Personal Data Protection Policy
Identity and contact details of the controller
Company:
Company ID:
Having its registered office at:
Smart Energies expert s.r.o.,
08582912,
U Bulhara 1611/3 , Nové Město, 110 00 Prague 1
registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C 321446/MSPH
To exercise the rights of the data subject pursuant to Act No. 101/2000 Coll., the Personal Data Protection Act, and to Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “General Regulation”), you can contact us in person at our registered office, by post at the mailing address provided above, or by e-mail at tomas.hakl@smartenergies.cz. Our company does not meet the conditions for the mandatory appointment of a data protection officer. In case of doubts as to your identity, we may ask you for additional verification of your identity.
1. Subject of data processing
As part of our activities, we only process common categories of personal data. In most cases, this is personal data that has been provided by the data subject directly during contract negotiations or any other contact (e.g., by completing a form, delivering during the preparation of contractual documentation, or in a telephone call or other communication).
1. Identification data such as title, first name, surname, personal identification number, date of birth, permanent address, job title;
2. Contact details such as telephone number, e-mail address, and work e-mail address;
3. Transaction data, which includes, in particular, data concerning services received and provided, the negotiation and content of contracts concluded, consumption amounts and history, information about appliances used, user rights, deliveries, payments, and other data resulting from services provided to our customers and business partners;
4. Data for the provision of services, which we understand to mean, in particular, technical data of the consumption point, meter number, etc.
5. Data included in communication, i.e. in particular any personal data provided during the data subjects’ communication with our company or business partners, but also the content of communication with the data subject itself (content of e-mail communication, recordings, service logs), as well as information voluntarily provided in questionnaires, forms, surveys, or similar sources;
6. Data related to the use of the website www.smartenergies.cz, where we may collect data such as IP address, browser type, operating system type, and approximate location. We also store this information obtained through cookies and web server logs.
2. Categories of data subjects
Employees, members of statutory bodies, authorised or contact persons of business partners, website visitors, customers, and potential customers.
3. Purposes and legal basis for processing
3.1. Processing of data necessary for the performance of a contract
Personal data processed for the purpose of the provision of services, secure and proper performance of an agreement, user rights management and the provision of customer service to our customers. The provision of this personal data is a contractual obligation, and failure to provide it would prevent us from fulfilling our agreement with the client in an effective and secure manner.
3.2. Processing of data necessary for the fulfilment of a legal obligation to which the controller is subject
Personal data processed for the purpose of fulfilling obligations arising from legal regulations imposing an obligation to process personal data. This typically involves the storage of data for the purpose of maintaining accounting and for the fulfilment of conditions for doing business in the field of energy distribution.
The provision of this data is a legal requirement. This mainly concerns the following regulations: Act No. 563/1991 Coll., on accounting; Act No. 235/2004 Coll., on value-added tax; Act No. 458/2000 Coll., the Energy Act; the act regulating the distribution of insurance.
3.3. Processing of data necessary for the establishment and fulfilment of an employment relationship
Personal data processed for the purpose of recruiting employees is stored for the potential conclusion of an employment agreement with an applicant. The provision of this personal data is a contractual obligation, and failure to provide it would prevent us from conducting the selection process and fulfilling our agreement with the employee in an effective and secure manner.
3.4. Processing of data necessary for the purposes of legitimate interests in the context of business communication
Personal data processed for the purpose of establishing, maintaining, and deepening business relationships and agreements with our business partners and customers, that is, for example, for the purpose of sending business offers, surveying and improving your customer experience, PR, and brand strengthening. Our legitimate interest also includes the use of personal data for the proper protection of our legal claims, maintaining internal statistics and records, performing internal audits, etc. If judicial, administrative, or other proceedings are initiated, we process personal data to the extent necessary for the duration of such proceedings. The provision of this data is voluntary, and you have the right to object to its processing for these purposes at any time in accordance with Article 21 of the General Regulation; if you object to processing for direct marketing purposes, your data will automatically no longer be processed.
As part of our business strategy, we also use cookies, mainly for the purposes of identifying the user’s device, optimising our website, and for third-party services (in particular Google Analytics). If a website visitor disagrees with the use of cookies, they can choose to block them in their browser settings.
4. Categories of recipients of personal data
All personal data is used by our company exclusively for internal purposes and is protected against misuse. Personal data is transferred to the extent necessary for processing to public authorities and other processors who, in accordance with the instructions provided, give sufficient guarantees that technical and organisational measures have been implemented such as to ensure that the processing meets the requirements of the General Regulation.
Processors include, for example, advisory and consulting companies, law enforcement authorities, supervisory authorities in the field of personal data protection, and other state authorities competent under special regulations.
In the course of processing personal data, the data is not transferred to third countries outside the European Union or to international organisations.
5. Duration and method of personal data processing
Personal data is processed for the time necessary to ensure the fulfilment of all rights and obligations arising from an agreement and further for the time required to store the data pursuant to generally binding legal regulations. Personal data processed on the basis of a legitimate interest is processed for the duration of the purposes for which it was collected, or for the duration of compatible purposes.
Personal data is stored in electronic form exclusively on our company’s servers in the Czech Republic or on servers of our trusted partners. We store data physically solely on our company’s premises or under the supervision of responsible persons.
We also use the services of other processors for the processing of personal data, who process personal data on our instructions, such as lawyers and tax advisors. Specific processors in the field of energy supply are, in particular, service partners providing service, installation, and other work (e.g., consumption readings, calibration and verification for the purposes of contract performance and for improving customer experience).
6. Rights of data subjects
Data subjects have the right to contact our company in order to exercise their right to access personal data concerning them, for their rectification or erasure, or to restrict processing, as well as the right to object to processing, and to exercise the right to data portability and other rights under the General Regulation.
If you believe that we are not handling your data adequately and in accordance with legal standards, you can file a complaint with the supervisory authority – the Office for Personal Data Protection, having its registered office at Pplk. Sochora 27, 170 00 Prague 7 – Holešovice, or via the office’s website: www.uoou.cz.
Smart Energies expert s.r.o.