The personal data processing principles
Mandario Company s.r.o. with address: Bryksova 947/21, Černý Most, 198 00, Prague 9, registered in the Commercial Register maintained by Municipal Court in Prague under file no. C 285841 (“Mandario”) protects all the processed personal information as strictly confidential and handles them in accordance with applicable privacy laws.
Mandario is, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679), the controller of your personal data, i.e. collects, stores and uses (and otherwise processes) your personal data for its business activities (individual purposes of the processed data are further defined below).
This Privacy Policy applies to (i) the processing of personal data by Mandario during your use of the Mandario website ("Website"), (ii) the processing of personal data by Mandario during the execution of contracts with business partners (Mandario business partners are solely legal entities or natural persons doing business, i.e. that the processing of personal data is applied in relation to natural persons representing legal or natural persons doing business — see the chapter "Personal data of third parties"), (iii) processing of personal data when performing Mandario's legal obligations, (iv) processing of personal data for the purpose of sending commercial communications, (v) processing of personal data necessary for the purpose of protecting the legitimate interests of Mandario.
The principles of personal data processing describe the purposes of personal data processing and the ways in which they are processed; they inform about individual categories of personal data processing, their potential recipients, the time of retention of personal data and your rights in relation to personal data protection.
The purpose of personal data processing
Your personal information may be processed by Mandario for the following purposes:
- Performance of the Contract (Mandario business partners are solely legal entities or natural persons doing business, i.e. that the processing of personal data is applied in relation to natural persons representing legal or natural persons doing business — see the chapter "Personal data of third parties")
- Fulfilment of legal obligations (in particular obligations in terms of accounting and tax legislation, i.e. transfer of personal data to financial authorities; possibly other public authorities in accordance with applicable law);
- Protecting the Trustee's legitimate interest (protecting the rights and legally protected interests of Mandario, such as protecting the Website from misuse, assessing the business partner's creditworthiness);
- Handling requests sent via electronic forms (especially if you are interested in visiting our showroom, creating individual offers, etc.)
Processed personal information
Mandario is authorized to process the following personal data according to the purpose of processing:
|
Subjects data |
Processing Purposes |
|
|
Name and surname |
Fulfillment of the Contract, Compliance with Legal Obligations, Protection of the Controller‘s Rightful Interest, Processing of Requests via Electronic Forms |
|
|
Contact address |
Fulfillment of the Contract, Compliance with Legal Obligations, Protection of the Controller‘s Rightful Interest, Processing of Requests via Electronic Forms |
|
|
|
|
|
|
Phone number |
Fulfillment of the Contract, Compliance with Legal Obligations, Protection of the Controller‘s Rightful Interest, Processing of Requests via Electronic Forms |
|
|
Bank account number |
Fulfillment of the Contract, Compliance with Legal Obligations, Protection of the Controller‘s Rightful Interest |
|
|
Identification No., Tax Identification No. |
Fulfillment of the Contract, Compliance with Legal Obligations, Protection of the Controller‘s Rightful Interest |
Personal data is processed both manually and automatically. Automated processing of personal data occurs for the purpose of performance of the contract, in particular to ensure the internal processes within Mandario and its contractual partners, which are necessary to ensure production, distribution of goods and services.
Recipients of personal data
At Mandario, your personal information is only made available to authorized employees. However, always only to the extent necessary to fulfil the individual purposes of the processing, and on the basis of an appropriate legal title for the processing of personal data.
Mandario is authorized by law or it is obliged to pass on certain personal data on the basis of applicable legislation, for example to law enforcement authorities or other public authorities.
Third party personal data
Third Party Personal Information, which means the personal data of employees and customers of Mandario's business partners and other natural persons involved in the collaboration with Mandario or other data that Mandario receives from the business partner in connection with the conclusion or fulfilment of the contract will be processed in accordance with applicable privacy laws. This personal information will be used by Mandario for the purpose of fulfilling contracts with business partners.
The Business Partner hereby acknowledges that Mandario will process the personal data of third parties for the duration of the contractual relationship and for the period stipulated by special legal regulations, if any. They will then be kept for a longer period of time if there is a need to keep data related to a particular case. The Business Partner is obliged to properly instruct its personnel, customers and other individuals involved in the business partner's cooperation with Mandario about data processing by Mandario.
Period of personal data storage
We process and store your personal data for as long as is necessary to ensure all rights and obligations arising from the applicable contractual relationship, and for as long as Mandario is required, as a personal data controller, to store personal data in accordance with generally binding legal regulations or for a period that you gave us your consent for processing. In other cases, the processing period stems from the purpose of the processing to which it must be reasonable long or to which it is given by the data protection legislation.
We process personal data according to the purpose of their processing for the period specified here:
|
Purpose of processing |
Retention time |
|
Contract fulfillment |
for the duration of the contract and for 10 years after the termination of the contract |
|
Compliance with legal obligations |
for the period specified by the applicable law |
| Protection of the legitimate interest of the controller |
for a maximum of 3 years from the start of processing, unless otherwise provided for in the specific legislation, or where there is no justified need to keep data longer for a particular case |
|
Handling requests sent via electronic forms |
for the time necessary to process the request |
