Personal Data Processing and Protection Policy
This Personal Data Processing and Protection Policy ("Policy") outlines the fundamental principles adhered to by Virtual Visit s.r.o., Company ID: 06165061 ("Company"), when collecting and processing personal data. This Policy implements the rights and obligations of the Company arising primarily from the following generally binding legal regulations:
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, "GDPR");
Act No. 480/2004 Coll., on Certain Information Society Services, as amended ("Information Society Services Act"); and
Act No. 127/2005 Coll., on Electronic Communications, as amended ("Electronic Communications Act").
This Policy applies to all individuals visiting the Virtual Visit s.r.o. website - virtualvisit.cz ("Website"), regardless of whether they are in a contractual relationship with the Company or not.
Definition of Personal Data According to the GDPR, personal data means any information relating to an identified or identifiable natural person (not a legal entity). Essentially, it encompasses any information that, either alone or combined with other information, can identify a specific individual ("Personal Data").
Personal Data Processed by the Company The Company may collect the following Personal Data:
Personal Data Provided Directly by You
Such Personal Data typically include information provided in registration forms, order forms, or other forms, or information communicated to the Company via email, telephone, fax, or other similar devices. You may also provide Personal Data to the Company [during competitions], [by submitting a product or service review], [reserving a spot for training], or [sending general inquiries]. Primarily, these data include name, surname, mailing address, email address, phone number, bank account details, chosen payment method, etc.
The Company processes the above-mentioned Personal Data for the purposes of:
Providing the requested service, product, or information;
If you are an existing customer, providing information about other services or products similar to those previously purchased;
If you are a new customer, the Company will only send commercial communications and product/service offers if explicit consent has been given;
Evaluating your job application.
Personal Data Automatically Collected by the Company
When you visit our Website, the Company may automatically collect certain information necessary for proper and convenient Website operation. Such information includes internet protocol (IP) addresses used to connect your computer to the internet, your registration data, browser type and version, time zone settings, browser plug-ins, information about your visit, including valid Uniform Resource Locator (URL), paths to and from the Website (including date and time), products viewed or searched, response times, download errors, duration of visits to specific pages, interaction information during the visit (such as scrolling, clicks, and mouse position), or how you left the page.
The Company uses this Personal Data to administer and improve the Website and ensure internal operations, including troubleshooting, data analysis, testing, research, statistical purposes, and recording the frequency of views. This Personal Data may further be used to measure advertising effectiveness and provide relevant advertisements.
Disclosure of Personal Data Personal Data collected by the Company may be transferred [within the group [●], i.e., affiliated entities of the Company;] and to third parties ("Processors") that help the Company fulfill contractual obligations through specific services (e.g., delivery services). The Company transfers Personal Data only to Processors that provide sufficient guarantees of security for your Personal Data and process these Personal Data exclusively based on a personal data processing agreement.
The Company may transfer Personal Data to the following Processors:
External collaborators and suppliers for fulfilling contractual obligations;
Payment service providers and processors for financial transfers and payment transactions;
Postal and delivery service providers for delivering products or services offered by the Company;
Website administrators.
Under certain circumstances, the Company may be required to disclose your Personal Data to third parties (e.g., law enforcement authorities) in accordance with applicable legal regulations.
Measures for Personal Data Protection To protect and minimize the risk of unauthorized access to Personal Data, the Company has adopted organizational and technical measures, including:
Organizational restrictions limiting the number of persons authorized to access Personal Data;
Technical security measures for servers and the Company's Website against unauthorized manipulation.
Individuals accessing Personal Data are informed about personal data protection principles and are bound by confidentiality when processing Personal Data.
Retention of Personal Data The Company retains Personal Data only for the time necessary to fulfill contractual obligations and comply with applicable legal requirements. Personal Data processed based on your consent is retained only for the duration of the purpose for which consent was given.
Upon termination of the legal basis for processing your Personal Data, the Company will destroy this Personal Data and all existing copies thereof.
Rights of Data Subjects In connection with the processing of your Personal Data by the Company, you have the following rights guaranteed by data protection regulations:
Right to withdraw consent to the processing of Personal Data if processing is based on consent;
Right to request access to Personal Data and information about which of your Personal Data is processed by the Company;
Right to rectify inaccurate Personal Data and, where applicable, to complete incomplete Personal Data;
Right to erase processed Personal Data;
Right to restrict the processing of Personal Data;
Right to receive the Personal Data you provided to the Company in a structured, commonly used, and machine-readable format, and the right to transfer this data to another entity;
Right to be informed of a breach of Personal Data security;
Right to object to the processing of Personal Data;
Right to lodge a complaint with the supervisory authority, i.e., the Office for Personal Data Protection, at https://www.uoou.cz/.
The above rights and any complaints can be exercised with the Company as the data controller in writing at the address below or via email at info@virtualvisit.cz.
This Policy is valid and effective from July 22, 2021.