Privacy Protection

Personal data processing information for clients and suppliers pursuant to the General Data Protection Regulation (GDPR)

Who processes your personal data?

Your personal data are processed by Halla, a.s. (IN: 60201916, Litvínovská 288/11, 190 00 Prague 9, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, Insert 10058). Contact:

Which data are processed and why?

1. You consent to including your contact details (first and last name, e-mail, phone and company) in the database designated for sending information, news and commercial communications of Halla, a.s.;

2. You have the right to withdraw your consent anytime by clicking on “Unsubscribe” at the bottom of each e-mail.

Purpose of processing: We process your personal data for the purposes of sending electronic news and commercial communications by e-mail.

Legal basis:

- Consent of the data subject: for the purposes of sending news and commercial communications by e-mail;

- Legitimate interest: for the purposes of e-mailing news and commercial communications to our clients about products and services related to those that our clients ordered in the past.

Who shall have access to your personal data?

Your personal data shall not be provided to external processors for further processing. Other recipients: Due to legitimate interest or contract performance, the Controller may provide your personal data to authorized contractual partners in the area of IT services and technologies, marketing services or consulting services, whose specific categories shall be communicated to you upon request. Your personal data may be provided outside the EU by reason of necessary transfer, backup and archiving of electronic data. Other third parties: The Controller provides personal data to public authorities and other entities authorized to process personal data for the purposes of state supervision, prevention, investigation, detection or prosecution of criminal offences or execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.

How long do we keep your personal data?

We keep your personal data during the time of our contractual relationship or dealings and for another 10 years. The company does not process personal data by automated means.

What are your rights in connection with the protection of personal data?

Right of access to personal data – you have the right to access your personal data and we must provide you with a copy of your processed personal data.

Right to rectification and completion of personal data – we shall immediately rectify and complete your personal data.

Right to erasure – we shall immediately erase your personal data, if: - they are no longer necessary in relation to the purposes for which they were processed; - you withdraw your consent to processing of your personal data; - you object to processing; - your personal data were unlawfully processed; - other applicable legal regulations do not require their keeping; - it is in the public interest of public health, archiving, scientific or historical research and statistics; - it is not for the purposes of exercising or defending legal claims.

Right to restriction of processing – you have the right to ask us to restrict processing for justified reasons;

Right to personal data portability – you have the right to obtain your personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller. Automated individual decision-making – you have the right not to be subject to a decision based solely on automated processing, including profiling, unless it is necessary for performance of a contract.

Right to file a complaint with a competent supervisory authority – you have the right to file a complaint with a supervisory authority, i.e. the Office for the Protection of Personal Data.

Non-provision of personal data: You provide us with your personal data voluntarily, provided that you wish to receive information, news and commercial communications by e-mail. Otherwise we shall not be able to send them to you.

Right to object – you have the right to object to processing of your personal data and the Controller must stop processing such data in unjustified cases. You can object to processing for the purposes of direct marketing anytime.