Information on personal data processing

PRODUCT aReception at aReception.ai s.r.o.

This document (also referred to as “Information“) contains information about the processing of personal data at aReception.ai within the aReception product in accordance with Article 12 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR“) and Act No. 110/2019 Coll., on the processing of personal data.

We will update this Information as necessary. The current version of the Information will always be available on our website www.areception.com.


1. INTRODUCTORY PROVISIONS

1.1. IDENTIFICATION AND CONTACT DETAILS

aReception.ai s.r.o., ID No. 19836082, with its registered office at Purkynova 142, 612 00, Brno, a legal entity established under the law of the Czech Republic, registered in the Commercial Register of the Regional Court in Brno, Section C, File No. 136266 (hereinafter also referred to as “aReception.ai“).

Phone contact: +420 511 120 140, e-mail contact: info@areception.ai

1.2. DATA PROTECTION OFFICER

We have not appointed a data protection officer, as we are not a mandatory person under Article 37 of the GDPR.

1.3. SUPERVISORY AUTHORITY

The supervisory authority is an independent public authority responsible for the protection of personal data in a given country. The supervisory authority at the registered office of aReception.ai is the Office for Personal Data Protection with its registered office at Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, tel.: +420 234 665 125.

1.4. POSITION OF aReception.ai

Within the aReception product, aReception.ai acts in the position of both controller of personal data and processor of personal data.

aReception.aiacts as a controller of personal data in relation to customer personal data – Article 2 of this Information.

In relation to personal data that the customer stores on aReception.ai servers, aReception.ai acts as a processor, as it only provides the customer with data storage space for data storage purposes. The controller of these personal data is the customer itself – Article 3 of this Information.

2. aReception.aiAS A CONTROLLER OF PERSONAL DATA

Within the aReception product, aReception.ai acts as a controller of personal data in relation to customer personal data.

2.1. PERSONAL DATA OF CUSTOMERS, IF THEY ARE NATURAL PERSONS, OR REPRESENTATIVES OF CUSTOMERS

Purpose of processing and categories of personal data

For the purpose of fulfilling the contract (in particular concluding the contract, communicating with the customer), or for implementing measures taken before concluding the contract (negotiating before concluding the contract), we process in particular: name, surname (if it is a self-employed individual), business address, billing address, ID No./VAT No., name and surname of the contact person, position, e-mail, telephone.

For the purpose of fulfilling legal obligations (in particular maintaining accounting, issuing and recording tax documents), we process in particular: name, surname (if it is a self-employed individual), business address, ID No./VAT No.

In case we intend to process any other personal data than the one specified in this article, or for other purposes, we may do so only on the basis of a validly granted consent to the processing of personal data. Consent to the processing of personal data is given by the data subject on a separate document.

Duration of personal data processing

We process personal data for the fulfillment of obligations arising from special legal regulations for the period stipulated by these legal regulations. If necessary, we process personal data for the protection of our legitimate interests for the period necessary to assert these rights. If personal data is processed on the basis of consent, we process it only for the period for which the consent is granted.

2.2. PERSONAL DATA OF VISITORS TO OUR WEBSITES

Purpose of processing and categories of personal data

For the reason of legitimate interest, we process: IP address, possibly other online identifiers (the purpose of processing is security, analysis of website traffic).

2.3. SPECIAL CATEGORIES OF PERSONAL DATA

We do not process any personal data that can be classified as a special category (so-called sensitive data) within the meaning of Article 9 of the GDPR. We also do not process personal data relating to criminal convictions and offenses within the meaning of Article 10 of the GDPR.

3. aReception.ai AS A PROCESSOR OF PERSONAL DATA

aReception.ai provides customers with data storage space for data storage purposes within the aReception service, either on aReception.ai’s servers or on third-party servers that have a contractual relationship with aReception.ai. Customer data may also include personal data of other natural persons (data subjects). In relation to these personal data, aReception.ai acts as a processor of personal data. The controller of these personal data is the customer itself.

Notice to end users. If the customer processes personal data of natural persons using the aReception service, data subjects must contact the customer directly regarding the protection of personal data, as the customer is in the position of the controller of personal data. We cannot be responsible for the personal data protection principles or security practices used by the customer, which may differ from this Information.

Purpose of processing and handling of data: Typically, the data is used as contact information for the possibility of contacting persons specified by the customer through the virtual reception aReception. We do not perform any operations with the customer’s data, including personal data, other than their storage on our servers, in particular, we do not interfere with them, do not modify them, do not make them accessible, nor do we pass them on to third parties (except for making them accessible to state authorities in accordance with the law), unless the contracting parties agree otherwise. The sole purpose of handling these personal data is their storage and the possibility of making them accessible to the customer.

Type of processed personal data: Most often, this includes name, surname, e-mail, telephone, and possibly other additional information for the purpose of contacting a specific person from the aReception virtual reception.

4. RECIPIENTS OF PERSONAL DATA, TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

4.1. OTHER CONTROLLERS OF PERSONAL DATA

We do not transfer personal data to any other controllers of personal data.

We transfer personal data processed for the fulfillment of obligations arising from special legal regulations to state administration bodies or other competent authorities only in cases where the law imposes such an obligation on us.

4.2. PROCESSORS OF PERSONAL DATA

At present, we do not use any other processors of personal data.

4.3. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

We do not transfer personal data to third countries or international organizations within the meaning of Articles 44 et seq. of the GDPR.

5. RIGHTS OF DATA SUBJECTS

In connection with the protection of personal data, you have the following rights. If you wish to exercise any of these rights, please contact us via the contact email.

In some cases, certain exceptions apply to the exercise of these rights, and therefore they may not be exercisable in all situations.

If your request is found to be justified, we will take the required measures without undue delay, no later than within one month. In justified cases, we may extend this period by up to another two months.

As a data subject, you have:

Right of access to personal data (Article 15 GDPR): You have the right to obtain confirmation from aReception.ai whether or not your personal data is being processed. If your personal data is being processed by aReception.ai , you have the right to access this personal data and the information specified in Article 15 GDPR. You also have the right to obtain a copy of the processed personal data. For additional copies, aReception.ai may charge a reasonable fee reflecting administrative costs.

Right to rectification of personal data (Article 16 GDPR): You have the right to have aReception.ai correct your inaccurate personal data without undue delay, or to complete incomplete personal data.

Right to erasure of personal data (Article 17 GDPR): You have the right to have aReception.ai erase your personal data without undue delay in cases specified in Article 17 GDPR. The right to erasure does not apply if processing is necessary to fulfill legal obligations, to establish, exercise, or defend legal claims, and in other cases specified in the GDPR.

Right to restriction of processing (Article 18 GDPR): You have the right to have aReception.ai restrict processing in any of the following cases: a) you contest the accuracy of personal data, for the period necessary for aReception.ai to verify the accuracy of personal data; b) processing is unlawful, and you oppose the erasure of personal data and request the restriction of their use instead; c) aReception.ai no longer needs personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims; d) you have objected to processing; until it is verified whether aReception.ai’s legitimate grounds override your legitimate grounds.

Right to be informed about the rectification or erasure of personal data or restriction of processing (Article 19 GDPR) aReception.ai is obliged to notify individual recipients to whom personal data have been made available, of all rectifications or erasures of personal data or restrictions of processing, except in cases where this proves impossible or requires disproportionate effort. If you request, aReception.ai will inform you about these recipients.

Right to data portability (Article 20 GDPR): If technically feasible, you have the right to obtain your personal data and transfer this data to another controller.

Right not to be subject to automated individual decision-making, including profiling (Article 22 GDPR): When processing personal data, aReception.ai does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR.

Right to be informed in case of personal data breach (Article 33 GDPR): If it is likely that a particular case of personal data breach will result in a high risk to your rights and freedoms, aReception.ai will notify you of this breach without undue delay.

Right to lodge a complaint with a supervisory authority: If you believe that aReception.ai is processing your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority, whose contact details are provided above.

We will be very happy if you contact us first. We will do everything in our power to correct the situation and process your personal data lawfully.

Right to object to processing (Article 21(1) GDPR): You have the right to object at any time to the processing of your personal data that aReception.ai processes for legitimate interest reasons. In such a case, aReception.ai will no longer process your personal data unless it demonstrates compelling legitimate grounds for processing that override your interests or rights and freedoms, or for the establishment, exercise, or defense of legal claims.

Right to object to processing for direct marketing purposes (Article 21(2) GDPR): If aReception.ai processes your personal data for direct marketing purposes, you have the right to object at any time to such processing. In such a case, aReception.ai will no longer process your personal data.

Right to withdraw consent to the processing of personal data: If aReception.ai processes some of your personal data based on consent, you have the right to withdraw your consent to the processing of personal data at any time in writing, by sending a disagreement to the processing of personal data to the contact email address. The withdrawal of consent does not affect the processing of personal data in cases where consent is not required.

Valid as of: January 24, 2024