Privacy Policy

Dear Clients,

Content

1. Who is the personal data controller?
2. What personal data do we process?
3. From what sources do personal data originate?
4. For what purposes did you give your consent?
5. Why does profiling and automated decision-making occur?
6. How long will we process your personal data?
7. Who are our business partners?
8. Who may have access to your personal data?
9. What are your rights regarding the processing of personal data?
10. How can you withdraw your consent to the processing of personal data?

1. WHO IS THE PERSONAL DATA CONTROLLER?

The personal data controller is the company that determines the purpose and means of processing personal data. For marketing purposes, the controller of your personal data is KMG Czech Republic s.r.o.

2. WHAT PERSONAL DATA DO WE PROCESS?

For marketing purposes, we process the following categories of personal data, which help us determine the offer of products and services that might interest you and meet your needs.

• Basic identification data – name, registered address, date of birth, residential address.
• Contact details – phone number, email address.
• Sociodemographic data – statistical information on age, gender, education, employment, number of children.
• Information on the use of products and services – which services you have used with us in the past, information on the use of the online customer zone. Based on this data, we can recommend suitable products and services to you.
• Information from recordings of phone calls or other interactions with you, such as via email, chat, text messages.
• Geolocation data – geolocation data from the web browser. This data can generally be used to recommend the nearest intermediary or branch.

3. FROM WHAT SOURCES DO PERSONAL DATA ORIGINATE?

We obtain the personal data mentioned in the previous point directly from you. You provide this personal data in the client contract or in other documents.
Personal data may also come from publicly available sources, registers, and records, such as the commercial register. Your personal data may also come from third parties who are authorized to handle it.

4. FOR WHAT PURPOSES DID YOU GIVE YOUR CONSENT?

You have given your consent for marketing purposes, which include the following activities:

• Offering products and services. Based on your consent, we can provide offers electronically, mainly in the form of email messages or messages sent to mobile devices via phone number, through the web client zone, in written form, or by phone call.
• Automated processing of personal data to tailor commercial offers to your individual needs.
• Market research and customer satisfaction surveys regarding the products and services used.
  Consent given for marketing purposes is voluntary. However, it is necessary for us to send you personalized offers of products and services from us and our business partners. Without this consent, we cannot provide you with personalized offers of products and services.

5. WHY DOES PROFILING AND AUTOMATED DECISION-MAKING OCCUR?

Our company strives to provide you with individually tailored product and service offers. For this reason, with your consent, we profile your personal data. For this purpose, we use automated information systems, web applications, or calculators. Based on this, we send you personalized messages and offers of our company’s products and services.
Automated evaluation (profiling) of personal data helps us better understand you and your needs, predict future behavior, and accordingly adapt our products and services.

6. HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

You have given your consent to the company for the duration of the contractual relationship and for the following 10 years after the termination of the contractual relationship or until you withdraw your consent.
If you are not, and do not become, a client of the company, your consent will remain valid for 10 years from the time it was given or until you withdraw it.
After the relevant period, your personal data will be deleted, but only to the extent and for purposes for which consent is not required according to legal regulations.

7. WHO ARE OUR BUSINESS PARTNERS?

In your consent, you also agreed to receive product offers and to the sharing of personal data with our selected business partners. Our business partners likewise adhere to personal data protection rules, and we have signed data processing agreements with them.

8. WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?

When processing data for marketing purposes, other entities that process personal data as intermediaries may also have access to your data. Their role is to provide services to the company. For example, these may be external companies that manage our systems or other services ensuring the proper functioning of the company and the processing of personal data for marketing purposes. We have signed a data processing agreement with these intermediaries, based on which they are also obliged to adhere to strict personal data protection rules.

9. WHAT ARE YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA?

Proper processing of your personal data is important to companies in the Czech Republic, and protecting it is a matter of course. When processing personal data, you can exercise the following rights:

Information on the processing of your personal data
The information primarily includes: identification and contact details of the data controller, its representative, and possibly the data protection officer; the purposes of processing; categories of personal data; recipients or categories of recipients of personal data; information on the transfer of personal data to third countries; the retention period for personal data; authorized controllers; a list of your rights; the possibility of contacting the Data Protection Authority; the source of the processed personal data; and information on whether and how automated decision-making and profiling occur.

Right of access to personal data
You have the right to confirmation of whether or not your personal data is being processed. If it is, you have access to information about the processing, including the categories of personal data, recipients or categories of recipients, the retention period of personal data, as well as information about your rights, the right to file a complaint with the Data Protection Authority, the source of the personal data, whether automated decision-making and profiling occur, and information and guarantees in the case of data transfer to a third country or an international organization. You also have the right to obtain copies of the processed personal data.

Right to rectification
Are we processing your outdated or inaccurate personal data? Have you, for example, changed your residential address? Please inform us of this and we will correct the personal data.

Right to erasure (right to be forgotten)
In certain cases prescribed by law, we are obliged to delete your personal data at your request. However, each such request is subject to individual assessment, as KMG Czech Republic s.r.o. also has a duty or legitimate interest to retain personal data.

Right to restriction of processing
If you wish for your personal data to be processed solely for the essential legal purposes or if you wish to block your personal data.

Right to data portability
If you wish for us to provide your personal data to another company, we will transfer your personal data in the appropriate format to the entity you specify, provided there are no legal or other significant obstacles preventing us from doing so.

Right to object and automated individual decision-making
If you discover or believe that we are processing your personal data in violation of your privacy or contrary to legal regulations, please contact us and request an explanation or removal of the inappropriate condition. You can also raise an objection directly against automated decision-making and profiling.

Right to lodge a complaint with the Data Protection Authority
You can address any concerns or complaints regarding the processing of personal data to the supervisory authority at any time. The supervisory authority is the Office for Personal Data Protection of the Czech Republic, located at Prague 7, Pplk. Sochora 27, ZIP Code 170 00.

Where can you exercise these rights and are they subject to a fee?
You can exercise your individual rights with the company by calling: (+420) 773 564 000, sending an email to: info@kmg.cz, or by sending a written request to the company’s registered office at: KMG Czech Republic s.r.o., U Habrovky 247/11, 140 00 Prague 4.

All information and statements regarding the rights you exercise are provided free of charge.

How long can you expect a response from the company?
We will provide you with a statement and any information on measures taken as soon as possible, but no later than within one month. If necessary, and taking into account the complexity and number of requests, we may extend this period by two months. We will inform you of any such extension, including the reasons for it.

10. HOW CAN YOU WITHDRAW YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?

Consent to the processing of personal data is based on the principle of voluntariness. This means that you can withdraw it at any time. If you no longer wish to receive offers of products and services from us and our business partners, we are sorry, but we fully respect your decision.

What should the withdrawal of consent include?

• Who is submitting the withdrawal. Please provide your name, address, and date of birth so that we can identify you.
• To whom the withdrawal is addressed. You can address the withdrawal to all branches, or if you wish to continue receiving offers from selected branches, specify only those you want or do not want to be contacted by.
• Information that you do not wish us to process your personal data. If you only want to receive selected offers, please specify which offers so that we can accommodate your request.
• Your handwritten signature.

How can I send the withdrawal?

• The withdrawal of consent for the processing of personal data for marketing purposes can be sent in written form to ensure we have a proper record of your withdrawal. Please remember to sign the withdrawal.
• By sending a written statement to the company’s registered office.

Petr Kořenek
Managing Director, KMG Czech Republic s.r.o.