MAPO Group a.s., Company Registration Number 01473093, with its registered office at tř. Kosmonautů 1338/1c, 779 00 Olomouc – Hodolany, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section B, Insert 11573 (“MAPO”), treats all personal data it processes as strictly confidential and handles it in accordance with applicable data protection legislation. The security of your personal data is a priority for MAPO.

MAPO is, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679), the controller of your personal data, i.e. it collects, stores, and uses (or otherwise processes) your personal data in order to conduct its business activities (the specific purposes for which personal data are processed are defined in more detail below).

These Personal Data Processing Principles apply to (i) the processing of personal data carried out by MAPO during your use of these MAPO websites, (ii) the processing of personal data by MAPO in the performance of contracts with business partners, (iii) the processing of personal data in the fulfilment of MAPO’s legal obligations, and (iv) the processing of personal data necessary for the purposes of protecting MAPO’s legitimate interests.

The Personal Data Processing Principles describe the purposes of processing personal data and the methods of their processing, provide information on the various categories of personal data processed, their possible recipients, the period for which personal data are retained, and your rights in relation to the protection of personal data.

Purposes of Personal Data Processing

• Your personal data may be processed by MAPO for the following purposes:
• Performance of a contract (in particular, fulfilment of cooperation agreements with business partners, service agreements, etc.);
• Fulfilment of legal obligations (in particular, obligations under accounting and tax legislation, i.e. transferring personal data to tax authorities; or to other public authorities in accordance with relevant legal regulations);
• Legitimate interest of the controller (protection of the rights and legally protected interests of MAPO, for example in customer credit assessment);
• Handling requests sent via electronic forms (especially in the event of your interest in employment at LGC, if you request to receive newsletters, or if you use an electronic form to contact MAPO).
• Advertising and marketing purposes
• Employment and personnel purposes (offering a suitable position based on your submitted CV)

Processed Personal Data

MAPO is entitled to process the following personal data, depending on the purpose of processing:

Personal data at MAPO are processed both manually and automatically. Automated processing of personal data occurs particularly for the purpose of fulfilling contractual relationships.

Processing of Personal Data Based on Consent

In accordance with Act No. 480/2004 Coll., on Certain Information Society Services, as amended, the user gives MAPO consent to use the above-provided personal data for sending commercial communications concerning MAPO’s business activities and services.

Providing consent is voluntary, and consent may be withdrawn at any time in writing or via the link provided in the email message. Consent is granted until it is withdrawn. Failure to provide consent does not affect the performance of the contract.

Recipients of Personal Data

Within MAPO, your personal data are accessible only to authorised employees, or to individual data processors contractually agreed with MAPO, or to other controllers within the organisational structure of MAPO and MAPO subsidiaries. This is always only to the extent necessary to fulfil the individual purposes of processing, and on the basis of an appropriate legal basis for the processing of personal data.

A list of recipients of MAPO personal data is available at [email protected].

In cases prescribed by law, MAPO is entitled or obliged to transfer certain personal data on the basis of applicable legal regulations, for example, to law enforcement authorities or other public authorities.

Retention Period for Personal Data

Personal data will be stored for a period of 5 years, unless a different retention period is specified by generally binding legal a different archiving period is stipulated by regulations.

Rights arising from personal data protection

• Under Article 15 of the GDPR, the data subject has the right to access personal data concerning them; under Article 16 of the GDPR, the right to request that the controller correct inaccurate personal data relating to them; and under Article 17 of the GDPR, the right to erasure of personal data concerning them. The data subject has the right to have the controller restrict the processing of their personal data in the cases listed in Article 18 of the GDPR.

• The data subject has the right to request that the controller inform them about the recipients of personal data under Article 19 of the GDPR. The controller does not carry out automated processing of personal data, therefore the right to data portability under Article 20 of the GDPR does not apply.

• Pursuant to Article 21 of the GDPR, the data subject has the right to object at any time to the processing of personal data concerning them, if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority according to Article 6(1)(e) of the GDPR.

• It is not possible to request the erasure of personal data which the Controller is obliged to collect on the basis of a legal obligation (an obligation imposed by law).

• The data subject has the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection. Postal address: ÚOOÚ, Sochora 27, 170 00 Prague 7, e-mail address: [email protected], data box ID: qkbaa2n.