Consent to the processing of personal data (GDPR)
Personal data controller
K1, s.r.o. Registered office: [ADDRESS] Company ID: [ADDRESS] Registered in the Commercial Register kept by [ADDRESS OF THE COMPETENT COURT], Section [SECTION], File [FILE NUMBER] Email: [ADDRESS OF EMAIL] Telephone: [ADDRESS OF PHONE] (hereinafter referred to as the “Controller”)
Data Subject
Name and Surname: ………………………………………………………. Date of Birth: ………………………………………………………. Address: ………………………………………………………. Email: ………………………………………………………. Telephone: ………………………………………………………. (hereinafter referred to as the “Data Subject”)
Purpose of Processing Personal Data
The Data Subject’s personal data will be processed for the following purposes:
implementation of the contractual relationship between the Controller and the Data Subject
organization of events, conferences and construction of exhibition stands
ensuring communication between the Controller and the Data Subject
sending of commercial communications and marketing offers of the Controller
ensuring personal safety and property protection
fulfillment of the Administrator’s legal obligations
Scope of processed personal data
identification and address data: name, surname, title, date of birth, address of residence/registered office
contact data: telephone number, e-mail address
invoicing data: bank details, company ID, VAT number
data related to the subject of performance: specification of the requested services
additional data: photos from events, records of communication
Legal basis for processing personal data
performance of the contract concluded between the Administrator and the Data Subject
fulfillment of a legal obligation applicable to the Administrator
legitimate interest of the Administrator
consent of the Data Subject to the processing of personal data
Period of processing personal data
Personal data will be processed for the period of:
duration of the contractual relationship between the Administrator and the Data Subject and for the period strictly necessary after its termination
determined by the relevant legal regulations (especially accounting and tax)
duration of the Data Subject’s consent, but no longer than 5 years from its granting or until its revocation
Recipients personal data
Personal data may be made available to:
Administrator employees
suppliers and subcontractors involved in the implementation of events and the construction of expositions
IT service and server space providers
accounting, tax and legal advisors
state administration bodies to the extent specified by special legal regulations
Data Subject Rights
The data subject has the following rights in connection with the processing of personal data:
right to access personal data
right to rectify or supplement personal data
right to erase personal data (“right to be forgotten”)
right to restrict the processing of personal data
right to data portability
right to object to the processing of personal data
right not to be subject to automated individual decision-making including profiling
right to withdraw consent to the processing of personal data at any time
right to file a complaint with the supervisory authority (Office for the Protection of Personal Data, www.uoou.cz)
Method of exercising rights
The data subject may exercise his/her rights apply:
in writing to the address of the Controller’s registered office
by e-mail to: [INSERT E-MAIL]
by telephone to: [INSERT PHONE]
The Controller is obliged to respond to the request of the Data Subject and provide information on the measures taken without undue delay, no later than within one month of receiving the request. This period may be extended by two more months if necessary and taking into account the complexity and number of requests.
Security of personal data
The Controller has taken appropriate technical and organizational measures to secure personal data and prevent unauthorized access to them, their alteration, destruction or loss, unauthorized transfers, unauthorized processing and other misuse.
Additional information
The Controller does not transfer personal data to third countries outside the European Union or to international organizations, unless this is required for the implementation of a specific service at the express request of the Data Subject.
Declaration of the Data Subject
I declare that I have been duly informed about the processing of personal data, that the personal data provided are accurate and true and that I have been informed about my rights.
By signing, I consent to the processing of personal data to the extent and for the purpose specified in this document.
This consent is voluntary and I am entitled to withdraw it at any time, in the manner specified in the section “How to exercise rights”.
On …………………………… on ………………………..
…………………………………………………. Signature of the Data Subject
…………………………………………………. For the Administrator (name, surname, position, signature)