Privacy Policy

The Controller ensures that your Personal Data are processed in secure and accurate manner. You may exercise all the rights described in this clause with the Controller.

How can you exercise your rights?
You may exercise each individual right via sending an email to gdpr@ddc-financial.com or by calling to +420 222 535 535, eventually by sending a written request to the postal address of the Controller. 
A statement or information on measures adopted shall be provided to you by the Controller as soon as possible, but not later than within 1 month from receipt of the request. The Controller is entitled to extend this period by 2 months taking into account complexity of the issue and number of requests submitted. The Controller will inform you of such an extension. 

9.1    Right to be informed - at least about:
(i)    the identity and the contact details of the Controller and of the Controller's representative;
(ii)    the contact details of the DPO;
(iii)    the purposes of the processing of the Personal Data as well as the legal basis for the processing;
(iv)    the legitimate interests pursued by the Controller;
(v)    the recipients or categories of recipients of the Personal Data;

9.2    Right of access
You may request access to your Personal Data and obtain information what Personal Data concerning your person is being processed, and access the following information:

(i)    the purposes of the processing; 
(ii)    the categories of Personal Data concerned; 
(iii)    the recipients or categories of recipient to whom the Personal Data have been or will be disclosed
(iv)    the envisaged period for which the Personal Data will be stored, or, if not possible, the criteria used to determine such period;
(v)    the existence of the right to request from the Controller rectification or erasure of the Personal Data or restriction of processing of the Personal Data concerning you or to object to such processing; 
(vi)    the right to lodge a complaint with a supervisory authority;

The Controller shall provide a copy of the Personal Data undergoing processing. For any further requested copies, the Controller may charge a reasonable fee based on administrative costs. The DPO or other authorized person may decide that you should be asked to cover the costs or that your request can be rejected. Where the request is made by the electronic means, and unless otherwise requested by you, the information shall be provided in a commonly used electronic form.

9.3    Right to rectification
(i)    You have the right to request the Controller to rectify your inaccurate Personal Data.
(ii)    You have also right to have your incomplete Personal Data completed, including by means of providing a supplementary statement. While executing this right, the purposes of the processing must be taken into account and the DPO shall decide whether it is appropriate or not.

9.4    Right to erasure
You have the right to ask the Controller to erasure your Personal Data. The Controller shall have the obligation to erase your Personal Data where one of the following grounds applies:
(i)    the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(ii)    you object to the processing and there are no overriding legitimate grounds for the processing;
(iii)    you revoke the consent and there is no other reason for the processing;
(iv)    the Personal Data has been unlawfully processed;
(v)    the Personal Data have to be erased for compliance with a legal obligation in the European Union or Member State law to which the Controller is subject.
Right to erasure shall not apply to the extent that processing is necessary for the establishment, exercise or defence of legal claims.
 

9.5    Right to the restriction of processing
You have the right to restrict the processing where one of the following applies:
(i)    you contest the accuracy of the Personal Data, for a period enabling the Controller to verify the accuracy of the Personal Data;
(ii)    the processing is unlawful and you oppose the erasure of the Personal Data and request the restriction of its processing instead;
(iii)    the Controller no longer needs the Personal Data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims;
(iv)    you have objected to processing pending the verification whether the legitimate grounds of the Controller override those of yours.
 

9.6    Right to object
You have the right to object, on grounds relating to the particular situation, at any time to the processing of your Personal Data, including profiling. 
The Controller shall no longer process the Personal Data unless the Controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
 

9.7    Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority (Czech Data Protection Authority), of the alleged infringement if you consider that the processing of the Personal Data infringes your rights.
 

9.8    Right to portability
In relation to the Personal Data that you have provided to the Controller and that is subject to automatized processing, you have the right to receive it in a structured, commonly used and machine-readable format and the right to transmit this Personal Data to another controller without hindrance from the Controller.