EXPANDO global s.r.o
The Controller of your personal data is EXPANDO global s.r.o., with registered office in Třinec, Staré Město, Poštovní 244, IČ 04978820, registered in the Commercial Register maintained by the Krajský soud in Ostrava, under file number C 74566 (hereinafter referred to as the "Controller"). Your personal data will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the "Regulation" – and other applicable laws.
For the purpose of establishing, exercising, or defending legal claims. In case of registration, for the duration of your account registration and for a period of three years after its termination. Furthermore, the Controller is obliged to retain your personal data for 5 years after the end of the accounting period for accounting purposes and to archive tax documents for 10 years. In case you consent to receiving commercial communications, the Controller will further process your personal data for the purpose of sending commercial communications for a period of 3 years from the granting of consent. Additionally, we would like to inform you that processing of personal data for direct marketing purposes may be considered as processing carried out for the legitimate interests pursued by the Controller. Therefore, EXPANDO global s.r.o. may send you offers of similar services to those you purchased on app.expan.do or expan.do to your email, even without your consent. You can opt out of receiving these offers at any time by clicking on the relevant explicit link in the offer. You can also refuse to receive these offers to the provided email address from your user account.
Your personal data will not be disclosed to any third parties except:
- IT specialists, ensuring the operation of the app.expan.do application and the expan.do website.
- Marketing analysis and emailing.
- Payment service providers.
Contact details of the Controller: Havlíčkova 1680/13, 110 00 Prague, +420 739 053 384, info@expan.do.
More information about the processing of personal data:
1) Right to request access to your personal data, meaning your right to obtain confirmation as to whether or not your personal data are being processed, and, where that is the case, access to the personal data and the following information:
a) purposes of the processing;
b) categories of personal data concerned;
c) recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the existence of the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source;
g) the existence of automated decision-making, including profiling, referred to Article 22 (1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2) Right to request rectification of your personal data, meaning your right to obtain without undue delay the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3) Right to request erasure of your personal data, meaning your right to obtain from the Controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:
a) your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) you withdraw consent on which the processing is based, and where there is no other legal ground for the processing;
c) you object to the processing pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the Regulation;
d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation in European Union or Member State law to which the Controller is subject;
f) your personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation.
4) Right to request restriction of processing of your personal data, meaning your right to obtain from the Controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by you, for a period enabling the Controller to verify the accuracy of the personal data;
b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
c) the Controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
d) you have objected to processing pursuant to Article 21(1) of the Regulation pending the verification whether the legitimate grounds of the Controller override yours.
5) Right to data portability, meaning your right to receive the personal data concerning you, which you have provided to the Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another Controller without hindrance from the Controller to which the personal data have been provided, where:
a) the processing is based on consent pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation or on a contract pursuant to Article 6(1)
b) the Regulation; ab) and the processing is carried out by automated means. When exercising your right to data portability, you have the right to have the personal data transmitted directly from one Controller to another, where technically feasible.
6) Right to object, therefore, the right, for reasons relating to your particular situation, to object at any time to the processing of your personal data processed on the basis of legal grounds: - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, or - processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party. If you object to the processing of your personal data, the Controller will not further process your personal data unless they demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defence of legal claims. Objection can also be made to the processing of personal data for direct marketing purposes or profiling. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
7) The right to lodge a complaint with the supervisory authority, namely with the Office for Personal Data Protection, at the address Pplk. Sochora 27, 170 00 Prague 7, official website: https://www.uoou.cz.
