MHAS propojení
CZ | EN
MHAS Personal Data Protection

Personal Data Protection (GDPR)

Information on the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)

Dear Customers and Business Partners,

This document contains basic information about how we process your personal data.

Due to new European Union legislation, this text has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

For maximum clarity, the text is processed in the form of questions and answers.

We present you with basic information that we, as a personal data controller, are obliged to provide.
In case of any questions regarding the processing of your personal data, do not hesitate to contact us using the following contact information: info@mhas.cz

1. Who is the personal data controller?

The controller is a person who alone or jointly with others determines the purposes and decides on the manner in which personal data will be processed.

The personal data controller is the company MEIXNER & HANUŠ a.s. Czech republic. The controller can be contacted at the e-mail address info@mhas.cz.

2. Who is the Data Protection Officer?

The Data Protection Officer is a person experienced in the field of personal data protection who ensures that processing takes place as it should, particularly in accordance with relevant legal regulations. This is also the most competent person for handling questions and requests regarding personal data.

The Data Protection Officer is Mrs. Eva Majvaldová, who can be contacted at info@mhas.cz.

3. For what purpose do we need personal data?

The controller processes personal data for:

The provision of personal data to the controller is generally a legal and contractual requirement. Regarding the provision of personal data for marketing purposes, which does not represent the fulfillment of a contractual or legal obligation of the controller, your consent is required. If you do not grant the controller consent to process personal data for marketing purposes, this does not mean that the controller would consequently refuse to provide you with its product or service under a contract.

4. What are our legitimate interests?

The controller also processes personal data to protect its legitimate interests. The legitimate interests of the controller are in particular the proper fulfillment of all contractual obligations of the controller, the proper fulfillment of all legal obligations of the controller, direct marketing, protection of the controller's business and property, and last but not least, environmental protection and ensuring sustainable development.

In the interest of ensuring the greatest possible protection of your privacy, you have the right to object, so that your personal data is processed exclusively for the most necessary legal reasons or that the personal data is blocked. You can read more about your rights related to the processing of personal data in Article 11 of this text.

5. How was the personal data obtained?

The controller obtained personal data directly from you, specifically from completed forms, mutual communication, or concluded contracts. In addition, personal data may also come from publicly available sources, registers, and records, for example from the Commercial Register, the register of debtors, professional registers, or the Real Estate Cadastre. Furthermore, the controller may have obtained personal data from third parties who are authorized to access and process your personal data and with whom it cooperates, and also from information on social networks and the Internet that you yourself have placed there.

6. What categories of personal data are processed?

To ensure your satisfaction with the proper fulfillment of an obligation, to ensure the fulfillment of legal obligations, to ensure a personalized offer of goods and services of the controller, and for other purposes listed above, the controller processes the following categories of personal data:

7. What is the legal basis for processing personal data?

The lawfulness of processing is governed by Article 6(1) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract, for compliance with a legal obligation of the controller, for the purposes of the legitimate interests pursued by the controller, or if the processing is based on consent you have given us.

8. Will we share personal data with anyone else?

Our employees have access to your personal data, and in necessary cases, the following cooperating individuals and companies:

We have a contract with all these associates and companies, which obliges them to handle the provided personal data exactly as required by the GDPR regulation and only to the extent strictly necessary.

Within the scope of legal obligations, we must also provide personal data to state administration authorities, such as the tax administrator, courts, law enforcement authorities, or capital market supervisory authorities.

9. Will we transfer personal data to a third country or international organization?

We will not transfer personal data to countries outside the European Union or the European Economic Area.

10. How long will we store personal data?

11. What are your rights related to the processing of personal data and how can you exercise them?

It is the controller's endeavor to ensure that the processing of your data is done properly and, above all, securely. You are guaranteed the rights described in this article, which you can assert with the controller.

You can exercise individual rights by sending an e-mail to info@mhas.cz or by calling +420 465 466 711. You can also exercise your rights in the form of a written request sent to our correspondence address U Dlouhonovic 1397, ZIP 564 01 Zamberk.

All communications and statements on the rights you have asserted are provided by the controller free of charge. However, if a request is manifestly unfounded or excessive, especially because of its repetitive character, the controller may charge a reasonable fee taking into account the administrative costs of providing the requested information. In the case of repeated requests for copies of the personal data undergoing processing, the controller reserves the right to charge a reasonable administrative fee for this reason.

The controller will provide you with a statement and possibly information on the measures taken as soon as possible, but no later than one month. The controller is entitled to extend this period by two further months where necessary, taking into account the complexity and number of the requests. The controller will inform you of any such extension together with the reasons for the delay.

11.1 Right to information about the processing of your personal data

You are entitled to request information from the controller as to whether personal data are being processed or not. If personal data are being processed, you have the right to request from the controller information in particular about the identity and contact details of the controller, their representative and, where applicable, the Data Protection Officer, about the purposes of the processing, about the categories of personal data concerned, about the recipients or categories of recipients of the personal data, about authorized controllers, an enumeration of your rights, the right to lodge a complaint with the Office for Personal Data Protection, the source of the personal data processed, and about automated decision-making and profiling.

Where the controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information.

The information provided to you in the exercise of this right is already contained in this text. However, this does not prevent you from asking for it again.

11.2 Right of access to personal data

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the envisaged period for which the personal data will be stored, information on your rights (the right to request from the controller rectification or erasure of personal data or restriction of processing, to object to such processing), the right to lodge a complaint with the Office for Personal Data Protection, information about the source of the personal data, information on the existence of automated decision-making and profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, information and safeguards in the event of personal data being transferred to a third country or an international organization. You have the right to be provided with a copy of the personal data undergoing processing. The right to obtain a copy must not adversely affect the rights and freedoms of others.

11.3 Right to rectification

If, for example, your residence, telephone number, or any other fact that can be considered personal data has changed, you have the right to request the controller to rectify the processed personal data. In addition, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

11.4 Right to erasure ('right to be forgotten')

In certain specified cases, you have the right to request the controller to erase your personal data. Such cases include, for example, when the processed data are no longer necessary for the aforementioned purposes. The controller deletes personal data automatically after the necessity period has expired, but you can approach them with your request at any time. Your request is then subject to individual assessment (despite your right to erasure, the controller may have a legal obligation or a legitimate interest in keeping your personal data), and you will be informed in detail about its handling.

11.5 Right to restriction of processing

The controller processes your personal data only to the strictly necessary extent. However, if you feel that the controller is, for example, exceeding the aforementioned purposes for which it processes personal data, you can submit a request that your personal data be processed exclusively for the most necessary legal reasons or that the personal data be blocked. Your request is then subject to individual assessment, and you will be informed in detail about its handling.

11.6 Right to data portability

If you wish the controller to provide your personal data to another controller or another company, the controller will transfer your personal data in an appropriate format to the entity designated by you, provided that there are no legal or other significant obstacles to doing so.

11.7 Right to object and automated individual decision-making

If you find out or just believe that the controller processes personal data in conflict with the protection of your private and personal life or in conflict with legal regulations (assuming that personal data are processed by the controller on the basis of a public or legitimate interest, or are processed for the purposes of direct marketing, including profiling, or for statistical purposes or for purposes of scientific or historical significance), you may contact the controller and ask for an explanation or the removal of the defective state that has arisen.

You may also raise an objection directly against automated decision-making and profiling.

11.8 Right to lodge a complaint with the Office for Personal Data Protection

You can at any time lodge a suggestion or complaint regarding the processing of personal data with the supervisory authority, which is the Office for Personal Data Protection, seated at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/.

11.9 Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time, either by filling out a form/unchecking a box/sending a withdrawal to the registered office of the controller or by using a link in e-mail communication.

12. Are personal data automatically evaluated?

Personal data are automatically evaluated and can be used for profiling or automated decision-making in the area of the controller's marketing activities. The controller uses the following methods for this:

As a result of these activities by the controller, your behavior on the website will be mapped and evaluated, which represents a certain interference with your right to privacy. At the same time, however, this evaluation contributes to ensuring that you are only sent advertising offers regarding the controller's products and services that you might be interested in based on the results of the evaluation performed.

Cookies

We use cookies and comparable technologies (collectively, the "Tools") on this website, which are offered either by us or by third parties.

In the case of cookies, these are small text files that are stored on your device via a browser. Cookies are not used to run programs or download viruses to your computer. Comparable technologies are mainly Web Storage (Local / Session Storage), fingerprints, tags or pixels. Some cookies remain on your computer for a certain period of time and allow us to recognize your computer on your next visit (permanent cookies). Our partners are not allowed to collect, process or use data via cookies via our website.

Most browsers accept cookies and comparable technologies by default. However, you can usually adjust your browser settings so that cookies or comparable technologies are rejected or saved only with your prior consent. You can also approve or disable temporary or saved cookies in the security settings. If you deactivate cookies, you may not have some functions available on our website, some websites may not be displayed correctly and possibly. Not all of our offers may work flawlessly. In order to be able to use our website fully, for example, temporary cookies must be enabled. The data stored in our cookies are not linked to your personal data (name, address, etc.). We will not link the data stored in our cookies to your personal data (name, address, etc.) without your express consent.

You can delete the set cookies at any time by opening the relevant menu item in your internet browser or by deleting the cookies on your hard drive. See your browser's help menu for details. Session cookies will be deleted again after leaving the website and are used here only to enable user-friendly navigation on the website and to load content and to record statistical data.

Data protection settings

When you visit any website, it is likely that the site will retrieve or store information on your browser, usually in the form of cookies. This can be information about you, your preferences and the device you use. This is mostly used to improve the site to work as you expect. As a rule, information does not identify you as an individual, but overall can help adapt the environment to your needs. We respect your right to privacy, so you may decide not to accept certain cookies.

Necessary tools

The necessary tools are used to enable the operation of the basic functions of our website, such as the shopping cart or logging in to your customer account. We cannot provide our website services without the necessary tools.

Name Partner Expiration Type Description
CookiePanel Hukot.net 1 year HTTP Cookie It records information about the aforementioned consent
CookiePanelID Hukot.net 1 year HTTP Cookie It records information about the aforementioned consent
PHPSESSID mhas.cz Session HTTP cookie PHP Session ID

Analytical tools

Analytical tools are used to collect statistical data and analyze user behavior, for which access data is evaluated during your visit. For example, we analyze the search terms you enter, the frequency with which a page is viewed, or the use of certain page features. With this review, we can optimize our website and improve your user experience.

Name Partner Expiration Type Description
_ga google.com 2 years HTTP cookie It is used to distinguish between users.
_gid google.com 24 hours HTTP cookie It is used to distinguish between users.
_gat google.com 1 minute HTTP cookie It is used to analyze visitors' browsing habits, traffic, sources, and other information.

You can remove or modify the consent to the use of cookies by clicking on the buttons: