Write to us↗Personal data protection
GDPR.
Information on personal data processing under Articles 13 and 14 of the GDPR.
HOBES / InformationController and contact details
HOBES, spol. s r.o., company ID 45195277, registered office at K luhům 151, 793 12 Horní Benešov, registered with the Regional Court in Ostrava under file C 2933, processes personal data primarily as a controller. Exceptionally, it may also act as a processor. Personal data protection is a priority for the company.
793 12 Horní Benešov
Company ID 45195277 · VAT ID CZ45195277
Data mailbox 3rs5r5hobes@hobes.cz
What data we process
We obtain data directly from the individuals concerned or from public sources. In business relationships this may include first name, surname, title, former surname, job position, place of business or residence, company ID, VAT ID, bank account, telephone, e-mail, data mailbox, place of performance and signature.
Employee data
For personnel, payroll and statutory purposes, the company may request the following data:
- first name, surname, birth and former surnames, title
- date and place of birth, personal identification number and citizenship
- permanent residence and correspondence address
- health insurer, marital status, information about children and dependants
- documents for tax and payroll purposes: blood donation, nursery fees, life and pension insurance, loan interest
- pension information, bank account and identity card numbers
- medical fitness and telephone number
- relatives' contact details for emergencies
- expertise, previous employment, education and language skills
- information about court or criminal proceedings, final convictions, professional bans and wage deductions, where relevant
Legal grounds and purposes
We process personal data mainly to perform a contract and for the controller's legitimate interests under Article 6(1)(b) and (f) GDPR; where applicable, also to fulfil legal obligations. Purposes include contract negotiations, performance and record-keeping, pursuing claims, communication, direct marketing of our own services and products, monitoring satisfaction, improving quality and meeting requirements of state institutions and statistical reporting.
Legitimate interests consist primarily in fulfilling contractual commitments, protecting legal claims and business activities. Site CCTV protects people and property. Payment history records help protect the company's financial interests.
Recipients, storage and retention periods
Data may be transferred to contracted processors and, where necessary, carriers, customs agents or insurers; and to public authorities as required by law. According to the controller, data are not transferred to third countries. They are kept in paper and electronic form and in the company's information systems. There is no automated decision-making or profiling.
For contractual relationships, the usual retention period is the duration of the relationship plus 10 years. If no contract is concluded, data are retained for 24 months after being provided or obtained. Employee data needed for retirement and pension purposes or DIP are archived for up to 30 years. Specific periods for other activities are listed in the table below.
Your rights
Subject to Articles 15 to 20 GDPR, you may request access, rectification, erasure, restriction of processing or portability. Under Article 21, you may object to processing based on legitimate interests. The company will then cease processing unless it demonstrates overriding compelling legitimate grounds or a need to establish, exercise or defend legal claims.
You may object to processing for direct marketing at any time; afterwards, the data will no longer be used for that purpose. For information society services, objections may also be submitted by automated means. Send requests and objections on paper, by signed e-mail or data message to the controller or officer using the contacts above.
If you believe processing infringes the GDPR, you can complain to the Czech Office for Personal Data Protection: Pplk. Sochora 27, 170 00 Praha 7, data mailbox qkbaa2n, consultation line +420 234 665 800.
Overview of processing activities
| Purpose | Legal basis | Data categories | Recipients | Retention period |
|---|---|---|---|---|
| Contract records | Legitimate interest | First name, surname, date of birth, personal identification number, company and VAT IDs of a self-employed individual, business address, permanent and contact addresses, telephone, e-mail, bank account number, signature | External legal representative | 10 years |
| Records of supplier and customer offers | Legitimate interest | First name, surname, telephone, e-mail, business address of an individual, signature | — | 5 years |
| Orders | Contract and legitimate interest | First name, surname, address, telephone, e-mail, VAT ID of a self-employed individual, signature | Melzer, spol. s r. o., company ID 46344021 | 3 years |
| Invoices and handover reports | Contract and legal obligation | First name, surname, e-mail, telephone, business address of an individual, signature | Banking institution to facilitate payment | Under Act No. 563/1991 Coll., on accounting |
| Cash documents | Contract and legal obligation | First name, surname, address | — | 3 years |
| Debt collection | Contract | First name, surname, address, date of birth, personal identification number, VAT ID and business address of an individual, telephone, bank account, e-mail, signature | External legal representative | 10 years |
| Complaints | Contract and legal obligation | First name, surname, address, telephone, e-mail, signature, bank account | — | 5 years |
| Transport and receipt of goods | Contract and legitimate interest | First name, surname, address, e-mail, telephone, signature | Contracted carriers | 5 years |
| Customer payment history | Legitimate interest | Company name, first name, surname, address, company and VAT IDs of a self-employed individual | BISNODE Česká republika a.s., company ID 45806314 | 10 years |
| Information systems, e-mail and backups | Legal obligation, contract and legitimate interest | First name, surname, date of birth, personal identification number, company ID, VAT ID, business address, addresses, telephone, e-mail, bank account, signature | Melzer, spol. s r. o. (company ID 46344021); Česká pošta (data mailbox kr7cdry); external graphic designer; ITS – informační technologie a systémy s.r.o. (company ID 25833987) | 10 years in systems and backups; 1 year for e-mail |
| Online ordering system and e-shop | Contract | First name, surname, VAT ID, address, e-mail, telephone | Melzer, spol. s r. o. (company ID 46344021); 4WORKS Solutions s.r.o. (company ID 02674947) | 5 years |
| Sales representatives' website contacts | Legitimate interest | First name, surname, VAT ID, e-mail, telephone | External graphic designer; WEDOS, a.s. (company ID 28115694) | 5 years |
| Site CCTV system | Legitimate interest | Video recording | — | 14 days |
| Requests from authorities, institutions and insurers | Legal obligation | First name, surname, birth surname, title, date of birth, personal identification number, permanent and correspondence addresses, sex, place of birth, citizenship, nationality and health insurer | Czech Police, district and regional courts, labour inspectorates, employment offices, health insurers, district social security administration, tax authority | 10 to 30 years depending on document type |