Who is the controller of personal data?
The controller of personal data is the company Hyundai Motor Manufacturing Czech, s.r.o., with its registered office at Průmyslová zóna Nošovice, Hyundai 700/1, 739 51 Nižní Lhoty, company reg. no. 27773035, registered in the Commercial Register maintained by the Regional Court in Ostrava, C 41484 (hereinafter referred to as HMMC).
What is the purpose of personal data processing?
The purpose of processing is:
- in the case of reports covered by the Act on the protection of reporting persons
- receiving and assessing the merits of reports of possible unlawful conduct submitted through HMMC’s internal reporting system under the Act on the protection of reporting persons (Act No 171/2023 Coll.) and the subsequent adoption of measures to remedy or prevent the violation of law;
- in the case of reports not covered by the Act on the protection of reporting persons
- receiving and processing reports of possible illegal or unethical conduct from anyone outside the scope of the Act on the protection of reporting persons
What personal data are processed?
The scope of the processing personal data corresponds to the above-mentioned purposes of its processing. This includes identification data (in particular, name, surname and date of birth or other data from which the identity of the reporting person can be inferred), other data on the reporting person and other persons, if any, contained in the report, information on dates and deadlines related to the receipt and assessment of the report and the outcome of the assessment (processing), a unique identifier of the report used to verify the status of the report and any further communication.
How long will personal data be processed?
The personal data will be stored and processed for a period of 5 years from the date of receipt of the report, after which it will be destroyed (or anonymized), unless there are legal reasons for such storage.
What is the legal basis of personal data processing?
The submission of the report, including the provision of any personal data in the report, is voluntary. However, the processing of personal data contained in the report is not based on your consent, but:
- in the case of reports covered by the Act on the protection of reporting persons, the legal basis is the Act on the protection of reporting persons itself;
- in the case of reports not covered by the Act on the protection of reporting persons, this legal basis is the existence of HMMC’s legitimate interest in preventing and detecting unlawful and unethical conduct.
Is there fully automated decision making process?
Our company processes your data manually and automatically by means of computer technology. However, we do not use automated decision-making that could affect your rights in processing of your data.
Is your personal data safe?
The protection of your data is organized and technically ensured in our company in accordance with the relevant legal regulations. We require a comparable level of security for your data from all of our personal data processors.
Your personal data is under constant physical and electronic control. HMMC has state-of-the-art control, technical and security mechanisms to ensure the maximum possible protection of processed data from unauthorized access or transmission, loss or destruction as well as other possible misuse.
All persons who come into contact with personal data in the course of their work or contractual obligations are bound by a legal or contractual obligation of confidentiality.
HMMC will only transmit personal data to supervisors and other government agencies, if this obligation is provided for by law, or if it is in accordance with the legitimate interests of HMMC.
What are rights of data subject?
In accordance with the relevant legislation, in particular Articles 15 to 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council, General Data Protection Regulation (hereinafter referred to as “GDPR”), you may exercise the following rights of the data subject.
You have the right to access the data we process about you, the portability of the selected data, and the right to request correction of inaccurate or incomplete data.
You have the right to object to the processing of your data in accordance with Article 21 of the GDPR.
You have the right to file a complaint directly with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
You have the right to delete personal data or to limit their processing.