Information on data processing pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)

We hereby inform you about the processing of your personal data and your rights relating to the protection of personal data. The content and scope of the data processing depend decisively on the products and services that you request or whose provision has been agreed with you.

Who is the data controller and whom can you contact?

Data controller:

NEO District a.s.
V luhu 754/18, Nusle
140 00 Prague 4, Czech Republic

Company ID (IČO): 24371581
VAT ID (DIČ): CZ24371581
E-mail: info@nckv.cz

What data is processed and from what sources does it originate?

We process personal data that we receive from you in the course of a business relationship. In addition, we process data that we have lawfully obtained from publicly available sources (e.g. the Commercial Register, the Register of Associations, the Land Registry, the media, the internet) and from other external companies (e.g. credit reference agencies), or that is passed on to us in the course of processing orders on behalf of our clients.

Personal data includes your detailed personal and contact details (name, address, date and place of birth, nationality, etc.) and data used to verify your identity (e.g. travel documents, data from identity documents). In addition, this may also include data on payment transactions within a joint business relationship, creditworthiness data, proof of income (where required, e.g. for subsidies), marketing and distribution data, electronic log and identification data (e.g. cookies on websites or, where applicable, in special applications), and other data comparable to the categories listed. To protect our publicly accessible buildings, we use video cameras that record persons entering and leaving the building. These video recordings are evaluated only in justified cases. We also use video cameras within our projects to monitor the progress of construction work on the properties.

For what purposes and on what legal basis is the data processed?

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Data Protection Act of 2018.

for the performance of contractual obligations (Art. 6(1)(b) GDPR):

The processing of personal data (Art. 4(2) GDPR) is carried out in order to fulfil our contractual obligations (e.g. the valuation/handover of a property to our customers). The purposes of the data processing are primarily determined by the specific business relationship.

for compliance with legal obligations (Art. 6(1)(c) GDPR):

The processing of personal data may be based on various legal obligations (e.g. the Civil Code, the Act on Business Corporations, the Consumer Protection Act, the Act on Certain Measures against the Legalisation of the Proceeds of Crime and the Financing of Terrorism, etc.).

with your consent (Art. 6(1)(a) GDPR):

If you have given us your consent to the processing of your personal data for specific purposes (e.g. the needs-analysis process and direct customer contact), we process the data exclusively in accordance with the purpose set out in the declaration of consent and to the extent agreed therein. Consent given may be withdrawn at any time with effect for the future.

to protect legitimate interests (Art. 6(1)(f) GDPR):

Where necessary, we or third parties may process data beyond the actual performance of the contract in order to protect the legitimate interests of NEO District a.s. or the legitimate interests of third parties. Data is processed to protect legitimate interests in the following cases:

Who receives my data?

Within NEO District a.s., your data is received by employees who need it in order to fulfil contractual and legal obligations and legitimate interests. In addition, your data is received from us by the service providers we engage and by data processors (in particular legal representatives, civil engineers, tax advisers, IT service providers, accounting firms, office service providers or telecommunications service providers), insofar as they need the data to perform their tasks. All processors are contractually obliged to maintain the confidentiality of the data and to process it only within the scope of providing their services.

In addition, recipients of your personal data may be public institutions and authorities (e.g. tax authorities, courts, etc.).

Further recipients of the data may be the parties that you have named in your consent as authorised recipients of your data.

How long will my data be stored?

We process your personal data, where necessary, for the duration of the entire business relationship (from the establishment of the relationship, through its performance, to the termination of the contract) and, in addition, depending on the retention and documentation periods (in particular claims arising from legal relationships), which are derived, among other things, from the Civil Code, the Act on Business Corporations, the Consumer Protection Act, the Act on Certain Measures against the Legalisation of the Proceeds of Crime and the Financing of Terrorism, etc.

What data protection rights do I have?

You have the right at any time to information, rectification, erasure or restriction of the processing of your stored data, the right to object to processing, and the right to data portability in accordance with data protection law. You may address complaints to the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7.

Am I obliged to provide the data?

Within the business relationship, you must provide the personal data that is necessary for the establishment and performance of the business relationship and that we are required by law to collect. If you do not provide us with this data, we will generally be forced to refuse to conclude the contract or to carry out the order. However, you are not obliged to give consent to the processing of data that is not relevant to the performance of the contract or not required by law.

To what extent is automated decision-making used?

For the establishment and performance of the business relationship, we generally do not use automated decision-making within the meaning of Article 22 GDPR. Should we use such procedures in individual cases, we will inform you separately, where this is required by law.

Does profiling take place?

We do not process any data with the aim of evaluating certain personal aspects (profiling).

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.