Personal Data Protection
Personal Data Protection in the Use of Communication Channels
This document provides you, as the personal data controller – Digiteq Automotive s.r.o., with its registered office in Prague 4, Novodvorská 994, Postal Code 14221, Company ID: 26466023, registered in the commercial register maintained by the Municipal Court in Prague under file no. C 84128, (hereinafter referred to as "Digiteq Automotive"), with information about the processing of your personal data and your rights related to such processing.
Activity:
The processing occurs within the following activity: Operation of Digiteq Automotive communication channels
Purpose of Processing:
Handling requests and inquiries
Description of Processing Purpose:
Within the stated processing purpose, we ensure functional communication with us, primarily through telephone lines, email, and social networks (particularly Facebook, Instagram, X, etc.). You can contact us through the above-mentioned channels, whether you have any inquiry or request related to the provided products and services. We maintain a written record (log) of mutual communication containing your contact details (particularly email address or phone number) and information about the content of mutual communications, which in some cases may also include your identification data and technical data about your device. If you contact us by phone from a number stored in our client database, information from this database will be displayed to the operator. We may also keep a voice recording of the call. If you contact us through chat, we record and store text or video recordings. Records are archived with restricted access rights and cannot be systematically searched.
Authorization for Processing:
We have a legitimate interest in conducting this processing. We want to ensure effective and objective handling of your requests or inquiries.
Categories of Personal Data We Process:
In connection with the use of the website and communication through the contact form or email, we process:
- Identification data such as name and surname, information about the organization you represent,
- Contact data such as phone number or email address,
- Data on the use of products and services, including a description of the specific product and service, including its technical specifications and usage,
- Information from contact and other forms, especially your inquiries, requests, or questions,
- Records of mutual communication, including your feedback,
- Information about website usage, especially data on IP addresses and data stored via cookies, if their storage is allowed.
Processing and Archiving Period:
5 years from the resolution of the request or inquiry
Categories of processors or recipients to whom personal data may be provided:
If necessary, we may provide your data to other members of the Volkswagen Group if it is needed to resolve your inquiry or request.
Your personal data may be provided upon request to public authorities, particularly courts, the Police of the Czech Republic, and other law enforcement authorities, to the extent necessary and only to the extent permitted by applicable laws.
Source of Personal Data:
We obtain personal data directly from you.
Transfer of Personal Data to Third Countries or Multinational Companies:
Your personal data will not be transferred to third countries within the scope of this processing. However, it may be transferred to other members of the Volkswagen Group if it is needed to resolve your inquiry or request.
Automated Decision-Making Based on Personal Data:
No automated decision-making occurs within this processing.
Other Information:
Personal data may be subject to archiving in the public interest and used for scientific, historical, or statistical research purposes. In justified cases, personal data may be subject to processing due to legal matters resolution, including fulfilling obligations to public authorities, and monitoring and ongoing evaluation of legal risks.
What are your rights?
In the context of personal data processing, you have the following rights:
Just as we have our rights and obligations in processing your personal data, you also have certain rights in processing your personal data. These rights include:
Right to Withdraw Consent
You can withdraw your consent at any time. However, this does not affect the legality of processing based on the consent given before its withdrawal.
Right of Access
In simple terms, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we pass it on, who else processes it besides us, and what further rights you have related to the processing of your personal data. You have learned all this in this Information. However, if you are not sure which personal data we process about you, you can ask us for confirmation whether the personal data concerning you are or are not being processed by us, and if they are processed, you have the right to access them. Within the right of access, you can request a copy of the processed personal data, with the first copy provided to you free of charge and further copies at a charge.
Right to Rectification
If you find that the personal data we process about you are inaccurate or incomplete, you have the right for us to correct or supplement them without undue delay.
Right to Erasure
In certain cases, you have the right for us to delete your personal data. We will delete your personal data without undue delay if any of the following reasons are met:
a) We no longer need your personal data for the purposes we processed them.
b) You exercise your right to object to processing (see below "Right to object to processing") concerning personal data we process based on our legitimate interests, and we find that we no longer have any such legitimate interests justifying this processing.
c) It turns out that our processing of personal data has ceased to comply with generally binding regulations.
This right does not apply if the processing of your personal data is still necessary for:
a) fulfilling our legal obligation;
b) purposes of archiving, scientific or historical research, or for statistical purposes; or
c) determination, exercise, or defense of our legal claims.
Right to Restrict Processing
In some cases, besides the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and not subjected to any further processing operations – in this case not permanently (as in the case of the right to erasure) but for a limited time. We must restrict the processing of personal data if:
a) you dispute the accuracy of personal data until we agree on what data are correct;
b) we process your personal data without a sufficient legal basis (e.g., beyond what we must process), but before erasing such data, you prefer only their restriction (e.g., if you expect that you would still provide us such data in the future);
c) we no longer need your personal data for the above processing purposes, but you require them for determination, exercise, or defense of your legal claims; or
d) you object to processing. The right to object is further described below in the "Right to object to processing". While we investigate whether your objection is justified, we are obliged to restrict the processing of your personal data.
Right to Data Portability
You have the right to obtain from us all your personal data that you have provided us and that we process based on fulfilling a contract. We will provide your personal data in a structured, commonly used, and machine-readable format. To easily transfer data upon your request, it may only include data that we process automatically in our electronic databases. Therefore, we cannot always transfer all data we keep in paper form.
Right to Object to Processing
You have the right to object to the processing of personal data that occurs based on our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds to continue such processing.
Right to Lodge a Complaint
Exercising rights in the manner described above does not affect your right to lodge a complaint with the Office for Personal Data Protection. You can exercise this right especially if you believe that we process your personal data unlawfully or contrary to generally binding legal regulations. You can lodge a complaint with the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7, phone: +420 234 665 111 (Central), official email: posta@uoou.cz.
How to exercise individual rights:
In all matters related to the processing of your personal data, whether it's a query, exercising a right, filing a complaint, or anything else, you can contact us through the following contacts of the Company's HR department:
- By email at: gdpr@digiteqautomotive.com
- In writing at: Novodvorská 994/138, 142 21 Prague 4
- By phone at: +420 239 046 750
Current contact information is available on our website.
We will handle your request without undue delay, but no later than within one month. In exceptional cases, particularly due to the complexity of your request, we are entitled to extend this period by another two months. We will, of course, inform you about any such extension and the reasons for it.
Personal Data Protection in Sending Marketing Information and Other Marketing Activities
Conducting Marketing Activities
Through this document, the personal data controller – Digiteq Automotive s.r.o., with its registered office in Prague 4, Novodvorská 994, Postal Code 14221, Company ID: 26466023, registered in the commercial register maintained by the Municipal Court in Prague under file no. C 84128, (hereinafter referred to as "Digiteq Automotive") – provides you with information on the processing of personal data and your related rights.
This document describes the marketing activities you can consent to. It is entirely your decision whether to give your consent, and the marketing activities relate to products or services provided by Digiteq Automotive. Offers or marketing materials may also include services and products provided by other members of the Volkswagen Group.
Purpose of Processing:
Informational communications about offers of products and services from Digiteq Automotive, including information on events, competitions, and news.
Description of Processing Purpose:
Your personal data is used to inform you about Digiteq Automotive products and services, events, competitions, subscription to news, advertisements, distribution of catalogs or holiday greetings. We may also use some of your personal data to target the above-mentioned communication, particularly by offering you our services based on information about your use of our products and services.
Legal Basis for Processing:
We are entitled to process your personal data based on your consent. You can withdraw your consent at any time. If you have not given us consent, we will not process your personal data for this reason.
Categories of Personal Data We Process:
In connection with website use, informing about our activities, news, and events, communication via contact form or email, we process:
- Identification data such as name and surname, information about the organization you represent
- Contact data such as phone number or email address
- Data on the use of products and services, including a description of the specific product and service, including its technical specifications and usage
- Records of mutual communication, including your feedback
- Information about website usage, especially data on IP addresses and data stored via cookies, if their storage is allowed.
Processing and Archiving Period:
We will process your personal data for this purpose for 5 years from consent; afterward, we will archive your consent for another 5 years.
Categories of Recipients to Whom We May Provide Personal Data:
We may involve the following processors who will process your personal data on our behalf and based on our instructions:
- Marketing agencies
- Event organizers
- Media
- Server operators
- Guest management agencies
Your personal data may be provided upon request to public authorities, particularly courts, the Police of the Czech Republic, and other law enforcement authorities, to the extent necessary and only to the extent permitted by applicable laws.
Source of Personal Data:
We receive personal data directly from you.
Transfer of Personal Data to Third Countries or Multinational Organizations:
Your personal data may be transferred outside the European Union ("EU") and the European Economic Area ("EEA") if you give us explicit consent or if we ensure adequate safeguards for the transferred data. In some cases, your personal data may be transferred to countries outside the European Economic Area. These countries may have different laws and standards regarding personal data protection than in the EU and the Czech Republic. All such transfers are carried out solely based on the use of standard contractual clauses issued by the European Commission, which are available at https://eur-lex.europa.eu/eli/dec_impl/2021/914. The recipient in third countries has committed to comply with these clauses (and other measures), or personal data is protected based on other measures ensuring an adequate level of protection.
In connection with the use of third-party services, your personal data may also be transferred to the United States of America. This transfer is necessary to ensure certain services we use or to fulfill our contractual obligations to you. When transferring your personal data to the USA, we apply the following measures:
- Certification under the EU-US Data Privacy Framework (DPF)
We transfer your data only to organizations in the USA that are certified under the EU-US Data Privacy Framework. This framework has been approved by the European Commission as ensuring an adequate level of personal data protection. Certified organizations commit to comply with strict privacy protection rules equivalent to those valid in the EU.
2. Standard Contractual Clauses (SCC)
If an organization in the USA is not certified under the DPF, we use standard contractual clauses approved by the European Commission.
3. Technical and Organizational Measures
In addition to legal tools, we also use technical measures to protect your data, such as data encryption during transfer and storage, pseudonymization of data where possible, regular audits of our systems and processes security.
Automated Decision-Making Based on Personal Data:
No automated decision-making occurs in this personal data processing.
Other Information:
Personal data may be archived in the public interest and used for scientific, historical, or statistical research purposes. In duly justified cases, personal data may also be subject to processing for legal matters resolution, including fulfilling obligations to public authorities, monitoring, and ongoing evaluation of legal risks.
What are your rights?
In the context of personal data processing, you have the following rights:
Just as we have our rights and obligations in processing your personal data, you also have certain rights in processing your personal data. These rights include:
Right to Withdraw Consent
You can withdraw your consent at any time. However, this does not affect the legality of processing based on the consent given before its withdrawal.
Right of Access
In simple terms, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we pass it on, who else processes it besides us, and what further rights you have related to the processing of your personal data. You have learned all this in this Information. However, if you are not sure which personal data we process about you, you can ask us for confirmation whether the personal data concerning you are or are not being processed by us, and if they are processed, you have the right to access them. Within the right of access, you can request a copy of the processed personal data, with the first copy provided to you free of charge and further copies at a charge.
Right to Rectification
If you find that the personal data we process about you are inaccurate or incomplete, you have the right for us to correct or supplement them without undue delay.
Right to Erasure
In certain cases, you have the right for us to delete your personal data. We will delete your personal data without undue delay if any of the following reasons are met:
a) We no longer need your personal data for the purposes we processed them.
b) You exercise your right to object to processing (see below "Right to object to processing") concerning personal data we process based on our legitimate interests, and we find that we no longer have any such legitimate interests justifying this processing.
c) It turns out that our processing of personal data has ceased to comply with generally binding regulations.
This right does not apply if the processing of your personal data is still necessary for:
a) fulfilling our legal obligation;
b) purposes of archiving, scientific or historical research, or for statistical purposes; or
c) determination, exercise, or defense of our legal claims.
Right to Restrict Processing
In some cases, besides the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and not subjected to any further processing operations – in this case not permanently (as in the case of the right to erasure) but for a limited time. We must restrict the processing of personal data if:
a) you dispute the accuracy of personal data until we agree on what data are correct;
b) we process your personal data without a sufficient legal basis (e.g., beyond what we must process), but before erasing such data, you prefer only their restriction (e.g., if you expect that you would still provide us such data in the future);
c) we no longer need your personal data for the above processing purposes, but you require them for determination, exercise, or defense of your legal claims; or
d) you object to processing. The right to object is further described below in the "Right to object to processing". While we investigate whether your objection is justified, we are obliged to restrict the processing of your personal data.
Right to Data Portability
You have the right to obtain from us all your personal data that you have provided us and that we process based on fulfilling a contract. We will provide your personal data in a structured, commonly used, and machine-readable format. To easily transfer data upon your request, it may only include data that we process automatically in our electronic databases. Therefore, we cannot always transfer all data we keep in paper form.
Right to Object to Processing
You have the right to object to the processing of personal data that occurs based on our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds to continue such processing.
Right to Lodge a Complaint
Exercising rights in the manner described above does not affect your right to lodge a complaint with the Office for Personal Data Protection. You can exercise this right especially if you believe that we process your personal data unlawfully or contrary to generally binding legal regulations. You can lodge a complaint with the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7, phone: +420 234 665 111 (Central), official email: posta@uoou.cz.
How to Exercise Individual Rights:
In all matters related to the processing of your personal data, whether it's a query, exercising a right, filing a complaint, or anything else, you can contact us through the following contacts of the Company's HR department:
- By email at: gdpr@digiteqautomotive.com
- In writing at: Novodvorská 994/138, 142 21 Prague 4
- By phone at: +420 239 046 750
Current contact information is available on our website.
We will handle your request without undue delay, but no later than within one month. In exceptional cases, particularly due to the complexity of your request, we are entitled to extend this period by another two months. We will, of course, inform you about any such extension and the reasons for it.