Controller of personal data

1. Controller of personal data Ninjabot s.r.o., ID number 06069185, with registered office Slavíkova 1571/6, Prague, 130 00, registered in the Commercial Register by the Municipal Court in Prague, (hereinafter referred to as”warden“), declares that all personal data processed by the Controller are strictly confidential. The controller shall deal with them in accordance with both national and European Union legislation in force in the field of personal data protection.
2. The Controller collects, stores and uses your personal data within the meaning of Act No 110/2019 Coll. on the Processing of Personal Data (hereinafter referred to as the Personal Data Processing Act), respectively Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “”GDPR Regulation“). The individual purposes for which the controller processes personal data are further defined
3. The Controller also collects these personal data through its website at ninjabot.cz (hereinafter referred to as”internet site“).
4. This policy is issued by the controller so that you are sufficiently informed about what personal data the controller processes, for what purpose, for what period of time, who will have access to your personal data and what rights you have. This Policy applies to all personal data collected by the Controller, whether it was collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or a given consent.

Processed data

1. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified directly or indirectly, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier or to one or more specific elements of that natural person's physical, physiological, genetic, psychological, economic, cultural or social identity.
2. The Controller processes the personal data that you have provided to him/her or the personal data that the Administrator has obtained on the basis of fulfilling your order. The Controller processes your identification and contact data and the data necessary for the performance of the contract.
3. The purposes of processing are as follows:
   — performance of the contractual relationship: the relationship between you and the administrator established on the basis of an order, registration, on the basis of a concluded contract, on the basis of an application and participation in the competition and the like;
   ---- sending commercial communications and offering products and services: sending commercial offers, by electronic mail (e-mail), by short text messages or by telephone call;
   ---- accounting and tax purposes: accounting records within the meaning of accounting and tax legislation;
   ---- Personnel payroll agenda: conclusion of employment contracts, processing of wages, social and health insurance contributions pursuant to Act No. 262/2006 Coll., Labor Code, No. 582/1991 Coll. on the organization and implementation of social security, No. 48/1997 Coll., on public health insurance and on amending and supplementing certain related laws;
   ---- statistical purposes: anonymised tracking of website traffic, monitoring of the number of page views, time spent on the website, the type of device from which you come to the website. We collect data in order to improve the quality of the services provided and to offer relevant content to our clients;
   ---- display ads: displaying advertisements on websites based on statistically determined customer preferences;
   ---- legitimate interest: effective defence in the event of a dispute; the period of processing of personal data in such a case shall be 4 years from the expiry of the warranty period for the goods and shall be extended by the period during which the dispute is conducted. We want to continue to improve our services and, where appropriate, to provide new and better services; we want to avoid obstructing such activities; therefore, activities that contribute to the achievement of this objective are our legitimate interest. A legitimate interest is also the processing for the purposes of fraud prevention (e.g. risk assessment of the conclusion of a contract), direct marketing (e.g. offering relevant services to existing customers) the transfer of personal data within a group of undertakings for internal adnistrative purposes, notification of crimes and the transfer of personal data to the competent authority, Ensuring network and information security. This list is only exemplary;
   ---- Fulfillment of other legal obligations: providing information to law enforcement agencies, providing information to other public authorities, and the like.
4. The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims arising from these contractual relations (for a period of 5 years from the termination of the contractual relationship). Until the consent to the processing of personal data for marketing purposes is withdrawn, not more than 5 years, if the personal data are processed on the basis of consent. Otherwise, the processing time arises from the purpose for which the personal data are processed, or is determined by legal regulations. After the period of storage of personal data, the controller will delete the personal data.
5. Personal data are processed manually and automatically by the controller. The Administrator is entitled to process certain information automatically, for example, to create statistical information on the traffic of its website.

Personal data processed on the basis of consent

1. If we have obtained consent from you to process personal data, this has been done for any of the following purposes:
   — by filling in the form
   — by filling out an order
   — by sending an email
   — other ways of contacting

Rights of the data subject

1. As a data subject, you have the stated rights that arise for you under the law and which you can exercise at any time. These are:
   ---- right of access to personal dataaccording to which you have the right to obtain from the controller information about whether the controller processes your personal data. The administrator is obliged to transmit this information to you without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR. The controller shall have the right to request adequate remuneration for the provision of information not exceeding the costs necessary to provide the information;
   ---- the right to rectification or erasure of personal data, or restriction of processing, according to which you have the right to have personal data corrected that is inaccurate or incorrect. If your personal data are no longer needed for the purposes for which they were collected or are processed unlawfully, you have the right to request their erasure. If you do not want to request the erasure of personal data, but only temporarily restrict their processing, you can request a restriction of processing;
   ---- the right to request an explanation if you suspect that the processing of personal data by the controller is contrary to the law;
   ---- the right to contact the Office for Personal Data Protection in case of doubt about compliance with the obligations related to the processing of personal data;
   ---- the right to data portabilityi.e. the right to obtain personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format, see Article 20 GDPR in more detail;
   ---- the right to object to the processing of personal datawhich are processed for the purpose of fulfilling a task carried out in the public interest or in the exercise of public authority or for the protection of the legitimate interests of the controller. The controller terminates the processing without undue delay unless it proves that there is a legitimate interest/reason for processing that outweighs your interest, rights or freedoms;
   ---- the right to withdraw consent to the processing of personal data at any timeif you have given the controller consent to the processing of personal data.
2. The Controller collects, stores and uses your personal data within the meaning of Act No 110/2019 Coll. on the Processing of Personal Data (hereinafter referred to as the Personal Data Processing Act), respectively Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “”GDPR Regulation“). The individual purposes for which the controller processes personal data are further defined
3. The Controller also collects these personal data through its website at ninjabot.cz (hereinafter referred to as”internet site“).
4. This policy is issued by the controller so that you are sufficiently informed about what personal data the controller processes, for what purpose, for what period of time, who will have access to your personal data and what rights you have. This Policy applies to all personal data collected by the Controller, whether it was collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or a given consent.

Cookies

1. Cookies are short text files that a website sends to your browser. They allow the website to record information about your visit, such as your chosen language and the like, so that the next visit to the site can be easier and more enjoyable for you. Cookies are important because without them, browsing the Internet would be much more complicated. Cookies allow you to make better use of our website and adapt its content to your needs; they are used by almost every website in the world. Cookies are useful because they increase the user-friendliness of a website visited repeatedly.
2. The administrator may use the following types of cookies on the website:
   — Relational (i.e. temporary) cookies allow us to link your individual activities while browsing this website. When you open your browser window, these files are activated and deactivated when you close your browser window. Session cookies are temporary and all these files are deleted when you close your browser.
   Persistent cookies help us identify your computer when you visit our website again. Another advantage of persistent cookies is that they allow us to adapt our website to your needs.
3. In accordance with the provisions of § 89 para. 3 of Act No. 127/2005 Coll., on electronic communications, as amended, we hereby wish to inform you that our website uses cookies for its activity, that is, we process your cookies, including permanent ones.
4. Internet browsers usually include cookie management. As part of your browser settings, you can probably delete individual cookies manually, block or completely disable their use. For more information, use the help of your Internet browser. If you do not allow the use of cookies, some features and pages may not work as they should.
5. We use cookies to personalize content and ads, provide social media features and analyze our traffic. We share information about how you use our website with our social media, advertising and analytics partners. By using the website, you consent to the following services:
   -- Google
   -- Facebook
   -- Hotjar
   — Instagram
   — LinkedIn
   — Pipedrive
   — Note
6. In order to display targeted advertising within advertising and social networks on other websites, we transmit to these advertising and social networks data about your behaviour on the website; however, we do not pass on your identification data to them.

Transfer to third countries

1. Your personal data will only be transferred to third countries within our organisation and our subcontractors

Information and questions

1. Further information on the rights and obligations of data protection can be obtained by the data subject on the ninjabot.cz website or via e-mail to hi@ninjabot.cz.