GDPR

LAYER I.

Consent to the processing of personal data in connection with participation in competitions
about the most efficient driver

1. ADMINISTRATOR

The controller of personal data within the meaning of Article 4 (7) of the General Regulation on Personal Data Protection (Regulation No. 2016/679) is Mercedes-Benz Trucks Česká republika sro, registered at the Municipal Court in Prague, Section C, File 281781, Company Identification Number: 06418147, VAT No .: CZ 06418147, with its registered office at Bavorská 2666/16, Stodůlky, 155 00 Prague 5 (hereinafter referred to as the "Administrator").

2. YOUR RIGHTS

In relation to the given processing, you have the right to:

a. WITHDRAWAL OF CONSENT - consent can be revoked at any time via e-mail. mail to e-mail info@for.fleetboard.cz or in writing by letter sent to Fleetboard - Mercedes-Benz Trucks Czech Republic sro, Bavorská 2666/16, Stodůlky, 155 00 Prague 5. Withdrawal of consent will not affect the lawfulness of personal data processing which was carried out before his appeal. Withdrawal of consent will result in termination of participation in the competition.
b. ACCESS - the right to information whether or not your personal data is processed. If personal data are further processed, the right to information about the processing to the prescribed extent and the right to obtain a copy of the processed data under certain conditions;
c. CORRECTION - the right to request a correction if the processed personal data are inaccurate. Where applicable, the right to request completion if the data are incomplete;
d. DELETION (right to be forgotten) - the right to request the deletion of data under the conditions stipulated by legal regulations (revocation of consent, termination of the contract, illegality of processing);
e. RESTRICTIONS ON PROCESSING - the right to request the designation and possible restriction (suspension) of processing until the verification of data accuracy, legality of processing, settlement of objections or for the protection of your interests (exercise or protection or defense of rights and legal interests);
f. COMPLAINT - the right to contact the Office for Personal Data Protection with a complaint against the Administrator, processing or the conditions of exercising rights. Contact and other information about the office see www.uoou.cz;
g. TRANSFERABILITY - the right, under the conditions stipulated by legal regulations, to obtain data for further processing by another person designated by you, to whom you transfer the data, or to request their direct transfer for further processing by another person.

For individual rights, their detailed characteristics, conditions of their origin and exercise, see the relevant reference. See Procedure II of this consent for instructions on how to exercise your rights.

The PERSONAL DATA PROTECTION AUTHOR is not appointed by the Administrator.

3. PURPOSE for which we will process the data

I agree that the Administrator will process my personal data for the purpose of my participation in competitions for the most efficient driver (participation in competitions, evaluation of competitions, announcement of competition results), to which I apply in connection with my employment relationship.

4. SCOPE OF DATA TO BE PROCESSED

I agree that the Administrator will process the following personal data of mine:

identification - name, surname;
contact - name, surname, telephone connection, email;
data from the Fleetboard system on the operation of the vehicle I drive for the period of individual competitions and the period preceding the competitions and is defined in the conditions of each competition - type of controlled vehicle, driver card number, vehicle type, fleet name, data from the Performance Analysis service: final grade, period, difficulty of use,% speed> 85 km / h, mileage, ø Total consumption, ø Driving consumption, distance traveled by service brake, use of parking brake. Data on the employment relationship with the employer (existence of the employment relationship, type of vehicle by which the work is performed).
5. PERIOD for which personal data will be stored and processed

I agree that the Administrator will process my personal data until the validity of my registration in the for.fleetboard.cz system.

I agree that the results of the competition, ie data in the range: name, surname, name of the fleet, data from the Performance Analysis, mileage, be published on the website www.for.fleetboard.cz for a period of 5 years from the date of evaluation of the competition and announcement of its results.

I agree that my application for the competition and my personal data, on the basis of which my participation in the competition was evaluated, will be archived for the same period from the evaluation of the competition and the announcement of the competition results.

6. BENEFICIARIES to whom personal data may be provided

Personal data will be provided to the following recipients (categories of recipients): the results of the competition will be sent to all competitors and entities participating in the organization of the competition (authorized Mercedes-Benz car dealers, competitors' employers). The results of the competition will be published to the extent specified in the overview below. The name and pleasant will be displayed according to the driver's settings, ie in the full range, initials or completely anonymized.

	Public	Driver	Driver(at his colleagues)	Customer	Customer(at his drivers)	Dealer	Dealer (at his customers)	MB Trucks
Position	+	+	+	+	+	+	+	+
Dealer	+	+	+	+	+	+	+	+
First Name, Surname	+	+	+	+	+	+	+	+
Peroid	+	+	+	+	+	+	+	+
Final Grading	+	+	+	+	+	+	+	+
Difficulty	+	+	+	+	+	+	+	+
%speed > 85km/h	+	+	+	+	+	+	+	+
Driven km					+		+	+
ø Consuption					+		+	+
ø Driving consuption					+		+	+
Operation brake distance					+		+	+
Handbrake usage					+		+	+
Fleet			+		+		+	+

7. PLACE where personal data will be processed

The place of processing of personal data will be: The seat of the administrator and a secure multimedia cloud environment, when collecting applications, the place of processing will also be the premises of the employer and the premises of the processor of personal data.

8. THIRD COUNTRIES

As part of the processing, personal data will NOT be transferred outside the EU.

9. PROCESSOR

The processor of personal data may participate in the processing of personal data within the meaning of Article 4 (8) of the General Regulation on the Protection of Personal Data, or a third party authorized by the Administrator to process personal data. In such cases, the Administrator minimizes the risk of unauthorized access, destruction, processing or loss of personal data.

10. ACCURACY OF DATA

I declare that the personal data provided by me together with this consent are accurate in relation to the purpose of processing. I undertake to update my personal data if necessary for the purposes of processing personal data. The update is made by written notice or notification via e-mail. mail to the administrator's address referred to in paragraph 2 (a). a) from above.

11. AUTOMATED DECISION-MAKING AND PROFILING

Automated decision-making means decision-making by technological means or on the basis of the results of the activity of technological means without human interference / free decision-making. Profiling means the use of personal data to evaluate certain personal aspects of a person, such as estimating his work performance, economic situation, health status, personal preferences, interests, reliability, etc. There will be automated decision-making in connection with the processing of personal data. Profiling will NOT take place in connection with the processing of personal data.

LAYER II.

Rights and their application

Article I.

GENERALLY TO APPLY RIGHTS

1. CHANNELS TO APPLY RIGHTS

The rights are exercised under the following conditions:

a. via an e-mail message mail to e-mail address mail: info@for.fleetboard.cz;
b. by written submission to the address: Bavorská 2666/16, Prague 5 - Stodůlky, 155 00; c. in person at the address: Bavorská 2666/16, Prague 5 - Stodůlky, 155 00;

2. IDENTIFICATION AND SECURE COMMUNICATION

The exercise of rights must not prejudice the rights and freedoms of third parties. For this reason, the Administrator has the right and obligation to identify the applicant for the exercise of rights in necessary cases. For these reasons, the Administrator must choose secure and reliable communication. Reliable communication, in which it is not necessary to further verify the identity of the addressee, is always considered to be communication via an e-mail message. post office, which is provided with a verified electronic signature, communication via a data box, communication via a postal service provider, where the document is signed and the actor's signature has been officially verified or the reply is sent into one's own hands.

3. ORAL ENFORCEMENT OF RIGHTS

Exceptionally, if the beneficiary so requests, it is possible to provide information, or enable the exercise of rights orally. About oral provision of information, or. a written record shall be made of the oral exercise of rights by the beneficiary. The condition for the oral exercise of rights, if the person concerned is not personally known, is the verification of his identity by means of an identity card, passport, driving license or other document from which it can be stated that the rights are exercised by the person to whom they belong.

4. APPLICATION IN EL. FORM

If the application is submitted, resp. if the rights are exercised by electronic filing, the reply shall also be sent in electronic form, unless the person concerned has requested otherwise.

5. COSTS

The information provided to the data subjects, the provision of copies to the data subjects, all communications and all acts related to the exercise of the data subject's rights shall be made free of charge.

6. REFUSAL AND FEE

If the request (exercise of the right) of the data subject is manifestly unfounded or disproportionate, in particular because it is an identical or predominantly identical request or a disproportionately large request which cannot be dealt with within the statutory time limit,

a. is conditional on the execution of the application by making an advance payment to cover administrative costs associated with providing the required information or communication or performing the required actions - the advance may be requested up to the amount of anticipated costs, provided that information, communication, etc. is provided to the data subject only after full reimbursement of the costs incurred, or
b. the request is not complied with, resp. the exercise of the right shall be refused in writing with a statement of reasons.

7. DEADLINE FOR SETTLEMENT

Requests from the data subject and responses to the exercise of the data subject's rights shall be dealt with without delay. The answer, containing the required information, or. describing the action taken following the data subject's request, etc., must be delivered to the data subject no later than 30 days from the date of receipt of the request. If, for serious reasons, it is not possible to settle the matter within the set time limit, the data subject shall, in writing or by e-mail no later than the end of this period, notify the post office that the time limit will not be observed and the reasons for it, and notify the time limit within which the matter will be settled; the period may not be extended by more than 60 days.

ARTICLE II.

RIGHT OF ACCESS AND COPY

1. If the data subject so requests, he shall be provided with a confirmation as to whether or not his personal data are being processed.
2. If the personal data of the data subject are processed, information shall be provided to the data subject on:

a. the purposes of the processing and the legal basis / title for the processing of personal data, including a reference to the provisions of the law, and the scope and consequences of the processing;
b. any recipient or category of recipients of the personal data;
c. the transfer of personal data to third countries, if any, including information on appropriate safeguards for the security of the data transferred to the third country;
d. the period for which the personal data will be stored and, if such a period cannot be determined, the criteria for determining the period of storage;
e. the right to request access to personal data concerning the data subject, the right to request their correction or deletion, the right to request processing restrictions, the right to object to the processing of personal data and the conditions for individual rights and their exercise - only information on those rights the exercise of which is relevant in connection with the processing of personal data in question;
f. the right to data portability, the conditions for its creation and the conditions for its exercise - if the exercise of this right comes into consideration with regard to the nature of the processing of personal data;
g. whether automated decision-making takes place and the data subject's rights associated with automated decision-making;
h. sources of personal data and, where applicable, that the personal data come from publicly available sources;
i. the right to lodge a complaint with the Supervisory Authority (Office for Personal Data Protection);
j. whether automated decision-making in the form of profiling takes place and the significance and expected consequences of such processing for the data subject, if implemented.

3. The data subject has the right to request a copy of the personal data processed. The first provision of a copy is free of charge. Additional copies will be charged. Article I (6) also applies here.
4. If the provision of a copy could prejudice the rights and freedoms of third parties (eg the copy contains personal data of third parties for which there is no legal reason for disclosure to the data subject requesting the copy), the copy shall be anonymised accordingly. If anonymisation is not possible, or if the required information would lose its informative value by carrying out the corresponding anonymisation, a copy shall not be provided.

ARTICLE III.

RIGHT OF REPAIR

1. The data subject shall have the right to rectify the personal data processed if the personal data processed are inaccurate with regard to the purpose of the processing or if they are incomplete with regard to the purpose of the processing of personal data. The data subject may request the correction (including supplementation) of the processed personal data or their supplementation.
2. If the data subject exercises the right to rectify the processed personal data, the Controller shall immediately check the processing of personal data against which the right of rectification is exercised.
3. If the Administrator concludes that the objection, even if only partially, is justified, it shall immediately arrange for a remedy, ie the correction of the processed personal data or their supplementation.
4. The data subject shall be notified of the result of the investigation and the measures taken in writing or by e-mail. mail.

ARTICLE IV.

RIGHT TO DELETION

1. The data subject shall have the right to have the personal data relating to him or her deleted from the data controller only:

a. if personal data are not needed for the purposes for which they were collected or otherwise processed;
b. the data subject revokes the consent to the processing of personal data and if there is no other legal basis (title) for the processing of personal data;
c. the data subject has raised a relevant objection to the processing of personal data;
d. personal data have been processed illegally, in particular without a legal basis (title) for the processing of personal data;
e. the deletion of personal data requires the fulfillment of a legal obligation, as it follows from a legal regulation or from a decision issued on the basis of a legal regulation;
f. personal data have been collected in connection with the offer of information society services pursuant to Article 8 (1) of the General Regulation.

2. Deletion of personal data means the physical destruction of the carrier of personal data (eg destruction of documents), or their deletion (from multimedia carriers) or other permanent exclusion from further processing of personal data.
3. If the data subject exercises the right to erasure, the Administrator shall examine the data subject's request. If the data subject's request, even if only partially, is justified, the deletion shall be made to the extent necessary. Article I, paragraph 7 of this part also applies here.
4. Pending the processing of the data subject's request, the personal data against which the right of erasure has been exercised shall be indicated.
5. Personal data may not be deleted if their processing is necessary:

a. for the exercise of the right to freedom of expression and information;
b. to fulfill a legal obligation arising from legislation;
c. for reasons of public interest in the field of public health (Article 9 (2) (h) and (i) and Article 9 (3) of the General Regulation);
d. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, where it is probable that erasure would make it impossible or seriously jeopardize the fulfillment of the purposes of the said processing;
e. determination, exercise and exercise of the Administrator's rights.

ARTICLE V.

RIGHT TO RESTRICTION OF PROCESSING

1. If the data subject exercises the right to restrict processing in relation to the specific processing of personal data, the Controller shall immediately assess the relevance of the data subject's request, primarily in terms of fulfilling the conditions for exercising the right to restrict processing. circumstances and facts relating to the processing of personal data in question.
2. The right to restrict the processing of personal data of the data subject shall belong in the following cases:

a. the data subject denies the accuracy of the personal data;
b. the processing is unlawful and the data subject refuses to delete the personal data and instead calls for restrictions on their use;
c. The controller no longer needs the personal data for processing purposes, but the data subject requests them for the determination, enforcement or defense of legal claims;
d. the data subject has objected to the processing.

3. Personal data subject to processing restrictions shall be identified.
4. Where processing has been restricted, such personal data, with the exception of their storage, may be processed only with the consent of the data subject or for the purpose of determining, enforcing or defending legal claims, for the protection of the rights of another natural or legal person. of interest.
5. Prior to the lifting of the restriction on the processing of personal data, the data subject shall be notified of the cancellation of the restriction in writing or by an e-mail. mail. The communication shall state the moment when the restriction on the processing of personal data will be lifted and the reason for which it will be lifted.

ARTICLE VI.

RIGHT TO TRANSFERABILITY

1. Where personal data obtained from a data subject (either data transmitted directly by him or data obtained from his activity, etc.) relating to that data subject are subject to the processing of personal data, the data subject shall have the right to the portability of such data if: processing is based on the consent of the data subject concerned or is processing based on a contract with the data subject and carried out automatically. The right to portability does not include data and information created by the Administrator on the basis of data obtained from the data subject (eg profiling of the data subject's expected consumer behavior on the basis of data obtained from the data subject, etc.).
2. Under the right to portability, the data subject may request:

a. the transfer of personal data subject to a transferability in a structured, commonly used and machine-readable format, in particular a format that requires special paid licenses or a format that excludes further editing or other disposition (processing) of personal data ( eg * .pdf), to the data subject;
b. the transfer of personal data subject to a transferability in a structured, commonly used and machine-readable format, in particular a format requiring special paid licenses or a format excluding further editing or other disposition (processing) of personal data ( eg * .pdf), to another personal data controller, which the data subject shall indicate in the request for the transfer of personal data.

3. The data subject's request (inter alia (Article I, paragraph 6) shall not be complied with if complying with the data subject's request would prejudice the rights and freedoms of other persons (data subjects).
4. Requests concerning the portability of the data referred to in paragraph 2 (a) (b) shall also not be complied with unless the transfer is technically feasible, and a transfer which is not adequately safeguarded in view of the available technological possibilities, proportionate to the nature of the data transferred and the risks involved, shall be considered technically impracticable.
5. The transferred personal data shall be accompanied by information on the purpose of the processing of personal data and, if the data subject so requests, information on the processing of personal data within the scope of Article 13 of the General Regulation on Personal Data Protection.

ARTICLE VII.

AUTOMATED INDIVIDUAL DECISION - MAKING, INCLUDING PROFILING

1. A decision vis-à-vis the data subject, legal action against the data subject or any other measure or procedure which has the effect of adversely affecting the data subject or would otherwise affect him or her in a similar manner (eg searching for jobseekers without human participation and reviewing negative decisions of the electronic system), it is not possible to rely on an automated individual decision, including profiling, unless the decision is

a. necessary for the conclusion or performance of the contract between the data subject and the data controller;
b. be permitted by law providing for appropriate measures to ensure the protection of the rights and freedoms and legitimate interests of the data subject; or
c. based on the explicit consent of the data subject.

2. In the cases referred to in paragraph 1 (a), (a) and (c) The controller shall ensure that appropriate measures are taken to ensure that the rights and freedoms and legitimate interests of the data subject are protected from the negative consequences of automated individual decision-making. Such measures shall include, as a minimum, ensuring that the data subject has the opportunity to express his or her views and adverse review of the decision by the Data Protection Supervisor before implementing the act and adversely affecting, for example, regular review of the automated decision system and setting its operating conditions to unjustified adverse interference with the rights and freedoms of the data subject were excluded, resp. to his legitimate interests.
3. If the subject of processing is sensitive data, resp. if individual decisions within the meaning of paragraph 1 are to be based on sensitive data, paragraph 2 may be followed only if sufficient guarantees within the meaning of paragraph 2 of this Article are provided and provided that the legal reason for processing personal data is the explicit consent of the data subject within the meaning of Article 9 (2) (a); a) of the General Regulation, or it is processing necessary for reasons of overriding public interest under the law, proportionate to the objective pursued, respect the essence of the right to data protection and provide appropriate and specific guarantees for the protection of the fundamental rights and interests of the data subject.

ARTICLE VIII.

RIGHT TO OBJECT

1. Where the legal basis for the processing of personal data is the legal title referred to in Article 6 (1) (a), (e) a general regulation (performance of a task carried out in the public interest or in the exercise of official authority vested in the administrator) or a legal title as referred to in Article 6 (1) (a). f) of the General Regulation (processing necessary for the protection of the rights and legally protected interests of the controller), the data subject has the right to object to the processing of personal data in question.
2. Where personal data are processed for the purposes of direct marketing, the data subject shall have the right at any time to object to the processing of personal data concerning him or her for that marketing purposes, including profiling as far as such direct marketing is concerned. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
3. If the data subject exercises the right to object, the Administrator shall examine the objection without delay.
4. Pending the settlement of the data subject's objection, the personal data concerned, resp. personal data processing.
5. Personal data against which a legitimate objection has been raised may not be further processed unless:

a. there are serious legitimate reasons for further processing which outweigh the interests or rights and freedoms of the data subject, or
b. further processing was necessary to determine, exercise or defend / defend the rights of the Administrator.