Privacy Policy

Dear client, dear client,

Please allow us to inform you about how we at Menzies Aviation (Czech), s.r.o. (“we” or “our company“) process your personal data in connection with the performance of our business activities.

The purpose of this notice is to provide you with information about what personal data we collect, how we handle it, from what sources we obtain it, for what purposes we use it, to whom we may disclose it, where you can obtain information about your personal data and what your individual rights are in the area of personal data protection. When processing personal data, we are governed by generally binding legal regulations and the processing of personal data is only ever carried out within the scope of the specific service and/or purpose of the processing.

Please familiarize yourself with the contents of this communication, and we will be happy to answer any questions you may have at our headquarters at K Letišti 1049/57, 161 00 Prague 6 and/or by e-mail
prg.osobniudaje@menziesaviation.com
.

You can also contact our Data Protection Officer by email:
prg.dpo@menziesaviation.com
.

I. General information

Our company is obliged to process certain personal data with respect to its business activities, in particular for the purpose of fulfilling legal and contractual obligations. In this respect, we would not be able to provide our products/services to you at all without your personal data.

We also process your personal data beyond the scope of our obligations for the purpose of offering you employment or otherwise contacting you. To do this, we need your consent.

1.1. Personal data processing principles

When processing your personal data, we honour and respect the highest possible standards of data protection and in particular comply with the following principles:

(a) We always process your personal data for a clearly and comprehensibly stated purpose, by the stated means, in the stated manner, and only for the period of time necessary in relation to the purposes of processing; we only process accurate personal data of our clients and we have ensured that the processing is relevant to the stated purposes and necessary for the fulfilment of those purposes;

(b) We protect your personal data as confidential information; therefore, we process clients’ personal data in a manner that ensures the highest possible security of such data and that prevents any unauthorized or accidental access to, alteration, destruction or loss of, unauthorized transfer of, or other unauthorized processing of, or other misuse of, clients’ personal data;

(c) we always inform you in a comprehensible manner about the processing of your personal data and about your rights to accurate and complete information about the circumstances of this processing, as well as about your other related rights;

(d) we have set up and maintain appropriate technical and organisational measures to ensure a level of security appropriate to all possible risks; all persons who come into contact with the personal data of our clients are obliged to maintain confidentiality of information obtained in connection with the processing of such data.

II. Information on the processing of personal data

II.1. Information about the administrator

The controller of your personal data is us, i.e. Menzies Aviation (Czech), s.r.o., with registered office at K Letišti 1049/57, 161 00 Prague 6, ID No. 169 48 904, a company registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 2195.

II.2. Purposes of processing and legal basis for processing

II.2.1. Processing of personal data without your consent

These are generally situations where you are obliged to provide us with certain personal data as a condition for us to provide you with our product/service, or where we are entitled to process your personal data obtained by other means.

(a) We are legally entitled to process your personal data without your consent for the following purposes of complying with our legal obligations, in particular

(i) prevent damage to our company’s property;

(ii) preventing fraudulent conduct to which our company may be exposed;

(iii) compliance with any obligation to identify and control the client under the Act on Certain Measures against the Legalization of Proceeds of Crime and Terrorist Financing.

(b) entering into or performing a contract with you.

This is in particular the actual implementation of the contractual relationship or other performance of the contract between our company and you. Personal data is needed for, among other things. to enable the contractual relationship to be carried out without undue legal risks, including negotiating the conclusion or modification of a contract with you.

(i) protecting the rights and legally protected interests of our company, collecting debts, realising collateral or otherwise enforcing claims, developing and evolving the services provided;

(ii) negotiations with interested parties on the assignment of our company’s claim against the client or on other forms of transfer or assignment of the claim, including the related implementation, and other related negotiations with third parties, in particular informing the providers of related collateral, etc;

(iii) the resolution of any disputes, in particular for the purposes of litigation or other disputes.

(d) Our legitimate interests.

This is particularly the case where there is a contractual/customer relationship between you and our company.

II.2.2. Processing of personal data with your consent

These are generally situations where you voluntarily consent to us processing your personal data. Based on your consent, our company processes your personal data for the following purposes:

(a) offering you employment or otherwise contacting you in connection therewith; and

(b) records in connection with the implementation of the employment relationship.

II.3. Scope of processing of personal data of clients

Our company processes your personal data to the extent necessary to fulfil the above purposes. We process contact data (contact addresses, telephone numbers, e-mail and fax addresses or other similar contact data), identification data (first name, surname, date of birth, permanent address, type, number and validity of the identity card; in the case of a natural person – entrepreneur, also the ID number and VAT number), camera records and hand biometrics.

II.4. Method of processing personal data

The way our company processes your personal data includes manual and automated processing in our company’s information systems and in physical form.

Your personal data is processed primarily by our employees and, to the extent necessary, by third parties. Prior to any transfer of your personal data to a third party, we will always enter into a written contract with that party which contains the same safeguards for the processing of personal data as our company itself complies with in accordance with its legal obligations.

II.5. Recipients of personal data

In particular, your personal data of clients is disclosed to our employees in connection with the performance of their work duties that require the handling of personal data of clients, but only to the extent necessary in each case and in compliance with all security measures.

In addition, your personal data is passed on to third parties involved in the processing of personal data of our clients or may be disclosed to them for other reasons in accordance with the law.

The transmission occurs mainly towards:

(a) our law firm;

(b) providers of accounting services;

(d) processors who provide server, web, cloud and IT services to us.

Prior to any transfer of your personal data to a third party, we will always enter into a written contract with that party in which we will regulate the processing of personal data in such a way that it contains the same safeguards for the processing of personal data as our company itself complies with in accordance with its legal obligations.

II.7. Transfer of personal data abroad

Your personal data is processed in the Czech Republic and is not transferred to countries outside the European Union.

II.8. Period of processing of personal data

Personal data of clients is processed by our company only for the time necessary for the purposes of processing. We assess on an ongoing basis whether there is a continuing need to process certain personal data necessary for a particular purpose. If we determine that they are no longer necessary for any of the purposes for which they were processed, we will destroy the data. Internally, however, we have already assessed the normal period of usefulness of personal data in relation to certain purposes of processing personal data, at the end of which we assess the need to process the relevant personal data for the purpose in question particularly carefully. In this context, it also applies that personal data processed for the purposes of:

(a) we process the performance of the contract for the duration of the contractual relationship with the client; furthermore, the relevant personal data are usually usable for a period of ten years, except for longer processing on the basis of generally binding legal regulations;

(b) we process the offer of employment for a period of 1 year from the end of the selection procedure for the new employee;

(c) the protection of rights and legally protected interests in the form of CCTV footage; furthermore, the personal data concerned are normally usable for a period of thirty days;

(d) records in connection with the implementation of the employment relationship on the basis of consent for the duration of the employment relationship.

II.9. Right to withdraw consent

In this notice, we have explained the reasons why we need your personal data and that we may only process it for certain purposes with your consent. You are not obliged to consent to the processing of your personal data by our company and you are entitled to withdraw your consent. We would like to remind you that we are entitled to process certain personal data for certain purposes without your consent. If you withdraw your consent in this case, we will stop processing the relevant personal data for the purposes requiring the relevant consent, but we may be entitled, or even obliged, to continue to process the same personal data for other purposes.

In case you wish to withdraw your consent to the processing of personal data, please contact us at our headquarters at K Letišti 1049/57, 161 00 Prague 6 or by e-mail
prg.osobniudaje@menziesaviation.com
.

II.10. Sources of personal data

We collect personal data of our clients mainly:

(a) from the clients themselves;

(b) from publicly available sources (public registers, records or lists);

(d) from its own activities, by processing and evaluating other personal data of clients;

(e) from CCTV footage.

II.11. Your rights in relation to the processing of your personal data

You can exercise all your rights at our registered office at K Letišti 1049/57, 161 00 Praha 6 or by e-mail at prg.osobniudaje@menziesaviation.com, and you can also file a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

II.11.1. Right of access means that you can ask us at any time to confirm whether or not the personal data concerning you is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, for how long we will process it, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data and whether automated decision-making, including possible profiling, takes place on the basis of the processing of your personal data. You also have the right to obtain a copy of your personal data, the first provision of which is free of charge, and we may require reasonable compensation for administrative costs for further provision.

II.11.2. Right to repair means that you can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.

II.11.3. Right to erasure means that we must delete your personal data if (i) are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) we are legally obliged to do so.

II.11.4. Right to restriction processing means that until we have resolved any disputed issues regarding the processing of your personal data, we must restrict the processing of your personal data so that we can only store it and, where appropriate, use it to establish, exercise or defend legal claims.

II.11.5. Right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or on the grounds of legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

III. Final provisions

III.1. This notice is issued for an indefinite period of time and shall take effect on 1 January 2007. 6. 2018.

III.2. We may amend this notice at any time by issuing a new complete version; the current version is published on our website and is also available at our registered office.

III.3. Unless explicitly stated otherwise, all information provided herein also relates to the processing of personal data of potential clients, i.e. people with whom we have not yet established a contractual relationship but with whom we are already in contact. The information provided here also applies, to the extent applicable, to the processing of personal data of other persons with whom our company has direct contact, although we do not have a contractual relationship with them (e.g. representatives of legal entities).