Privacy Policy

Personal Data Processing Policy

This Policy is issued in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the “Regulation” or “GDPR”) for the purpose of ensuring the controller’s information obligation under Article 13 of the GDPR.

The controller of personal data is MITEL a.s., Dobrušská 1797/1, 147 00 Prague, ID No.: 25675036, služby@mitel.cz, +420 326 325 324, http://www.mitel.cz. We use a data protection officer who is available at gdpr@mitel.cz MITEL a.s. takes care to protect the personal data you provide to us. It is important for you to know that we process the personal data you provide to us responsibly, transparently, and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council. You have the right to request information about your personal data, its correction, or deletion, if it is provided on the basis of your consent. In the case of automated processing, you have the right to data portability and not to be subject to a decision based solely on such processing.

Purposes of processing, reasons and periods of processing

We process your personal data only to the extent necessary. We do not require consent for processing for the performance of a contract and compliance with legal obligations, and processing cannot be refused. You may object to processing based on legitimate interests. Customers of services or goods In order to provide you with services, we record your basic identification and contact details and data related to the service or goods provided. Basic identification data: academic title, first name, last name, date of birth, VAT number of a natural person, permanent address, birth number (for electronic communications service contracts)

Additional information about purchased goods: purchased goods
Internet connection – TV service: IP address, MAC address, address (coordinates) of the terminal device
Email account: login details, email contacts, email content
VOIP telephony: telephone number, address of the terminal device
UNIFI: access data, MAC addresses of connected devices
Payment details: bank account, SIPO

We process this data for the purposes of contract performance, compliance with legal obligations (accounting), and legitimate interests (resolution of any legal disputes), and it will be retained for a period of 5 years from the end of the contract or warranty, or for a period of 3 months if the contract is not signed. Contact persons If you are the contact person for our customer or contractual partner, we record your basic contact details for the purpose of performing the contract: academic title, first name, last name, position, email, and telephone number for the duration of the contract. Based on our legitimate interest in debt collection, we process the contact details of persons listed as billing contacts until the debts are paid in full.

Website visitors

We use technology on our website to collect and store information using cookies on your device. Cookies are small text files that we do not send anywhere; you can delete these files from your browser or disable their use entirely. Cookies do not collect any of your personal data, but without them we cannot ensure the full functionality of the website.

Operational and location data

Pursuant to Section 97(3) of Act No. 127/2005 Coll., on Electronic Communications, we are required to store operational and location data generated or processed in the course of providing our public communications network and publicly available electronic communications services, and to disclose such data upon request to the Police, the Security Information Service, Military Intelligence, or the Czech National Bank.

Pursuant to Section 90(3) and (4) of Act No. 127/2005 Coll., on Electronic Communications, we are required to retain service traffic data until the end of the period during which the billing of the price or provision of electronic communications services may be legally challenged by a complaint.

Operational and location data are necessary for the provision of services and to ensure security, i.e., for the performance of the contract.

For these reasons, we process operational and location data for a period of 6 months.

Overview of your rights

Right to information

You have the right to request MITEL a.s. to provide you with information about what personal data we process about you, to what extent, and for what purpose. We will provide you with this information free of charge within 30 days at the latest, or within 90 days in exceptional circumstances. We will inform you in good time if the deadline is extended in exceptional cases. If you request information that we have recorded about you, we will first need to verify that you are indeed the person to whom this information belongs. Therefore, please provide sufficient identification in your request. If necessary, we have the right to request additional information to identify you before we provide you with the personal data we process about you. We then have the right to reasonably refuse or charge for requests for information that are unfounded or unreasonably repetitive, or where obtaining the information would require disproportionate effort or would be difficult to obtain (typically from backup systems, archives, etc.).

Right to data portability

You have the right to obtain the personal data we hold about you in a structured, commonly used, and machine-readable format. Upon your request, this data may be transferred to another controller.

Updating data, right to correction

Since personal data may change over time (e.g., a change of surname), we would appreciate it if you would inform us of any changes so that we can keep your personal data up to date and avoid any mistakes. Providing information about changes to your data is essential for us to properly perform our duties as a controller.

You have the right to correct the personal data we hold about you. If you find that our data is no longer up to date, you have the right to request that it be corrected.

Objections

If you believe that we are not processing your personal data in accordance with applicable Czech and EU legislation, you have the right to object, and we will then verify the legitimacy of your request.

Upon filing an objection, the processing of your personal data will be restricted until it is verified whether the objection is legitimate. We would like to inform you that you also have the right to lodge an objection against the processing of your personal data with the relevant supervisory authority for personal data protection at the following address: Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.

Right to restriction of processing

You have the right to restrict the processing of your personal data if you believe that it is inaccurate, or that we are processing it unlawfully, or if you believe that we no longer need this data for the purposes of its processing.

Right to erasure

If you have ever given us consent to process your personal data (for example, your email address for the purpose of sending you our newsletter), you have the right to revoke this consent at any time, and we are obliged to delete the data that we process solely on the basis of your consent. The right to erasure does not apply to data processed in the context of contractual obligations, legal reasons, or legitimate interests. If some of your data is stored in backup systems that automatically ensure the resilience of all our systems and protect against data loss in the event of a disaster, it is not within our power to delete this data from the backup systems, and it is often not technically feasible. However, this data is not actively processed in any way and will not be used for other processing purposes.

Security of your personal data

MITEL a.s. takes care to protect the personal data you provide to us. We have taken appropriate technical and organizational measures to adequately protect your data, given the seriousness of its processing. No unauthorized person has access to your personal data that we have obtained from you, and we do not transfer it to other entities for further processing without your consent, unless required by law or in order to protect our legal interests.

Transfer of personal data

In fulfilling our contractual obligations and responsibilities, we use the professional and specialized services of other entities. If these suppliers process personal data provided by MITEL a.s., they have the status of personal data processors and process personal data only within the scope of instructions from MITEL a.s., must secure it adequately, and may not use it for any other purpose.

Categories of processors: service subcontractors

Categories of recipients: external technicians

Personal data is not transferred to processors or other recipients in third countries or international organizations.

Where to contact us

To exercise your rights and with questions regarding personal data protection, please contact us at gdpr@mitel.cz or at our company headquarters.

In Prague on January 1, 2021