Principles of Personal Data Protection

Introduction

Through these Principles of Personal Data Processing, MURA s.r.o. (hereinafter referred to as "Company" or "MURA") informs data subjects, i.e., individuals whose personal data is processed, about the principles of protecting their privacy and the processing activities carried out (in accordance with the European Union's General Data Protection Regulation, commonly known as "GDPR").

Basic information on the processing of personal data

The principles of personal data processing apply to all clients, suppliers, and customers of the Company, as well as anyone else who contacts the Company or provides or discloses any personal data to it (unless otherwise specified below). This includes all individuals who use the services of the Company, provide services or subcontracting for the Company, or are in any other relationship with the Company.

The processing of personal data takes place within MURA both manually and automated in the Company's information systems. If personal data of data subjects is processed through information systems, no automated decision-making takes place.

Data Controller

The data controller of personal data is MURA s.r.o., ID: 07896948, with its registered office at nám. Winstona Churchilla 1800/2, Žižkov, 130 00 Prague 3, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File No. 309161.

What data does the Company collect?

The Company collects the following categories of data:

Data provided by the data subjects themselves:

• Information provided when establishing a contractual relationship between the data subject and the Company or for the purposes of initiating such a contractual relationship.
• Data provided for the execution of an order.
• Information provided when the data subject contacts the Company to inquire about or offer the provision of services or goods.
• Communication with the Company, whether through email or by filling out any contact form on the website www.mura.cz.
• Information provided when the data subject contacts the Company for any other reason.

Information from other sources:

• These sources may include publicly available sources, including public registers and the Internet.
• Information received by MURA from third parties, such as the data subject's employer or business partners, which is necessary for the execution of an order or fulfillment of legal obligations.

The Company may combine the information gathered from these sources with other information obtained through its own activities, such as processing and evaluating the already collected personal data.

How the Company uses personal data

The Company utilizes the collected data for the following purposes:

1. Protection of property, security, and other rights of the Company and third parties: The Company has a legitimate interest in protecting its property and rights, as well as the property and rights of third parties. For this purpose, construction sites, office buildings, and Company premises may be secured by a camera system and a visitor registration system.

The Company uses personal data solely for the stated purpose, and camera recordings are kept in accordance with the position of the Office for Personal Data Protection, typically for a period of three days. Visitor records containing only necessary personal data (most commonly name and surname, identification number, and potentially information about your employer and vehicle registration number) are retained by the Company for a maximum of 90 days.

1. Business collaboration: The Company may use contact information to inquire about services and products from its current and potential suppliers. This is done in the mutual legitimate interest for business collaboration. If the data subject is not interested in further commercial contact from MURA, they can use any of the Company's contact details to communicate this.
2. Construction activities: MURA utilizes the data for the execution and documentation of orders, communication with clients, customers, and suppliers, and fulfillment of all related contractual and legal obligations.

1. Accounting management: The Company uses the data for issuing accounting documents and maintaining accounting records in accordance with legal requirements.
2. Marketing, in terms of offering the Company's services: The Company may use personal data of its suppliers for the purpose of submitting bids for tenders and public contracts in which it participates.

Personal data for this purpose is processed based on the mutual legitimate interest in fulfilling business objectives and concluding the relevant contracts, including their processing in the internal CED information system.

Marketing, Advertising, and Corporate Communication

The Company may further use personal data of data subjects for the following purposes:

1. Publication in promotional materials or on the Company's website, including its social media profiles, based on obtained consent.
2. Sending information and updates, such as newsletters, either based on obtained consent or on the grounds of mutual legitimate interest in cases where a contractual or similar relationship exists between the Company and the data subject. If the data subject is not interested in further communication from MURA, they can use any of the Company's contact details to communicate this.

If MURA organizes any promotional, educational, or other social events, it may capture photographic or audiovisual recordings of these events and publish them on its website, social media platforms, or other marketing materials for the purpose of informing about the event and its progress. The recordings are not intended for processing any personal data, and therefore no processing of personal data occurs in this context.

Recruitment of New Employees

If the Company obtains someone's personal data for the purposes of employee recruitment, it uses them solely for filling a new job position. In cases where professional psychodiagnostics are part of this data, MURA processes personal data derived from it only with the explicit consent of the data subject. The Company processes personal data for this purpose throughout the entire selection process unless the data subject gives consent for the Company to store their personal data for a longer period and use it for future job openings.

MURA may process personal data of students from vocational schools, secondary schools, and universities to support their education and professional development, support their integration and employment within MURA if it arises from a contract between MURA and the student, if the student has given consent, or if there is a mutual legitimate interest in conducting internships at MURA and establishing future cooperation. If a student is not interested in conducting an internship at MURA, they can use any of the Company's contact details to communicate this.

Legal Proceedings and Defense of Legal Claims

The collected data may be used by the Company for the enforcement of claims, dispute resolution, or protection of its rights and legitimate interests in accordance with applicable legal regulations.

Sharing and Transferring of Data

The Company may share the collected data:

With Business Partners: 

The Company may provide information or grant access to its employees, clients, suppliers, consultants, software providers, insurers, auditing firms, and other service providers or business partners if they are involved in providing services to the Company that involve the processing of personal data. Under no circumstances does the Company provide personal data, whether for a fee or free of charge, to third parties without a lawful reason.

All contractual partners of the Company are bound by confidentiality obligations and comply with applicable legal regulations regarding the protection of personal data.

For Legal Reasons or Disputes:

The Company may share personal data if required by legal regulations:

With the Police of the Czech Republic, courts, government authorities, or other third parties when necessary to fulfill the legal obligations of the Company or to enforce its legal claims or protect the rights or property of the Company or third parties. With other parties in connection with potential mergers, asset sales, consolidations or restructuring, financing, or the transfer of the Company or part of it into the ownership of another company.

With the Consent of the Data Subject:

The Company may share personal data in other ways and with other entities if expressly consented to by the data subject.

MURA may, in necessary cases, transfer personal data outside the EU, particularly when conducting business or construction activities abroad. In such cases, MURA always complies with applicable legal regulations regarding the transfer of personal data to foreign countries.

What rights does the data subject have regarding the processing of personal data?

In connection with the processing of their personal data by the Company, the data subject has the following rights. They can use the contact information of the Company provided at the end of this information to exercise their rights.

Retention and Erasure of Data

The Company retains all personal data for only as long as necessary to fulfill the purpose for which the personal data is processed, especially for the duration:

required by law or other legally binding regulations; specified in the granted consent; for the duration of the contractual relationship with the Company and typically an additional ten (10) years after its termination, unless other legal archiving periods are specified.

The Company will delete personal data as soon as requested by the data subject, unless there is a legal reason for further processing, such as:

the expiration of legal archiving periods;

if the Company is dealing with a problem involving the data subject, such as an ongoing dispute or legal claim;

if the data is kept by the Company in an aggregated or anonymous form;

if the Company requires such data for legitimate business purposes.

Access to Personal Data

The data subject may contact the Company at any time free of charge to request information on whether the Company processes their personal data and, if so, to request further information about such processing.

Change of Personal Data or Data Error

If there is any change in personal data during the contractual relationship between the data subject and the Company, such as a change in name, address, email address, or phone number, or if the data subject becomes aware that the Company is processing outdated or incorrect data, they have the right to notify the Company and request the correction or modification of their personal data.

Restriction of Processing

If the data subject believes that:

the Company is processing inaccurate data (and the Company is verifying whether this is the case); the processing of personal data by the Company is unlawful, but the data subject does not want all the data to be erased; their personal data is no longer needed by the Company for the aforementioned purposes, but the data subject wishes to use it for the defense of their legal claims, such as in legal proceedings; the legitimate interest of the Company in certain processing of personal data is not present (and the Company is verifying whether this is the case),

the data subject may request the Company to restrict the processing of only certain personal data or for specific purposes of processing.

Data Portability

The data subject may at any time request the Company to transfer their personal data, which the Company has at its disposal, to a third party according to the specifications provided by the data subject.

Objection to Processing

If the Company processes personal data based on its legitimate interests as the data controller, the data subject may object to such processing according to the instructions provided directly in the text of these principles.

Withdrawal of Consent to Personal Data Processing

If the processing of personal data is based on the data subject's consent, this consent may be withdrawn in writing (including via email) at any time.

Right to Lodge a Complaint

If the data subject believes that the Company is handling their data in violation of the law, they may lodge a complaint with the Data Protection Officer at any time, and if necessary, with the Office for Personal Data Protection.

Data Protection Officer

The Company has appointed a Data Protection Officer to oversee the protection of personal data. One of their tasks is communication within the Company and externally, as well as handling complaints, receiving suggestions, and addressing other issues related to the processing of personal data within the Company.

Contact details of the data controller:

MURA s.r.o.,

ID: 07896948

Address: nám. Winstona Churchilla 1800/2, Žižkov, 130 00 Prague 3

Email: info@mura.cz