IV. Categories of Personal Data Subject to Processing

• address and identification data used for the clear and unambiguous identification of the data subject (e.g., name, surname, title, personal identification number, date of birth, permanent address, Company ID, VAT ID) and data enabling contact with the data subject (contact details – e.g., mailing address, phone number, fax number, email address, and other similar information)

• descriptive data (e.g., bank details)

• other data necessary for fulfilling a contract

• data provided beyond the scope of applicable laws, processed based on the data subject’s consent (e.g., processing of photographs, use of personal data for HR purposes, etc.)

V. Cookies

We use so-called cookies on our Website. A cookie is information that a web server sends to a browser, which the browser then sends back when accessing the web server again later.

Cookies allow information to be stored between visits to the website. These files enable the web server, analytics tools, or ad systems to re-identify a visitor’s browser – and thus the visitor – or retain their identification even after they leave the website. The cookies we use include:

• functional cookies – provide essential functionality without which the website would not operate properly (without functional cookies, some website features may not work at all or only to a limited extent);
• analytical cookies – track website traffic and collect statistics, allowing the website operator to better understand its visitors and continuously improve the website;
• marketing cookies – collect information to better tailor ads to your interests, both on this website and elsewhere.

You can manage cookies through your browser settings. You always have the option to delete stored cookies. Depending on your browser, you can also limit the use of cookies for specific websites, limit their storage, or enforce the deletion of all cookies when the browser is closed.

VI. Use of Personal Data

Personal data is used only in accordance with the reason it was collected (primarily business purposes) or for other legal claims. Providing consent to the processing of personal data is voluntary.

Without consent, data may only be processed if the Controller processes contact data for the legitimate interest of conducting business activities. In such a case, you have the right to object (more about this right below).

VII. Duration of Personal Data Processing

In accordance with the periods specified in relevant contracts, internal regulations of the Controller, or applicable legal regulations, data is processed for the time necessary to ensure the rights and obligations arising from both the contractual relationship and applicable legal regulations. This consent remains valid until it is withdrawn.

VIII. Rights of the Data Subject

As a data subject, you have the following rights under legal regulations, which you may exercise at any time. These include:

• Right of access to personal data – the right to obtain information from the Controller about whether your personal data is being processed. The Controller is required to provide this information without undue delay. The content of the information is determined by Article 15 of the GDPR. The Controller has the right to request a reasonable fee not exceeding the costs of providing the information;
• Right to rectification or erasure of personal data, or restriction of processing – the right to have inaccurate or incorrect personal data corrected. If your personal data is no longer needed for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not wish for data to be erased but only temporarily restrict its processing, you may request such restriction;
• Right to request an explanation if you suspect that your personal data is being processed in violation of legal regulations;
• Right to contact the Office for Personal Data Protection in case of doubts about compliance with obligations related to personal data processing;
• Right to data portability – the right to obtain personal data concerning you, which you provided to the Controller, in a structured, commonly used and machine-readable format, see Article 20 of the GDPR;
• Right to object to the processing of personal data processed for the performance of a task carried out in the public interest or in the exercise of official authority, or for the purposes of the legitimate interests of the Controller. The Controller will cease processing without undue delay unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights or freedoms;
• Right to withdraw consent to the processing of personal data at any time, if you have granted such consent to the Controller.

IX. Contact

If you have any suggestions, questions, or concerns regarding the processing of your personal data, including complaints, please contact info@taxnova.cz

X. Contact Details of the Supervisory Authority

If you have doubts about compliance with the obligations related to the processing of your personal data, you may also file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, website: https://www.uoou.cz. However, we kindly ask that you contact us first.