Controller of your personal data
Dopravní podnik Ostrava a.s., office at Poděbradova 494/2, 702 00 Ostrava, company national ID 61974757, informs you as the controller about the processing of your personal data and your rights related to the processing in the case of handling complaints.
Purpose, legal basis and processed personal data The personal data (from a completed electronic form, sent by e-mail, data message or in paper form or communicated as part of a telephone call) is used for the purposes of processing the sent request and for sending a reply or other reaction. Personal data are necessary to fulfill the stated purposes and the legality of the processing is seen in the Article 6 paragraph 1 (f) of the Regulation (EU) 2016/679 (General Data Protection Regulation), the legal basis for the processing of personal data is a legitimate interest of the controller. If you refuse to provide us with the mandatory personal data necessary for the processing and processing of your request, it is not possible to deal with your request and inform you about the method of processing it.
We process your personal data in the minimum of necessary extent - name, surname and e-mail address (identification and contact), or to the extent of other optional personal data (phone number, contact address, etc.) or which you indicate in your suggestions.
How long will we keep your data? The controller undertakes to process your personal data for the above-mentioned purpose for the duration of the processing of the complaint and then for a maximum of 2 years. In the given case, the controller has a legitimate interest in the preservation of this personal data even after the processing of the complaint in order to protect its rights in the event of potential legal claims, legal disputes and other proceedings. After this period (or after the fulfillment of archiving periods) the controller has the obligation to dispose of your personal data. This does not affect the right to process your personal data for protecting legal claims.
Your rights
In connection with the processing of your personal data, you have the following rights (according to Articles 15 – 22 GDPR):
- to access your personal data,
- to correct or completing of incomplete personal data,
- to delete personal data, if the personal data are no longer needed for the purposes for which they were collected or otherwise processed, or if you discover , that they were processed illegally,
- to limit the processing of personal data in special cases.
You also have the right to object to the processing of personal data based on the purpose of legitimate interest.
How is your personal data secured
We provide a number of technical and organizational security measures and procedures to ensure the security of your personal data. We periodically check the security of these technical and organizational procedures and we update it in accordance to the established facts. We use security devices and features such as a firewall or controlled access to your personal data to avoid the unwanted third party to reach the personal data we are processing. Your personal data is made available only to authorized personnel of controller, and only to the extent necessary for processing purposes. We also have in place strong measures for the physical security of our buildings and areas where the processing of your personal data takes place.
For further information regarding the processing of your personal data, please contact the Data Protection Officer via the standard web form.
