What is the purpose of processing personal data?
The purpose of the processing of personal data is Whistleblowing – to allow anyone, in particular employees, HMMC representatives and business partners, to submit via telephone, in writing, online or personally confidential, and if so, the notifying person also prefers anonymous notifications of infringements from different areas of law (complaints) and allowing HMMC to take appropriate action in response to the complaints received.
What data will we process about you?
The extent of processing of personal data corresponds to the above purpose of processing. These are: Address and identification data, descriptive data in the scope of the reported conduct, data on another person possibly contained in the complaint, information on data related to the receipt and processing of the complaint and a unique complaint identifier.
How long will your data be stored with us?
Personal data will be stored and processed for up to 3 years after the complaint has been handled and then destroyed (possibly anonymised) unless there are legal grounds for such storage.
Are you obliged to provide us with the information?
The submission of the complaint may also be made anonymously, i.e. without the need to provide personal data. The submission of a complaint, including the provision of any personal data within the complaint, is voluntary. However, the processing of personal data for the purpose of whistleblowing is not based on your consent, but on the existence of a legitimate interest of HMMC in preventing and detecting infringements.
Is there fully automated decision making?
Our company processes your data manually and automatically by means of computer technology. However, we do not use automated decision-making that could affect your rights in processing of your data.
Is your personal information safe?
The protection of your data is organized and technically ensured in our company in accordance with the relevant legal regulations. We require a comparable level of security for your data from all of our personal data processors.
Your personal data is under constant physical and electronic control. HMMC has state-of-the-art control, technical and security mechanisms to ensure the maximum possible protection of processed data from unauthorized access or transmission, loss or destruction as well as other possible misuse.
All persons who come into contact with personal data in the course of their work or contractual obligations are bound by a legal or contractual obligation of confidentiality.
HMMC will only pass on personal data to supervisors and other government agencies, if this obligation is provided for by law, or if it is in accordance with the legitimate interests of HMMC.
What rights do you have?
In accordance with the relevant legislation, in particular Articles 15 to 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council, General Data Protection Regulation (hereinafter referred to as “GDPR”), you may exercise the following rights of the data subject.
You have the right to access the data we process about you, the portability of the selected data, and the right to request correction of inaccurate or incomplete data.
You have the right to object to the processing of your data in accordance with Article 21 of the GDPR.
You have the right to file a complaint directly with the
Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
You have the right to delete personal data or to limit their processing.