​1. Introduction
The protection of personal data is important to us. This policy explains how we process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

​

2. Data Controller
The data controller is:

NDU s.r.o.
Registered office: GOLDEN OFFICE BEZOVÁ 1658/1, 147 00 PRAGUE 4
IČO: 23477806
E-mail: info@nducompany.cz
Telephone: +420 777 148 354

​

3. What personal data do we process
We process in particular the following data:

identification data (name, surname, IČO, VAT number)

contact data (e-mail, telephone)

invoicing data

data necessary for accounting

data from communication (e-mail, forms)

​​

4. Purposes and legal bases of processing
4.1 Performance of the contract
Processing is necessary for the provision of accounting services.
Legal basis: Art. 6 para. 1 letter b) GDPR

4.2 Fulfillment of legal obligations
Processing is necessary to fulfill legal obligations (e.g. Accounting Act, tax regulations).
Legal basis: Article 6(1)(c) GDPR

4.3 Legitimate interest
E.g. protection of the rights of the controller or basic website analytics.
Legal basis: Article 6(1)(f) GDPR

4.4 Consent
E.g. marketing communication.
Legal basis: Article 6(1)(a) GDPR

​

5. Data retention period
We retain personal data:

for the duration of the contractual relationship

for the period specified by law (e.g. up to 10 years according to accounting laws)

until consent is withdrawn (in the case of marketing)

​​

6. Recipients of personal data
Personal data may be made available to:

public authorities (tax authorities, etc.)

IT service and hosting providers

external accountants or tax advisors

We have concluded contracts with all processors according to the GDPR.

​

7. Transfer to third countries
We do not transfer personal data outside the EU.
If this were to happen, an adequate level of protection will be ensured according to the GDPR.

​

8. Rights of data subjects
You have the right to:

access to personal data

correction of inaccurate data

erasure ("right to be forgotten")

restriction of processing

data portability

objection to processing

withdraw consent

​

9. Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection (ÚOOÚ)
www.uoou.cz