Information on the processing of customer personal data

We, ZPA Smart Energy a.s. , ID: (27445976″ZPA” or “We“), consider the protection of personal data to be an integral part of our obligations to you. We therefore pay due attention to it and follow the applicable legal regulations in ensuring the protection of personal data.

In this information you will find out what personal data we process and on what legal basis we do so. You will also find out for what purposes and therefore why we process your data, to whom we may transfer it and what rights you have in relation to the processing of your personal data. Please consider this document an important source of information about how we handle your personal data.

The information describes the processing of personal data that concerns the customer-individual and the customer-entrepreneur-individual and for which we do not need their consent. This information also contains information for the representatives of the natural or legal person.

Parts of

1. What personal data do we process?

to
F. How can you exercise individual rights?

below, apply to all of our products, especially electricity meters and software products.

A. What personal data do we process?

These are as follows:

• identification data, i.e. first name, surname, birth number if assigned, otherwise date of birth or age, permanent address, etc,
• contact data, which is personal data that allows us to contact you, in particular your mailing address, telephone number, email address, etc,
• banking and financial information, which we mean mainly account number, liabilities, payment history, etc,
• data on the use of services, in this case mainly data on the negotiation and content of concluded contracts, data provided in the context of mutual communication, recordings of calls related to the performance of the contract, your service report, etc,
• Web behaviour data, such as IT identifiers, information about how you use our website, etc. (see the Website section for more information),
• data from public sources, by which we mean mainly data from public registers, such as the Land Registry and the telephone directory of subscribers,
• external vetting data, such as information about your insolvency and history of meeting your obligations and repaying debts,
• derived data obtained by analysing the data in the previous categories.

B. Why do we process personal data and what entitles us to do so?

We need your personal data for different activities and to different extents. We are entitled to do so either for the performance of a contract, the performance of a legal obligation or our legitimate interest.

PROCESSING OF ROUTINE PERSONAL DATA

For the performance of the contract

Based on the contract you have entered into with us, we use your identification and contact information, banking and financial data, website behaviour data and service usage data. We need this data for the preparation, conclusion and performance of our contract with you. We will use it to create a contract tailored to you, to enter into it, and for the subsequent performance of our obligations under that contract, including the handling of any complaints or related claims you may have.

We will retain your data for this purpose for the duration of our contractual relationship.

To fulfil a legal obligation

We process your identification, contact, banking, financial and service usage data to comply with our legal obligations. These arise primarily from:

• Act No. 563/1991 Coll., on Accounting (this Act regulates the requirements for the creation and processing of accounting documents and related activities);
• Act No. 235/2004 Coll., on Value Added Tax (this Act regulates the requirements for the creation and processing of accounting documents and related activities);

We must also comply with public authorities and pass on your personal data to them. The same applies to situations where your data is requested by the police, the courts or the tax authorities.

We retain all personal data that we need to comply with our legal obligations for the period of time specified by the relevant legislation.

For our legitimate interests

We use your identification data, including your birth number, contact data, banking and financial data, service usage data, public data, external vetting data, public data and derived data for our legitimate interest. This is to ensure that:

• protection of our legal claims, i.e. for activities in connection with the prevention and detection of fraud and other illegal acts, e.g. for debt recovery, and also to be able to prove legal actions and other material facts where it is in our interest to prevent damage on our side.
  For this purpose, we retain personal data for the duration of the limitation period, which lasts for a maximum of 15 years, and further for a maximum of one year;
• maintaining internal statistics and records, performing internal controls and providing for our other operational needs. For example, in order to keep records of our incoming mail, or to generate statistics for planning our new products, or to monitor the activities of our suppliers that we use in providing our services, it is in our interest to provide our services at the highest quality and to improve the efficiency of the Company.
  For these purposes, we will retain your data for the duration of our contractual relationship with you and for no longer than the following 2 months;
• identifying and improving your customer experience. In order to improve our services, we need information about your satisfaction and the way we handle your requests. Improving the products and services we provide to you is therefore a legitimate concern of ours.
  For this purpose, we will retain this information about you for the duration of the contractual relationship and for no longer than the following 2 months;
• PR and brand strengthening. If we need your personal data to organise any of our events that you attend, we have a legitimate interest in the smooth organisation and running of the event.
  For this purpose, we will retain your data for the duration of our contractual relationship with you and for no longer than the following 2 months;
• assessing your willingness and ability to repay your debts. Our legitimate interest is to prevent the creation of outstanding debts. We must therefore assess how great the risk is that you will not pay your obligations to us.
  For this purpose, we will retain this information about you for the duration of our contractual relationship with you. In the event that your claim is not paid properly and on time, we will retain the data for the duration of the outstanding claim;
• offering our products and services that are related to the products and services we already provide to you; you may receive an offer from us electronically (in particular by text message, email or social media), by traditional letter, in person from our employees or by telephone: however, for telephone offers this only applies until the ePrivacy Regulation or similar legislation comes into force.
  For these purposes, we will retain your data for the duration of our contractual relationship and for no longer than the following 2 months;
• assessing your interest in other products and services, i.e., assessing your interest in products that are not directly related to products and services we already provide to you; this may also include assessing products and services from other entities and includes conducting related analyses and offering products to you in a personal contact.
  For these purposes, we will retain your data for the duration of our contractual relationship and for no longer than the following 2 months.

If legal or other proceedings are initiated, we will process your data for the duration of the proceedings.

You can object to this processing as described in section E. What rights do you have when processing personal data?

If you do not want us to contact you with electronic commercial communications, just let us know. You can find instructions on how to do this in section F. How can you exercise individual rights? or in any electronic communication we send you. If you do not tick the box to opt-out of marketing communications as part of the process of arranging a new or change to an existing product, we will send you electronic offers even if you have opted-out of such processing in the past.

Customer Representative

If you are a customer representative, we process your identification data and contact and service usage data for the same purpose on the basis of our legitimate interest. This consists of concluding a contract with the customer you represent and preventing damage on our part. For this purpose, we will retain your data for the duration of the contractual relationship with the customer you represent.

Based on our legitimate interest, we also process your identification, contact and service usage data to ensure:

• protection of our legal claims, i.e. for activities in connection with the prevention and detection of fraudulent and other unlawful acts, e.g. in connection with unauthorised energy consumption, for the recovery of debts and also to be able to prove legal actions and other material facts where it is in our interest to prevent damage on our side.
  For this purpose, we retain personal data for the duration of the limitation period, which lasts for a maximum of 15 years, and further for a maximum of one year;
• maintaining internal statistics and records, performing internal controls and providing for our other operational needs. For example, in order to keep records of our incoming mail, or to generate statistics for planning our new products, or to monitor the activities of our suppliers that we use in providing our services, it is in our interest to provide our services at the highest quality and to improve the efficiency of the Company.
  For these purposes, we will retain your data for the duration of our contractual relationship with you and for no longer than the following 2 months;
• identifying and improving your customer experience. In order to improve our services, we need information about your satisfaction and the way we handle your requests. Improving the products and services we provide to you is therefore a legitimate concern of ours.
  For this purpose, we will retain this information about you for the duration of the contractual relationship and for no longer than the following 2 months;
• PR and brand strengthening. If we need your personal data to organise any of our events that you attend, we have a legitimate interest in the smooth organisation and running of the event.
  For this purpose, we will retain your data for the duration of our contractual relationship with you and for no longer than the following 2 months;
• assessing your willingness and ability to repay your debts. Our legitimate interest is to prevent the creation of outstanding debts. We must therefore assess how great the risk is that you will not pay your obligations to us.
  For this purpose, we will retain this information about you for the duration of our contractual relationship with you. In the event that your claim is not paid properly and on time, we will retain the data for the duration of the outstanding claim;
• offering our products and services that are related to the products and services we already provide to you; you may receive an offer from us electronically (in particular by text message, email or via social networks), by traditional letter, in person from our employees or by telephone: however, for telephone offers, this only applies until the ePrivacy Regulation or similar legislation comes into force; For these purposes, we will retain your data for the duration of our contractual relationship and for no longer than the following 2 months;
• assessing your interest in other products and services, i.e., assessing your interest in products that are not directly related to products and services we already provide to you; this may also include assessing products and services from other entities and includes conducting related analyses and offering products to you in a personal contact. For these purposes, we will retain your data for the duration of our contractual relationship and for no longer than the following 2 months;

PROCESSING OF BIOMETRIC DATA

If you sign a contract or other document for us using a special electronic device, we process your biometric data contained in your signature. We do this on the basis of a legitimate interest, to protect our legal claims, to prove that you actually entered into the contract and to defend our claims in various types of proceedings, including in court.

For these purposes, we will retain your data for the duration of the contractual relationship with you or the customer you represent, and for a maximum of 15 years and a further maximum of one year for the duration of the limitation period. If legal or other proceedings are initiated, we will process your data for the duration of the proceedings.

You can object to this processing as described in section E. What rights do you have when processing personal data?

C. Who processes your personal data and to whom do we transfer it?

All of the above-mentioned personal data are processed by us as the controller. This means that we determine the above defined purposes for which we collect your personal data, determine the means of processing and are responsible for its proper execution.

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors include:

1. marketing, consultancy and production agencies where they process personal data to help us prepare and coordinate our business and advertising activities, including data analysis, for the purposes of marketing our products and services and PR and brand building;
2. information systems and technical infrastructure providers where they manage internal systems for the management of personal data for internal record keeping and statistics, customer experience improvement and operational needs;
3. security and surveillance contractors and CCTV operators, where they operate CCTV systems for the purpose of protecting property and persons;
4. external printers where they process personal data for the purposes of printing and mailing, i.e. for our operational needs;
5. sales representatives and operators of our business locations where they process your data for the purposes of concluding and managing our relationship for the purposes of concluding and performing the contract;
6. solicitors and debt recovery companies where they process personal data to protect our legal claims;
7. experts, where they process personal data to protect our legal claims or to comply with our legal obligations.

We may also transfer your personal data to other entities that are in the role of controller. These entities are:

• partners operating payment systems for the purpose of securing payment, in particular in connection with card payments or in the case of correspondence regarding clarification of payments for the purpose of protecting our legal claims;
• postal service providers, which are Česká pošta, s.p., ID No.: 471 14 983, Mediaservis, s.r.o., ID No. 24197360, DHL Express (Czech Republic) s.r.o., ID No. 25683446, PPL CZ s.r.o., ID No. 25194798, TOP Trans, ID No28202376. , in the event that they provide us with the sending of documents for the purpose of fulfilling the contract or our operational needs;
• the supplier of the goods in connection with a claim for goods or services ordered by you, for the purpose of fulfilling the contract concluded with you;
• companies to which we assign receivables due to you, with the understanding that these companies are responsible for collecting the receivables themselves;
• lawyers who represent us in cases involving your data;
• our auditors.

We use different processors for different products. We do this in an effort to secure top partners within their expertise. These processors are listed in separate sections of this document.

Furthermore, we are obliged to transmit the processed personal data to state administration authorities, courts, law enforcement authorities, supervisory authorities if they ask us to do so, or to the public media on the basis of the relevant law. We may also transfer personal data to these bodies and to bailiffs on the basis of our legitimate interests.

Some of our processors may be located outside the European Economic Area in countries that do not provide an adequate level of protection for personal data. We will only transfer your data to these processors if they commit to comply with the standard contractual clauses issued by the European Commission. The clauses can be found at https://eur-lex.europa.eu/legal-content/CS/TXT/?uri=CELEX%3A32010D0087.

D. From what sources do we process personal data?

We usually process personal data that you have provided to us either at the time of entering into a contract or
as part of any other contact with you. Therefore, most personal data is obtained directly from you. You fill in the data on forms and contract documentation, or you provide it to us over the phone or in other communications. If you visit our website, we collect your personal data from online forms and by tracking your behaviour on our website.

To a limited extent, we may also obtain and process personal data from publicly available sources. These are mainly public registers or data published by you on the internet. We always obtain data in this way in accordance with legal requirements.

We may also have your personal data from other parties, particularly if you have provided it to them for the purpose of sharing it with us, such as your agent or a person to whom you have been referred as a customer.

E. What rights do you have when processing personal data?

Just as we have rights and obligations when processing your personal data, you have a number of rights when processing your personal data. These rights include:

Right of access

In simple terms, you have the right to know what data we process about you, for what purpose, for how long, where we obtained it, to whom we transfer it, who processes it outside of us and what other rights you have in relation to it. You have read all of the above in this Privacy Notice, but if you are unsure whether and which personal data we process about you, you can ask us to confirm. If this is the case and we are processing your personal data, you have the right to access it. As part of your right of access, you can ask us for a copy of the personal data we are processing. We will provide you with the first copy free of charge, with further copies subject to a fee.

Right to repair

To err is human. If you discover that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.

Right to erasure

In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to such processing of personal data for which your consent is necessary and we have no other reason why we need to continue to process the data (for example, to defend our legal claims),
• you object to the processing (as described in the Right to object to processing section) of personal data that we process on the basis of our legitimate interests and we find that we no longer have such legitimate interests to justify the processing,
• it turns out that the processing of personal data carried out by us is no longer in accordance with generally binding regulations.

But please note that we will not always delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• archival, scientific or historical research or statistical purposes,
• to fulfill our legal obligation,
• establish, exercise or defend our legal claims.

Right to restriction of processing

In some cases, in addition to the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and not be subject to any further processing operations – but in this case not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:

• you dispute the accuracy of the personal data before we agree what data is correct,
• we process your personal data without a sufficient legal basis (e.g. beyond what we need to process), but you would prefer to restrict such data before deleting it (e.g. if you expect to provide us with such data in the future anyway),
• we no longer need your personal data for the above processing purposes, but you require it for the establishment, exercise or defence of your legal claims,
• object to the processing. The right to is described in the section Right to object to processing. We will restrict the processing of your personal data while we investigate the validity of your objection.

Right to portability

You have the right to obtain from us all of your personal data that you have provided to us and that we process on the basis of your consent and for the performance of a contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. To enable us to easily transfer the data at your request, it may only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you in this form all the data that you have filled in our forms (for example, your handwritten signature).

Right to object to processing

You have the right to object to the processing of your personal data based on our legitimate interest. If the processing is for marketing activities, we will stop processing your personal data without further delay; otherwise, we will do so unless we have compelling legitimate grounds to continue such processing.

Right to review of an automated decision

You have the right to request a review of an automated decision, in particular if you believe that the decision is incorrect. You can exercise this right as described in section F. How can you exercise individual rights? Under this right, you can ask for a human review of the decision and you can express your views in relation to the decision.

Right to lodge a complaint

Exercising your rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection in the manner described in section F. How can you exercise individual rights? You can exercise this right in particular if you believe that we are processing your personal data unlawfully or in breach of the law.

F. How can you exercise individual rights?

All the information you need can be found on this page.

Information on the processing of personal data of a potential customer

We, the company ZPA Smart Energy as , IČ: 27445976 (hereinafter referred to as ” ZPA ” or ” We “), consider the protection of personal data to be an integral part of our obligations to you. We therefore pay due attention to it and we ensure the protection of personal data in accordance with applicable law.

In this Information you will find out what personal data we process and on what legal bases we do so. You will also find out for what purposes, and therefore why we process your data, to whom we may transfer it and what your rights are in connection with the processing of your personal data. Please consider this document an important source of information about how we handle your personal information.

The information describes the processing of personal data of a natural person or a natural person who has expressed interest in our products, services or our company and has provided us with his personal data in the course. It thus acts as a potential customer . This information also applies to potential customer representatives . The personal customer or his representative provided us with personal data at the moment of expressing interest, especially in our delivery of goods , or about our other product or service , including:

• supplies of electricity meters and additional services,
• supplies of HDO and related services,
• software and related services.

You can also read here how we treat the personal data of the person who provided us with personal data without showing interest in our specific product or service. This person is in particular:

• the person who subscribed to the newsletter;
• the person who filled in the form with an interest in sending information and offers to ZPA or our partners.

A. What personal data do we process?

We process the following personal data:

• identification data , which means in particular name, surname, birth number, if assigned, otherwise date of birth or age, address of permanent residence, etc.,
• contact details , which means personal data that allows us to contact you, in particular a correspondence address, telephone number, e-mail address, etc.,
• data on the use of services, which means in particular data on the negotiation and content of concluded contracts, data provided within the framework of mutual communication, data on the existing product or service, etc.,
• data on behavior on the website, which means in particular IT identifiers, information on how you use our website, etc. (more information is provided in the Website section),
• bank and financial data , by which we mean mainly account number, liabilities, payment history and more,
• data from public sources , by which we mean mainly data from public registers, such as the real estate cadastre and the telephone directory of participants,
• derived data , which means data that we derive by analyzing previous categories of data.

B. Why do we process personal data and what entitles us to do so?

We need your personal information for different activities and to different extents. It entitles us to do so either the performance of the contract, the fulfillment of a legal obligation or our legitimate interest.

For the performance of the contract

If you are interested in a specific product or service, we will process your identification and contact information, information about your behavior on the website, information about your facilities or household, and information about the use of the services , for the preparation, conclusion and performance of the contract with you. We will use them to create a tailor-made contract for you and to conclude it.

For this purpose, we store personal data for the time necessary to prepare and conclude a contract with you.

To fulfill legal obligations

If you are interested as a potential customer in a specific product or we process the service your identification data, contact details and data on the use of the services also to comply with our legal obligations.

Also, if any of the public authorities, including the police, courts or tax office, submits a legitimate request to us, we are obliged to comply with them. We must then pass on your personal data to them within the scope of their request.

We retain the personal data we need to fulfill our legal obligations for the period specified by applicable law.

For our legitimate interests

Your identification and contact details and derived data and , in case of your interest in a specific product or service, we also use your external lustration data, birth number, bank and financial data, data from public sources and data on the use of services due to our legitimate interest . This is to ensure:

• identifying and improving your customer experience. In order to improve our services, we need information on how satisfied you are with them and how satisfied you are with resolving your requirements. Improving the products and services we provide to you is therefore in our legitimate interest;
• PR and brand strengthening. If we need your personal data for the organization of any of our events that you will participate in , our legitimate interest is its smooth organization and course.
  For these purposes, we will retain this information of yours for the duration of the preparation of the contractual relationship with you;
• protection of our legal claims , ie for activities in connection with the prevention and detection of fraud and other illegal acts, risk management, debt collection and also for evidentiary purposes by archiving records of legal proceedings and other material facts, where it is in our interest to prevent damage to our side.
  For this purpose, we retain personal data for the duration of the limitation period, which lasts a maximum of 15 years and a maximum of one year;
• keeping internal statistics and records, performing internal controls and providing for our other operational needs. In order to keep track of incoming mail, generate statistics for the planning of our new products or control the activities of our suppliers that we use in the provision of our services, it is in our interest to provide our services of the highest quality and improve the company’s efficiency.
  For these purposes, we will retain this information of yours for the duration of the preparation of the contractual relationship with you;
• an assessment of your willingness and ability to repay your obligations. Our legitimate interest is to prevent the occurrence of outstanding receivables. Therefore, we must assess the risk that you will not pay your obligations to us.
  For this purpose, we will retain this information for the duration of the preparation of the contractual relationship with you or the customer you represent. In the event that your receivable is not paid properly and on time, we retain data for the duration of the outstanding receivable.

In the event of legal or other proceedings, we will process your data for the duration of the trial.

the right to object to this processing , which is described in more detail in Chapter F. How can you exercise individual rights? .

When assessing your willingness and ability to repay receivables, we do not use elements of automated decision-making.

In the context of automated decision-making, you can exercise your rights, including the right to review decisions. You will find a description of them in section E. What are your rights when processing personal data?

Customer representative

If you represent a potential customer, we process your identification and contact information and service usage data for the same purpose based on our legitimate interest. The consists in concluding a contract with the customer you represent and preventing damage on our part. For this purpose, we store personal data for the time necessary to prepare and conclude a contract with the customer you represent.

Based on our legitimate interest, we also process your identification data and contact data and data on the use of services. In both cases, to ensure:

• identifying and improving your customer experience. In order to improve our services, we need information on how satisfied you are with them and how satisfied you are with resolving your requirements. Improving the products and services we provide to you is therefore in our legitimate interest.
  For these purposes, we will retain this information of yours for the duration of the preparation of the contractual relationship with the customer you represent;
• PR and brand strengthening. If we need your personal data for the organization of any of our events that you will participate in , our legitimate interest is its smooth organization and course.
  For these purposes, we will retain this information of yours for the duration of the preparation of the contractual relationship with the customer you represent;
• protection of our legal claims , ie for activities in connection with the prevention and detection of fraud and other illegal acts, risk management, debt collection and also for evidentiary purposes by archiving records of legal proceedings and other material facts, where it is in our interest to prevent damage to our side.
  For this purpose, we retain personal data for the duration of the limitation period, which lasts a maximum of 15 years and a maximum of one year;
• keeping internal statistics and records, performing internal controls and providing for our other operational needs. In order to keep track of incoming mail, generate statistics for the planning of our new products or control the activities of our suppliers that we use in the provision of our services, it is in our interest to provide our services of the highest quality and improve the company’s efficiency.
  For these purposes, we will retain this information for the duration of the preparation of the contractual relationship with the customer you represent.

C. Who processes your personal data and to whom do we pass it on?

We process all the mentioned personal data as an administrator. We determine the purposes for which we collect your personal data as defined above, we determine how your data will be processed, and we are responsible for it.

When processing your data, we also use other processors who process personal data on our instructions. Such processors are in particular:

1. companies that collect contact information for a potential customer for us, for the purposes of preparation, conclusion and performance of the contract with the customer;
2. providers of information systems and technical infrastructure where they manage internal systems for the management of personal data for the purposes of internal records and statistics, improvement of customer experience and operational needs;
3. suppliers operating protection and security and operators of camera systems, where they ensure the operation of camera systems for the purposes of protection of property and persons;
4. external printers when they process personal data for the purpose of printing and sending correspondence, ie for our operational needs;
5. sales representatives, especially when conducting sales meetings with potential customers for the purpose of concluding a contract.

As already mentioned in part B. Why do we process personal data and what entitles us to do so ? we pass on your personal data to the public authorities if they ask us to do so. We may also pass on personal data to these entities and executors based on our legitimate interests.

Some of our processors may be located outside the European Economic Area in countries that do not ensure an adequate level of personal data protection. We will only pass on your data to these processors if they undertake to comply with the standard contractual clauses issued by the European Commission. The clauses can be found at https://eur-lex.europa.eu/legal-content/CS/TXT/?uri=CELEX%3A32010D0087 .

D. From what sources do we process personal data?

We usually process the personal information you provide to us either at the time of the contract
or as part of any other contact with you.

So we get the most personal data directly from you. You fill in our data on the forms and in the contractual documentation. You also provide them by phone or other communication.

When you visit our website, we collect your personal information from online forms and by tracking your behavior on our website.

We may also collect your personal information from other entities, especially if you have provided it to them in order to share it with us. This applies in particular to the sales representatives through whom you want to enter into a contract with us, but also to the various forms on the websites of other entities or representatives who generally represent you as a natural person.

E. What are your rights when processing personal data?

Just as we have our rights and obligations when processing your personal data, you also have a number of rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtained it, to whom we pass it on, who processes it outside of us and what other rights you have to it. You have learned all of this in this Personal Data Processing Information, but if you are not sure whether and what personal data we process about you, you can ask us for confirmation. If this is the case and we process your personal data, you have the right to access it. As part of the right of access, you can ask us for a copy of the processed personal data. We will provide you with the first copy free of charge, the other copies with a fee.

Right to repair

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to correct or supplement it without undue delay.

Right to delete

In some cases, you have the right to have your personal information deleted. we will delete your personal data without undue delay if any of the following reasons is met:

• we no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to the processing of such personal data for which your consent is necessary, and at the same time we have no other reason why we need to continue to process this data (for example, to defend our legal claims),
• you object to the processing (as described in the Right to object to the processing section) of the personal data that we process on the basis of our legitimate interests, and we find that we no longer have any such legitimate interests that would justify such processing,
• it turns out that the processing of personal data carried out by us has ceased to comply with generally binding regulations.

But please keep in mind that we will not always delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• for archiving, scientific or historical research purposes or for statistical purposes,
• fulfillment of our legal obligation,
• determining, enforcing or defending our legal claims.

The right to restrict processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right of erasure), but for a limited period of time. We must restrict the processing of personal data if:

• you deny the accuracy of personal data before we agree on what data is correct,
• we process your personal data without a sufficient legal basis (eg beyond what we have to process), but you will only give priority to its restriction before deleting such data (eg if you expect you to provide us with such data in the future),
• we no longer need your personal data for the above-mentioned purposes of processing, but you request it for the purpose of determining, enforcing or defending your legal claims,
• you object to the processing. The right to is described in the section Right to object to the processing. We will limit the processing of your personal data during the period of investigation of the legitimacy of your objection.

Right to portability

You have the right to obtain from us all your personal data which you have provided to us and which we process on the basis of your consent and on the basis of the performance of the contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order for us to be able to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you all the information you have filled in our forms (for example, your handwritten signature).

The right to object to the processing

You have the right to object to the processing of personal data that occurs in our legitimate interest. In the case of marketing activities, we will stop processing your personal data without further delay; in other cases, we will do so unless we have compelling reasons to proceed with such processing.

The right to review an automated decision

You have the right to request a review of an automated decision, especially if you believe that such a decision is incorrect. You can exercise this right in accordance with Chapter F. How can you exercise individual rights? . Under this right, you can request that a decision be reviewed by a person, and you can express your opinion in relation to such a decision.

The right to file a complaint

Exercising your rights as set out above does not affect your right to lodge a complaint with the Data Protection Authority, as set out in Chapter F below. How can you exercise your individual rights? . You may exercise this right in particular if you believe that we are processing your personal data illegally or in violation of generally binding legal regulations.

F. How can you exercise your individual rights?

You will find all the necessary information on this page .

Information on the processing of personal data of persons who have given us consent to the processing of data

ZPA Smart Energy as , IČ: 27445976 (hereinafter referred to as “ ZPA ” or “ We ”) considers the protection of personal data to be an integral part of its obligations to clients or other persons. We therefore pay due attention to the protection of personal data and act in accordance with legal regulations to ensure the protection of personal data.

In this section you will find information about what personal data we process. Here you will find information on what personal data we process on the basis of your consent or on the basis of another legal basis, for what purposes we process the data, to whom we may transfer it and what your rights are in connection with the processing of your personal data. Therefore, please consider this page, together with your consent, as an important source of information about how we handle your personal data.

This Personal Data Processing Information governs the processing of your personal data in the event that you have given us any of the consents to the processing of your personal data .

This website always contains the latest version of information about the processing of our company’s personal data.

A. What personal data do we process?

We process the following personal data:

• Identification data , which means in particular name, surname, birth number, if assigned, otherwise date of birth or age, address of permanent residence, etc.,
• contact details , which means personal data that allows us to contact you, in particular a correspondence address, telephone number, e-mail address, etc.,
• data on the financial situation , which means in particular income, liabilities, payment history, etc.,
• data on the use of our services, which means in particular data on the negotiation and content of concluded contracts, information on the services used, etc.,
• data on behavior on the website, which means in particular IT identifiers, information on how you use our website, etc. (more information is provided in the Website section ),
• data from public sources, which means in particular data from public registers, such as the real estate cadastre, and the telephone directory of participants,
• derived data , which means data that we derive by analyzing previous categories of data.

B. Why do we process personal data and what entitles us to do so?

As part of our activities, we process your personal data for various activities and to various extents with our consent.

Processing based on your consent to obtain a copy of your identity document

With your consent, we may obtain, retain and use copies of your identity card (ID card or travel document) for the purposes of negotiations related to the conclusion and performance of the contract, in particular to verify your identity.

This consent is valid for the duration of our contracts with you and subsequently for a further maximum of 10 years. This consent to the processing of personal data is voluntary.

You can revoke this consent at any time in the following ways:

By filling out the form for revoking the consent to the processing of personal data

e-mail to: gdpr@zpa.cz

In writing at:

ZPA Smart Energy as

Comenius 821

541 01 Trutnov

Processing with your consent for marketing purposes

With your consent, we will use your identification and contact details, financial situation data, data on the use of our services, data on web behavior, other data from public sources, in particular from public registers and the telephone directory of participants, and derived data for the offer:

• our products and services, which are related to the products or services we already provide to you, if the offer is made by telephone; we will only need this consent if the ePrivacy Regulation or similar legislation is approved and enters into force ;
• other types of products and services than you currently use from us that are similar to those products and services, including products and services of other entities, including by telephone, by electronic means;
• in the form of newsletters or marketing competitions;
• targeted beyond our legitimate interest also based on your profile compiled from previous behavior and needs to send more relevant offers.

This consent is valid for the duration of our contracts with you and subsequently for a further maximum of 5 years. This consent to the processing of personal data is voluntary. Failure to tick the box for granting consent is not considered a revocation of a previously granted consent.

You can revoke this consent at any time in the following ways:

By filling out the form for revoking the consent to the processing of personal data

e-mail to: gdpr@zpa.cz

In writing at:

ZPA Smart Energy as

Comenius 821

541 01 Trutnov

We may perform certain marketing activities based on our legitimate interest. For more information, see Customer Information Processing Information.

C. Who processes your personal data and to whom do we pass it on?

We process all the mentioned personal data as an administrator. This means that we determine the purposes for which we collect your personal data as defined above, determine the means of processing and are responsible for its proper execution.

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors are in particular:

1. marketing, consulting and production agencies where they process personal data to assist us in the preparation and coordination of our business and advertising activities, including data analysis, for the purpose of offering our products and services;
2. companies that collect contact information for us from a potential customer, for the purpose of offering our products and services;
3. providers of information systems and technical infrastructure where they manage internal personal data management systems for the purpose of offering products and services;
4. external printers when they process personal data for the purpose of printing and sending correspondence, ie for offering products and services;

We may also pass on your personal data to other entities in the role of administrator . These are the following entities:

• postal service providers, which are Česká pošta, sp ., IČO: 471 14 983, Mediaservis , sro, IČO 24197360, DHL Express (Czech Republic) sro, IČO 25683446, PPL CZ sro, IČO 25194798, TOP Trans, IČO 28202376 , v when they provide us with the sending of documents for the purpose of fulfilling the contract or our operational needs;

Due to the fact that we can change the processors and administrators we involve in the processing, you can find their current list on the website in the Personal Data Protection section.

Furthermore, we are obliged to pass on the processed personal data to state administration bodies, courts, bodies active in criminal proceedings, supervisory bodies if they ask us to do so. We may also pass on personal data to these entities and executors based on our legitimate interests.

As part of the transfer of data to our processors, we may also transfer your data to third countries outside the European Economic Area that do not ensure an adequate level of personal data protection. We will make all such transfers only if the relevant processor undertakes to comply with the standard contractual clauses issued by the European Commission and available at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2004 : 385: 0074: 0084: CS: PDF .

D. From what sources do we process personal data?

In most cases, we process personal data that has been provided to us directly by you in the course of negotiating a contract or in any other contact with you.

We obtain the most personal data directly from you by filling it out with us on the appropriate forms and in the contractual documentation, or by providing it through telephone calls or other communications.

When you visit our website, we collect your personal information from online forms and by tracking your behavior.

In addition, we collect and further process personal data to a limited extent from publicly available sources, which are both public registers and data published by you on the Internet, always in accordance with legal requirements.

If you are a customer, we obtain your personal data in some cases from a person authorized to act on behalf of the customer (eg from a representative on the basis of a power of attorney).

E. What are your rights when processing personal data?

Just as we have our rights and obligations when processing your personal data, you also have a number of rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we collect your personal data, to whom we transfer it, who processes it outside of us and what other rights you have related to the processing of your personal data. You have learned all this in this Personal Data Processing Information. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not the personal data concerning you are being processed and, if so, you have the right to access this personal data. . As part of the right of access, you can request a copy of the personal data processed, with the first copy being provided free of charge and the other copies free of charge.

Right to repair

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to correct or supplement it without undue delay.

Right to delete

In some cases, you have the right to have your personal information deleted. We will delete your personal data without undue delay if any of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to the processing of personal data, which is data for the processing of which your consent is necessary, and at the same time we have no other reason why we need to continue processing this data (for example, to defend our legal claims),
• it turns out that the processing of personal data carried out by us has ceased to comply with generally binding regulations.

But please keep in mind that even if this is one of these reasons, it does not mean that we will delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• fulfillment of our legal obligation,
• for archiving, scientific or historical research purposes or for statistical purposes,
• determining, enforcing or defending our legal claims.

The right to restrict processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right of erasure), but for a limited period of time. We must restrict the processing of personal data if:

• you deny the accuracy of personal data before we agree on what data is correct,
• we process your personal data without a sufficient legal basis (eg beyond what we have to process), but you will only give priority to its restriction before deleting such data (eg if you expect you to provide us with such data in the future),
• we no longer need your personal data for the above-mentioned purposes of processing, but you require it to determine, enforce or defend your legal claims.

Right to portability

You have the right to obtain from us all your personal data which you have provided to us and which we process with your consent (see the chapter “Consent processing” above). We will provide you with your personal data in a structured, commonly used and machine-readable format. In order for us to be able to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you all the information you have filled in our forms (for example, your handwritten signature).

The right to file a complaint

The exercise of rights in the above manner does not affect your right to lodge a complaint with the Office for Personal Data Protection, in the manner set out below in the chapter “How can individual rights be exercised?”. You may exercise this right in particular if you believe that we are processing your personal data illegally or in violation of generally binding legal regulations.

F. How can you exercise your individual rights?

You will find all the necessary information on this page .

Information on the processing of personal data on the website

ZPA Smart Energy as , IČ: 27445976 (hereinafter referred to as “ ZPA ” or “ We ”) considers the protection of personal data to be an integral part of its obligations to clients or other persons. We therefore pay due attention to the protection of personal data and act in accordance with legal regulations to ensure the protection of personal data.

In this section you will find information about what personal data we process. Here you will find information on what personal data we process on the basis of your consent or on the basis of another legal basis, for what purposes we process the data, to whom we may transfer it and what your rights are in connection with the processing of your personal data. Therefore, please consider this page, together with your consent, as an important source of information about how we handle your personal data.

This Personal Data Processing Information governs the processing of personal data of visitors to our website .

This website always contains the latest version of the Information on the processing of personal data of our company.

A. How do we process your personal information when you visit our website?

WHAT PERSONAL DATA WE PROCESS?

We process the following personal data:

• Data on the behavior on the website, which means especially IT identifiers, information on how you use our website, etc.,
• derived data , which means data that we derive by analyzing previous categories of data.

B. Why do we process personal data and what entitles us to do so ?

As part of our activities, we process personal data for various purposes and to a different extent, either:

1. without your consent based on our legitimate interest, or
2. with your consent.

What processing we can do without your consent depends on the purpose of the processing in question.

Use of cookies and other technologies, transfer of data to advertising and social networks

When you visit our website, we store and then read small files called cookies on your device. A cookie is a small set of letters and numbers that we store in your internet browser or on your computer’s hard drive. Some cookies allow us to link your activities while browsing our site from the moment you open a web browser window to the moment you close it. The moment you close the internet browser window, these cookies will be deleted. Others remain on the device for a set period of time and are activated each time you visit the website that created the particular cookie . We also use pixel tags (also known as web beacons ), which are small images that have a similar function to cookies. Unlike cookies, which are stored on your computer’s hard drive, pixel tags are an integral part of websites. For simplicity, we will refer to all of these technologies in this document as cookies. We not only store cookies on your device, but we also read those cookies that our website has stored on your device. Later in this document, we will only talk about saving for simplicity.

Some cookies are stored directly on your device by our website. These cookies help us:

• identify you when you go between pages of our site and on your visits so that we can remember your login from a specific device and not ask you for your email and password repeatedly, or to save which version of our site we should show you if the site offers more variants at the moment;
• note that you have given us consent in accordance with this document, or for example, whether you offered to participate in a particular survey;
• with security, for example, to investigate whether someone has abused your connection to our site and is not acting on your site;
• register, examine and eliminate faults and non-functional components of our website.

Such cookies and other files are necessary for the functioning of our website. If you block these cookies in your browser, our website may not work properly and we may not be able to provide you with our products and services.

Next to your device:

• we store cookies from our website, which allow us to:
  • monitor traffic to our site, its individual pages, generate statistics and reports, and measure the effectiveness of advertising;
  • show you different variations of our site as we test new features;
  • Customize the content of our site for you, such as giving you priority to view products you’ve already viewed and showing you other customized offers on our site.
• we allow cookies to be stored by third parties who may use them:
  • to collect data about your behavior on our website and on other websites;
  • to display customized bids and targeted ads within advertising and social networks on websites other than ours;
  • to link to social networks such as Facebook, including displaying customized offers and targeted ads on those social networks and websites other than ours.

In order to display customized bids and targeted ads on ad and social networks on websites other than our site, we also pass on information about your behavior on the site to ad and social networks. However, we do not pass on your identification data to such partners. You can find a list of the social and advertising networks we use in the section below entitled C. Who processes your personal data and to whom do we pass it on?

If you do not turn off the use of third party cookies and the transfer of your data to advertising and social networks in the Cookie settings and related processing section and click on the “OK” button, which is part of the notification, we will consider that the use of these cookies and the transfer of your data to advertising and social networks. social networks, you agree.

Cookie settings and related processing

Yours Settings you can agree to cookies view and edit here :

You can also turn off the storage of cookies directly in your browser. For the most frequently used browsers, you can find instructions here:

• Chrome
• Firefox
• Internet explorer
• Safari

If you use another browser, you can find a way to delete and block cookies directly in its help.

HOW DO WE PROCESS PERSONAL INFORMATION OF VISITORS ON OUR WEBSITE?

Use of personal data of website visitors

If you visit our website, we process information about your behavior on the website based on our legitimate interest (ie without your consent) in order to:

• improving the customer experience, when we obtain information on the basis of which we will be able to improve the website for you in the future, our legitimate interest here is to improve our services and their trouble-free functionality for you;
• creating statistics and reports, in particular monitoring traffic to our website, its individual pages and measuring the effectiveness of advertising; our legitimate interest here is to measure the effectiveness of our website and advertising costs; for this purpose, we may obtain additional derived data from your conduct on the Website and use it for this purpose;
• protection of property and persons, when we use data to prevent attacks on our website and endanger its functionality and security of your data; our legitimate interest here is the trouble-free functionality of our services for you and the security of your data.

We do not obtain data about your behavior on the website only from cookies. We also supplement them with data:

• Your device’s IP address (the address of your device that you use to communicate with other devices on the Internet);
• MAC address (address of the device with which you communicate with other devices in the local network);
• your device’s operating system, version, and language settings;
• the browser you use on your device, its version and language settings;
• the address of the website (URL) from which you come to our website.

information about your behavior on the site based on our legitimate interest (without your consent) in order to create customized offers and targeted ads that we display to you on the site. Our legitimate interest here is the most personalized and effective offer for you. We also enrich the named data for this purpose by analysis and obtain data derived from them . According to this data, we also divide our users into different groups, where each group will receive its own specific offer.

We use personal data for these purposes for a maximum of 14 months. You can turn off this function at any time in the Cookie settings and related processing section. You have the right to object to this processing , which is described in more detail in Chapter F. . If you exercise your right to object to the processing of your personal data, we are obliged not to further process your personal data for that purpose, unless we examine your objection that we have serious legitimate reasons for such processing.

C. Who processes your personal data and to whom do we pass it on? 

We process all the mentioned personal data as an administrator. This means that we determine the purposes for which we collect your personal data as defined above, determine the means of processing and are responsible for its proper execution.

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors are in particular:

1. marketing tool operators who help us optimize the site and personalize content and offerings for you, to improve the customer experience.

We may also pass on your personal data to other entities in the role of administrator . These are the following entities:

• Companies operating advertising and social networks Seznam.cz, as ; Google Inc ; Facebook, Inc. ; Acoustic , LP to personalize advertising, to offer its own similar products and services, or to offer other types of partner products and products.

Furthermore, we are obliged to pass on the processed personal data to state administration bodies, courts, bodies active in criminal proceedings, supervisory bodies if they ask us to do so. We may also pass on personal data to these entities and executors based on our legitimate interests.

As part of the transfer of data to our processors, we may also transfer your data to third countries outside the European Economic Area that do not ensure an adequate level of personal data protection. We will make all such transfers only if the relevant processor undertakes to comply with the standard contractual clauses issued by the European Commission and available at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2004: 385: 0074: 0084: CS: PDF .

D. From what sources do we process personal data?

In most cases, we process personal information that has been provided to us directly as part of your visit to our website by monitoring your behavior.

E. What are your rights when processing personal data?

Just as we have our rights and obligations when processing your personal data, you also have a number of rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we collect your personal data, to whom we transfer it, who processes it outside of us and what other rights you have related to the processing of your personal data. You have learned all this in this Personal Data Processing Information. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not the personal data concerning you are being processed and, if so, you have the right to access this personal data. . As part of the right of access, you can ask us for a copy of the personal data being processed, with the first copy being provided free of charge and the other copies free of charge.

Right to repair

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to correct or supplement it without undue delay.

Right to delete

In some cases, you have the right to have your personal information deleted. We will delete your personal data without undue delay if any of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to the processing of personal data, which is data for the processing of which your consent is necessary, and at the same time we have no other reason why we need to continue processing this data (for example, to defend our legal claims),
• you will exercise your right to object to the processing (see the right to object to the processing below) for personal data that we process on the basis of our legitimate interests, and we will find that we no longer have any such legitimate interests that would justify such processing,
• it turns out that the processing of personal data carried out by us has ceased to comply with generally binding regulations.

But please keep in mind that even if this is one of these reasons, it does not mean that we will delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• fulfillment of our legal obligation (see the chapter Processing without your consent above),
• for archiving, scientific or historical research purposes or for statistical purposes, or
• determining, enforcing or defending our legal claims (see the Processing without Your Consent section above).

The right to restrict processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right of erasure), but for a limited period of time. We must restrict the processing of personal data if:

• you deny the accuracy of personal data before we agree on what data is correct,
• we process your personal data without a sufficient legal basis (eg beyond what we have to process), but you will only give priority to its restriction before deleting such data (eg if you expect you to provide us with such data in the future),
• we no longer need your personal data for the above-mentioned purposes of processing, but you request it for the purpose of determining, enforcing or defending your legal claims,
• you object to the processing. The right to object is described in more detail below in the chapter Right to object to the processing. For the period we save, if your objection is justified, we are obliged to limit the processing of your personal data.

Right to portability

You have the right to obtain from us all your personal data which you have provided to us and which we process on the basis of your consent (see the chapter on the basis of consent ) and on the basis of the performance of the contract above. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order for us to be able to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you all the information you have filled in our forms (for example, your handwritten signature).

The right to object to the processing

You have the right to object to the processing of personal data which takes place on the basis of our legitimate interest (see above the chapters Processing without your consent and Marketing activities carried out on the basis of our legitimate interest). In the case of marketing activities, we will stop processing your personal data without further ado; in other cases, we will do so unless we have compelling reasons to proceed with such processing.

The right to review an automated decision

You have the right to request a review of an automated decision, especially if you believe that such a decision is incorrect. You can exercise this right as described in Chapter F below. How can individual rights be exercised? . Under this right, you can request that a decision be reviewed by a person, and you can express your opinion in relation to such a decision.

The right to file a complaint

The exercise of rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection, as set out in Chapter F below. How can individual rights be exercised? . You may exercise this right in particular if you believe that we are processing your personal data illegally or in violation of generally binding legal regulations.

F. How can you exercise your individual rights?

You will find all the necessary information on this page .

Information on the processing of the supplier’s personal data

The company ZPA Smart Energy as , IČ: 27445976 (hereinafter referred to as ” ZPA ” or ” We “) considers the protection of personal data to be an integral part of its obligations to the persons with whom we cooperate. We therefore pay due attention to the protection of personal data and act in accordance with legal regulations to ensure the protection of personal data.

In this section you will find information about what personal data we process. Here you will find information on what personal data we process on the basis of your consent or on the basis of another legal basis, for what purposes we process the data, to whom we may transfer it and what your rights are in connection with the processing of your personal data. Therefore, please consider this page, together with your consent, as an important source of information about how we handle your personal data.

This Personal Data Processing Information regulates the processing of personal data of our natural business supplier or the legal entity’s supplier’s representative .

This website always contains the latest version of the Information on the processing of personal data of our company.

A. What personal data do we process?

We process the following personal data:

• Identification data , which means in particular name, surname, birth number, if assigned, otherwise date of birth or age, address of permanent residence, etc.,
• contact details , which means personal data that allows us to contact you, in particular a correspondence address, telephone number, e-mail address, etc.,
• data on the financial situation , which means in particular income, liabilities, payment history, etc.,
• data from public sources, which means in particular data from public registers, such as the real estate cadastre, and the telephone directory of participants,
• derived data , which means data that we derive by analyzing previous categories of data.

B. Why do we process personal data and what entitles us to do so?

As part of our activities, we process your personal data for various activities and to varying degrees based on the performance of the contract, the fulfillment of a legal obligation or our legitimate interest.

PROCESSING OF PERSONAL DATA

Processing without your consent – based on the performance of the contract and our legitimate interests.

We process your personal data on the basis of the performance of the contract , if you are by a supplier conducting a natural person , or on the basis of our eligible interests , if you are a representative of the supplier of a legal entity , when in these cases the legitimate interests consist in ensuring the proper operation of our activities and the fulfillment of our obligations to our customer. We process your identification and contact data, financial situation data and data from public sources on these legal bases , for the purposes of:

• preparation, conclusion and implementation of the contract with suppliers and business partners (in other words, so that we can prepare and conclude a contract with you, on the basis of which we cooperate, and so that we can ensure proper performance of this contract and your related complaints or inquiries).

For these purposes, we retain your data for as long as is necessary to exercise the rights and obligations arising from the mutual contractual relationship (ie for the duration of the contractual relationship) and for the duration of the limitation period (maximum 15 years from the end of the contractual relationship) resulting from or related to the contractual relationship extended for another year with a view to protecting our legal claims. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings.

If you are a legal supplier and your personal data is processed on the basis of our legitimate interests, you have the right to object to this processing as described in more detail in Chapter F. If you exercise your right to object to the processing of your personal data, we are obliged not to further process your personal data for that purpose, unless we examine your objection that we have serious legitimate reasons for such processing.

Processing without your consent – based on the fulfillment of a legal obligation

As part of our activities, we must comply with certain statutory obligations. If we process your personal data for this very reason, we do not need to obtain your consent for such processing.

If you are a natural business supplier or a representative of a legal entity supplier, we process your identification and contact data and data on the financial situation in compliance with our legal obligation, in order to comply in particular with the following laws:

• Act No. 499/2004 Coll., the Act on Archiving and the File Service (this Act regulates the obligations related to the preservation of selected documents);
• Act No. 563/1991 Coll., on Accounting (this Act regulates the requirements for the creation and processing of accounting documents and related activities);
• Act No. 235/2004 Coll., on value added tax (this Act regulates the requirements for the creation and processing of accounting documents and related activities).

Based on legitimate requests and other communications, we may then pass on your personal data to public authorities (eg police, courts or tax authorities).

We store personal data processed on the basis of legal obligations for the period during which their processing is required by law. As this processing is required by law, you cannot object to this processing or withdraw your consent, as we are obliged to process this data.

Processing without your consent – based on our legitimate interests

If you are a natural business supplier or a legal entity supplier’s representative, we may, in our legitimate interest, process your identification and contact information, financial situation data, public data and derived data for the following purposes without your consent:

• finding suppliers and business partners (in other words, when we process your data in search of new suppliers with whom we are interested in cooperation), where it is our legitimate interest to ensure the provision of our services of the highest quality and improve efficiency in the operation of the company;
• protection of our legal claims (in other words, for activities in connection with the prevention and detection of fraud and other illegal acts, risk management, debt collection and also for evidentiary purposes by archiving records of legal proceedings and other material facts), where it is our legitimate interest to prevent damages on our side;
• keeping internal statistics and records, performing internal controls and ensuring our other operational needs (in other words, to ensure the efficient operation of all our internal processes (eg correspondence management) and continuous improvement of our services (eg by creating statistics and reports for planning purposes) , where our legitimate interest is to ensure the provision of our services of the highest quality and to improve efficiency in the operation of the company.

For these purposes, we retain personal data for as long as is necessary to exercise the rights and obligations arising from the mutual contractual relationship with you and for the duration of the limitation period (maximum 15 years from the end of the contractual relationship) of claims arising from or related to the contractual relationship extended for another year with a view to protecting our legal claims. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings.

the right to object to this processing , which is described in more detail in Chapter F. How can you exercise individual rights? . If you exercise your right to object to the processing of your personal data, we are obliged not to further process your personal data for that purpose, unless we examine your objection that we have serious legitimate reasons for such processing.

C. Who processes your personal data and to whom do we pass it on?

We process all the mentioned personal data as an administrator. This means that we determine the purposes for which we collect your personal data as defined above, determine the means of processing and are responsible for its proper execution.

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors are in particular:

1. providers of information systems and technical infrastructure where they manage internal personal data management systems for internal records and statistics and operational needs;
2. external printers when they process personal data for the purpose of printing and sending correspondence, ie for our operational needs;
3. lawyers and debt collection companies when they process personal data in order to protect our legal claims;
4. our suppliers if your data is necessary to carry out the cooperation between you and this supplier, for the purpose of our operational needs;
5. auditors or experts if they process personal data in order to protect our legal claims or in the performance of our legal duties.

We may also pass on your personal data to other entities in the role of administrator . These are the following entities:

• postal service providers, which are Česká pošta, sp ., IČO: 471 14 983, Mediaservis , sro, IČO 24197360, DHL Express (Czech Republic) sro, IČO 25683446, PPL CZ sro, IČO 25194798, TOP Trans, IČO 28202376 , v if they ensure the sending of documents for the purposes of fulfilling the contract or our operational needs .

Furthermore, we are obliged to pass on the processed personal data to state administration bodies, courts, bodies active in criminal proceedings, supervisory bodies if they ask us to do so. We may also pass on personal data to these entities and executors based on our legitimate interests.

D. From what sources do we process personal data?

In most cases, we process personal data that has been provided to us directly by you in the course of negotiating a contract or in any other contact with you.

We obtain the most personal data directly from you, especially by filling it out with us on the appropriate forms and in the contractual documentation, or by providing it in telephone calls or other communications.

In addition, we collect and further process personal data to a limited extent from publicly available sources, which are both public registers and data published by you on the Internet, always in accordance with legal requirements.

E. What are your rights when processing personal data?

Just as we have our rights and obligations when processing your personal data, you also have a number of rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we collect your personal data, to whom we transfer it, who processes it outside of us and what other rights you have related to the processing of your personal data. You have learned all this in this Personal Data Processing Information. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not the personal data concerning you are being processed and, if so, you have the right to access this personal data. . As part of the right of access, you can ask us for a copy of the personal data being processed, with the first copy being provided free of charge and the other copies free of charge.

Right to repair

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to correct or supplement it without undue delay.

Right to delete

In some cases, you have the right to have your personal information deleted. We will delete your personal data without undue delay if any of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to the processing of personal data, which is data for the processing of which your consent is necessary, and at the same time we have no other reason why we need to continue processing this data (for example, to defend our legal claims),
• you will exercise your right to object to the processing (see the right to object to the processing below) for personal data that we process on the basis of our legitimate interests, and we will find that we no longer have any such legitimate interests that would justify such processing,
• it turns out that the processing of personal data carried out by us has ceased to comply with generally binding regulations.

But please keep in mind that even if this is one of these reasons, it does not mean that we will delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• fulfillment of our legal obligation (see the chapter Processing without your consent above),
• for archiving, scientific or historical research purposes or for statistical purposes,
• determining, enforcing or defending our legal claims (see the Processing without Your Consent section above).

The right to restrict processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right of erasure), but for a limited period of time. We must restrict the processing of personal data if:

• you deny the accuracy of personal data before we agree on what data is correct,
• we process your personal data without a sufficient legal basis (eg beyond what we have to process), but you will only give priority to its restriction before deleting such data (eg if you expect you to provide us with such data in the future),
• we no longer need your personal data for the above-mentioned purposes of processing, but you request it for the purpose of determining, enforcing or defending your legal claims,
• you object to the processing. The right to object is described in more detail below in the chapter Right to object to the processing. For the period we save, if your objection is justified, we are obliged to limit the processing of your personal data.

Right to portability

You have the right to obtain from us all your personal data which you have provided to us and which we process on the basis of your consent (see the chapter on the basis of consent) and on the basis of the performance of the contract above. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order for us to be able to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you all the information you have filled in our forms (for example, your handwritten signature).

The right to object to the processing

You have the right to object to the processing of personal data which takes place on the basis of our legitimate interest (see above the chapters Processing without your consent and Marketing activities carried out on the basis of our legitimate interest). In the case of marketing activities, we will stop processing your personal data without further delay; in other cases, we will do so unless we have compelling reasons to proceed with such processing.

The right to review an automated decision

You have the right to request a review of an automated decision, especially if you believe that such a decision is incorrect. You can exercise this right as described in Chapter F below. How can individual rights be exercised? . Under this right, you can request that a decision be reviewed by a person, and you can express your opinion in relation to such a decision.

The right to file a complaint

The exercise of rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection, as set out in Chapter F below. How can individual rights be exercised? . You may exercise this right in particular if you believe that we are processing your personal data illegally or in violation of generally binding legal regulations.

F. How can you exercise your individual rights?

You will find all the necessary information on this page .

Information memorandum on the processing of personal data for job seekers and students

(hereinafter referred to as the ” Information Memorandum “)

We, the company ZPA Smart Energy as , IČ: 27445976 (hereinafter referred to as ” ZPA ” or ” We “), consider the protection of personal data as an integral part of our obligations not only to clients and employees, but also to you, job seekers and students to participate in educational and similar events. We therefore pay due attention to the protection of personal data and act in accordance with legal regulations to ensure the protection of personal data.

In this section you will find information about what personal data we process. Here you will find information on what personal data we process on the basis of your consent or on the basis of another legal basis, for what purposes we process the data, to whom we may transfer it and what your rights are in connection with the processing of your personal data. Therefore, please consider this page, together with your consent, as an important source of information about how we handle your personal data.

This website always contains the latest version of the Information on the processing of personal data of our company.

A. What personal data do we process?

We process the following personal data:

1. Identification data , which means in particular name, surname, title;
2. contact details , which means in particular personal data that allow us to contact you, in particular contact address, telephone number, e-mail address;
3. performance-related data , which means in particular information about your education, training, previous experience and references;
4. data on the assessment of your suitability , which means in particular the evaluation of your profile, test results, etc.

B. Why do we process personal data and what entitles us to do so?

As part of the recruitment process, we process personal data for different purposes and to different extents. We process personal data on the basis of the steps leading to the conclusion of the contract, on the basis of our legitimate interests and, if necessary, also on the basis of your consent.

Processing without your consent – based on the conclusion and performance of the contract

Based on the necessity for concluding the contract, we process your identification and contact data , data related to the performance of work and data on the assessment of your suitability , in order to search for and address candidates for a specific job and conducting a tender, incl. screening of candidates . Specifically, so that we can invite you for interviews and communicate with you, and so that we can assess your suitability for filling the vacancy from the documents provided.

For these purposes, we process personal data for the duration of the recruitment process, unless you give us your consent to further processing in the database of candidates.

If you are a student and want to participate in an educational or similar event, based on the necessity for concluding and fulfilling the contract, we process your identification and contact information , in order to ensure participation in the required educational or similar event.

For this purpose, we process personal data until the end of the given educational or similar event, unless you give us consent for further processing in the student database.

Processing without your consent – based on our legitimate interests

Based on our legitimate interests, we process your identification and contact information , work-related information and your suitability assessment data in order to protect our legal claims .

You have the right to object to such processing at any time, which may be raised in the manner described in more detail in the Right to object to the processing section.

For this purpose, we process personal data for the duration of the limitation period (maximum 3 years from the end of the recruitment process) of claims arising from or related to the recruitment process extended by another year with regard to the protection of our legal claims. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings.

Processing based on your consent for the purposes of maintaining a database of candidates

Based on your consent, we process your identification, contact and performance data work so that we can possibly contact you with another relevant job offer. If consent is not granted, we will only process this data until the end of the recruitment process, if you give us consent, then for a maximum of 3 years from the end of the recruitment process.

Processing based on your consent for the purposes of maintaining a student database

If you are a student, based on your consent, we process your identification and contact information so that we can contact you with an offer of another educational or similar event or job offer. In the event of non-consent, we will process this data only until the required educational or similar event takes place, if you give us consent, then for a maximum of 3 years from the granting of consent.

revoke the granted consent , but the revocation of the consents also does not affect the lawfulness of the processing of personal data until the moment of revocation.

Withdrawal of consent can be done in the following ways:

By filling out the form for revoking the consent to the processing of personal data

e-mail to: gdpr@zpa.cz

In writing at:

ZPA Smart Energy as

Comenius 821

541 01 Trutnov

Processing of personal data of third parties

On the basis of a legitimate interest , we further process, without their consent , the identification and contact data of the persons who have been listed as contact details, for the purpose of conducting the tender, incl. screening of candidates.

Such persons have the right to object to such processing at any time, which may be invoked in the manner described in more detail in the Right to object to the processing chapter.

We process this data for the duration of the recruitment process.

C. Who processes your personal data and to whom do we pass it on?

We process all the mentioned personal data as an administrator. This means that we determine the purposes for which we collect your personal data as defined above, determine the means of processing and are responsible for its proper execution.

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors are suppliers of personality diagnostics or suppliers of IT solutions, such as LMC sro (IČO: 26441381), or other similar companies.

Your personal data may also be processed by ManpowerGroup sro (IČO: 41194659), as another administrator who mediates agency employees.

Furthermore, we are obliged to pass on the processed personal data to state administration bodies, courts, bodies active in criminal proceedings, supervisory bodies if they ask us to do so.

D. From what sources do we process personal data?

We obtain the most personal data directly from you by providing it to us as part of the recruitment process, whether in an oral interview, CV or other documentation.

In addition, to a limited extent, we collect and further process personal data obtained from persons who have been contacted by your references, from publicly available sources, such as public records (eg insolvency register), always in accordance with legal requirements.

E. What are your rights when processing personal data?

Just as we have our rights and obligations when processing your personal data, you also have certain rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we collect your personal data, to whom we transfer it, who processes it outside of us and what other rights you have related to the processing of your personal data. You have learned all this in this Information Memorandum. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not the personal data concerning you are being processed and, if so, you have the right to access this personal data. . As part of the right of access, you can ask us for a copy of the personal data being processed, with the first copy being provided free of charge and the other copies free of charge.

Right to repair

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to correct or supplement it without undue delay.

Right to delete

In some cases, you have the right to have your personal information deleted. We will delete your personal data without undue delay if any of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to the processing of personal data, which is data for the processing of which your consent is necessary, and at the same time we have no other reason why we need to continue processing this data (for example, to defend our legal claims),
• you will exercise your right to object to the processing (see the right to object to the processing below) for personal data that we process on the basis of our legitimate interests, and we will find that we no longer have any such legitimate interests that would justify such processing,
• you believe that the processing of personal data carried out by us has ceased to comply with generally binding regulations.

But please keep in mind that even if this is one of these reasons, it does not mean that we will delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• fulfillment of our legal obligation,
• for archiving, scientific or historical research purposes or for statistical purposes,
• determining, enforcing or defending our legal claims (see above Processing without your consent – based on our legitimate interests).

The right to restrict processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, but not forever (as in the case of the right of erasure), but for a limited period of time. We must restrict the processing of personal data if:

• you deny the accuracy of personal data before we agree on what data is correct,
• we process your personal data without a sufficient legal basis (eg beyond what we have to process), but you will only give priority to its restriction before deleting such data (eg if you expect you to provide us with such data in the future),
• we no longer need your personal data for the above-mentioned purposes of processing, but you request it for the purpose of determining, enforcing or defending your legal claims,
• you object to the processing. The right to object is described in more detail below in the chapter Right to object to the processing. For the period we save, if your objection is justified, we are obliged to limit the processing of your personal data.

Right to portability

You have the right to obtain from us all your personal data which you have provided to us and which we process on the basis of your consent (see the chapter Processing on the basis of your consent above) and on the basis of the performance of the contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order for us to be able to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you all the information you have filled in our forms (for example, your handwritten signature).

The right to object to the processing

You have the right to object to the processing of personal data that occurs on the basis of our legitimate interest (see the chapter Processing without your consent – on the basis of our legitimate interests above). In such a case, we will not further process your personal data for that purpose unless we have good legitimate reasons for us to continue such processing.

The right to file a complaint

The exercise of rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection, as set out in Chapter F below. How can individual rights be exercised? . You may exercise this right in particular if you believe that we are processing your personal data illegally or in violation of generally binding legal regulations.

F. How can you exercise your individual rights?

You will find all the necessary information on this page .

Information on the processing of personal data of other persons

The company ZPA Smart Energy as , IČ: 27445976 (hereinafter referred to as ” ZPA ” or ” We “) considers the protection of personal data to be an integral part of its obligations. We therefore pay due attention to the protection of personal data and act in accordance with legal regulations to ensure the protection of personal data.

In this section you will find information about what personal data we process. Here you will find information on what personal data we process on the basis of your consent or on the basis of another legal basis, for what purposes we process the data, to whom we may transfer it and what your rights are in connection with the processing of your personal data. Therefore, please consider this page, together with your consent, as an important source of information about how we handle your personal data.

This Personal Data Processing Information regulates the processing of personal data of various persons whose data we process in various situations; these are in particular the following persons:

• Persons in a family or similar relationship with the customer , in particular:

• spouse, children, spouse, etc.
• heir

• Persons we come into contact with in connection with events or competitions , in particular:
  • participants in competitions
  • event visitors
  • event organizers
• Persons who communicate with us via social networks, by letter or otherwise , in particular:
  • journalists
  • social network users
  • In the event that your shipment arrives and you are not our customer or any of the other categories of entities.
• Survey persons

This website always contains the latest version of information about the processing of our company’s personal data.

A. _ What personal data do we process?

We process the following personal data:

• Identification data , which means in particular name, surname, birth number, if assigned, otherwise date of birth or age, address of permanent residence, etc.,
• contact details , which means personal data that allows us to contact you, in particular a correspondence address, telephone number, e-mail address, etc.,
• data on the use of the services of our partners , which means in particular the audio recording of the survey, etc.

B. Why do we process personal data and what entitles us to do so?

As part of our activities, we process your personal data for various activities and to various extents based on our legitimate interest.

Processing without your consent – based on our legitimate interests

Based on our legitimate interest, we may process your identification and contact information for your purposes without your consent:

• protection of our legal claims (in other words, for activities in connection with the prevention and detection of fraud and other infringements, risk management, debt collection and also for evidentiary purposes by archiving records of legal proceedings and other material facts), where it is our legitimate interest to prevent damages on our side;
• ensuring our operational needs (in other words, to ensure the efficient operation of all our internal processes (eg correspondence management) and continuous improvement of our services), where it is in our legitimate interest to ensure the provision of our services of the highest quality and improve efficiency in the company.

For these purposes, we store personal data for as long as is necessary to exercise the rights and obligations arising from the contractual relationship between the customer and us, which contains documentation in which your personal data is stated or for the time necessary to exercise rights and obligations related to events, competitions or similar events or for the duration of our mutual communication or for the duration of another type of relationship between us and you and for the duration of the limitation period (maximum 15 years from the end of the contractual relationship) claims arising from or related to this contractual relationship , extended for another year with a view to protecting our legal claims. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings.

the right to object to this processing , which is described in more detail in Chapter F. . If you exercise your right to object to the processing of your personal data, we are obliged not to further process your personal data for the given purpose, unless we investigate your objection that we have serious legitimate reasons for such processing.

C. Who processes your personal data and to whom do we pass it on?

We process all the mentioned personal data as an administrator. This means that we determine the purposes for which we collect your personal data as defined above, determine the means of processing and are responsible for its proper execution.

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors are in particular:

1. providers of information systems and technical infrastructure where they manage internal personal data management systems for internal records and statistics and operational needs;
2. external printers when they process personal data for the purpose of printing and sending correspondence, ie for our operational needs;
3. lawyers and debt collection companies when they process personal data in order to protect our legal claims;
4. auditors or experts if they process personal data in order to protect our legal claims or in the performance of our legal duties.

We may also pass on your personal data to other entities in the role of administrator . These are the following entities:

• postal service providers, which are Česká pošta, sp ., IČO: 471 14 983, Mediaservis , sro, IČO 24197360, DHL Express (Czech Republic) sro, IČO 25683446, PPL CZ sro, IČO 25194798, TOP Trans, IČO 28202376 , v when they provide us with the sending of documents for the purpose of fulfilling the contract or our operational needs;

Furthermore, we are obliged to pass on the processed personal data to state administration bodies, courts, bodies active in criminal proceedings, supervisory bodies if they ask us to do so. We may also pass on personal data to these entities and executors based on our legitimate interests.

D. From what sources do we process personal data?

In most cases, we process personal information that has been provided to us by another entity, especially if someone has filled out your information in our form or you have provided your information to another entity in order to share it with us.

In some cases, we process personal data that has been provided to us directly by you in the course of negotiating a contract or in any other contact with you, in particular by providing it to us in telephone calls or other communications.

E. What are your rights when processing personal data?

Just as we have our rights and obligations when processing your personal data, you also have a number of rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtained it, to whom we pass it on, who processes it outside of us and what other rights you have regarding it. You have learned all of this in this Personal Data Processing Information, but if you are not sure whether and what personal data we process about you, you can ask us for confirmation. If this is the case and we process your personal data, you have the right to access it. As part of the right of access, you can ask us for a copy of the processed personal data. We will provide you with the first copy free of charge, the other copies with a fee.

Right to repair

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to correct or supplement it without undue delay.

Right to delete

In some cases, you have the right to have your personal information deleted. We will delete your personal data without undue delay if any of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it,
• you withdraw your consent to such processing of personal data for which your consent is necessary, and at the same time we have no other reason why we need to continue to process this data (for example, to defend our legal claims),
• you object to the processing (as described in the Right to object to the processing section) of the personal data that we process on the basis of our legitimate interests, and we find that we no longer have any such legitimate interests that would justify such processing,
• it turns out that the processing of personal data carried out by us has ceased to comply with generally binding regulations.

But please keep in mind that we will not always delete all your personal data immediately. This right does not apply if the processing of your personal data is still necessary for:

• for archiving, scientific or historical research purposes or for statistical purposes,
• fulfillment of our legal obligation,
• determining, enforcing or defending our legal claims.

The right to restrict processing

In some cases, in addition to the right to erasure, you may exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right of erasure), but for a limited period of time. We must restrict the processing of personal data if:

• you deny the accuracy of personal data before we agree on what data is correct,
• we process your personal data without a sufficient legal basis (eg beyond what we have to process), but you will only give priority to its restriction before deleting such data (eg if you expect you to provide us with such data in the future),
• we no longer need your personal data for the above-mentioned purposes of processing, but you request it for the purpose of determining, enforcing or defending your legal claims,
• you object to the processing. The right to is described in the section Right to object to the processing. We will limit the processing of your personal data during the period of investigation of the legitimacy of your objection.

Right to portability

You have the right to obtain from us all your personal data which you have provided to us and which we process with your consent and on the basis of the performance of the contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order for us to be able to easily transfer data at your request, it can only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you all the information you have filled in our forms (for example, your handwritten signature).

The right to object to the processing

You have the right to object to the processing of personal data that occurs in our legitimate interest. In the case of marketing activities, we will stop processing your personal data without further delay; in other cases, we will do so unless we have compelling reasons to proceed with such processing.

The right to review an automated decision

You have the right to request a review of an automated decision, especially if you believe that such a decision is incorrect. You can exercise this right as described in section F. How can you exercise individual rights? Under this right, you can request that a decision be reviewed by a person, and you can express your opinion in relation to such a decision.

The right to file a complaint

Exercising your rights as set out above does not affect your right to lodge a complaint with the Data Protection Authority, as described in section F. How can you exercise your individual rights? You may exercise this right in particular if you believe that we are processing your personal data illegally or in violation of the law.

F. How can you exercise your individual rights?

You will find all the necessary information on this page .

How can you exercise individual rights?

Our company does not have a designated data protection officer.

You can contact us by any of the following means:

By e-mail

at the address: gdpr@zpa.cz

In writing at:

ZPA Smart Energy as

DPO privacy policy

Comenius 821

541 01 Trutnov

Rights claim forms

this form to exercise your rights . You can also obtain a paper version of the form at the company’s address on request.

Filing a complaint with the Office for Personal Data Protection

You can file a complaint against the processing of personal data with us at the Office for Personal Data Protection, which is located at Lt. Col. Sochora 27, 170 00 Prague 7.

See https://www.uoou.cz .