Before registering with us, we would like to inform you about which personal data, the protection of which is subject to the EU Regulation 2016/679 (GDPR) and its Czech Adaptation Law, we will request from you, why we need it, and how we deal with it.
The Administrator of personal data is QA Czech s.r.o., Company ID 28828836, registered office at Smilova 2934, 530 02 Pardubice, and registered in the Commercial Register kept by the Regional Commercial Court in Hradec Králové under File No. C, Entry 30150, Date of Entry: 2 February 2012. Any inquiries regarding the processing of your personal data can be sent to the postal address of the company’s registered office, emailed to info@qaczech.com, or made by phone + 420 774 437 058.
We process the following personal data of the registered users:
- Name and surname
- Postal address
- Email address
- Phone number
- Company ID
- Tax ID
Why we need the data:
- With potential suppliers for recruitment (we will need your approval in the next step of your registration)
- With existing (already collaborating) suppliers for the contract performance
How we handle the data:
- Potential supplier data (no matter at what stage of the recruitment process) and data from existing suppliers are stored in a database on a secure server only available to users at a defined security access level. Under no circumstances will we share personal data with any third parties.
- We archive data about prospective suppliers who have failed in the recruitment process for 15 years from receipt, and data about existing suppliers for 15 years after the last contract was terminated.
The rights of existing and potential suppliers (data protection entities) are governed by the EU Regulation 2016/679 (GDPR) and its Czech Adaptation Law equivalent. This includes, inter alia, the right to access personal data, the right to rectification, the right to withdraw consent, the right to limit the processing, and the right of deletion. Under Article 17 of GDPR, the data entity has the right to delete personal data concerning them if the Administrator does not demonstrate legitimate reasons for the processing of such personal data. Your consent to the processing of personal data for business purposes may be withdrawn at any time. It is necessary to make a withdrawal in an explicit, comprehensible, and certain manifestation of will. Revocation of the consent to data processing does not imply the entitlement to the right to delete it, since our legitimate reason for data retention is within its processing as part of the quality management of the provided services covered by the above mentioned archiving periods.
