Personal data protection (GDPR)

1. Data controller

The controller of personal data is BAS Digital s.r.o., Příčná 1892/4, Nové Město (Praha 1), 110 00 Praha, IČO: 23533072. In matters relating to personal data protection, please contact us at s@basdigital.cz.

2. What data we process

• —Identification and contact details (name, e-mail, telephone, company)
• —Billing and contractual data
• —Data on the use of services and on communication
• —Data from forms that you provide to us yourself

3. Purposes and legal basis of processing

• —Performance of a contract and provision of services (Art. 6(1)(b) GDPR)
• —Compliance with legal obligations, in particular accounting and tax obligations (Art. 6(1)(c) GDPR)
• —Legitimate interest — communication and security of services (Art. 6(1)(f) GDPR)
• —Consent — for marketing communications (Art. 6(1)(a) GDPR), which may be withdrawn at any time

4. Retention period

We retain personal data for the duration of the contractual relationship and thereafter for the period required by legislation (in particular accounting and tax legislation). The data is then securely erased.

5. Recipients and transfers

We do not pass data on to third parties for marketing purposes. Processors (e.g. providers of hosting services and accounting tools) process data only on the basis of a contract and in accordance with our instructions.

6. Your rights

• —Right of access to your data and to its rectification
• —Right to erasure ("right to be forgotten")
• —Right to restriction of processing and to data portability
• —Right to object to processing
• —Right to lodge a complaint with the Office for Personal Data Protection (uoou.cz)

7. Security

We use technical and organisational measures appropriate to the current state of the art, including encryption of data in transit (HTTPS) and restriction of access to data.

8. Contact

If you have any questions regarding the processing of personal data, please contact us at s@basdigital.cz.