GDPR

Privacy Policy

Privacy and personal data protection

On this page you will find an overview of the main principles for protecting personal and other data. Our company, DevCors s.r.o., Company ID (IČO): 08197181, VAT ID: CZ08197181, with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, registered in the Commercial Register kept by the Regional Court in Brno under file no. C 112371 (hereinafter the “Company”), as the operator of the website www.devcors.com (hereinafter the “Website”) and provider of other internet services, handles (processes and collects) personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Act No. 110/2019 Coll., on the processing of personal data, and Act No. 127/2005 Coll., on electronic communications.

‍

Types of personal data collected and processed

At the Company, we collect the following data about users of our services:

For users of our services, we record their name, email address, phone number and other contact details; for business partners, we also record their business name, registered office, place of business, identification number and bank details.

Further data about users is obtained through cookies during your visit to the Website, as described here.

For job applicants and candidates for cooperation in the “Careers” section, additional personal data related to the recruitment process may be collected and processed.

‍

Purpose of processing and collecting personal data

The data provided is collected in particular for the purpose of:

  • Using the services and products provided by the Company or by third parties under a contractual arrangement with the Company, and settling all rights and obligations arising from the order of the given service or product (including, for example, administering and processing payment for the service or product);
  • Sending commercial communications by email or notifications about new services or their improvements on the Company's web portals and other marketing assets of the Company, in accordance with Act No. 480/2004 Coll., on certain information society services, as amended. Advertising and marketing materials from other parties will only be sent to you if you have subscribed to such communications by email on our website or in another way. You can unsubscribe from commercial communications using the unsubscribe option in the footer of each email, or by email: info@devcors.com.
  • Creating and distributing advertising relevant to the user's interests, i.e. behaviourally targeted online advertising. Online behavioural advertising is a way of displaying ads on visited websites so that the ads better match users' interests and are as relevant to them as possible. Data obtained in this way does not make it possible to identify the user as a natural person in the real world and is collected and analysed strictly anonymously. Users may at any time choose whether or not to benefit from more relevant advertising by opting in to or out of behavioural targeting at the address below.  In this context, strictly anonymised identifiers derived from email addresses (so-called hashes) may be transferred to third parties for the purpose of automated behavioural targeting/segmentation of advertising to users of the Company's services. However, based on this data it is in no way possible to identify or match a specific user.
  • In the “Careers” section: if you apply for any of the job vacancies at our company through our website or in another way, we will process the personal data you provide in order to evaluate your application and the information it contains, so that we can assess whether you are a suitable candidate for one of our positions. We may also carry out pre-employment screening of job applicants in order to, among other things, verify the accuracy of the information contained in your CV and other documents you provide to us.
  • For anonymous statistical recording: each time you visit our website or the services we provide, anonymous cookies are stored. They help us find out how many users return to our site. This is purely anonymous, statistical data that cannot be used to identify a specific user.
  • To resolve any disputes that may arise during a business relationship or during the recruitment process.
  • To comply with legal obligations arising, for example, from tax regulations and other legislation that the Company is required to comply with and that require the processing of personal data.

The Company will not collect an excessive amount of personal data or other information that is not relevant to the purposes for which the personal data is collected.

‍

Data sharing, processors and transfers to third countries

The Company does not share any personal information with third parties except in the following cases:

  • the data is necessary for the provision of the Company's services,
  • on the basis of your consent,
  • entrusting personal data to processors who process personal data on behalf of the Company,
  • the Company is required to provide personal data by law or by order of a public authority, or
  • the Company is required to provide personal data to payment processing providers in order to facilitate the customer verification process.

Company employees may also have access to personal data where this is necessary for the performance of their work duties.

The Company uses trusted third-party providers who in some cases process personal data on behalf of the Company and on the Company's instructions. The Company may use the following categories of providers (processors under the GDPR):

  • data centre, hosting
  • marketing service providers
  • analytics and recording service providers
  • business management service providers
  • task management and communication providers
  • legal, tax, accounting and auditing services
  • recruitment and candidate screening providers
  • information security service providers

The Company will transfer your data to countries outside the EU/European Economic Area only if such a transfer complies with applicable law. This means, for example, that our provider is based in a country for which the European Commission has issued a decision that it provides an adequate level of personal data protection, that standard contractual clauses and/or other transfer mechanisms are in place that provide appropriate safeguards with regard to the protection of privacy and the fundamental rights and freedoms of individuals, and, where necessary, that additional measures are applied to ensure that the data subject is afforded a level of protection essentially equivalent to that guaranteed by the GDPR.

‍

Consent to processing

Your personal data is processed on several legal bases. Under the GDPR, these are mainly the performance of a contract you have concluded with us or are negotiating with us, the fulfilment of our obligations under applicable law, and our legitimate interest. In these cases, your consent to the processing of personal data is not required. Any other processing of personal data takes place only on the basis of your express consent. In such a case, your personal data will be erased once you withdraw your consent. Please bear in mind that the same data may also be processed on another legal basis, in which case withdrawing your consent may not mean that your data is erased completely. Consent can be withdrawn by email at info@devcors.com.

‍

How personal data is secured

All personal data you provide to us is secured using standard procedures and technologies. It is therefore not possible to guarantee 100% that the information provided cannot be accessed, copied, disclosed, altered or destroyed by breaching the Company's physical, technical or managerial security measures. With regard to the security of personal data,  we nevertheless guarantee that we regularly check our system for vulnerabilities and attacks and use such security measures as can reasonably be required of us to prevent unauthorised access to the data provided and which, given the current state of technology, provide sufficient security. The security measures adopted are updated regularly.

To better secure users' personal data, access to the data is password-protected and sensitive data is encrypted in transit between the user's browser and the Company's websites.

Users acknowledge that emails, instant chat messages, blogs and other types of communication with other users of the Website are not encrypted. In this  context, we strongly recommend that you do not use these forms of communication to provide confidential information.

‍

Your rights

As a data subject, you have the following rights in relation to your personal data:

1. The right to be informed of at least:

  1. the identity and contact details of the controller and its representative,
  2. the contact details of the data protection officer, if one has been appointed,
  3. the purposes of the processing of personal data and the legal basis for the processing,
  4. the legitimate interests of the controller or, where applicable, of a third party,
  5. the recipients or categories of recipients of the personal data,
  6. where applicable, the controller's intention to transfer personal data to a third country or an international organisation, and the existence or absence of a Commission adequacy decision, or reference to the appropriate safeguards and the means by which to obtain a copy of them or where they have been made available.

2. The right of access

You may request access to your personal data or obtain information about which personal data concerning you is being processed, and have access to the following information:

  1. the purposes of the processing,
  2. the categories of personal data concerned,
  3. the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations,
  4. the envisaged period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period,
  5. the existence of the right to request from the controller rectification or erasure of personal data concerning the data subject, or restriction of processing, or to object to such processing,
  6. the right to lodge a complaint with a supervisory authority,
  7. any available information as to the source of the personal data, where it is not collected from you, and
  8. the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

The controller will provide a copy of the personal data being processed. For any further copies, the controller may charge a reasonable fee based on administrative costs. If a request is manifestly unfounded or excessive, the controller may charge a fee or refuse to act on it. Where the request is made by electronic means, the information will be provided in a commonly used electronic form, unless the data subject requests otherwise.

You can request access to your information via the email address info@devcors.com

3. The right to rectification

  1. You have the right to ask the controller to rectify inaccurate personal data concerning you.
  2. You also have the right to have incomplete personal data completed, including by providing a supplementary statement. When exercising this right, the purposes of the processing must be taken into account.


4. The right to erasure

You have the right to ask the controller to erase your personal data. The controller is obliged to erase your personal data where one of the following grounds applies:

  1. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
  2. you object to the processing and there are no overriding legitimate grounds for the processing,
  3. the personal data has been unlawfully processed,
  4. the personal data has to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.

The right to erasure does not apply to the extent that processing is necessary for the establishment, exercise or defence of legal claims.

More information is available at the email address: info@devcors.com

‍

Personal data retention period

As a general rule, personal data is retained for as long as necessary for the purpose for which it was processed. We retain your data for as long as your account is active or as long as necessary to provide the services, or until you withdraw your consent to the processing of personal data. This is without prejudice to the Company's right to process user data in accordance with applicable generally binding legislation, in particular for the purposes of resolving disputes and the final settlement of all rights and obligations related to the provision of the relevant service; however, this period does not exceed 10 years. Your personal data will be processed for the period for which you have given your consent to its processing, unless you withdraw your consent during that period. Consent cannot be given for an indefinite period, and the period is stated in the text of the consent.

Under applicable law, we are required to disclose a user's personal data, information about their IP address, traffic or other user activities:

  • at the request of a court, the Police of the Czech Republic or other law enforcement authorities, including specialised units (e.g. the Organised Crime Unit, Customs Administration, etc.);
  • to enforce the terms of the contract with the user;
  • as a means of protecting the security and integrity of the Company's websites;
  • as a means of exercising or protecting the rights, property and personal safety of other users of the Company's services and other persons.

‍

Data controller contact details

If you have any questions or comments about our cookie policy and this statement, please contact us using the following contact details:


DevCors s.r.o.
Nové sady 988/2, Staré Brno, 602 00 Brno
Czech Republic
Web:
www.devcors.com
Email:
info@devcors.com