Information on the Processing of Personal Data Bhutan - Honorary Consulate of the Kingdom of Bhutan

FOR CLIENTS AND SUPPLIERS

With this document, we provide you with information about your rights related to the processing of your personal data by Bhutan - Honorary Consulate of the Kingdom of Bhutan, Radimova 2462/10, 169 00 Prague 6 - Břevnov.

We recommend that you carefully read this information. We have made every effort to make it as understandable as possible. If there is anything that is still unclear to you, we will be happy to explain any term or passage to you.

1.  Who is the controller of your personal data?
The controller of personal data, meaning the person who determines the purposes and means of processing your personal data, is:
Bhutan - Honorary Consulate of the Kingdom of Bhutan
Radimova 2462/10
169 00 Prague 6 - Břevnov

+420 602 146 844
jhubacekv@volny.cz

(hereinafter referred to as the „Controller“)

2. How and why are your personal data processed?
In the processing of personal data, we comply with relevant legal regulations, particularly the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or „GDPR“) and related legal regulations.

The processing of your personal data is carried out to ensure the fulfillment of both our and your rights and obligations in connection with the legal relationship that exists between us.

All of your personal data is processed based on:

• A contract or agreement we have entered into with you (not necessarily in written form) for the purpose of fulfilling our obligations arising from such a contract or agreement;
• Applicable legal regulations (e.g., in the field of taxation) for the purpose of fulfilling legal obligations imposed on us;
• Our legitimate interest, such as improving our services.

We process your personal data for the duration of our contractual relationship. After its termination, we retain only those of your personal data that are necessary for the enforcement of our rights and the fulfillment of our obligations or as required by legal regulations, for the period specified therein.

In the processing of your personal data, there is no automated decision-making or profiling.

Personal data is processed both manually and automatically directly through our employees or external processors (see point 5 below). Data protection is technically and organizationally ensured in accordance with applicable legal regulations.

3.  Which of your personal data do we process?
If you have entered into a contract with us, not only in written form, your personal data is processed to the extent as follows:

• Data that are essential for the concluded contract and any personal data without which it would not be possible to fulfill our obligations arising from the subject of the contract:

• Name and surname

• Handwritten signature

• Permanent address, business location, contact address (store address), billing address

• Business ID (IČO)

• Email address

• Mobile phone number

If you have submitted an inquiry to us, your personal data is processed to the extent as follows:

• Name and surname
• Email address
• Phone number

4. How do we protect your personal data?

You can rest assured that we handle your personal data with due care and in accordance with applicable legal regulations. We protect your personal data to the maximum extent possible, considering the technical level of available means and the nature of personal data processing by the Controller. The Controller adheres to strict rules specifying which employee or department may access your personal data and which personal data they may process, as further detailed in the Controller´s internal regulations. In the event of transferring your personal data outside the Controller´s organization, we have ensured an appropriate level of security in accordance with relevant legal regulations.

5. To whom else do we disclose your personal data and why?
We generally do not disclose your personal data to third parties outside the Controller, except in cases when:

• We have your consent,
• It is required by law or by authorities conducting criminal proceedings,
• Our legitimate interest justifies it for operational and related purposes, and external processors assist us in this regard.

We do not transfer your personal data to countries outside the European Union.

6. What are your rights regarding your personal data?
In relation to your personal data that we process, you have the following rights that you can exercise against us as the controller:

• The right to obtain confirmation of whether or not your personal data is being processed and the right to access the personal data concerning you that we process.
• The right to rectify or complete your personal data if it is inaccurate or incomplete.
• The right to erasure or restriction of processing of your personal data, if the conditions set forth in legal regulations are met.
• The right to object to the processing of personal data concerning you.
• The right to data portability to another controller.

If we process some of your personal data based on your consent, you have the right to withdraw your consent to the processing of such personal data at any time.

You can exercise all your rights by submitting a written request to the Controller at the contact address: Bhutan - Honorary Consulate of the Kingdom of Bhutan, Radimova 2462/10, 169 00 Prague 6 - Břevnov.

If you believe that the processing of your personal data is in violation of legal regulations, you have the right to lodge a complaint with the supervisory authority, which is: