PRODUCT aReception at aReception.ai s.r.o.
This document (hereinafter referred to as “Information“) contains information on the processing of personal data by aReception.ai within the aReception product in accordance with Article 12 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR“), and Act No. 110/2019 Coll., on the Processing of Personal Data.
We will update this Information as needed. The current version of the Information will always be available on our website www.areception.com.
1. INTRODUCTORY PROVISIONS
1.1. IDENTIFICATION AND CONTACT DETAILS
aReception.ai s.r.o., ID No. 19836082, with its registered office at Purkyňova 142, 612 00, Brno, Czech Republic, a legal entity established under the laws of the Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 136266 (hereinafter also referred to as “aReception.ai“).
Phone contact: +420 580 000 888, e-mail contact: info@areception.ai
1.2. DATA PROTECTION OFFICER
We have not appointed a Data Protection Officer, as we are not a liable entity under Article 37 GDPR.
1.3. SUPERVISORY AUTHORITY
The supervisory authority is an independent public body competent for the protection of personal data in the relevant country. The supervisory authority at the registered office of aReception.ai is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, tel.: +420 234 665 125.
1.4. POSITION OF aReception.ai
Within the aReception product, aReception.ai acts both as a data controller and as a data processor.
aReception.ai acts as a data controller concerning personal data of customers – see Article 2 of this Information.
Regarding personal data stored by customers on the servers of aReception.ai, aReception.ai acts as a data processor, as it provides only data storage space to customers. The controller of such personal data is the customer himself – see Article 3 of this Information.
2. aReception.ai AS A DATA CONTROLLER
Within the aReception product, aReception.ai acts as a data controller concerning customers’ personal data.
2.1. PERSONAL DATA OF CUSTOMERS, IF THEY ARE NATURAL PERSONS, OR REPRESENTATIVES OF CUSTOMERS
Purpose of processing and categories of personal data
For the purpose of contract performance (especially contract conclusion, customer communication, newsletter sending), or for pre-contractual measures (negotiation before contract conclusion), we process the following data: name, surname (if a self-employed natural person), place of business address, billing address, ID/VAT No., name and surname of the contact person, position, email, phone.
For the purpose of fulfilling legal obligations (especially bookkeeping, issuing, and recording of tax documents), we process the following data: name, surname (if a self-employed natural person), place of business address, ID/VAT No.
If we intend to process any other personal data not specified in this Article, or for other purposes, we may do so only based on validly granted consent to personal data processing. Consent is granted by the data subject on a separate document.
Duration of processing personal data
Personal data processed to meet obligations arising from specific legal regulations are processed for the period specified by those regulations. If necessary, personal data may also be processed for a period necessary to protect our legitimate interests. If personal data is processed based on consent, the processing is performed only for the duration for which the consent was granted.
2.2. PERSONAL DATA OF VISITORS TO OUR WEBSITE
Purpose of processing and categories of personal data
Due to legitimate interest, we process: IP address, or other online identifiers (the purpose of processing is website security and traffic analysis).
2.3. SPECIAL CATEGORIES OF PERSONAL DATA
We do not process any personal data that falls within the special category (so-called sensitive data) within the meaning of Article 9 GDPR. Furthermore, we do not process personal data related to criminal convictions and offenses as per Article 10 GDPR.
3. aReception.ai AS A DATA PROCESSOR
aReception.ai provides customers with data storage space within the aReception service, on aReception.ai servers or third-party servers contracted by aReception.ai. Customer data may include personal data of other individuals (data subjects). Regarding such personal data, aReception.ai acts as a data processor. The customer is the controller of such personal data.
Notice to end users. If the customer processes personal data of individuals using the aReception service, the data subjects must contact the customer directly regarding personal data protection, as the customer is in the position of the data controller. We cannot be held responsible for the privacy policies or security practices used by the customer, which may differ from this Information.
Purpose of data processing and data handling: Typically, data is used as contact information to enable contacting individuals indicated by the customer through the aReception terminal. We do not perform any operations on customer data, including personal data, except storing it on our servers. In particular, we do not alter, modify, disclose, or transfer it to third parties (except for disclosure to state authorities as required by law), unless otherwise agreed by the contracting parties. The sole purpose of handling this personal data is its storage and making it available to the customer.
Types of personal data processed: Most commonly, this includes name, surname, email, phone number, and possibly other additional information for contacting a specific individual from the aReception terminal.
4. RECIPIENTS OF PERSONAL DATA, TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
4.1. OTHER DATA CONTROLLERS
We do not transfer personal data to any other data controllers.
Personal data processed to fulfill obligations arising from specific legal regulations are transferred to state authorities or other relevant offices only in cases required by law.
4.2. DATA PROCESSORS
Currently, we do not use any additional data processors.
4.3. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
We do not transfer personal data to third countries or international organizations within the meaning of Article 44 et seq. GDPR.
5. RIGHTS OF DATA SUBJECTS
In connection with the protection of personal data, you have the following rights. If you wish to exercise any of these rights, please contact us via the contact email.
Certain exceptions apply to the exercise of these rights in some cases, which means that they may not be enforceable in all situations.
If your request is found to be justified, we will take the necessary measures without undue delay, at the latest within one month. In justified cases, we may extend this period by up to two additional months.
As a data subject, you have:
Right of access to personal data (Article 15 GDPR): You have the right to obtain confirmation from aReception.ai as to whether or not your personal data is being processed. If your personal data is processed by aReception.ai, you have the right to access such personal data and the information provided in Article 15 GDPR. You also have the right to obtain a copy of the personal data being processed. For additional copies, aReception.ai may charge a reasonable fee to cover administrative costs.
Right to rectification (Article 16 GDPR): You have the right to obtain from aReception.ai without undue delay the rectification of inaccurate personal data concerning you, or to have incomplete personal data completed.
Right to erasure (“right to be forgotten”) (Article 17 GDPR): You have the right to obtain from aReception.ai the erasure of personal data concerning you without undue delay, in cases specified in Article 17 GDPR. The right to erasure does not apply if the processing is necessary for compliance with a legal obligation, for the establishment, exercise, or defense of legal claims, and in other cases specified in GDPR.
Right to restriction of processing (Article 18 GDPR): You have the right to obtain restriction of processing from aReception.ai in any of the following cases: a) you contest the accuracy of the personal data, for a period enabling aReception.ai to verify the accuracy of the personal data; b) the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead; c) aReception.ai no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; d) you have objected to processing pending the verification of whether the legitimate grounds of aReception.ai override yours.
Right to information regarding rectification, erasure, or restriction of processing (Article 19 GDPR): aReception.ai is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed unless this proves impossible or involves disproportionate effort. If you request it, aReception.ai will inform you about those recipients.
Right to data portability (Article 20 GDPR): Where technically feasible, you have the right to receive your personal data and transmit those data to another controller.
Right not to be subject to automated individual decision-making, including profiling (Article 22 GDPR): aReception.ai does not perform automated individual decision-making or profiling within the meaning of Article 22 GDPR.
Right to be informed in the event of a personal data breach (Article 33 GDPR): If a personal data breach is likely to result in a high risk to your rights and freedoms, aReception.ai will inform you of the breach without undue delay.
Right to lodge a complaint with a supervisory authority: If you believe that aReception.ai is not processing your personal data in a lawful manner, you have the right to lodge a complaint with the supervisory authority, whose contact details are provided above.
We would appreciate it if you contact us first. We will do everything we can to remedy the defective state and process your personal data in a lawful manner.
Right to object to processing (Article 21(1) GDPR): You have the right to object at any time to the processing of your personal data by aReception.ai that is processed for reasons of legitimate interest. In such a case, aReception.ai will no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests or rights and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to object to processing for direct marketing purposes (Article 21(2) GDPR): If aReception.ai processes your personal data for direct marketing purposes, you have the right to object at any time to such processing. In that case, aReception.ai will no longer process your personal data for direct marketing purposes.
Right to withdraw consent to personal data processing: If aReception.ai processes any of your personal data based on consent, you have the right to withdraw your consent to the processing of personal data at any time, by sending a written objection to the contact email address. Withdrawal of consent does not affect the processing of personal data in cases where consent is not required.
Valid as of: 27.11.2024