Information about Personal Data Processing

1. WiMes s.r.o., with its registered office at U potoka 510, 353 01, Velká Hleďsebe, ID: 09170944, registered in the commercial register kept by the Regional Court in Plzeň, Section C, Entry 39296/KSPL Regional Court in Plzeň ("Controller"), processes personal data of its customers who are natural persons ("data subjects"). Data subjects may contact the Controller regarding the processing of their personal data at the email address info@wimes.cz.

2. The Controller will process the identification and contact details of the data subject and other data collected by the Controller in the performance of contracts concluded with the data subject ("contract").

3. The Controller processes personal data of the data subject for the following purposes:
 3.1. To fulfill the contract, based on Article 6(1)(b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").
 3.2. To comply with the legal obligation of the Controller under generally applicable legislation, based on Article 6(1)(c) of the GDPR (e.g., the obligation of the Controller to retain accounting and tax documents).
 3.3. To establish, exercise, or defend the legal claims of the Controller, based on Article 6(1)(f) of the GDPR; and
 3.4. For sending commercial communications, based on Article 6(1)(f) of the GDPR, due to the legitimate interest of the Controller in direct marketing.

4. Personal data will be processed only for the period necessary for the purpose of their processing. In view of the above:
 4.1. For the purpose specified in Article 3.1 above, personal data will be processed until the obligations under the contract expire. This does not affect the Controller's possibility to further process these personal data (to the extent necessary) for the purposes specified in Article 3.2, 3.3, and/or 3.4 above;
 4.2. For the purpose specified in Article 3.2 above, personal data will be processed for the duration of the relevant legal obligation of the Controller;
 4.3. For the purpose specified in Article 3.3 above, personal data will be processed until the end of the 4th calendar year following the end of the warranty period under the contract (if a quality guarantee was included in the contract), but at least until the end of the 5th calendar year following the termination of the obligations under the contract. In the event of the initiation and continuation of judicial, administrative, or other proceedings in which the Controller's rights or obligations concerning the data subject are resolved, the processing of personal data for the purpose specified in Article 3.3 above will not end before the conclusion of such proceedings;
 4.4. For the purpose of sending commercial communications specified in Article 3.4 above, personal data will be processed until the data subject expresses their objection to such processing.

5. By the end of the calendar quarter following the expiry of the processing period specified in Article 4 above, the relevant personal data, the purpose of which has ceased, will be destroyed (by shredding or by other means that will ensure that unauthorized persons cannot become acquainted with the personal data) or anonymized.

6. The Controller is authorized to provide personal data to recipients with whom the Controller has concluded a personal data processing agreement, and who will process personal data as its processors.

7. In connection with the processing of their personal data, data subjects have various rights, including the right to request access to their personal data from the Controller (under the conditions of Article 15 of the GDPR), their correction or erasure (under the conditions of Article 16 or Article 17 of the GDPR), or to restrict processing (under the conditions of Article 18 of the GDPR), and to object to processing (under the conditions of Article 21 of the GDPR), as well as the right to data portability (under the conditions of Article 20 of the GDPR).

8. If the data subject believes that their personal data are processed in violation of legal regulations, they have the right to contact the Controller with a request for rectification. If the data subject's request is found to be justified, the Controller will promptly rectify the situation. This does not affect the data subject's right to lodge a complaint directly with the Office for Personal Data Protection.

Providing personal data by the data subject is a contractual requirement. The data subject is not legally obligated to provide personal data, but the Controller requires this data to conclude and fulfill the contract. The terms of consent to the processing of personal data can be found below.

In Velká Hleďsebe on November 1, 2023

Consent to the Processing of Personal Data

WiMes s.r.o., with its registered office at U potoka 510, 353 01, Velká Hleďsebe, ID: 09170944, registered in the commercial register kept by the Regional Court in Plzeň, Section C, Entry 39296/KSPL Regional Court in Plzeň ("Controller"), is interested in processing information concerning employees, job applicants, clients, potential clients, visitors to the WiMes s.r.o. website and microsites, and suppliers ("data subjects"). Information concerning data subjects constitutes personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR").

Personal data of data subjects are to be processed by the Controller for the purposes of contract fulfillment, conventional marketing and remarketing purposes, business purposes, as well as for legal obligations, personnel management, and information about job applicants. For the processing of personal data for the purposes mentioned above, the consent of the data subject is required. Giving such consent is entirely voluntary. The data subject also has the right to withdraw the given consent at any time by written notice delivered to the Controller. In such case, the processing of personal data based on the revoked consent will be terminated without delay. However, the legality of processing during the period before its revocation is not affected.

If the data subject grants the Controller consent to process personal data, their personal data will be processed (a) to the extent of identification and contact details, as well as information provided by the data subject to the Controller, and (b) for a period of 10 years for the purposes mentioned above.

Personal data of data subjects will not be transferred to third parties or to third countries unless required for contract fulfillment or an offer initiated by the data subject.

Data subjects have the right to request access to their personal data from the Controller (Article 15 of the GDPR), their correction or erasure (Article 16 or Article 17 of the GDPR), or the restriction of processing (Article 18 of the GDPR). Data subjects also have the right to object to the processing carried out (Article 21 of the GDPR). Under the conditions stipulated in Article 20 of the GDPR, data subjects have the right to data portability for personal data concerning them that they have provided to the Controller. Data subjects can contact the Controller regarding the processing of their personal data at the email address info@wimes.cz.

If the data subject believes that their personal data are being processed in violation of legal regulations, they have the right to contact the Controller with a request for rectification. If the data subject's request is found to be justified, the Controller will promptly rectify the situation. This does not affect the data subject's right to lodge a complaint directly with the Office for Personal Data Protection.

By granting this consent, the data subject hereby consents to the processing of their personal data by the Controller for the purposes, scope, and duration specified above. The data subject acknowledges that the Controller will archive this consent for the purpose of fulfilling the legal obligation to be able to demonstrate that the data subject has given consent to the processing."

In Velká Hleďsebe on November 1, 2023