PRIVACY POLICY
– Security Document of the Data Controller –
Preamble
Mobility & Innovation Production s.r.o. values the privacy of individuals and is committed to responsibly collecting personal data in accordance with Regulation 2016/679 on the protection of individuals regarding the processing of personal data and the free movement of such data (General Data Protection Regulation, hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data, as amended (hereinafter referred to as “ZoOOU”).
Considering our business activities, the type and extent of personal data we come into contact with, and the data processed either by us or by our processors on our behalf, we commit to protecting and respecting the privacy of all individuals in compliance with the latest data protection regulations. This policy explains when and why we collect personal information, the scope of data we gather, how we use it, and under what conditions we may disclose it to others.
The data controller, as defined in § 5 par. 1 letter o) of ZoOOU, is Mobility & Innovation Production s.r.o., located at Orechová Potôň 800, Orechová Potôň 930 02, ID No.: 53 422 635, registered in the Commercial Register: District Court Trnava, Section Sro, File No.: 49540/T (hereinafter referred to as “Mobility & Innovation Production” or “Controller”).
Definitions
- Personal Data: Any information related to an identified or identifiable individual (“Data Subject”); an identifiable individual is a person who can be directly or indirectly identified, especially by reference to an identifier such as a name, identification number, location data, online identifier, or one or more specific factors relating to physical, physiological, genetic, mental, economic, cultural, or social identity.
- Data Subject: The identified or identifiable individual to whom the Personal Data relates.
- Data Controller or Controller: The entity, i.e., Mobility & Innovation Production, that determines the purposes and means of processing Personal Data, except where specified otherwise by applicable laws for processing activities.
- Data Processor or Processor: A natural or legal person who processes Personal Data on behalf of the Controller.
- Data Processing: Any operation performed on Personal Data, whether automated or manual, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, dissemination, aligning or combining, restricting, erasing, or destroying.
- Pseudonymization: Processing of Personal Data so that it can no longer be attributed to a specific Data Subject without additional information, provided that such additional information is stored separately and is subject to technical and organizational measures to ensure that Personal Data cannot be attributed to an identified or identifiable individual.
- Information System: Any organized set of Personal Data accessible according to specific criteria, regardless of whether it is a centralized, decentralized, or functionally or geographically distributed system.
- Personal Data Breach: A security breach that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to transmitted, stored, or otherwise processed Personal Data.
- Data Subject: Any natural person whose personal data is processed.
Commitments of Mobility & Innovation Production Regarding Data Protection
Mobility & Innovation Production is committed to ensuring Personal Data protection within the company:
- By maintaining confidentiality and security of the Personal Data of business partners, customers, and any other persons whose Personal Data is processed;
- Through binding corporate rules and documents outlining obligations for data processing personnel, aiming to ensure equal levels of protection for all entities collaborating with Mobility & Innovation Production and establishing a framework for data transfers;
- By monitoring compliance with data protection principles within Mobility & Innovation Production through ongoing training;
- By enforcing stricter criteria for selecting entities to process Personal Data (service providers, suppliers, partners, etc.).
Why Does Mobility & Innovation Production Need Personal Data?
Mobility & Innovation Production processes Personal Data only for specific, explicit, and legitimate purposes and does not further process data in ways incompatible with the following purposes (among others):
- Fulfilling contract content and contractual relationships with business partners, collaborators, and suppliers of Mobility & Innovation Production;
- Managing pre-contractual relationships with potential clients – business partners;
- Marketing, promotion, and advertising of Mobility & Innovation Production;
- Accounting and invoicing for Mobility & Innovation Production;
- IT support and website operations of Mobility & Innovation Production.
Legal Framework
Mobility & Innovation Production collects and processes Personal Data:
- In accordance with § 13 par. 1 letter a) of ZoOOU based on the consent of the Data Subject (e.g., for marketing, newsletters);
- In accordance with § 13 par. 1 letter b) of ZoOOU for contract fulfillment purposes (e.g., service contract, copyright contract);
- In accordance with § 13 par. 1 letter c) of ZoOOU to comply with legal obligations applicable to the Data Controller (e.g., obligations under income tax law, social security law);
- In accordance with § 13 par. 1 letter f) of ZoOOU based on legitimate interests pursued by Mobility & Innovation Production, unless these interests are overridden by the interests or fundamental rights and freedoms of third parties (e.g., to protect copyright of authors and performing artists).
All in line with the type of legal relationship you enter with Mobility & Innovation Production.
What Personal Data Do We Collect?
Mobility & Innovation Production processes personal data to the following extent:
- For fulfilling contract content and contractual relationships with business partners, collaborators, and suppliers: name, title, date of birth, residence address, contact details like phone number and email, bank account number, and other common personal data needed for contract fulfillment, as specified in the contract;
- For managing pre-contractual relationships with business partners: name, residence address, phone and email contact;
- For marketing, promotion, and advertising purposes: name, email, date of birth;
- For accounting and invoicing purposes: name, residence address, bank account number, mailing address, date of birth;
- For IT support and website operation purposes: cookie preferences, IP address.
Legal Framework for Processing Special Categories of Personal Data
Special categories of Personal Data refer to information that reveals racial or ethnic origin, political opinions, religious beliefs, philosophical convictions, union membership, genetic data, biometric data, health information, or data on sexual life or sexual orientation.
Mobility & Innovation Production does not process special categories of Personal Data under any circumstances. If such data is disclosed by the Data Subject, Mobility & Innovation Production will inform them that such data is neither needed nor processed and will act in compliance with GDPR by deleting or otherwise rendering such data inaccessible, notifying the Data Subject accordingly.