Information on Personal Data Processing
Syntegrix s.r.o., with its registered office at Rubeška 215/1, 190 00 Prague, Czech Republic (hereinafter “Syntegrix”), processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
Data Controller
Syntegrix s.r.o.
Rubeška 215/1, 190 00 Prague, Czech Republic
E-mail: info@syntegrix.eu
1. Employees and Family Members
| Purpose | Employment contract fulfilment, payroll, tax obligations, workplace safety |
| Legal basis | Art. 6(1)(b) GDPR – contract; Art. 6(1)(c) – legal obligation |
| Data categories | Identification data, contact details, payroll data, health data (if applicable) |
| Retention | Duration of employment + statutory periods (payroll 30 years, tax records 10 years) |
| Recipients | Tax authority, social security, health insurance, payroll processor |
2. Job Applicants
| Purpose | Recruitment and candidate selection |
| Legal basis | Art. 6(1)(b) GDPR – pre-contractual measures; Art. 6(1)(a) – consent for CV retention |
| Data categories | CV, cover letter, contact details, professional experience |
| Retention | Until end of selection process; 3 years with written consent |
| Recipients | Internal HR only |
3. Clients and Business Partners
| Purpose | Contract fulfilment, invoicing, delivery of services, marketing communications |
| Legal basis | Art. 6(1)(b) GDPR – contract; Art. 6(1)(f) – legitimate interest (marketing to existing clients) |
| Data categories | Company and contact details, invoicing data, communication history |
| Retention | Duration of business relationship + 10 years (accounting obligations) |
| Recipients | Accounting office, payment processor |
4. Suppliers
| Purpose | Procurement, contract management, accounting |
| Legal basis | Art. 6(1)(b) GDPR – contract; Art. 6(1)(c) – legal obligation |
| Data categories | Company name, contact persons, banking details, invoices |
| Retention | 10 years from last transaction (accounting obligations) |
| Recipients | Accounting office, tax authority |
5. Website Visitors
| Purpose | Website analytics, contact form handling, cookie consent management |
| Legal basis | Art. 6(1)(a) GDPR – consent (analytics, marketing cookies); Art. 6(1)(f) – legitimate interest (security logs) |
| Data categories | IP address, browser data, pages visited, contact form data (name, e-mail, message) |
| Retention | Consent records: 1 year; analytics: per service provider settings; contact inquiries: 3 years |
| Recipients | Google (Analytics / Tag Manager / reCAPTCHA); no data sold to third parties |
Your Rights
Under GDPR you have the following rights regarding your personal data:
- Right of access (Art. 15) – obtain confirmation and a copy of your data
- Right to rectification (Art. 16) – correct inaccurate or incomplete data
- Right to erasure (Art. 17) – request deletion (“right to be forgotten”)
- Right to restriction of processing (Art. 18) – limit processing in certain cases
- Right to data portability (Art. 20) – receive your data in a structured, machine-readable format
- Right to object (Art. 21) – object to processing based on legitimate interest
- Right to withdraw consent (Art. 7(3)) – at any time, without affecting prior processing
- Right to lodge a complaint – with the supervisory authority (see below)
How to Exercise Your Rights
Submit your request in writing to: info@syntegrix.eu. We will respond within 30 days of receiving your request.
Supervisory Authority
You have the right to lodge a complaint with the supervisory authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27, 170 00 Prague 7
Website: www.uoou.cz
E-mail: posta@uoou.cz