Unicorn Business Systems a.s.

The company Unicorn Business Systems a.s., company ID: 219 40 321, registered office at V kapslovně 2767/2, Žižkov, 130 00 Praha 3 (hereinafter “the Company”), as a Data Controller within the sense of Article 4 (7) of ​Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), adopts the following Privacy Policy. ​

We would like to hereby inform you about the processing of personal data, our security measures in connection with the products and services we offer and provide, and the processing that takes place in connection with your visit to this website, as well as about any further processing of your personal data.

The purpose of this Privacy Policy is to provide you with information about what personal data we collect, how we handle it, from what sources we obtain it, for what purposes we use it, to whom we disclose it, and how you can learn which of your personal data we process. This Privacy Policy also applies to partner companies and companies interconnected with the Company, i.e. companies directly or indirectly controlled by the Company or by the same controlling entity as the Company in the sense of sec. 74 and foll. of Act No. 90/2012, to regulate business corporations and cooperatives (the Business Corporations Act), as well as to their websites, services, applications and products. This Privacy Policy also aims to explain how we ensure the security and confidentiality of your personal data.

This Privacy Policy came into effect on ​20 August 2024. Please be aware of the fact that this document may be updated and is thus subject to change.  ​

 ​

Principles of personal data protection

We want you to know that we handle your personal data with due care and in accordance with the applicable laws. Your personal data is protected to the greatest extent possible.

• Lawfulness and transparency
  We process personal data in a transparent manner, based on legal grounds, particularly based on a statutory duty, for the purposes of fulfilling contractual obligations, on the grounds of our legitimate interest, or based on your express consent.
• Integrity of data and a restriction on use
  We use your personal data exclusively for the purposes specified at the time of collection, or for other related purposes in accordance with the law. We strive to ensure that your personal data is accurate, complete, and up to date.
• Minimisation of personal data ​
  We only collect personal data which is relevant for the purposes for which it is processed. ​
• Access to personal data
  You can approach us at any time to check or complete the personal data you provided to us, or to have it deleted. ​
• Personal data security
  We process your personal data in such a way as to prevent any unauthorised or accidental access to the personal data, its alteration, destruction or loss, unlawful transfers and/or processing, as well as other abuse or misuse of personal data. We implement protection mechanisms and control procedures to secure data in our own applications, and, at the same time, we offer products and solutions which guarantee a high level of data security.

 ​

What personal data do we process?

• Identification and contact information: ​academic degree, first name, last name, date of birth, contact information (mailing address), place of business, business ID number, tax ID number;
• Electronic contact details: ​mobile phone number, e-mail address;
• Other electronic information: ​web page from which a visitor accessed the Company’s website, anonymised IP address, date and time of access,  HTTP response code, data transmitted, browser information, country and town of access, Internet provider, device type, screen resolution, and operating system of the computer of a visitor to the website;
• Additional information required to fulfil the contract: ​bank account details;
• Other personal data from webforms: ​job title, company, industry, area of interest, country, and other information obtained from questionnaires and/or feedback forms;
• Other personal data provided by our clients: ​based on contracts, addenda, or other documents entered into for the purpose of providing our products and services.

 ​

The mode of processing your personal data

Your personal data is processed by our own employees or, where applicable, by third parties with whom we always have a written data processing agreement in place. These agreements ensure that your personal data is processed securely and in compliance with the applicable laws. Authorised persons process your personal data in accordance with internal guidelines; they undergo training on data protection, and we implement numerous other technical and organisational measures to ensure the highest possible level of data security. We always make sure that all persons who process personal data have signed a non-disclosure agreement with us, in which they undertake to maintain confidentiality regarding information obtained in connection with the processing of personal data. ​

 ​

For what purposes do we process your personal data? ​

• Compliance with legal obligations
  In certain cases, we are required to process personal data pursuant to legal regulations. We are also required to retain your personal data for the purpose of inspections by public administration bodies or other regulatory authorities of the Czech Republic, the European Union, and, where applicable, other Member States.
• Fulfilment of contractual obligations
  We also process personal data for the purposes of fulfilling the contractual obligations of both contracting parties, specifically for the purposes of ensuring that the contract be properly concluded and performed.
• Legitimate interest
  In some cases, we process your personal data based on a legitimate interest, particularly for security and administrative reasons. We process the data in said manner only if your rights do not override our legitimate interest. To ensure we may process the data based on our legitimate interest, we always conduct a balancing test to determine whether we are authorised to do so. Legitimate interests primarily include administrative purposes, protection of health, and protection of property.
• Based on your consent to the processing of personal data for specified purposes
  If you have consented to the processing of personal data, we may send you newsletters, informational messages, offers, invitations to events, seminars, conferences, etc. Consent to such processing of personal data is entirely voluntary and may be revoked at any time, either by sending a written notice of revocation to the Company’s registered office Unicorn Business Systems a.s., company ID: 219 40 321, registered office at V kapslovně 2767/2, Žižkov, 130 00 Praha 3, or via email: info@unicorn.com. The consent you have granted can also be withdrawn by clicking the “Unsubscribe” icon/link in the newsletter or promotional message you receive. The Company is not allowed to send you any promotional messages without your consent.

The personal data you provide is processed for a period consistent with the purpose of the processing. We will retain your personal data for a period which is necessary for the provision of our services, for legitimate and necessary business purposes, such as making business decisions, for compliance with our legal obligations, and/or for dispute resolution.

 ​

Processing personal data on websites ​

Below you can learn about the rules of processing of your personal data on the websites.

Cookies policy

 ​

To whom do we provide your personal data?

For the attainment of the purposes listed above, your personal data can be provided, in particular, to the following processors:  ​

• Plus4U Net a.s. – for the purpose of providing cloud storage services; ​
• VIG Production s.r.o. – for the purpose of organising various events (e.g. Christmas concerts, seminars, conferences, etc.);
• Plus4U Base s.r.o. – for the purpose of sending e-mails; ​
• Marketing Zone s.r.o. – for the purpose of providing services in the field of e-mailing.

We always have a personal data processing agreement in place with these processors, which includes the same safeguards for the processing of personal data as those applied in the Company.

 ​

What rights do you have?

Right of access to personal data: If in doubt regarding what personal data we actually process about you, please do not hesitate to contact us.

You have the right to know what exact information we have about you, namely:

• for what purposes we process your personal data; ​
• the scope of the personal data; ​
• the period of time for which your personal data is processed; ​
• the sources of your personal data, unless we obtained it directly from you; and ​
• whether automated decision-making, including profiling, takes place. ​

This information will usually be provided to you electronically.

Right to rectification: You have the right to have inaccurate personal data about you corrected by the Company without undue delay, and to have any incomplete personal data completed (also by way of providing a supplementary statement). ​

Right to erasure (“to be forgotten”): You have the right to request deletion of your personal data on one of the following grounds: ​

• the personal data is no longer necessary for the purpose for which it was collected or processed;
• withdrawal of consent, where the personal data is processed based on consent, and where there is no other legal ground for its processing;
• raising an objection to processing on the grounds of a data controller’s legitimate interest;
• personal data has been processed unlawfully;
• missing parental consent to the processing of children’s personal data; ​
• a statutory duty imposed by EU legislation or by a Member State. ​

Right to restrict processing: You have the right to request that we limit the processing of personal data if you believe that your personal data is being processed in contravention of the law or your private and personal life. We will immediately assess the situation based on your request and will take one of the following steps no later than within one month:  we will either restrict the processing, or we will reject the request, or we will extend the time limit to deal with your request should it be complex. In any case, we will notify you within one month of receiving your request regarding the outcome of our assessment and the measures we have taken.

Right to data portability: You have the right to receive your personal data from us in a structured, commonly used, and machine-readable format, or you have the right to have us transfer your personal data to another controller of your choice.

Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that either concern you or affect you significantly in any other similar way.  ​

Right to withdraw consent: Where consent is a legal ground for processing personal data, you have the right to withdraw the consent you have granted at any time.

Right to file a complaint: You have the right to file a complaint with a supervisory authority (Office for the Protection of Personal Data, address: Pplk. Sochora 27, 170 00 Praha 7) if you believe that the Company is processing personal data in contravention of the GDPR.

Right to be informed ​about reasonable security safeguards related to the transfer of personal data to third countries (outside the EU) or to international organisations.

Right to receive a copy of any personal data being processed, including in an electronic form. ​

Right to be informed about a data breach which is likely to pose a significant risk to your rights and freedoms.  ​ ​

Right to object to the processing of your personal data where the processing is based on legitimate interests. ​ ​

 ​

Contacts

If you have any questions regarding this Privacy Policy or the collecting and processing of your personal data, please use the following email: info@unicorn.com. ​The Company has established within the group the position of Data Protection Officer, whom data subjects may contact with their questions, suggestions, or to exercise their rights; data subjects can do so via the following email address: dpo@unicorn.com.