Dear all,

the information stated below is provided in order to secure full and transparent knowledge about the processing of your personal data, including a special category of personal data, by the controller of such data, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”).

Processor of personal data

FaceUp Technology s.r.o., company ID No.: 061 42 630, with registered office at Udolní 567/33, 602 00 Brno, Czech Republic registered in the Commercial Register kept by the Regional Court in Brno, Section C, File 100325 (hereinafter as the “We” or “Processor”).

You may contact us:

by post to FaceUp Technology s.r.o., Udolní 33, 602 00 Brno, Czech Republic;
by e-mail to support@faceup.com.

Controller

Organization, company, facility or other institution or entity to which your report relates, and which has made a contract with us for the provision of the FaceUp application for the purpose of receipt, administration and processing of reports (hereinafter as the “Controller”). The Controller is obliged to provide you with full information on the processing of your personal data regarding the reports.

No data protection officer was appointed at the Processor.

Your personal data that we process

In connection with the submission of a report via the form on the website application www.app.faceup.com or mobile application (hereinafter as the “App”) we do not process your personal data unless you voluntarily provide us with such data. However, provision of any of your personal data is completely voluntary and is not a precondition for submitting a report – typical examples are identifying and contact name and other data connected with the submission of a report via the App and related actions.

Purpose of processing of your personal data and legal basis for their processing:

If you voluntarily provide us with your personal data in connection with the submission of your report, the purpose of further processing of such data is the processing of your report submitted via the Application with the use of the access code of your organization (Controller) and/or via the form to which you gain access via a direct hypertext link provided to you by your organization, and/or similarly via a QR code, i.e. making it possible to use the Processor’s services, including receipt of messages (reports) via the form from third persons and their subsequent saving in the application run by the Processor and making them available to the registered organization via the profile or by sending them in the form of an encrypted document.

Information about the voluntary option to provide personal data

Provision of your personal data is completely voluntary, so you are not obliged to provide them to us.

Recipients or categories of recipients of voluntarily provided personal data

If you choose to voluntarily provide us with your personal data in connection with the submission of a notification, although such provision of personal data is entirely voluntary and you are not obliged to do so, we do not intend to pass it on to others. However, for the purpose of processing your notification, the personal data you provide may be further disclosed to the Controller, and, where necessary, other closely cooperating partners (e.g. IT provider, attorney etc.), only to the extent necessary to fulfil the purpose of processing your notification. The prerequisite for such sharing of your personal data is always the conclusion of a data processing agreement with each of our contractual partners which guarantees the highest standard of protection of your personal data.

We may, in very exceptional cases, transfer your personal data to the necessary extent to state authorities (in particular law enforcement authorities, courts and tax authorities), but always in accordance with the law and only if the law imposes such an obligation on us or if it is necessary to protect our legitimate interests. We do not pass on your personal data to third parties and we ensure the highest possible standard of security of your personal data that you voluntarily provide to us, not only in connection with the notification.

Transfer of voluntarily provided personal data abroad

We do not intend to transfer your personal data to any organization outside the European Union or the European Economic Area.

Period of storage of voluntarily provided personal data

We store your voluntarily provided personal data for five (5) years from the date of submission of the report. In exceptional cases, for example in the course of litigation, certain personal data may be stored for a longer period of time in order to protect our legitimate interests.

Automated individual decision-making, including profiling

The processing of your personal data does not involve any decision-making based solely on automated processing, including profiling, which would have legal effects on you or would significantly affect you in a similar way.

Your rights in connection with the processing of your voluntarily provided personal data

In connection with the processing of your voluntarily provided personal data you have the following rights in relation to the Controller:

right to access your personal data and right to get a copy of your personal data;
right to rectification of your personal data;
right to erasure;
right to restriction of processing;
right to data portability;
right to object to the processing based on our legitimate interests or legitimate interests of a third party;
right to lodge a complaint with the competent supervisory authority.

If you wish to receive related information or exercise any right, please contact the Controller – i.e. your organization.

Further information on the processing of personal data is available in the Privacy Policy.

Information on personal data processing in connection with submission of a report