Personal Data Processing Policy

Data Controller

The controller of your personal data within the meaning of the General Data Protection Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 ("GDPR") and relevant national legislation on the protection of personal data is Bydlení Račiněves s.r.o., Company ID: 11838132, registered office at Mezitraťová 234/9, Prague 190 00, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 355196 (hereinafter "Bydlení Račiněves s.r.o." or "we"). Bydlení Račiněves s.r.o. treats all processed personal data as strictly confidential and handles them in accordance with applicable legislation on the protection of personal data.

We process personal data primarily when

• You are our clients,
• You are interested in the real estate, products or services we offer,
• You have subscribed to our newsletter,
• You actively communicate with us,
• You are interested in joining our team,
• You visit our website.

Purposes and legal basis of processing

We process your personal data primarily when:

• We fulfil a contract or negotiate the conclusion of a contract. Purpose of processing: provision of services based on a concluded contract, preparation of product and service offers, implementation of pre-contractual measures at your request (e.g. arranging a calculation, property viewing, etc.). Legal basis: Art. 6(1)(b) GDPR, processing is necessary for the performance of a contract or for taking steps prior to entering into a contract.
• We fulfil a legal obligation. Purpose of processing: fulfilment of legal obligations, particularly under accounting and tax legislation. Legal basis: Art. 6(1)(c) GDPR, processing is necessary for compliance with our legal obligations.
• We pursue our legitimate interests. Purpose of processing: protection of our rights and legally protected interests, e.g. protection of our website and network against misuse, direct marketing, i.e. offering similar products and services to our clients. Legal basis: Art. 6(1)(f) GDPR, processing is carried out on the basis of our legitimate interest and is only possible if your fundamental rights and freedoms do not take precedence over our legitimate interests.
• We handle your requests and enquiries. Purpose of processing: e.g. handling your request for a viewing, additional information, or other requests and enquiries received via e‑mail, web form, telephone, etc. Legal basis: Art. 6(1)(b) GDPR, taking steps prior to entering into a contract at your request, or Art. 6(1)(f) GDPR, processing is carried out on the basis of our legitimate interest to provide a response to your enquiry or to handle your request.
• We send you commercial communications and personalise the advertising displayed to you. Purpose of processing: ad targeting and advanced marketing (e.g. sending commercial communications tailored specifically to you based on an evaluation of your preferences). Legal basis: Art. 6(1)(a) GDPR, you have given us consent to the processing of your personal data for one or more specific purposes.

Processed personal data

Depending on the purpose of processing, we are entitled to process the following personal data:

Personal data are processed both manually and by automated means. Automated processing of personal data takes place primarily to support our internal administrative processes necessary for the performance of a contract. Automated processing of personal data also takes place when you give us consent to sending commercial communications and ad targeting.

Processing of personal data based on consent

If you give us consent to the processing of personal data for the purposes of sending commercial communications and ad targeting, you acknowledge that the provision of consent is voluntary and that you may withdraw your consent at any time by e‑mail to kadlecovaxbydleniracineves.cz or in writing to our registered office at Mezitraťová 234/9, Prague 190 00. Consent is granted for a period of 5 years or until its withdrawal.

Retention period for personal data

We process and retain your personal data for the period necessary to ensure all rights and obligations arising from the relevant contractual relationship and for the period during which we, as data controllers, are required to retain personal data under generally binding legal regulations, or for the period for which you have given us consent to processing. In other cases, the processing period results from the purpose of processing, to which it must be proportionate, or is determined by legal regulations on the protection of personal data.

We process personal data according to the purpose of their processing for the following periods:

* We are entitled to process your e‑mail address pursuant to Section 7(3) of Act No. 480/2004 Coll., on certain information society services, as amended, for the purpose of disseminating commercial communications relating to our own products or services (e.g. in the form of a newsletter) if you have not refused such sending.

Sources of personal data

The controller obtains personal data primarily from data subjects and from freely accessible public registers.

Personal data of third parties

Personal data of third parties, meaning personal data of employees of our business partners and other natural persons involved in cooperation with us, or other data received from a business partner in connection with the conclusion or performance of a contract, will always be processed in accordance with the GDPR. We will use such personal data exclusively for the purpose of fulfilling contracts with business partners. The business partner hereby acknowledges that we will process personal data of third parties for the duration of the contractual relationship and for the period stipulated by special legal regulations, if any. Data will be retained for a longer period if there is a justified need to retain data in connection with a specific case. The business partner is obliged to duly inform their employees and other natural persons involved on the business partner's side in cooperation with us about such processing of personal data.

Who we may disclose your personal data to

Your personal data are disclosed only to authorised employees and collaborators or individual personal data processors contractually engaged by us, or to other controllers. These include, for example, processors or controllers involved in the provision of services, payments, or providing us with administrative, transport, communication, software or marketing products and services. However, your personal data may only be disclosed to these entities to the extent necessary to fulfil the individual purposes of processing, and on the basis of an appropriate legal title for the transfer and processing of personal data. The current list of personal data recipients is available upon request via e‑mail at kadlecovaxbydleniracineves.cz.

In cases stipulated by law, we are entitled or obliged to provide some of your personal data under applicable legal regulations, for example to law enforcement authorities or other public authorities.

Data will not be transferred to third countries outside the EU unless this is necessary and secured by appropriate safeguards.

How long we process cookies

Functional and basic analytical cookies are retained only for the period necessary for the functioning of our website and for generating aggregated statistical data. Marketing cookies will be processed for the duration of your consent. You can withdraw your consent to the use of marketing cookies at any time by changing your web browser settings or by contacting us at kadlecovaxbydleniracineves.cz.

Your rights

Under the conditions set out in the GDPR, as a data subject, you have the following rights in connection with the processing of your personal data, which you may exercise at any time:

• Right of access to your personal data under Art. 15 GDPR – if you want to know whether we process your personal data, you have the right to obtain information about this, and if so, you also have the right to access your personal data.
• Right to rectification of your personal data under Art. 16 GDPR – if you believe that we process inaccurate or incomplete personal data about you, you have the right to request their correction and completion.
• Right to erasure of your personal data under Art. 17 GDPR – if you request erasure, we will delete your personal data if (i) they are no longer needed for the purposes for which they were processed, (ii) processing is unlawful, (iii) you object to processing and there are no overriding legitimate grounds for further processing of your personal data, or (iv) the legal obligation to process has ceased.
• Right to restriction of processing under Art. 18 GDPR – if you request restriction of processing, we will restrict access to, temporarily remove or retain, or take other processing actions as necessary for the proper exercise of the right invoked.
• Right to data portability under Art. 20 GDPR – if you want us to transfer the personal data we process about you in electronic form on the basis of a contract or consent you have provided to a third party, you may exercise your right to data portability. If the exercise of this right would adversely affect the rights and freedoms of other persons, we will not be able to comply with your request.
• Right to object to processing under Art. 21 GDPR – you may object to the processing of your personal data that we process for the purpose of protecting our legitimate interests.
• Right to lodge a complaint with a supervisory authority – the supervisory authority is the Office for Personal Data Protection.

You also have the right to withdraw your consent to the processing of your personal data, if you have given us such consent, without giving any reason. In such case, we will delete your personal data unless we need the data for other purposes. This does not apply in cases and to the extent where consent is not the legal basis for processing. The withdrawal of your consent does not affect the lawfulness of any processing carried out on the basis of previously given consent prior to its withdrawal.

You may exercise your rights electronically via e‑mail at realityxvladimir-zpevacek.cz or in person in writing at Na Poříčí 1071/17, 110 00 Prague 1, or via data box – Data box ID: h5r3wxb. You may also use these contact details if you have any questions or comments regarding the processing of your personal data.

Supervisory authority

The protection of privacy and personal data is supervised by the Office for Personal Data Protection.