We would like to inform you that TOPTRANS EU, as, with its registered office at Na Priehon 50, Nitra, Slovak Republic, ID No .: 36703923, doing business in the Czech Republic through: TOPTRANS EU, as, branch, with its registered office at Opravářská 944/2, 102 00 Prague 10, IČ: 28202376, DIČ: CZ28202376, a company registered in the Commercial Register maintained by the Municipal Court in Prague, Section A, File 59349 (hereinafter referred to as “TOPTRANS”) processes personal data in accordance with the applicable legislation. May 2018 and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR").

Please be assured that all personal information that TOPTRANS collects is collected for legitimate purposes only and for a limited time only. This data is protected by the maximum possible security.

The Data Protection Officer (hereinafter referred to as “DPO”) is responsible for the observance of all data protection policies, which you can contact at any time by e-mail at gdpr@toptrans.cz.

Below we would like to inform you in detail about what personal data protection represents and how we process your personal data at TOPTRANS.

GDPR - WHAT IS IT?

GDPR, the general regulation on personal data protection, in the Czech Republic replaced the existing legislation on personal data protection in the form of Directive 95/46 / EC and related Act No. 101/2000 Coll., On the protection of personal data.

This means that the legal framework for the protection of personal data continued to function here until 25 May 2018 and personal data has been protected up to now. Only the new regulation extends the rights of data subjects concerned to the protection of personal data and the obligations of those entities processing personal data.

For this purpose, the natural person whose personal data is processed is called the data subject.

PERSONAL INFORMATION - WHAT IS IT?

Personal information is any information about an identified or identifiable natural person.

GDPR divides personal data into two categories - general and special. As far as you, our customers, recipients or contractors are concerned, TOPTRANS processes personal data only in general.

In particular, we process or may process the following personal data:

• identification: name and surname, address, place of business, company ID, VAT number, ID number (identity card, passport or other card), your function in the organization, if you represent a legal entity, login and password in our customer program;
• contact details: telephone number, email address, delivery address and billing address where applicable;
• information about the ordered services: information about your ordered shipments, information about possible complaints, information about the method of payment and, if applicable, bank account number;
• in the case of your personal visit to the centre and recordings from CCTV systems.

PERSONAL DATA PROCESSING - WHAT ARE ALL ACTIVITIES?

Simply put, according to the GDPR, personal data processing means any more sophisticated activity that a personal data controller performs for a specific purpose.

Specifically, it may include, for example, collecting personal data, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, making available by transmission, dissemination or any other making available, sorting or combining, limiting, deleting or destroying.

At our TOPTRANS company we process all personal data by automated means as well as manually.

ADMINISTRATOR OR PROCESSOR?

According to GDPR, the controller is a natural or legal person who determines the purposes and means of processing personal data and is primarily responsible for the processing.

We, as a forwarding company, process all of the aforementioned personal information as a controller.

By contrast, the processor is, according to GDPR, a natural or legal person hired by the controller to carry out processing operations for him on personal data. In other words, the processor processes personal data for the controller.

At TOPTRANS, we have our practice of providing transportation services based on the principle of cooperation with external carriers that provide transportation under our brand. In order to fulfill forwarding contracts (ie delivery of shipments) we provide personal data of our customers, respectively. the consignees, as well as these external carriers. Please be assured that we have entered into a personal data processing agreement with all external carriers, in which they are committed to respecting the GDPR requirements and ensuring that your data is secure.

We also use the services of other processors, who process personal data only according to our instructions and for the purpose set by us. Even with these processors we have concluded a contract on the processing of personal data, event. ensure that these other processors have undertaken in writing to process personal data in accordance with GDPR.

Such further processors are in particular:

• technology vendors (in particular IT and security technologies), other relevant support and related services;
• SMS service provider, by means of which you are informed about the course of the order;
• security camera system providers,
• persons bound by legal confidentiality: attorneys, tax advisors, auditors.

LEGAL REASON FOR PROCESSING AND PURPOSE OF PROCESSING

At TOPTRANS we only process personal data needed to provide professional services and comfortable service. At the same time, we must comply with legal obligations and protect our legitimate interests.

Personal information is processed to the extent that it has been provided to us in connection with the conclusion of a contractual or other legal relationship, or that has been collected otherwise and is processed in accordance with applicable law or to fulfill our legal obligations.

We only process your personal data for a legitimate purpose and to the extent necessary for that particular purpose.

This means that if you order a shipment with us or conclude another contract with us as a natural person, we need your personal data (identification, contact and order details) in order to implement the contractual relationship - ie to fulfill the contract or . for the purpose of transport and tracking.

If you order a shipment with us or enter into another contract with us as a representative of a legal entity, we need the same personal information as in the case mentioned above, again in connection with the provision of our services as a forwarder. In this case, we process your data based on our legitimate interest - ie for the purpose of concluding and performing a contract with the person you represent.

If you are the recipient of the shipment, we need your personal information to the extent necessary to fulfill the ordered service, ie delivery of the shipment. Specifically, we process your name, surname, delivery address, telephone number.

We also process some of your personal data for the purpose and for the purpose of fulfilling legal obligations. This applies to your identification, contact details and information about the services you have ordered. And which laws impose this duty on us?

These are in particular:

• Act No. 89/2012 Coll., Civil Code,
• Act No. 634/1992 Coll., on Consumer Protection,
• Act No. 235/2004 Coll., on Value Added Tax,
• Act No. 563/1991 Coll., on Accounting,
• Act No. 253/2008 Coll., on Certain Measures Against Money Laundering and Terrorist Financing.

Another purpose of processing personal reasons is our legitimate interest. We only process personal data for this purpose if necessary. This is the case, for example, in our interest in protecting our centers, which are guarded by CCTV. Furthermore, it may be a dispute settlement or debt recovery (however, to the same extent as for the purpose of contractual implementation).

TOPTRANS processes personal data for the aforementioned purposes for the duration of the contractual relationship and thereafter for as long as any of the contracting parties may exercise any rights related to the service provided.

TRANSFER OF PERSONAL DATA OUTSIDE THE CZECH REPUBLIC

In order to be able to carry out the ordered service, in some cases we have to pass your personal data beyond the borders of the Czech Republic or beyond the borders of the European Union, respectively. Of the European Economic Area ('the EEC'). This happens in a classic way when you order transport from / to abroad.

The GDPR is valid and effective only in the European Union, respectively. in the EEC, which means that in other areas it may not have the same high standard of legal framework for the protection of personal data as it is in the Czech Republic.

Therefore, we will only cooperate and ensure the fulfillment of services with those partners who we are sure will also protect your personal data.

RIGHTS OF THE DATA SUBJECT OR YOUR RIGHTS

Your rights as data subjects are an important element of the protection of personal data as a whole.

You have the right to be informed about the processing of your personal data. This means the right to certain information, in particular on the processing, identity of the controller, the recipients of personal data (those to whom personal data are provided).

Other rights that you will often need to take action to exercise often include:

• right of access, rectification - these rights mean for you the right to obtain from the controller information (confirmation) whether or not your personal data are processed and, if any, you have the right (ideally and online) to obtain information about this processing; at the same time, if you find that any personal information that the administrator processes is incorrect, you can request that it be corrected.
• the right to be forgotten, the right to be deleted - if personal data are no longer needed for the purposes for which they were collected or otherwise processed, you have the right to have them erased or otherwise destroyed. This will have to be done by the controller even if there is no other legal reason for the processing, as well as if you object to the processing and there are no overriding legitimate reasons for the processing, the personal data has been processed unlawfully or be erased to fulfill a legal obligation.
• right to data portability - this right provides you with the opportunity, under certain conditions, to obtain personal data relating to you that you have provided to the controller in a structured, commonly used and machine-readable format.
• right to object - if you believe that the controller is processing your personal data unlawfully or without any legal reason and without your consent, you may object to the processing. If you have any objection to the processing of your personal data by our company, please do not hesitate to contact our DPO at gdpr@toptrans.cz.
• right to lodge a complaint - of course you always have the possibility to address the complaint directly to the relevant supervisory authority - ie the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

YOUR RIGHTS - HOW CAN YOU APPLY?

If you would like to exercise any of your rights as a data subject or in case of any other queries or requests related to the processing of your personal data, please contact us via e-mail address gdpr@toptrans.cz.