Statement on the Processing of Personal Data

Personal Data Controller

• ADDICTESTATE GROUP s.r.o., with its registered office at Kladenská 542/38, Vokovice, 160 00 Praha 6, Company ID (IČO): 19254598, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 383761, and
• DREAMRENTAL ISV s.r.o., with its registered office at Varšavská 715/36, Vinohrady (Praha 2), 120 00 Praha, Company ID (IČO): 23828544, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 433597.

To exercise your personal data rights, you may contact us by email at the address given in the Contact section, or by post at the address above.

Purposes and Legal Basis for the Processing of Personal Data

We process personal data for the purpose of ensuring the functionality of the website. The legal basis is the legitimate interest of the controller.

Legitimate Interests of the Controller

• Provision of online content
• Creation and processing of forms and contracts

Categories of Personal Data

In most cases, we process personal data that you have provided to us in a form or contract. We may also process data from publicly available registers and sources.

Rights of Data Subjects and Obligations of the Controller

As a data subject, you have the following rights in connection with the processing of personal data:

• If you have given consent to the processing of personal data, you have the right to withdraw that consent within the meaning of Article 7(3) GDPR;
• the right to information within the meaning of Articles 13–14 GDPR;
• the right of access to personal data within the meaning of Article 15 GDPR;
• the right to rectification within the meaning of Article 16 GDPR;
• the right to erasure within the meaning of Article 17 GDPR;
• the right to restriction of processing within the meaning of Article 18 GDPR;
• the right to data portability within the meaning of Article 20 GDPR;
• the right to object within the meaning of Article 21 GDPR;
• the right not to be subject to any decision based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

You have the right of access to your personal data — upon request, you will receive confirmation from us as to whether or not your personal data is being processed and, if so, you will receive that data together with information on the purposes of processing, the categories of data concerned, the recipients, the envisaged storage period, and the source of the data.

If you believe that we are processing inaccurate data, you may exercise your right to rectification. If you notify us that you request the rectification of your personal data, we are obliged to deal with your request.

Right to Erasure

The right to erasure represents our obligation to destroy your personal data if at least one of the following conditions is met:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
• you withdraw your consent and there is no other legal basis for the processing,
• you object to the processing and there are no overriding legitimate grounds for the processing,
• the personal data has been processed unlawfully,
• the personal data must be erased to comply with a legal obligation,
• the personal data was collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.

The right to erasure is not an absolute right — it cannot be used to demand the destruction of all personal data, as we are subject to obligations to further retain certain personal data.

Right to Restriction of Processing

You have the right to restriction of the processing of personal data if:

• you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data,
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead,
• we no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise, or defence of legal claims,
• you intend to exercise the right to object to the processing of personal data.

Right to Data Portability

The essence of the right to data portability is the possibility, under certain conditions, to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller, where technically feasible. The processing must be based on consent or a contract and carried out by automated means; the exercise of this right must not adversely affect the rights and freedoms of others.

Complaint to the Supervisory Authority

Where the processing of personal data is based on consent, you have the right to withdraw that consent. You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data infringes the GDPR. The supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) — www.uoou.cz, Pplk. Sochora 27, 170 00 Praha 7. In the event of an interference with your public subjective rights, you may also apply to a court.