GDPR

GDPR – Caring Real Estate s.r.o.

 
 
Company: Caring Real Estate s.r.o. U první baterie 2046/47, Břevnov, 162 00 Prague 6 Company ID No.: 23758945 Registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 432435
(each of the above-mentioned companies hereinafter also referred to as the “Controller”)

I.
Definitions
The Controller is a business entity acting as the controller of personal data, i.e. it determines the purposes and means of processing personal data.
The Controller is also a service provider and operator of websites, online services and other projects on the Internet (hereinafter referred to as the “Services”). In the operation of these Services, the Controller processes personal data of natural persons.
Personal data are identifiers provided by the user (data subject) to the Controller which, alone or in combination with other identifiers, are capable of identifying a specific data subject.
The data subject, for the purposes of these Policies, is a natural person whose personal data are processed by the Controller in the operation of the Services.
Processing of personal data means any operation or set of operations systematically carried out on personal data, in particular their collection, organization, storage, retrieval, use, sorting and classification in databases, blocking, and other processing activities.
A processor is a natural or legal person authorized by the Controller to process personal data for the purposes determined by the Controller.
The legal framework governing the processing of personal data by the Controller is Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “GDPR”) and Act No. 110/2019 Coll., on the processing of personal data.

II.
Purpose of Personal Data Processing
1. The purpose of processing personal data is the use of the Services provided by the Controller and the Controller’s informational and marketing activities (sending e-mail newsletters and other commercial communications).
2. The legal basis for the processing of personal data is a concluded contract, an order, or consent granted by the data subjects.
3. E-mail newsletters and other e-mail messages of a commercial nature are sent by the Controller on the basis of a specific consent granted pursuant to Act No. 480/2004 Coll., on certain information society services, for the sending of e-mail messages (newsletters). Furthermore, the Controller sends e-mail messages to its customers, i.e. persons who have used the Controller’s Services, within the scope permitted by Act No. 480/2004 Coll., even without prior explicit consent to receive commercial communications.
4. The Controller processes personal data only to the extent provided by users and solely for the purposes stated above (provision and use of Services, sending information via e-mail newsletters, and other marketing activities).
5. In the operation of its websites, the Controller uses cookies and other electronic identifiers (hereinafter collectively referred to as “cookies”). Their purpose and use are governed by the cookie processing rules, which the user is informed about via the cookie banner, where consent to the processing of personal data through cookies is given, and further by the rules published by the Controller in accordance with the actual use of cookies.

III.
Retention Period of Personal Data
The Controller stores the provided personal data for the following periods:
a)
For the duration of the contractual relationship and for 5 years following its termination (due to possible complaints or other claims of the contractual parties).
b)
For a period of 5 years from the user’s last use of the Service.
c)
Until the withdrawal of consent or a similar act by the user revoking the Controller’s right to process their personal data.

IV. Rights of Data Subjects
In connection with the processing of personal data, the Controller guarantees data subjects in particular the following rights arising from the GDPR:
a)
Data subjects have the right to access their personal data. They also have the right to rectification and/or completion, erasure, or restriction of the processing of their personal data, as well as the right not to be subject to automated individual decision-making (including profiling).
b)
Data subjects have the right to object to the processing of their personal data.
c)
Data subjects have the right to data portability in a structured, commonly used and machine-readable format.
d)
Data subjects are entitled to withdraw their consent to the processing of personal data at any time. For withdrawal of consent, the Controller recommends using the following contact e-mail address: info@caringrealestate.cz.
e)
Data subjects are entitled to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz), with its registered office at Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, data box ID: qkbaa2n.

V. Final Provisions
1. In processing personal data for the purposes defined above, the Controller uses processors and assures data subjects that it has selected processors who can guarantee the same level of personal data protection and security as ensured by the Controller.
2. The Controller and the company Caring Legal s.r.o., law firm, U první baterie 2046/47, Břevnov, 162 00 Prague 6, Company ID No.: 21963151, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 409138, are related entities and closely cooperate. If personal data are transferred between them due to the specific nature of the provided services, the data subject will be informed of such transfer in advance.
3. The Controller does not transfer personal data outside the EU.
4. The Controller reserves the right to amend these Policies in the event of changes on the part of the Controller or changes in applicable legislation.
5. These Privacy Policies are effective as of 1 January 2026.