Processing of personal data

The administrator of your personal data is the company EXPANDO global s.r.o., with its registered office in Třinec, Staré Město, Poštovní 244 IČ 04978820, registered in the OR kept at the Regional Court in Ostrava sp. mark C 74566. (hereinafter referred to as "Administrator"). Your personal data will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (general regulation on the protection of personal data) - hereinafter referred to as the "Regulation" - and other generally binding legal regulations. to determine the exercise or defense of legal claims. In the case of registration, for the duration of your account registration and for a period of three years after its termination.

In addition, the Administrator has the obligation to keep your personal data for 5 years from the end of the accounting period as part of accounting and to archive the tax document for 10 years. In the event that you grant consent to the sending of commercial communications, the Administrator will continue to process your personal data for the purpose of sending commercial communications for a period of 3 years from the granting of consent. We would also like to inform you that the processing of personal data for direct marketing purposes can be considered as processing due to the administrator's legitimate interest. EXPANDO global s.r.o. therefore has the option of sending you by e-mail, even without your consent, offers of similar services that you have purchased on app.expan.do or expan.do. You can opt-out of receiving these offers at any time by clicking on the appropriate explicit link in the offer. You can also refuse the sending of these offers to the provided e-mail from your user account.

Vaše osobní údaje nebudou předávány žádným třetím osobám s výjimkou:
- IT specialists, ensuring the operation of the app.expan.do application and the expan.do website
- Marketing analyzes and e-mailing
- Payment service providers Contact information Administrator Havlíčkova1680/13, 110 00 Prague, +420 739 053 384, info@expan.do.

More information about the processing of personal data
1) the right to request access to your personal data, i.e. your right to obtain information (confirmation) based on your request as to whether or not your personal data is being processed. If your personal data is processed, you have the right to obtain access to this personal data and at the same time you have the right to obtain the following information:

a) purposes of processing;

b) categories of personal data concerned;

c) recipients or categories of recipients to whom your personal data has been or will be made available , especially recipients in third countries or in international organizations;

d) the planned period for which your personal data will be stored, or if it cannot be determined, the criteria used to determine this period;

e) the existence of the right to request from the Administrator the correction or deletion of your of personal data or restrictions on their processing and/or objecting to this processing;

f) all available information about the source of personal data, if the Administrator has not obtained it from you;

g) the fact that automated decision-making takes place, including profiling, referred to in Article 22 par. 1 and 4 of the Regulation, and at least in these cases meaningful information regarding the procedure used, as well as the meaning and expected consequences of such processing

2) the right to request the correction of your personal data, i.e. the right for the Administrator to correct inaccurate personal data concerning you without undue delay; you also have the right to supplement incomplete personal data, including by providing an additional statement.

3) the right to request the erasure of your personal data, i.e. the right for the Administrator to delete personal data concerning you without undue delay, if one of the following reasons is given:

a) Your personal data are no longer needed for the purposes for which they were collected or otherwise processed;

b) if you revoke the consent on the basis of which your personal data were processed and there is no other legal reason for processing;

c) you object to the processing of your of personal data according to Article 21, paragraph 1 of the Regulation and there will be no overriding legitimate reasons for processing according to Article 21, paragraph 2 of the Regulation; in the law of the European Union or a member state that applies to the Controller;

f) Your personal data was collected in connection with the offer of information society services according to Article 8 para. 1. Regulation,

4) the right to limit the processing of your personal data, i.e. the right for the Administrator to limit the processing of your personal data, in any of the following cases:

a) if you deny the accuracy of your personal data, for the time required for the Administrator to could verify the accuracy of your personal data;

b) the processing is illegal and you refuse to delete your personal data and instead request the restriction of the use of your personal data;

c) if the Administrator no longer needs your personal data for the purposes of processing, but you require them for the purpose , exercise or defense of legal claims;

d) if you object to the processing of your personal data pursuant to Article 21, paragraph 1 of the Regulation, until it has been verified whether the Administrator's legitimate reasons prevail over your legitimate reasons,

5) the right to portability of your personal data, i.e. the right to receive the personal data relating to you that you have provided to the Administrator in a structured, commonly used and machine-readable format, and the right to transfer this data to another administrator, without the Administrator preventing it, in the event that:

a) the processing is based on consent pursuant to Article 6 paragraph 1 letter a) Regulation or Article 9 paragraph 2 letter a) Regulation or on the contract according to Article 6 paragraph 1 letter b) of the Regulation; and b) processing is performed automatically. When exercising your right to data portability, you have the right to have personal data transferred directly by the Administrator to another administrator, if this is technically feasible.

6) the right to object, i.e. the right, for reasons relating to your specific situation, to object at any time to the processing of your personal data, which is processed on the basis of legal reasons: – the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority to which the controller is entrusted, or – the processing is necessary for the purposes of the legitimate interests of the relevant controller or a third party. If you object to the processing of your personal data, the Administrator will not process your personal data further, unless he proves serious legitimate reasons for their processing that outweigh your interests or rights and freedoms, or for the determination, exercise or defense of legal claims. An objection can also be raised against the processing of personal data for the purposes of direct marketing or profiling. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

7) the right to file a complaint with the supervisory authority, i.e. with the Office for the Protection of Personal Data, at the address Plk. Sochora 27, 170 00 Prague 7, official website: https://www.uoou.cz.