Personal Data Processing Consent
I hereby grant my consent to companies belonging to the Horizon Holding Group, contact address the Blox, Evropská 2758/11, 160 00, 160 00, Prague 6, Czech Republic, as joint controllers pursuant to Article 26 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), to process my personal data in the scope of first and last name, email, IP address and phone number, for the purposes of sending commercial communications and information pursuant to Section 7 of Act No. 480/2004, on certain services of the information society, as amended (the “Information Society Act”), concerning offers of residential and commercial premises from the Controllers for sale.
I grant this consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Article 7 of the Information Society Act. I can recall this consent at any time here.
Personal Data Protection Policy
Personal data processing policy pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”).
- Who is the controller of your personal data?
Horizon Holding Group, contact address the Blox, Evropská 2758/11, 160 00, 160 00, Prague 6, Czech Republic, which are the data controllers for your personal data pursuant to Article 26 of the GDPR (the “Controllers”), who have made a transparent agreement among themselves defining their share in responsibility for performing the obligations under the GDPR, in particular with regard to the exercise of your rights under the GDPR.
- Legal basis for processing
The legal basis for processing your personal data is that the processing is necessary for:
- performing under the contract between you and any of the Controllers pursuant to Article 6(1)(b) of the GDPR;
- performing the legal obligations that apply to Controllers pursuant to Article 6(1)(c) of the GDPR, specifically those imposed on the Controllers by generally binding legal regulations, in particular the VAT Act, Income Tax Act, Accounting Act, etc.;
- the legitimate interests of the Controllers pursuant to Article 6(1)(f) of the GDPR.
A separate legal basis for the processing is the consent you granted to processing your personal data for the purposes of sending commercial communications from the Controllers pursuant to Article 6(1)(a) of the GDPR.
- Purpose of the personal data processing
We will process your personal data for the following purposes:
- offering residential and non-residential units put on the market by the Controllers, and sending out newsletters for that purpose so you are informed in a timely manner of news and special events;
- sending out information on residential and non-residential units put on the market by the Controllers;
- preparing contractual documentation necessary for the sales, handover, management, and warranty claims on the subject of sale, i.e. residential and non-residential units, or their shares in the same (i.e. in particular preparation: reservation agreement, future purchase agreement, purchase agreement for a residential / non-residential unit, pledge agreement, proposal for entry of ownership rights and/or pledges into the Land Register, handover report, warranty claim report, real estate acquisition tax return, etc.) (the “Contractual Documentation”).
- What data do we process on you?
The Controllers process your personal data for the purposes of exercising the rights and performing the obligations arising, in particular, from the Contractual Documentation, that are necessary for the sale of residential and/or non-residential premises or their shares in the same, and performing the obligations imposed on us by Czech law.
The Controllers process your personal data in the following scope: first and last name, date of birth, place of birth including district, last name at birth, address of residence and contact address, bank account, email, telephone number, IP address, Birth ID No., National ID Card No., and potentially passport number and marital status.
From users of our website and clients we process electronic contact details (email) in connection with the sale of our residential and/or non-residential units that we later use to disseminate commercial communications (sending out newsletters). Clients and others interested in receiving newsletters always have a clear, simple and free option to opt out of receiving the newsletters.
We only process the personal data necessary (e.g. email) and we never process special categories of personal data. The Controllers do not use technical or other means and/or technologies that would constitute an excessive infringement on data subjects’ privacy.
- Who do we send your data to?
We may hand your personal data over to companies and other persons (such as attorneys who prepare the Contractual Documentation) sharing in the transfer of residential and/or non-residential units to your ownership (Land Registry Offices, Tax Authorities, etc.) and ensuring the financing for your purchase (banks) and persons providing technical services for the Controllers in connection with offering residential and/or non-residential units, including software and data storage.
The recipients of your personal data processed for the purposes of performing obligations arising from legal regulations can also be tax authorities or other relevant authorities in cases where Controllers are required to disclose data under generally binding legal regulations.
The Controllers may send your personal data to Israel and may also hand over personal data in the scope of email, first and last name, and telephone number to third parties providing services through which you will receive emails. These third parties have their registered offices in and provide their services from the USA. The European Commission issued a decision called the EU-US Privacy Shield that is designed to secure the same level of personal data protection as in the European Union. The third parties to whom the Controllers may hand over personal data are certified and adhere to the Privacy Shield and do everything necessary to operate in compliance with the GDPR. Under Article 45 of the GDPR, Israel is a country that secures sufficient protection for personal data.
In the interest of securing fair and transparent personal data processing, we provide the following information.
- The period for which data is stored
Contractual documentation is stored for the duration of the contractual relationship with you, extended by the (i) warranty period, (ii) statute of limitations and (iii) prescription periods, however for a minimum of 10 years after signing the Contractual Documentation and for as long thereafter as we are required under legal regulations (e.g. the Accounting Act, VAT Act and Income Tax Act).
We keep orders and purchase agreements made with Clients, or any other personal data you send us in connection with purchasing or making a warranty claim on residential and/or residential units, for a period of 10 years. We keep invoices for a period of 10 years and accounting documents for a period of five years. The Controllers shred the relevant documentation after these periods are complete.
If you request to purchase a residential and/or non-residential unit but the sale is not completed in the end, your personal data is processed until the relevant limitation periods regarding precontractual liability are over.
- Your rights
You are not required to provide us your personal data. Providing your personal data is a prerequisite for entering into contracts, contractual performance and sending newsletters; you cannot make a contract and the Controllers cannot provide contractual performance without your personal data.
The Controllers hereby inform all data subjects that may be affected regarding their right (i) to require the Controllers to provide access to the personal data they process, (ii) to correct or erase data or restrict processing, (iii) to make an objection to processing, and (iv) to data to data transferability. These rights may be exercised over the telephone at +420 222 991 100 (Mon-Fri 9:30 am - 5:00 pm) and by e-mail at: firstname.lastname@example.org.
Any data subject may file a complaint at any time with the supervisory body in connection with the Controllers’ processing of personal data. Any data subject has the right to correct a situation that is not in compliance with legal regulations, in particular in the form of suspending or halting the processing of personal data or correcting, adding to and/or removing personal data. You have the right to contact the Personal Data Protection Office in the event of any suspicions regarding the above or refusal to remedy a situation not in compliance with legal regulations.
A complaint may be filed with the supervisory body, i.e. the Personal Data Protection Office, with its registered office at Pplk. Sochora 27, 170 00 Praha 7, website: www.uoou.cz, email: email@example.com, instructions available here.
- Automated decision-making including profiling
The Controllers generally do not perform automated decision-making or profiling, nor do they collect and/or process personal data for that purpose. For that reason, this section does not have any further details.