Processing of Personal Data

Through this document, Atrium Petřiny s.r.o., with its registered office at Pařížská 68/9, 110 00 Prague 1, ID No.: 23722568 (“Controller”), provides information regarding the processing of personal data in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”). If you have any questions or wish to exercise your rights, you may contact us using the contact details provided on the website: https://atriumpetriny.cz/kontakt.

If you contact us via the contact form, we process, in particular, the personal data you provide, typically your name, email address, and any other information included in the message. We process this data for the purpose of handling your inquiry based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR, or for the purpose of taking steps at your request prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.

The legitimate interest is the ability to respond to inquiries and communicate with individuals interested in the controller’s services. If negotiations regarding the conclusion of a contract take place or the contract is concluded, we also process personal data for the purpose of performing the contract pursuant to Article 6(1)(b) of the GDPR, and at the same time, we may also fulfill legal obligations, particularly under Act No. 253/2008 Coll., on Certain Measures Against the Legalization of Proceeds from Criminal Activity and the Financing of Terrorism, and other legal regulations, pursuant to Article 6(1)(c) of the GDPR.

We retain personal data only for as long as is strictly necessary. Data collected via the contact form is generally retained for a maximum of 12 months from the last communication, unless a contractual relationship is established. If a contract is concluded, personal data is retained for the duration of the contract and for the period specified by applicable laws.

Third parties who provide certain services to the controller may have access to personal data, in particular web hosting providers, email service providers, or accounting firms. These parties act as processors and process personal data exclusively on the basis of the controller’s instructions and pursuant to contracts concluded in accordance with Article 28 of the GDPR. Personal data may also be disclosed to public authorities if required by law. Upon explicit request, data may also be transferred to a separate controller, Hypoasistent, s.r.o., ID No.: 24663794, for the purpose of securing financing.

We do not transfer personal data to third countries outside the European Economic Area, unless such a transfer is necessary. However, any such transfer is made only on the basis of standard contractual clauses issued by the European Commission and available at https://eur-lex.europa.eu/eli/dec_impl/2021/914, which the recipient in the third country has committed to comply with, in addition to other measures, or on the basis of other measures ensuring an adequate level of personal data protection. The controller has implemented appropriate technical and organizational measures to secure personal data in accordance with Article 32 of the GDPR in order to prevent unauthorized access, loss, or misuse of personal data.

Providing personal data via the contact form is voluntary; however, without it, we may not be able to respond to your inquiry. In the event of entering into a contract, the provision of certain data may be a contractual or legal requirement.

In connection with the processing of personal data, you have the rights set forth in Articles 15 through 21 of the GDPR, in particular the right of access to personal data, the right to rectification or erasure, the right to restrict processing, the right to data portability, the right to object to processing, and the right to object to processing based on a legitimate interest. If processing is based on consent, you have the right to withdraw this consent at any time. You may exercise your rights using the contact information provided on the controller’s website.

You also have the right to lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7.