Processing and Protection of Personal Data at AnFas, spol. s r. o.

Information on the Processing of Personal Data

AnFas, spol. s r. o., with its registered office at Pod Bateriemi 15, 162 00 Prague 6, ID No. 63077205, ensures the protection of personal data you provide to us. It is important for you to know that we process your personal data responsibly, transparently, and you have the right to request information about the recorded personal data, its correction, or deletion, if it is granted on the basis of your consent.

In case of any questions regarding the processing of your personal data, you can contact us at phone number+420 224 222 220or by email atanfas@anfas.cz.

Security of Your Personal Data

We care about the security of the personal data you entrust to us. We have taken appropriate technical and organizational measures to sufficiently protect your data. No unauthorized person has access to your personal data, and we do not pass it on to other entities for further processing without your consent, unless required by law or in the case of protecting our legal interests.

Compliance with GDPR

We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016), and therefore that:

• we process your personal data only on the basis of a valid legal ground, primarily legitimate interest, performance of a contract, legal obligation, or consent granted,
• we fulfill the information obligation before commencing the processing of personal data,
• we will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and GDPR.

Scope of Personal Data and Purposes of Processing

We process personal data that you entrust to us yourself, for the following reasons (to fulfill these purposes):

• Provision of services and performance of a contract
  We strictly need your personal data in the scope of: billing data, email, telephone, or correspondence address to perform the contract (e.g., delivery of a book or other goods and services).
• Accounting
  If you are a customer, we strictly need your personal data (billing data) to comply with the legal obligation for issuing and recording tax documents.
• Marketing - newsletter subscription
  We use your first name, last name, and email for direct marketing purposes - sending commercial communications. If you are our customer, we do so out of legitimate interest, as we reasonably assume you are interested in our news, for a period of 5 years from the last order. If you are not our customer, we send you newsletters only based on your consent, for 5 years from it being granted.
• Communication regarding Jellypot and Identity Online
  In the event that you fill out a contact form on the websitewww.jellypot.netor on the websitewww.identityonline.cz, operated by AnFas, spol. s r. o., we will process your personal data necessary for communication regarding both applications for the period strictly necessary for the given communication based on your consent.

We retain your personal data for the duration of the limitation periods, unless the law provides for a longer period for their retention or we have stated otherwise in specific cases.

Cookies

When you visit our website, you are informed that we use technologies to collect and store information using cookies on your device. Cookies are small text files that we do not send anywhere, nor do we process them in any way. Cookies do not collect any of your personal data, but without these files, we cannot ensure full functionality.

Your Rights in Connection with Personal Data Protection

You have a number of rights in connection with personal data protection.

You have theright to information, which is already fulfilled by this information page with the principles of personal data processing.

Thanks to theright of access, you can challenge us at any time and within 30 days we will provide evidence of what personal data we process and why. It is then our right that we can reject requests for information that are groundless or unreasonably repeated, or if obtaining them requires disproportionate effort or would be difficult to obtain (typically from backup systems, archives, etc.).

If something changes or you find your personal data outdated or incomplete, you have theright to supplementation and changeof personal data.

You can exercise theright to restriction of processing if you believe that we are processing your inaccurate data, you believe that we are conducting the processing unlawfully but do not want to delete all data, or if you have objected to the processing.

Right to erasure (to be forgotten)
Your other right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish so, you have the right to it. In that case, we will delete all your personal data from our system and from the system of all sub-processors and backups. We need 30 days to ensure the right to erasure.

In some cases, we are bound by a legal obligation, and for example, we must record issued tax documents for the period specified by law. In this case, we will delete all such personal data that are not bound by another law. We will inform you about the completion of the erasure via email.

Complaint with the Office for Personal Data Protection
If you feel that we are not handling your data in accordance with the law, you have the right to contact the Office for Personal Data Protection with your complaint at any time. We would be very glad if you inform us of this suspicion first so that we can do something about it and remedy any error.

Unsubscribing from newsletters and commercial communications
We send you emails with inspiration, articles, or products and services if you are our customer based on our legitimate interest. If you are not a customer yet, we send them to you only based on your consent. In both cases, you can end the subscription to our emails by clicking the unsubscribe link in each email sent.

Confidentiality

We would like to assure you that our employees and associates who will process your personal data are obliged to maintain confidentiality regarding personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of contractual relationships with us. Without your consent, your personal data will not be released to any other third party.

This personal data processing policy is effective from May 25, 2018