Privacy Policy

i.    personal data - name, business name, position, permanent address / address / postal address, telephone number, e-mail, ID, VAT number, in case of payment addition the bank account number;
ii.   how to obtain a personal data - directly from the subject, from publicly available registers;
iii.  purpose - contact information usable for user support and provision of services and products (eg updates), offer of related services and products offered by CEDA, eventually the emergence of a future contractual relationship;
iv.  processing information - Personal data is processed pursuant to Article 6 1.and GDPR as it was provided on the basis of the entity's interest in the purchase of CEDA by the services or products offered (purchase contract / works contract / service contract, etc.). The data can be updated and updated from publicly available sources (registers, data on the subject's website, etc.) according to Article 9.e GDPR.

i.    personal details - business name, business name, business address, telephone number, e-mail;
ii.   the method of obtaining a personal data - directly from the subject; from publicly available registers and databases; from the data on the premises; from the websites operated by the entity;
iii.  purpose - publishing geospatial databases for end-user search in targeted applications (navigation applications, web and mobile applications for track or route search, etc.);
iv.  processing information - personal data are processed pursuant to Article 6 1.and GDPR as they were provided on the basis of the interest of the subject for inclusion in the navigation database or under Article 9e of the GDPR as it is data published by the data subject in public registers, sites or at their premises.
 

a.   Web sites www.ceda.cz, www.vstupteprosim.cz, www.chytramista.cz, www.route4all.cz, www.route4all.eu automatically process and store the site visit data. Automatic data is collected by own web server logs and through Google Analytics. Automatically collected data includes time identifiers, time spent on a page, IP addresses, operating system and browser information, calculated geolocation information. These data do not allow you to identify the person directly, but in most cases allow you to identify the computer from which the site was accessed. CEDA uses this information to evaluate site traffic and optimize the site;

b.   Data for Ad Systems - We do not use any method of data aggregation intended for advertising systems, either for our own purposes or for purposes of third parties;

c.   Saving data to the user's computer. In some cases, the webpage saves data on a user's computer, and can read and modify (cookies) when re-visited.

5.   Personal Data Security - We use only secure connections with HTTPS, SSH, SFTP / FTPS for data transfer. Data is stored in a secure database and in the cloud. Cloud services are provided by certified contractors (Google). Access to administration is properly secured by internal security policy.

6.   The administrator is responsible for complying with the obligations of the General Regulation. It is absolutely essential to adhere to the processing principles, the adherence of which must be documented by the trustee. The essential prerequisite for this is the existence of a proper legal basis for the processing of personal data which the controller must have in order to process personal data at all. At the same time, personal information must be secured. However, the fulfillment of other obligations laid down in the General Regulation must also be a matter of course. Each trustee should verify the extent to which the general regulation will come into effect, in particular as regards new obligations based on risk-based approach (eg the appointment of a trustee, the assessment of the impact on the protection of personal data).

7.   Processors process personal data according to the instructions and needs of administrators. These include webmaster, web hosting provider, accountant, tax advisor and auditor. There is a contractual relationship between the processor and the trustee.

8.   By internal analysis, we do not have a duty to appoint a Personal Data Protection Officer (within the meaning of Article 37 GDPR). The statutory body of CEDA is responsible for all matters concerning the protection of personal data.

9.  The administrator will process your personal data for 10 years unless such consent to the processing of your personal data is revoked. However, this is without prejudice to the processing of personal data to the extent necessary to fulfill the obligations arising from generally binding legal regulations.

10. Administrator and, if applicable, third parties - processors and third parties listed above who provide appropriate warranties and whose processing complies with the requirements of applicable law and which ensures the proper protection of your rights.

11. With regard to the protection of personal data, the data subject shall: