Personal Data Processing and Protection Principles
 
These principles contain details of how we process personal data provided by you directly to UNIVERS projekt v.o.s. or through our website
www.up-i.cz. 

The principles provide answers to the following questions related to how your personal data are processed:

- who processes your data,
- how they are processed,
- for what purpose,
- for how long,
- what types of data are processed with respect to what categories of natural persons.

Additionally, these principles state your rights related to such processing of your data as well as where you can exercise these rights.
 
What rules do we comply with while processing your personal data?
We ensure compliance with applicable European as well as Czech legislation while processing your personal data. Specifically, this includes Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with regard to the Processing of Personal Data (aka the GDPR) as well as Czech Act No. 101/2000 Sb., on Personal Data Protection.

How are your data processed?
Your data (both electronic and paper-based) are processed by us. We employ advanced electronic information systems and tools. Processing may be partly automated. We have taken appropriate organizational and technical measures to ensure security of your personal data. We regularly test and evaluate the effectiveness of such measures. Independent contractors processing your personal data, if any, are bound by the same data processing rules – confidentiality of your data will not be compromised.


​DETAILS OF HOW WE PROCESS YOUR PERSONAL DATA (PURSUANT TO ARTICLE 13-14 OF GDPR)
 
Who processes your personal data?
The administrator of your personal data is UNIVERS projekt v.o.s., a company duly registered by the Regional Court in Brno, File A, Section 6130, registered office: Pechova 1595/5, Židenice, 615 00 Brno, Czech Republic.
UNIVERS projekt is also the operator of the company’s two websites – www.up-i.cz and www.up-p.cz.
 
Our external information technology administrator, external provider of accounting and tax services, and external webhosting provider are the processors of your personal data. Each of these processors have registered offices, and process data, in the Czech Republic. Authorized persons may request more information from the member of the UNIVERS staff designated by the company to ensure protection of personal data (contact details below).
 
Our website uses Google Analytics. Personal data are subsequently processed by Google LLC, Mountain View, USA.
 
What personal data do we process? How, why and for how long do we do so?
 
If you are our client 
(a consumer or a representative of a customer)
Processing helps us to manage our interaction with customers (clients) as well as to deal with usual matters related to orders and contracts. No other data will be processed in addition to the following: company name, first name and last name, job title, telephone, mobile phone, email. Data may be stored for a maximum of two years after the most recent interaction between UNIVERS projekt and a representative of a customer. Processing to the maximum extent required to draw up or fulfil a contract is considered processing for a legitimate cause.
 
If you are our supplier
(a representative of a supplier)
Processing helps us to manage our interaction with suppliers as well as to deal with usual matters related to orders and contracts. No other data will be processed in addition to the following: company name, first name and last name, job title, telephone, mobile phone, email. Data may be stored for a maximum of two years after the most recent interaction between UNIVERS projekt and a representative of a supplier. Processing to the maximum extent required to draw up or fulfil a contract is considered processing for a legitimate cause.
 
If you have sent us an email
(a representative of a supplier; a representative of a customer; a prospective client; a job applicant)
The aim of processing is to enable internal as well as external communication. We process the personal data you have sent us; processing takes place for a period of time that both parties consider reasonable, normally for 12 months after our most recent interaction. We process data on a legitimate interest basis as this processing is necessary for us to manage our communications system and electronic data, to protect our industrial property as well as to expand and protect our commercial activities (without limitation).
 
We also comply with our own Internet Safety Rules and Code of Ethics while working on the internet and processing your data.
 
If you are a visitor to our website www.up-i.cz
(a customer, a supplier, a prospective client, a job applicant or a person requesting more information)
We monitor and statistically evaluate our website traffic. To that end, we use Google Analytics, a service that stores IP addresses of users visiting our website. We also use cookie files. These enable us to identify computers without uniquely identifying specific users.
 
More information about cookies as they are used by Google Analytics is available here: https://policies.google.com/technologies/cookies?hl=cs.
Please note: you can disable or delete cookies anytime by setting your browser accordingly or by downloading a Google Analytics Opt-Out Browser Add-on available on https://tools.google.com/dlpage/gaoptout. More information on personal data protection available here https://support.google.com/analytics/topic/2919631?hl=cs.
If you use our website contact form, we will process the data you provide in the form. Data will be processed for 6 to 12 months. We process data on a legitimate interest basis as this processing is necessary for us to manage our presentation system, communications system, electronic data as well as to expand and protect our commercial activities (without limitation).
 
If you are our employee
Processing helps us, for example, to deal with matters related to your employment and communicate with the public authorities and insurance companies as well as to promote the professional growth of our employees and provide employee benefits. Personal data are processed for a period of 6-12 months after employment termination unless applicable legislation prescribes a longer period. Legitimate reasons to do so include fulfilling our legal obligations, our legitimate interest in building a highly qualified and stable work team as well as promoting the company and building a corporate reputation and goodwill. More information about personal data categories and additional processors is available in our internal Personal Data Processing and Protection Directive. Please, contact the member of the UNIVERS staff designated by the company to ensure protection of personal data if you are interested in consulting this directive.
 
If you are a user of our computer network
(an employee, an independent contractor)
The aim of processing is to log network access, information system access, and internet access. No other data will be processed in addition to the following: first name, last name, user name (log-in), password, user group (department, security group), job title, department, office (location), office telephone number, mobile telephone number, fax number, street, town/city, region, postal code, country or region. These may be stored for as long as a user account exists. We process data on a legitimate interest basis as this processing is necessary for us to manage our electronic data and protect our industrial property as well as to expand and protect our commercial activities (without limitation).
 
What are your rights in respect of the personal data that we process?
You can request more information about how we process your personal data. You also have a right to access your personal data being processed by us. Should you believe or learn we have failed to respect your privacy and/or comply with the law while processing your data, you may object to your personal data being processed, request an explanation, and ask us to correct your data. Additionally, you are entitled to request that the extent to which your personal data are processed be restricted as well as that your data be deleted. You are allowed to revoke your consent to the processing of your personal data anytime. That said, revoking your consent is without prejudice to the legality of the processing carried out prior to revocation. In addition, you have a right to request that your data are transferred as well as to file a complaint with the supervising authority. If you choose to exercise any of your rights, please, contact us via the contact details stated in this document.
 
Who will my personal data be provided to?
None of your personal data will be disclosed to third parties unless stated otherwise. We only disclose personal data if we are legally bound to do so (such as when a public authority requests them).
 
What else you need to know about how your personal data will be processed?
No automated decision-making or profiling of your personal data will be performed.

Each EU member country guarantees unified protection of personal data as defined in the GDPR.


How can you contact us?
Do you have any questions related to privacy protection? Would you like to exercise any of your rights stated above? Please, contact the member of the UNIVERS staff designated by the company to ensure protection of personal data via email (info@up-i.cz) or telephone (+420 724 795 595).