Privacy policy
Dear Customers,
in accordance with the General Data Protection Regulation (EU) 2016/679 (‘GDPR’) we would like you to know how we process your personal data and what your rights are in this matter.
I. Who controls your data?
As defined in Article 4, Section 7 of the GDPR, ‘controller’ means the natural or legal person, public authority, agency, or other body, which – alone or jointly with others – determines the purposes and means of the processing of personal data.
Your data Controller is Flera s.r.o.,registered office: Za papírnou 239/3, Praha 7 Holešovice 170 00, Company Registration Number 28956737, company incorporated by the Metropolitan Court in Prague, section C, file No. 155737 (‘Controller’ or ‘Flera’).
II. Which data do we process?
The Controller has the right to process your personal data in the following scope.
For landscape design development, the Controller will process:
- Your name and surname
- Your address
- Your email address
- Your phone number
- Basic project data
For marketing purposes, the Controller will process:
- Your name and surname
- Your physical address
- Your email address
- Your phone number
In relation to Flera employees, the Controller will process:
- Their name and surname
- Their address
- Their email address
- Their phone number
In relation to external subjects who cooperate with Flera, the Company will process:
- Their name and surname
- Their address
- Their email address
- Their phone number
III. How do we obtain your personal data?
We only process personal data obtained directly from a data subject. We do not search for personal data accessible to the public.
IV. What is the purpose and the legal basis of data processing?
For data processing to be legitimate and compliant with the GDPR, there must be a recognised legal basis for it. Flera processes personal data based on the following legal basis:
- Processing of personal data that is necessary to perform a contract, where the data subject is one of the contracting parties. This includes personal data of customers Flera designers work for, Flera employees, and the external subjects Flera cooperates with.
- Processing of personal data that is necessary for the Controller to perform their legal obligations; in particular, their obligations as an employer towards employees (salary administration, etc.).
- Processing of personal data is always based on a legitimate interest as defined in the legal provisions of a specific country.
- Data subject’s explicit consent to their data processing is required only if none of the above applies.
V. Who is a personal data recipient?
Personal data recipients are the Controller and Flera designers who develop landscape designs for the customers. They have access to the customer’s personal data via the company’s password-protected server. The employees must maintain data confidentiality.
Your personal data will not be transmitted to recipients in third countries or international organisations.
VI. How do we store and protect your personal data?
Your personal data will be stored on our company’s server and other storage devices. Access to your stored personal data is only granted to the Controller and the designers who need it to develop landscape designs. The server is password-protected. The password is required for every single access to the server. Other storage devices are protected physically. We back up the data on a regular basis to protect it against data loss.
VII. For how long do we store your personal data?
If your personal data is processed based on contract performance, it is stored for the time necessary to meet the obligations arising from the contract. If your personal data is processed due to a legal obligation, it is stored for the time necessary to meet the obligation.
VIII. What rights do you have as a data subject?
In accordance with Chapter III of the GDPR, data subjects have the following rights:
- the right to withdraw explicit consent to data processing at any time, provided that their data is processed based on such consent,
- the right to be provided information on their personal data processing, under Article 13 and 14 of the GDPR,
- the right to access their processed personal data and to have it rectified if it’s inaccurate or incomplete,
- the right to have their personal data erased under Article 17 of the GDPR and the right to restriction of processing,
- the right to their personal data portability (data transfer to another controller),
- the right to object to data processing, including profiling and decision making based on automated procession; the right to consult a supervisory authority, if any doubt that their data is processed against this Privacy Policy arises.
If you intend to execute any of the forementioned rights, please contact the Controller in writing, either by mail (mailing address: Za papírnou 239/3, Praha 7 Holešovice, 170 00) or email (atelier@flera.cz).
Flera s.r.o.
