Introduction
Through these Personal Data Processing Principles, Mostecká montážní a.s. (hereinafter referred to as the “Company”) informs data subjects – i.e. natural persons whose personal data it processes – about the principles of protection of their privacy and the processing activities carried out in accordance with the European Union General Data Protection Regulation (“GDPR”).
Basic Information on Personal Data Processing
These principles apply to all clients, suppliers, business partners, employees and job applicants of the Company, as well as anyone else who contacts the Company or otherwise provides personal data to it (unless stated otherwise below).
Personal data processing is carried out manually and automatically within the Company’s information systems. The Company does not carry out any automated decision-making or profiling within the meaning of the GDPR.
Data Controller
Mostecká montážní a.s.,
Na Poříčí 1071/17, Nové Město, 110 00 Prague 1
Company ID: 25493507
registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, Insert 25274
e-mail: info@mostecka-montazni.com
telephone: +420 417 639 796
What Data the Company Collects
Data provided by data subjects:
– data provided when concluding a contract or making an inquiry,
– data stated on business cards (e.g. in competitions at trade fairs),
– data provided during communication by e-mail, telephone or through web forms,
– data provided during participation in events organized by the Company.
Data from other sources:
– publicly available sources (commercial register, internet, professional networks),
– data obtained from business partners within cooperation,
– data necessary for compliance with legal obligations (e.g. accounting records).
How the Company Uses Personal Data
– Fulfilment of contractual obligations and execution of contracts – contract records, communication with clients and suppliers, invoicing.
– Marketing and business communication – sending offers, information about services and news; participation in competitions and business card drawings; newsletters (based on consent).
– Protection of property and security – securing premises and, where applicable, CCTV surveillance in accordance with legal regulations.
– Accounting and legal obligations – retention of accounting and tax documents in accordance with the law.
– Employee recruitment – processing CVs and other data provided by job applicants, retention for the duration of the recruitment process (or longer with consent).
– Defence of legal claims – assertion of claims, dispute resolution, cooperation with public authorities.
Sharing and Transfer of Data
The Company may share collected data with:
– processors providing IT, accounting, legal or marketing services,
– business partners within contractual relationships,
– public authorities if required by law.
The Company does not sell personal data to third parties. Transfers outside the EU take place only when an adequate level of protection is ensured.
Rights of the Data Subject
Each data subject has the right:
– to access personal data,
– to correct or complete inaccurate data,
– to erasure (“right to be forgotten”),
– to restriction of processing,
– to data portability,
– to object to processing based on legitimate interest,
– to withdraw consent at any time if processing is based on consent,
– to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).
Requests may be submitted via e-mail at info@mostecka-montazni.com or in writing to the Company’s registered office address.
Retention and Deletion of Data
We retain personal data only for the period necessary to fulfil the purpose of processing:
– for the duration of the contractual relationship and further according to statutory archiving periods (usually 5–10 years),
– for marketing communication based on consent for the duration of such consent, max. 3 years from the last contact,
– for competitions for the duration of their evaluation and a maximum of 1 year thereafter,
– for recruitment for the duration of the recruitment process, or longer with the applicant’s consent.
After expiry of the period or withdrawal of consent, the data are securely deleted or anonymized.
Security
The Company protects personal data by technical and organizational measures against loss, misuse or unauthorized access. Access is granted only to authorized persons.
Conclusion
These principles may be continuously updated. The current version is always available on the Company’s website.
Effective date: 1 August 2025