Personal Data Processing and Protection
In the following text you will learn how Eden Europe, s.r.o., with the registered office at Práce 483/1, 679 04 Adamov, ID 26159716, a company registered in the Companies Register kept by the Regional Court in Brno, file No. C 47499 (hereinafter “Eden Europe, s.r.o.”), processes your personal data which you provide to the company.
Personal data processing is a necessary part of our activities. Without your personal data and their subsequent processing, we would not be able to provide you with our services, enter into a contractual relationship and fulfil the obligations arising from it. In cases where your consent to personal data processing is required, we will not enforce it, nor condition the entering into a contractual relationship by the receipt of such consent.
We handle your personal data within the boundaries set by generally binding legal regulations and we pay attention to the prevention of the unauthorised handling or misuse of your personal data. Protection of personal data, privacy and the rights of each individual are some of the key values honoured by the employees of Eden Europe, s.r.o.
Our employees fully understand the value and sensitivity of the personal data they come across and work with. They are fully aware of the damage which may be incurred by each owner of these data, by each one of you in the case of disclosure, destruction or alteration.
Eden Europe, s.r.o. and all employees of Eden Europe, s.r.o. undertake to personally protect the confidentiality, availability and integrity of the personal data they encounter and work with, because they consider it to be a matter of professional honour, regardless of whether they are bound to do so by a legal act. The personal data our employees come into contact and work with, will never be published, transmitted without authorisation, altered or destroyed, beyond the scope stipulated by their job description. Our employees regularly expand their education and undergo regular training in the relevant field to avoid unintended disclosure, destruction or alteration of the personal data they encounter and work with.
Each employee of our company exerts the maximum effort to prevent disclosure, destruction or alteration of the personal data encountered and worked with. This means that employees adhere to the security measures for information security, protect personal data in paper form and pay attention to their surroundings and immediately report any suspicious behaviour of information technology, their co-workers or third parties.
Eden Europe, s.r.o. and its employees exert the maximum efforts to ensure just and transparent personal data processing. For this purpose, we have implemented processes which are continuously improved to ensure that each subject has answers to any question regarding his/her personal data and their processing at any time.
Eden Europe, s.r.o. and its employees exert the maximum efforts to ensure the fulfilment of data subjects´ rights and the company has implemented adequate technologies and introduced the correct processes for this purpose.
Contact persons for questions about your personal data and rights
Should you have any questions about your personal data or the assertion of your rights, feel free to contact our employees who are fully prepared to provide you with comprehensive information services or to assist you with the assertion of your rights.
In such cases contact:
Eva Čechová Eden Europe, s.r.o., náměstí Práce 483/1, 679 04 Adamov
Telephone: +420 516 481 019
What personal data of yours we process
Personal data that you provide to us as a customer or supplier which are then processed, serve for the conclusion of a contract and its subsequent performance, which would be impossible without them. The data are mostly provided within the customer/supplier forms which are recorded upon the first registration of a customer/client in our information system. These basic personal data include in particular: name, surname, title, position in a company, email, telephone, fax, company name, address, ID, TIN, bank account number. We only collect basic personal data about you, never special personal data categories.
What legal basis serves for processing of your personal data
Personal data which you provide to us are processed on the legal basis as specified hereunder:
- Performance or conclusion of a contract
- Purchase and sale of goods and services, invoicing, mutual communication
- Fulfilment of a legal obligation
- Obligation under Czech or EU laws – Accounting Act, Labour Code, laws governing social security and employment, Insurance Act, Act on Legalisation of Proceeds from Crime etc.
- Legitimate interest
- Transmission within our company/organisation for administrative purposes.
Who receives your personal data
We transmit your personal data only within Eden Europe, s.r.o. Your personal data may also be further provided and disclosed to third parties within the necessary scope. The third parties are:
- Our suppliers securing logistics (supply of goods and services) – contract performance.
- Our partners for securing registration, claim procedure and obtaining feedback for the purposes of improving goods and services to our customers – legitimate interest (improvement of goods and services).
- Audit companies– fulfilment of a legal obligation.
- IT companies – based on a legitimate interest. This involves outsourcing of IT services and, if necessary, access to personal data within the IT system administration.
- State administration bodies – tax authorities, health insurance companies, social insurance companies, courts, court bailiffs, etc. – based on fulfilment of a legal obligation.
Each subject/third party that receives your personal data for the aforementioned purpose/s (if it is not a fulfilment of a legal obligation), is bound by a contract which stipulates, inter alia:
- Obligation to protect personal data
- Confidentiality obligation
- Obligation to cooperate during inspection of fulfilment of GDPR provisions
Transmission of your personal data to foreign countries
We transmit your personal data only within Eden Europe, s.r.o.
How long we keep your personal data
We keep your personal data, depending on the purpose for which we process them. We keep your personal data at least for the contract term. In the majority of cases, we are forced to keep your personal data in line with the laws (Accounting Act, Labour Code, laws governing social security and employment, Insurance Act, Act on Legalisation of Proceeds from Crime), which is usually for 10 years.
If you wish to ascertain the individual period for the keeping of your personal data, feel free to contact our Financial Department (see section “Contact persons for questions about your personal data and rights“).
Cookies’ processing, IP address tracking and other means of technological monitoring
We do not use means for monitoring, analysing and evaluating cookies, IP addresses and other electronic seals.
Personal data-based profiling
Eden Europe, s.r.o. does not carry out personal data-based profiling.
Eden Europe, s.r.o. adheres to the principles introduced by Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and is prepared to cooperate in the assertion of your rights:
Under GDPR you have the following rights:
- Data subject´s right to deletion of personal data, the right to be forgotten (Article 17 GDPR)
- Data subject´s right to know the data which the controller or processor has on the data subject (Article 15 GDPR)
- Data subject´s right to object to the processing of his/her personal data (Article 21 GDPR)
- Data subject´s right to the restriction of processing (Article 18 GDPR)
- Data subject´s right to transmit his/her personal data from the controller to a third party (Article 20 GDPR)
- Data subject´s right to request a human review in the case of automated decision-making (Article 22 GDPR)
- Data subject´s right to have his/her personal data updated so that the old version does not cause any harm to him/her
Deletion (being forgotten) – your personal data will be deleted except for the data necessary for the fulfilment of a legal obligation, data necessary for the defence of legal claims or data necessary for the protection of public interests.
Access (knowing the data we have about you) – you will be provided with a copy of all personal data which we have about you, except for our intellectual property or trade secret and also in cases when the personal data of other persons could be transmitted.
Raising an objection to personal data processing – you may raise an objection at any time and it will be handled in a corresponding manner to prevent harm to your personal interests. You may assert the objection in cases when the processing is necessary for the purposes of the legitimate interests of the relevant controller or a third party, or to the processing of personal data for direct marketing or profiling purposes. Should you raise an objection to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Restriction of personal data processing – based on your objection, we will restrict the processing of your personal data. Until the objection is resolved, your personal data processing will be restricted.
Personal data transmission – if you provided us with your personal data based on a contract or consent, your personal data will be exported in a structured, standardly used electronic format so that you can hand them over to a third party.
Request for a human review in the case of automated decision-making – if you have doubts about the correctness of automated decision-making based on the personal data you provided, we will ensure decision-making by an authorised person.
Update of personal data in such a manner that the old version does not cause any harm to you – we will ensure the update of your personal data based on your suggestion.
Eden Europe, s.r.o. specifically informs you under Article 21(4) GDPR that you have the right to raise an objection to automated individual decision-making under Article 21 GDPR and that, under Article 21(2) GDPR, you have the right to raise an objection at any time to the processing of personal data for direct marketing purposes (see above). At the same time, Eden Europe, s.r.o. informs you that if you have a suspicion that your personal data are processed without authorisation, you have the right to file a complaint with the Office for Personal Data Protection of the Czech Republic.
Personal data protection
Eden Europe, s.r.o. ensures the protection of your personal data, using a security management system based on personal data risk analysis. Eden Europe, s.r.o. assures you that it continuously evaluates the security situation and risks and adjusts its security plans to prevent any threat to your personal data. We wish to assure you that the corresponding procedures and technologies for ensuring information, physical and administrative security are implemented using organisational and technical means. We do not specify these procedures and mechanisms in this text for understandable reasons.