Part A. Rules on the processing of personal data
I. Introduction
The Operator and Provider of the Hoofmanager online application – which, for the purposes of these rules, includes the application hosted at hoofmgr.farmcloud.cz and the promotional website www.hoofmanager.cz (hereinafter also referred to as the ‘Application’), FARMCZSYSTEM, s.r.o., processes personal data in connection with your use of the Application in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and the relevant follow-up legislation. These rules explain how FARMCZSYSTEM, s.r.o. handles and processes your personal data.
II. BASIC INFORMATION about the data controller
Data controller: FARMCZSYSTEM, s.r.o.
Controller’s identification details: FARMCZSYSTEM, s.r.o., Company Registration Number: 03324966, with its registered office at Trojická 1910/7, Nové Město, 128 00 Prague 2, registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 236257 (hereinafter also referred to as the ‘Provider’)
The Provider’s contact email address: office@farmsystem.cz.
Data Protection Officer: The Provider has not appointed a Data Protection Officer.
III. Purpose of personal data processing and legal basis for the processing of personal data
The Provider processes your personal data for the purpose of operating and using the Application and fulfilling the Agreement for the use of the Application concluded between the Provider and the User of the Application.
Furthermore, the Provider may process personal data for the purpose of and on the grounds of fulfilling the Provider’s legal obligations under relevant legislation or decisions of the competent public authorities, and also for the purpose of and on the grounds of the Provider’s legitimate interests, in particular to verify compliance with the Terms and Conditions of use of the Application, to enforce any rights and legal claims where necessary, and to defend itself in disputes arising from the use of the Application or in proceedings conducted by public authorities in connection with the Application.
On the basis of your consent, the Provider may also process personal data for other purposes to which you give your express consent; e.g. this may include sending commercial, informational, educational or other communications, for example via the SmartEmailing service, or for online meetings, for example via the Webmeeting service.
IV. Personal data processed by the Provider:
Personal data processed by the Provider: This comprises data necessary for the operation and use of the Application and the hoofmanager.cz website, and for the fulfilment of the Agreement for the use of the Application concluded between the Provider and the User of the Application, in particular: first name, surname, business name, identification number, VAT number, place of residence/registered office, contact address, telephone number, email address, job title, billing details, login details or other necessary data which the Provider obtains from the Application User whilst they are using the Application, which consists of data entered by the User for the purpose of and in connection with the use of the Application’s services, or identifiers necessary for using the Application, such as an IP address.
Without providing the data necessary for the operation and use of the Application and for the performance of the Agreement for the use of the Application concluded between the Provider and the Application User, it is not possible to use the Application’s services.
Furthermore, this may include data which the Provider processes for the purpose of and on the grounds of fulfilling the Provider’s legal obligations under relevant legislation or decisions of the relevant public authorities, or for the purpose of and on the grounds of the existence of the Provider’s legitimate interests as set out above.
Should the Provider intend to process personal data other than that specified above, or for other purposes, it may do so only on the basis of your explicit consent to the processing of such personal data. The provision of Data is therefore voluntary and based on the User’s consent to such processing. You may withdraw your consent at any time by sending an email to: office@farmsystem.cz or by any other means specified in the consent form.
V. Sources of personal data:
The Provider obtains personal data directly from users of the Application in the course of using the Application and in connection with the Application, and in the course of and in connection with the performance of the Agreement for the use of the Application concluded between the Provider and the user of the Application.
VI. RECIPIENTS OF PERSONAL DATA
The data you provide may be processed, in their capacity as data processors, by entities authorised by the Provider, in accordance with the Provider’s instructions and for the same purposes as the Provider, in particular: a cloud solutions provider, a web hosting service provider, a dedicated server service provider, external accountants, tax advisers and legal advisers. If the Data is transferred to external suppliers outside the EU, to territories which may not offer the same level of protection as required within the EU, the Provider shall take measures to ensure an adequate level of protection in accordance with the requirements of the relevant legislation.
Personal data may be disclosed to the relevant public authorities in order to fulfil the Provider’s legal obligations under the relevant legislation or decisions of the relevant public authorities, or for the purposes and on the grounds of the Provider’s legitimate interests as set out above.
VII. Duration of personal data processing:
The Provider processes your personal data for the Period of Use of the Application, i.e. for as long as the agreed functions of the Application, as per the current version of the Application, are available to you and, where applicable, for as long as the Price is paid. Any other personal data you provide on the basis of specific consent may be processed for the period specified in the consent. The Provider may process your personal data for a longer period only if such longer retention is justified on the basis of relevant legislation, decisions by the relevant public authorities, or the Provider’s legitimate interests.
VIII. TECHNICAL DATA SECURITY
In order to protect your personal data against unauthorised or accidental disclosure, the Provider applies reasonable and appropriate technical and organisational measures, which are continuously updated. Technical measures consist of the deployment of technologies that prevent unauthorised access to personal data by third parties. Organisational measures consist of a set of rules of conduct for the Provider’s staff. The Provider ensures that the necessary technical and organisational measures are also implemented by external suppliers.
IX. Automated individual decision-making
The Provider does not carry out automated individual decision-making or profiling.
X. PAYMENT GATEWAYS
The Provider may use third-party payment gateways for certain types of payment (e.g. credit card payments). If the User makes a payment by credit or debit card via PayPal or another payment method, in all cases the payment card numbers or other sensitive payment data are processed by the third-party payment gateway. The Provider does not store payment card numbers or other sensitive payment data, nor does it have access to them.
XI. USERS’ RIGHTS
Users of the Application have rights under the relevant legislation; in particular, they have the following rights:
- a) the right of access to personal data and the right to obtain confirmation from the Provider as to whether or not personal data relating to them are being processed, and to receive relevant information regarding such processing;
- b) the right to rectify personal data or, where applicable, to have incomplete personal data completed;
- c) the right to withdraw consent to the processing of personal data in the event that the Provider processes any personal data on the basis of the User’s consent, by sending an email to: office@farmsystem.cz or by any other means specified in the consent;
- d) the right to object to processing based on the Provider’s legitimate interest, unless there are compelling legitimate grounds for the processing;
- e) the right to restrict the processing of personal data in cases where the User disputes the accuracy of the personal data, for the period necessary for the Provider to verify the accuracy of the personal data, furthermore, where the processing of personal data is unlawful and the user refuses to have the personal data erased and requests instead that its use be restricted, or where the Provider no longer requires the personal data for the purposes of processing but the user requires it for the establishment, exercise or defence of legal claims, or where the User has objected to the processing of personal data for the purposes of the Provider’s legitimate interests, until it has been verified whether the legitimate grounds of the controller override those of the User;
- f) the right to erasure of personal data where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or where the personal data were processed on the basis of the User’s consent and the User withdraws that consent and there is no other legal basis for the processing, or where the User has objected to the processing of personal data based on the Provider’s legitimate interests and there are no overriding legitimate grounds for the processing, or where the personal data has been processed unlawfully, or where the personal data must be erased to comply with a legal obligation;
- g) the right to data portability where the processing is based on consent or an Agreement and is carried out by automated means;
- h) the right to lodge a complaint with a supervisory authority if the data subject considers that the Provider is not processing their personal data lawfully. The supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, tel.: 234 665 125;
- i) the right to be informed in the event of a personal data breach, provided that the personal data breach in question results in a high risk to the User’s rights and freedoms.
Part B. Use of cookies
I. COOKIES
The Application may use so-called cookies to optimise its services. Cookies are small text files that identify the Application’s Users and record their user activity.
The Application also automatically identifies the user’s IP address. An IP address is a number automatically assigned to the user’s computer upon connecting to the internet. All this information is recorded in a log file by the server, which enables subsequent data processing.
II. Purpose of using cookies:
The Provider uses cookies and similar technologies for several purposes:
- Login and authentication. Once a user logs in via ‘My Account’, an encrypted cookie is stored on their device, enabling them to navigate between pages on the website without having to log in repeatedly. Users may also save their login details so that they do not have to log in every time they return.
- Security. The Provider uses cookies to detect fraud and misuse of the Application.
- Analytics. The Provider uses cookies and other identifiers to collect data on the use and performance of the Application.
Third-party cookies may also be placed on the Application’s pages. This may be because, for example, the Provider has commissioned a third party to analyse the pages. The Provider may use the following Providers, for example:
- Google Analytics – Google
- YouTube service – Google.
III. Cookie settings:
Users may change or withdraw their consent to the use of cookies at any time via the ‘Cookie settings’ link in the footer of the Application’s website.
Most web browsers accept cookies automatically. However, they provide controls that allow Users to block or delete them. Users of the Application are therefore entitled to configure their browser to prevent the use of cookies on their computer. Instructions on how to block or delete cookies in browsers can usually be found in the privacy policies or help documentation for each browser.
Part C. FINAL PROVISIONS
The Provider may update these rules as necessary. The current version is always available at https://www.hoofmanager.cz/en/gdpr. Should there be a significant change in the way personal data is handled, the Provider will inform Users of the Application by prominently publishing a notice of the changes within the Application, on the website https://www.hoofmanager.cz and/or by sending a notification to Application Users at the email addresses specified in their ‘My Account’ user account. It is recommended that you regularly review the rules on the processing of personal data and the use of cookies when using the Application.