Privacy Policy

This Privacy Policy is designed to inform the data subject about what personal data we collect, process, use and how we protect personal data. In ensuring the protection of privacy and personal data, we act solely in accordance with applicable legislation, i.e. EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation") and other legislation governing this area.

1. Who is the data controller and what are the categories of data subjects whose personal data are Processed?

Data Controller:

Company: Optima Group s.r.o., ID: 17758289, registered office: Korunní 2569/108, Vinohrady, 101 00 Prague 10, registered in the Commercial Register maintained by the Municipal Court in Prague, file No. C 376121.(hereinafter also referred to as the "Administrator").

Categories of data subjects:

1. Contracting parties of the Controller within the framework of business relations,
2. employees of the Controller,
3. service providers and persons acting for the Controller on the basis of another contractual relationship.

2. What personal data about data subjects is processed?

Identification data - personal data that serve to uniquely identify the data subject, i.e. name, surname, date of birth, permanent address, in the case of a supplier or customer - a natural person entrepreneur also tax identification number and registered office.

Contact data - personal data that enable contact with the data subject in the performance of contractual obligations (contact address, email address, telephone number, or payment data - bank account number).

Data on the health status of data subjects is processed to a limited extent, as the Controller is obliged or authorised to do so under applicable law or contractual relationship, primarily in the context of processing the personal data of clients of the contracting parties on the basis of their explicit consent.

Other data resulting from a specific contractual relationship or from the law, data provided in excess of the relevant laws processed within the framework of the consent given by the data subject (processing of photographs, cookies, etc.). These consents are only required by us in specific situations, in accordance with and with the requirements of the Regulation.

3. From what sources do we obtain personal data?

We obtain personal data directly from the data subject in the context of a commercial or employment relationship. We also obtain personal data from third parties, primarily in the context of fulfilling legal obligations under the Regulation, and primarily from public sources, while respecting the purpose of processing personal data.

4. How and for how long do we process personal data?

We process personal data both in an automated manner, in electronic information systems, and in paper form. However, no automated decision-making (i.e. without human intervention), including profiling, is involved in the processing of personal data. Personal data are kept at all times protected against unauthorised interference, loss, destruction or misuse. All persons who come into contact with the data are bound by a duty of confidentiality.

We store personal data for the period of time necessary to ensure all rights and obligations arising from the contractual relationship, i.e. for the duration of the existence of possible claims arising from the concluded contract and for the period of time we are obliged to store them under generally binding legal regulations. If no contractual relationship is concluded between the Controller and the data subject, but personal data are communicated or transmitted by the data subject in the context of pre-contractual negotiations, we will immediately cease processing the personal data.

5. On what legal basis and for what purpose do we process personal data?

In the context of negotiations for the conclusion of a contract or for the performance of a contract with a given data subject, personal data are processed in accordance with Article 6(1)(b) of the Regulation, i.e. for the purpose of the performance of this contract. These personal data are further processed after the termination of the contractual relationship for the purpose of protecting our legitimate interests in accordance with Article 6(1)(f) of the Regulation, in particular the enforcement of our rights and claims, for the duration of the limitation periods relating to these contracts.

Personal data are also processed by us for the purpose of fulfilling legal obligations in accordance with Article 6(1)(c) of the Regulation, e.g. to state authorities (e.g. tax authorities for the performance of tax administration, courts, bailiffs, notaries) and for the performance of legal obligations arising from special regulations.

In addition, personal data may be processed for the use of direct marketing (i.e. to send product offers, information about new products, if the data subject is interested in such information - i.e. if he/she does not object).

6. Right to withdraw consent to the processing of personal data in the case of processing of personal data on the basis of consent

If we process personal data on the basis of the data subject's explicit consent pursuant to Article 6(1)(a) of the Regulation, the data subject has the right to withdraw his or her consent, in whole or in part, at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal. Consent may be revoked in the manner in which it was granted, or in writing to Optima Group s.r.o., ID No.: 17758289, with registered office at: Korunní 2569/108, Vinohrady, 101 00 Praha 10, via email address richard@medicareagency.cz, or by phone at :+420 605 200 682.

From the date of notification of withdrawal of consent, we may process personal data only to the extent that we have another legal ground for processing, i.e. in particular for the performance of our legal obligations or for the purposes of protecting rights and legal claims as described above. In the event that the provision of such personal data is necessary for the performance of the Contract, you are hereby notified that if you withdraw your consent to the processing of personal data, we will not be able to provide our services under the Contract.

7. What are the data subject's legal rights when processing personal data?

Right to access personal data:
The data subject shall have the right to obtain confirmation from the Controller as to whether it processes his or her personal data and, if so, to obtain access to such personal data and to the information referred to in Article 15 of the Regulation.

The right to rectification or erasure or, where applicable, restriction of processing:
The data subject has the right (in the cases provided for in the Regulation) to request the Controller to correct or supplement incorrect or incomplete personal data, to request the deletion of personal data if the reason for processing them has ceased or is no longer given, or to request the restriction of the processing of personal data in connection with the resolution of the circumstances of the processing of personal data by the Controller.

Right to object:
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of his or her personal data processed for the purposes of the legitimate interests of the Controller or of other persons (under the Regulation); legitimate interests under the Regulation may include, in particular, cases of protection of the Controller's rights and legal claims.

Right to data portability:
The data subject has the right (subject to the conditions set out in the Regulation) to obtain his or her personal data from the Controller and to transfer it to another data controller.

Right to lodge a complaint with a supervisory authority:
The data subject has the right to lodge a complaint with the supervisory authority if he or she considers that the processing of his or her personal data has infringed the Regulation. This supervisory authority is the Office for Personal Data Protection.

If the right to process personal data is based on the granting of consent to the processing of personal data, the data subject may withdraw this consent at any time; this is the case, for example, for marketing consent or any processing of personal data on the health status of customers. However, the withdrawal of such consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal.

You can use the contact details set out in section 6 of this Policy below to exercise all your rights. We will inform the data subject without undue delay of the processing of his/her request and of the measures taken (the Regulation gives us a deadline of 1 month from receipt of the request).

8. Where can the data subject exercise his/her rights or object to the processing of personal data?

The data subject may exercise any objections to the processing of personal data, withdraw consent or change the scope of consent, or exercise any of his or her rights in any of the following ways:

• in writing to Optima Group s.r.o., ID No.: 17758289, with registered office at: Korunní 2569/108, Vinohrady, 101 00 Prague 10
• via the email address richard@medicareagency.cz,
• by phone at +420 605 200 682.

9. To whom do we provide personal data?

We process personal data ourselves through our employees or processors commissioned by us. In all cases, however, we ensure that all the obligations imposed on us as a controller and our processors by the applicable legislation are maintained and that the security of the personal data transmitted is not compromised or misused.

In particular, the processors/recipients of personal data are:

• State authorities and other institutions within the scope of their legal obligations, in particular government authorities, courts, tax authorities;
• service providers (notaries, web hosting company, etc.)
• With your prior consent or on your instructions, personal data may be disclosed to other entities.

10. When do we transfer personal data to third countries?

Personal data processed by us is not transferred to third countries or any international organization.

11. Do we carry out automated decision-making and profiling of personal data?

However, no automated decision-making (i.e. without human intervention), including profiling, takes place in the processing of personal data.

12. How can you contact us?

If you have any questions about the processing of your personal data, you can contact us in writing, electronically or by telephone using the contact details below

• by email: richard@medicareagency.cz
• by phone: 420 605 200 682.

13. What do the terms in this Policy mean?

• Personal data - any information relating to an identified or identifiable data subject; a data subject is considered to be identified or identifiable if the data subject can be directly or indirectly identified;
• Data Subject - the natural person to whom the personal data relates;
• Controller - the entity which determines the purpose and means of the processing of personal data, carries out the processing and is responsible for it;
• Processor - any entity that processes personal data on the basis of a specific law or on the basis of a mandate from the controller;
• Recipient - any entity to which personal data is disclosed;
• Processing of personal data - any operation or set of operations which the controller or processor systematically carries out on personal data, whether by automated means or otherwise; in particular, collection, storage on a medium, disclosure, adaptation or alteration, retrieval, use, transmission, dissemination, disclosure, storage, exchange, classification or combination, blocking, destruction.