Processor

The controller of personal data is Quanti s.r.o., Company ID: 247 49 001, with its registered office at Thákurova 531/4, Dejvice, 160 00 Praha 6, registered in the Commercial Register maintained by the Municipal Court in Prague, sp. no. C 171120 (”Company“).

Purpose of data processing

We process personal data strictly for the purpose of fulfilling contractual obligations and legal obligations of the Company. In most cases, we do not need your consent to do so.

We only process the data necessary for the above purposes. These include, in particular, the following categories of personal data:

• Identification and contact details of the supplier/employees and representatives of the supplier: name, surname, company name (if the supplier is a legal entity), address of registered office, ID number, VAT number, contact phone and e-mail, or other contact details,

• Contractual and business documents: especially contracts, additions, orders, information on the fulfillment of contractual obligations, work reports and records of complaint procedures,

• Communications and consents: e-mail correspondence, written communications, consents, other documents related to the performance of the contract and consent to the processing of personal data,

• Accounting documents and payment information: accounting documents, bank account numbers and the like,

• Technical information: logins, logs (records of accesses to the Company's IT systems),

• Statistical information.

We process personal data in order to fulfill the contract we have concluded with you, the so-called purpose is the performance of the contract. In some cases, we process personal data because we are required to do so by law. We also process personal data on the basis of legitimate interest for the purposes of managing the supplier relationship and statistical purposes, for the purposes of securing IT systems and also in order to protect the legitimate interests of the Company (for example, when defending our legal claims in possible disputes. If we process personal data on the basis of consent, the purpose is stated directly in the consent.

‍

Who has access to personal data

Within our Company, your personal data is accessible to certain employees of the Company and the Company's management. In connection with access to personal data, the Company's employees are obliged to maintain confidentiality of personal data and comply with internal data protection regulations.

We may also share personal data with auditors or legal advisors.

We may use trusted personal data processors to process personal data.

‍

Retention period of personal data

We retain personal data for a limited period of time and delete it as soon as it is no longer needed for the purpose. This usually means that we will retain personal data for the duration of the contractual relationship. After the termination of the contractual relationship, we will archive certain personal data for a period specified by law or for the duration of the limitation period for the exercise of rights and defense against possible claims or in case of checks by state authorities.

The processing time of electronic and written records and documents that have arisen in the framework of the contractual relationship is governed by the retention period of the relevant documents (for example, the retention period of accounting documents).

‍

Rights related to personal data processing

Under the law, you have the right to ask us to provide you with information or perform certain operations with your personal data.

Right of access: You have the right to a copy of the personal information we hold about you and certain information about how we use it.

Right to rectification: If you believe that the information we hold about you is inaccurate, you can ask us to update or change it. In the course of your employment, you have a legal obligation to report changes to your personal data to us.

Right to object: You have the right to object to processing carried out by us for a legitimate interest, but only if there are no overriding legitimate grounds for processing. We cannot object to processing imposed by law.

Right to withdraw consent: If we process personal data with your consent, you can withdraw your consent to further use at any time.

Right to erasure: In certain circumstances, you have the right to ask us to delete your data, for example if the personal data is no longer necessary for the original purpose or if you withdraw your consent. However, it must be balanced taking into account other factors. For example, we may have legal obligations that mean that we cannot comply with your request.

Right to data portability: In certain circumstances, you have the right to ask us to provide you with your personal data in a machine-readable format. You can also request that we pass the data to a third party.

Right to restriction of processing: In certain circumstances, you have the right to ask us to stop using your personal information, for example if you believe that the personal information we hold about you is inaccurate or if you believe that there is no need for us to continue using your personal information.

In some cases, our obligation to comply with the request depends on the purpose for which we process your data. Some rights can only be exercised for certain processing purposes, or there are exceptions.