Information on the processing of personal data

According to Articles 13, 14 and 21 of the EU General Data Protection Regulation (GDPR)

The following information provides you with an overview of the processing of your personal data by the Provider and your rights arising therefrom. Which data is processed in detail and how it is used depends largely on the requested or agreed services in each case. Therefore, not all the statements made here may apply to you. This information on the processing of personal data may be updated from time to time. You can find the current version at any time on our website www.tappingdyllong.com.

Who is responsible for data processing and who can I contact?

The responsible entity is the Provider,

The company Mugambazi s.r.o.

Registered office: K Roztokům 291/42, 165 00 Prague 6 – Suchdol

Company ID: 036 75 998

Entered in the Commercial Register kept by the Municipal Court in Prague, file no. C 236164

E-mail: tappingdyllong@gmail.com

Web: www.tappingdyllong.com

(hereinafter referred to as the “Provider”, “we”).

We process your data in the following cases:

PROVISION OF CONSULTANCY SERVICES

We process in particular the following personal data that we receive from you during the consultation:

Title, first name, surname
Address
Gender
Date of birth
Telephone and other possible contact numbers
E-mail addresses
Results and notes on your consultancy.

We process personal data:

For the fulfilment of contractual obligations (Art. 6, para. 1, letter b) GDPR): The data is processed for the fulfilment of our consultancy contract.
Due to legal requirements (Art. 6, para. 1, letter c) GDPR): We are subject to various legal obligations that entail the processing of data. These include, for example:

tax and accounting obligations,
fulfilment of control and reporting obligations, in particular under tax regulations.

In addition, the disclosure of personal data may be necessary in connection with official/judicial measures for the purpose of gathering evidence, criminal proceedings or the enforcement of civil claims.

Based on our legitimate interest (Art. 6 (1) f) GDPR): If necessary, we process your data beyond the scope of the actual performance of the contract in order to protect our legitimate interests. Examples of such cases are:

the exercise of legal claims and the defence of legal disputes,
processing in the CRM system for invoicing.

WEBSITE VISITS

If you visit our website, i.e. if you do not register or otherwise provide information, certain technical information of a general nature (so-called server logs) is automatically collected during this access, such as the type of web browser, the operating system used, the domain name of your internet service provider, IP address, etc.

This data is processed based on our legitimate interest (Article 6(1)(f) GDPR), in particular for the following purposes:

ensuring a smooth connection to our website,
ensuring technically smooth use of our website,
analysing system security and stability, diagnosing errors,
protecting against misuse and attacks. We do not use your data to identify specific persons, and it is not further processed for marketing purposes.

3) COOKIES

You can find information about the processing of cookies in a separate document available on our website.

4) CONTACT FORM

The data you enter into the contact form will be processed for the purpose of personalized communication with you. To do this, you need to provide a valid e-mail address and your name. This serves to assign the query and its subsequent response. Providing additional data is optional.

The data entered into the contact form is processed based on our legitimate interest (Article 6(1)(f) GDPR).

By providing the contact form, we want to make it easier for you to contact us. The information you provide will be stored for the purpose of processing your query and for any further questions.

If you contact us with a request for a quote or other request aimed at concluding a contract between us, the data entered in the contact form will be processed for the purpose of carrying out pre-contractual measures (Article 6(1)(b) GDPR).

5) SENDING A NEWSLETTER

We may send our clients commercial communications (newsletters) regarding our services or activities, in accordance with the relevant legal regulations (in particular Act No. 480/2004 Coll., on certain information society services). For this purpose, we may process the personal data of clients, in particular their e-mail address, on the basis of our legitimate interest (Article 6(1)(f) GDPR).

If you are not our client, we may send you newsletters only on the basis of your consent (Article 6(1)(a) GDPR).

What is common to both cases is that you can unsubscribe from commercial communications at any time via the link provided in each e-mail, or by contacting the Provider at the contact details provided above

Who can process or receive my data?

Within the Provider

The Provider, any employees or collaborators for contact with you and contractual cooperation (including the fulfilment of pre-contractual measures).

Within the framework of order processing

Your data may be transferred to service providers who work for us as processors, e.g. in the areas of:

support or maintenance of IT systems and applications,
accounting,
tax consulting,
services used to order dates for our services and their payment.

All service providers are contractually or legally bound to the obligation to treat your data confidentially.

Other third parties

Data may be transferred to recipients outside the Provider only in accordance with applicable data protection regulations. Recipients of personal data may include, for example:

public authorities and institutions (e.g. financial authorities or law enforcement agencies) in the event of a legal or official obligation,
financial service providers (processing of payment transactions),
tax advisors or entrepreneurs and tax and payroll auditors (authorized for mandatory audits).

Is the data transferred to a third country or an international organization?

Your data will only be processed within the European Union and the countries of the European Economic Area (EEA).

Automated individual decision-making

We do not make decisions based solely on automated individual processing that would produce legal effects on the data subject or similarly significantly affect him/her.

How long will my data be stored?

We process and store your personal data for as long as is necessary to fulfil our contractual and legal obligations. If the data is no longer needed to fulfil contractual or legal obligations, it is regularly deleted. Exceptions apply:

if it is necessary to fulfil legal retention obligations,
for the preservation of evidence within statutory limitation periods,
if you contact us via the contact form and we do not establish a contractual relationship, in which case your inquiry will be deleted after 6 months of processing the inquiry.

If the data processing is carried out in our legitimate interest, the personal data will be deleted as soon as this interest ceases. The above exceptions apply.

What are my rights to the protection of personal data?

Under the conditions set out in the GDPR, you have:

the right to access your personal data pursuant to Article 15 of the GDPR, and you also have the right to obtain a copy of your personal data, where the first provision is free of charge, for subsequent provision, reasonable reimbursement of the costs associated with obtaining such a copy may be required,
the right to rectification of personal data pursuant to Article 16 of the GDPR, or restriction of processing pursuant to Article 18 of the GDPR,
the right to erasure of personal data pursuant to Article 17 of the GDPR, unless the data is data that the controller is obliged to process pursuant to legal regulations or is authorized to process based on its legitimate interest,
the right to object to processing based on legitimate interest pursuant to Article 21 of the GDPR,
the right to data portability pursuant to Article 20 of the GDPR,
in the event that processing is based on your consent, the right to withdraw consent to processing in writing or electronically to the address or e-mail of the controller specified in these principles.

You also have the right to file a complaint with the Office for Personal Data Protection (registered office Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice, www.uoou.cz) if you believe that your right to personal data protection has been violated.

Is the provision of data mandatory?

Within the framework of a contractual relationship, personal data must be provided that is necessary for the initiation, implementation and termination of the contractual relationship and for the fulfilment of the related contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to conclude or fulfil the contract with you.

In the case of the contact form, the provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the purpose of your inquiry.

Information on your right to object under Article 21 GDPR

You have the right, for reasons relating to your particular situation, to object at any time to the processing of data relating to you which is based on Article 6(1)(f) GDPR (processing based on the legitimate interest of the controller); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of the objection

The objection can be submitted in a free form with the subject line “Objection” and stating your name, address and date of birth, to the following address:

Mugambazi s.r.o.

K Roztokům 291/42,

165 00 Praha 6 – Suchdol

E-mail: tappingdyllong@gmail.com