Personal data processing and protection principles

Legal framework for processing
The personal data of customers and other persons (hereinafter also referred to as “data subjects”) whose personal data is processed by EUROVAT-ASISTANCE, spol. s r.o. is processed in accordance with the applicable legal regulations. In particular, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Personal data controller
The controller of the collected personal data is the company EUROVAT-ASISTANCE, spol s .r.o., ID No. 27784517, with registered office in Vsetín, Na Hrázi 1452, Postal Code 75501, (hereinafter referred to as the “Controller”).
Accuracy of personal data
The data subject is obliged to provide his/her personal data (e.g. when entering into a contractual relationship, filling in a power of attorney) correctly and truthfully and is obliged to inform the controller without undue delay of any change in his/her personal data.
Purposes of processing and legal basis for processing personal data
1. The name, surname (including any addition to further characterize the person or business establishment of the natural person), title (if provided by the customer), residential or registered office address, delivery address, VAT number, VAT number, e-mail address of the data subject and data on the purchase of services are processed for the purpose of contract performance (e.g. identification of the customer, confirmation of compliance with the terms of the contract, information on the status of applications, delivery of documents and documents for processing VAT refund applications, tax returns, excise duty refunds, issuing of tax documents); the legal basis for processing these data for the above purpose is their necessity for the performance of the contract to which the data subject is a party or for the implementation of measures taken before the conclusion of the contract at the request of the data subject.The aforementioned personal data shall be further processed after the performance of the contract if this is necessary for the fulfilment of a legal obligation to which EUROVAT-ASISTANCE, spol. s r.o. is subject.
2. The personal data referred to in points (a) and (b) and the data on the history of refund claims made by the customer may be processed for the purposes of maintaining the customer’s online user account; the legal basis for the processing of such data for that purpose is the consent given by the customer.
3. The personal data of customers referred to in points a) and b) may be processed for direct marketing purposes, i.e. in particular for sending commercial communications concerning new and existing services of EUROVAT-ASISTANCE, spol. s r.o.; the legal basis for the processing of these data is the legitimate interest of EUROVAT-ASISTANCE, spol. s r.o. in this case.
4. A copy of the identity card or passport of the data subject may be requested and processed by EUROVAT-ASISTANCE, spol. s r.o. for the purpose of tax registration in various EU countries, in some cases also for the successful processing of VAT refunds, which is usually done by virtue of the contract performance and customer requirements, therefore, in the event of the need to supply an identity card, the customer will always be informed. The legal basis for the processing of this data in this case is the legitimate interest of the controller and also of the customer, since without the delivery of the necessary documents it is not possible to complete certain actions related to the performance of the substance of the contractual relationship.
5. The identification data of the data subject in the form of camera footage obtained in the vicinity of the EUROVAT-ASISTANCE, spol. s r.o. headquarters building are processed by EUROVAT-ASISTANCE, spol. s r.o. for the purpose of protecting its property, life and health of persons. In justified cases, they may be transmitted to law enforcement authorities or other interested parties to fulfil the purpose of the processing (e.g. insurance company). In this case, the legal basis for the processing of these data is the legitimate interest of EUROVAT-ASISTANCE, spol. s r.o.
6. When you use our website www.eurovat.info (the “Website”), EUROVAT-ASISTANCE, spol. s r.o. receives and records information from your browser that may include personal data. We use a variety of techniques to collect this information, such as cookies; this information may include your IP address, a unique identifier that uses “cookies”, information about cookies and information regarding whether your device has the software necessary to access certain features, a unique identifier for your device and device type, domain, browser type and language, operating system type and settings, country and time zone, previously visited web pages, information about your actions on our Website, such as clicking. We use cookies to track how our customers use the Website and to understand our customers’ preferences (such as country and language choices). This enables us to provide our customers with services and improve their online experience. We also use cookies to obtain aggregate data about site traffic and communications, to identify trends, and to obtain statistical data in order to further improve our Website. We use essentially three categories of cookies on Our Website.
- Functional: These cookies are required for the basic functioning of the site and are therefore always enabled; they include cookies that allow you to contact the customer via online chat and assist in security and compliance with legal requirements.
- Functioning (performance) enhancers: these cookies allow us to improve the functionality of our Website by tracking usage. In some cases, these cookies improve the speed of response to your requests and allow us to remember your selections for that site. If you refuse these cookies, it may result in recommendations not being accurate and the site running slower.

Social media and advertising: Social media cookies offer the opportunity to connect you to social networks and share content from our Websites on them. Rejecting these cookies may result in the inability to effectively connect with your Facebook, Instagram or other social media accounts and/or not allowing you to share content on social media. The legal basis for the processing of the above data for these purposes is the consent granted by the data subject, or the legitimate interest of the controller for the purposes of basic analysis of the traffic to the Website.The telephone number may be processed for the purpose of informing about the status of the request or supplementing the information and obtaining documents necessary for processing the subject of the contractual relationship, or informing about the time of completion of the tax refund process; the legal basis for the processing of this data for this purpose is the consent granted by the data subject.

Provision of personal data

The provision of the personal data referred to in Article V(a), (b) and (g) is a contractual requirement of EUROVAT-ASISTANCE, spol. s r.o. The name, surname (including any additions that further characterize the person or business establishment of the natural person), registered office address, VAT number, VAT number (for VAT payers) and e-mail address of the client who is a natural person are also data that must be included in the contract; failure to provide these data may lead to the impossibility of concluding the contract.

Storage time

The personal data will be stored with EUROVAT-ASISTANCE, spol. s r.o. for the period required by the applicable legal regulations, if no such period is stipulated, for the period for which the legal reason for processing lasts or for the period necessary to establish the exercise or defence of legal claims.

Categories of recipients of personal data

EUROVAT-ASISTANCE, spol. s r.o. may delegate the processing of personal data to a third party as a processor.

Mail delivery service providers The administrator is entitled to provide the name, surname (including, if applicable, an addendum further characterizing the person or business establishment of the natural person), title (if provided by the client), delivery address and telephone number of the customer to the mail delivery service provider for the purpose of delivering the necessary documents for the tax refund.
Providers of accounting, tax and legal services The administrator is also entitled to provide personal data to persons providing accounting, tax and legal services to the administrator for the purpose of fulfilling its legal obligations and in cases where it is necessary for the establishment, exercise or protection of legal claims, whether in judicial, extrajudicial or administrative proceedings.

Entities providing direct marketing services The controller is entitled to provide an e-mail address and telephone number for the purpose of sending commercial communications to entities that perform this activity for the controller as processors.

Right of access to personal data

The data subject shall have the right to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to such personal data.

Right to rectification of personal data

The data subject shall have the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by providing an additional declaration.

Right to erasure of personal data

The data subject shall have the right to have the controller erase the personal data concerning the data subject without undue delay and the controller shall be obliged to erase the personal data without undue delay if one of the grounds set out in the General Data Protection Regulation applies. An exception is imposed by the Accounting Act, where certain accounting records of historical transactions cannot be completely erased for a certain period of time.

Right to restriction of processing of personal data

The data subject has the right to have the controller restrict the processing of his or her personal data in the cases provided for in the General Data Protection Regulation.

Right to portability of personal data

Subject to the conditions laid down in the General Data Protection Regulation, the data subject shall have the right to obtain personal data concerning him or her which he or she has provided to a controller in a structured, commonly used and machine-readable format and to transmit those data to another controller, without the controller to whom the personal data have been provided knowingly impeding this.

Right to object to the processing of personal data

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of his or her personal data processed for reasons of legitimate interest of the controller, including profiling based on the controller’s legitimate interest. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which shall include profiling insofar as it relates to such direct marketing.

Right to withdraw consent to the processing of personal data

The data subject has the right to withdraw the consent to the processing of personal data at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal. Consent may be withdrawn by e-mail to the following e-mail address: info@eurovat.info, by written notice sent to the address of the controller’s registered office, or to the controller’s data box (ID: n8t48k9). Consent to receive information about newsletters and discount and marketing promotions relating to the controller’s services may also be withdrawn via the electronic unsubscribe system by clicking on the unsubscribe link directly in the sent e-mail business communication.

Right to lodge a complaint

The data subject has the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of his or her habitual residence, place of employment or place of the alleged infringement, if he or she considers that the processing of his or her personal data infringes the General Data Protection Regulation. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection.