Privacy Policy
In accordance with Articles 13(1) and 13(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR"), the controller provides the following information:
Identity and contact details of the data controller
Business name: Tomáš Oplatek
ID No.: 05520797
Tax ID: CZ8905080316
Registered address: Hartigova 2456/241, 13000 Prague – Žižkov
Contact person: Tomáš Oplatek
Email: oplatek.t@africkebubnovani.cz
(hereinafter referred to as "the controller")
Personal data processed
The controller processes personal data of its customers – individuals who enter into a contractual relationship with the controller for the purpose of providing products or services within the scope of its activities. The customer is a data subject within the meaning of Article 4(1) of the GDPR. The processed data may include:
- First and last name
- Phone number
- Written references
Purposes and legal basis of processing
Contact and identification data (name, surname, ID number, address, phone, email) are processed for the purpose of fulfilling the controller's contractual obligations, invoicing, and communication with the customer pursuant to Article 6(1)(b) of the GDPR.
Contact data (name, surname, email) may also be used for direct marketing (e.g. newsletters), exclusively on the basis of consent pursuant to Article 6(1)(a) of the GDPR.
Photographs of the customer and their name in connection with references may be used for the purpose of promoting the controller's activities (e.g. social media, website), also solely on the basis of consent pursuant to Article 6(1)(a) of the GDPR.
Recipients of personal data
Data may be shared with third parties providing technical and administrative support for the operation of the website and related systems:
- WordPress
- Elementor
In the event of non-fulfilment of obligations by the customer, data may be provided to legal representatives for the purpose of debt recovery. Data is not transferred to other third parties or outside the EU.
Retention period of personal data
Data processed for contractual purposes will be retained for the duration of the contractual relationship and for 10 years thereafter. Data processed for marketing purposes will be retained for 5 years after the end of the relationship. Data processed on the basis of legal obligations (e.g. accounting) will be retained for the period specified by applicable law.
Security of personal data
The controller protects personal data using modern technologies and has implemented the following technical and organisational measures:
- Password-protected computer access
- Password and fingerprint-protected phone access
- Secure access to email accounts
- Secure access to email marketing applications
- Secure access to invoicing systems
- Encrypted website communication (HTTPS certificate)
- Regular software updates
Data is processed electronically (automatically) or in printed form (non-automatically).
Rights of the data subject (customer)
Under the GDPR, the customer has the right to:
- request access to their data
- request correction of inaccurate data
- request erasure of data
- request restriction of processing
- object to processing
- request data portability
- lodge a complaint with a supervisory authority
- withdraw consent to processing at any time (without affecting the lawfulness of prior processing)
Consent may be withdrawn by sending a declaration to: oplatek.t@africkebubnovani.cz