Ray Service carefully protects the personal data they process and handles this data in full compliance with the applicable legislation. By means of this notification, the company hereby informs you on the processing of personal data.
Personal data controller
The personal data controller is Ray Service, a.s., Commercial registration no.: 277 56 203, registered address at Huštěnovská 2022, 686 03 Staré Město, incorporated in the Commercial Register kept by the Regional Court in Brno, section B, file 5165 (hereinafter “Controller” or “Ray Service”).
Purpose and legal foundation for the processing of personal data
For the purpose of processing personal data, Ray Service always verifies that the legal grounds exist for such processing and the processing principles specified in the General Data Protection Regulation (Regulation of the European Parliament and the Council No. 2016/679 of 27 April 2016) are observed.
In general, the purposes of processing can be separated into the following groups:
- performance of statutory obligations by the Controller;
- performance of a contract and negotiations on a contractual relationship;
- protection of the legitimate interests of the Controller or a third party;
- purposes contained in the data subject’s consent.
Scope of processing
Ray Service processes personal data as they were provided by the subject in connection with the concluded contractual relationship or the granted approval. The Controller may also process the data collected using other methods, the Controller processes these data with respect to compliance with statutory or contractual obligations, or to protect the legitimate interests of the Controller or other parties.
Categories of data subjects
- contact persons of the Controller’s customers and suppliers
- persons visiting the Controller’s premises
- Controller’s employees
- job applicants
- other persons in a contractual relationship with the Controller
Categories of personal data subject to processing
The personal data processed by Ray Service are divided into the following categories:
- identification data and address data of business partners and other subjects;
- data necessary for the performance of contractual obligations;
- data necessary for performance of HR and payroll administration;
- data necessary for compliance with the company’s legal obligations;
- data for which consent to processing was obtained.
Period of the processing of personal data
Personal data are processed for the period specified in the contract, or for the period specified in the applicable legal provisions or internal instructions of the employer.
Personal data security
Ray Service secures the processed personal data using a set of technical and organisational security measures to ensure the maximum protection and integrity of the data.
Recipients and processors of personal data
- State authorities and other institutions in the field of legal obligations
- Company contractors
- External representatives, auditors, consultants
- Software and IT service providers, marketing agencies
- Occupational physicians
- OHS and fire protection providers
Use of cookies
Ray Service may use cookies on its websites. Cookies are small text files stored in users’ computers for use by websites to improve user comfort, to recognise repeated visits, evaluate visit statistics (while ensuring the user’s anonymity), and personalise content and advertisements so that Ray Service can improve website content. Cookies do not identify individual users (they cannot recognise e.g. your name, password, etc.) and do not influence files or computer settings. If you do not want the Ray Service website to use cookies, you can block or limit them in your web browser(s). Please note that if you do so, website browsing options may be partially or fully limited.
Rights of data subjects
With regard to the processing of personal data, the subject may assert the following rights with the Controller:
- to ask the Controller for confirmation as to whether or not their data are processed, and if yes, the Controller will provide more information on the processing of data;
- to request corrections to personal data if they are incorrect or missing;
- to request limitations to the processing of personal data in the case the subject questions data accuracy or if the Controller does not need the specific personal data for processing purposes but the subject needs the data to determine, assert or defend of legal claims, or if the subject has already contested the processing of personal data.
- to request the deletion of personal data if the Controller does not need the specific personal data for processing purposes, if the subject withdraws their consent, or if the subject contested the processing of personal data and there is no legitimate grounds for saving this data;
- to ask for the transfer of personal data (the right to data portability);
- to withdraw consent to the processing personal data;
- to object to the processing of personal data on the basis of the legitimate interests of the Controller or a third party.
To facilitate exercising rights with the Controller, the subject can request form templates here info@rayservice.com.
Right to lodge a complaint with the supervisory authority
The subject has the right to lodge a complaint regarding data processing or the failure to comply with the obligations arising from GDPR. The complaint may be submitted to the supervisory authority, which is the Office for the Protection of Personal Data, Pplk. Sochora 27, 170 00 Praha 7. For more information, visit the website www.uoou.cz.
Controller contact data
Contact the Controller via e-mail at info@rayservice.com or in writing at Huštěnovská 2022, 686 03 Staré Město.
