Dear clients,

we would like to inform you about the way we handle personal information that we process in the course of our business. We declare that we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council, hereinafter referred to as “GDPR”.

WHO HANDLES PERSONAL DATA?

According to Article 4(7) GDPR, a controller is a natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Desira Studio s.r.o. with registered office at Poupětova 1128/22, Prague, 17000, ID No.: 02009919, file mark C, Municipal Court in Prague. Hereinafter referred to as the “Administrator”.

WHAT DATA DO WE PROCESS?

The Administrator processes personal data on the basis of the legal titles listed below:

Provision of services and cooperation with the Administrator’s clients:

• Name and surname

• Address

• Email address

• Telephone number

• ID NUMBER

Information about the project

In relation to employees:

• Name and surname

• Address

• Email address

• Phone number

• For marketing purposes:

• Name and Surname

• Address

• Email address

• Phone number

HOW DO WE COLLECT PERSONAL DATA?

We obtain personal data on the basis of an enquiry from the client and by establishing cooperation. We do not seek personal data on a targeted basis. In order to comply with GDPR, personal data is collected under one of the legal titles listed below:

• the processing of personal data is necessary to fulfil the terms of the contract that the Administrator has entered into with the client. This applies to all employees of Desira Studio s.r.o. and any subcontractors

• the processing is necessary to fulfil a legal obligation of the Administrator. This applies in particular to the employees of Desira Studio s.r.o. and the legal obligations that Desira Studio s.r.o. has towards them. These purposes include, but are not limited to, payroll and internal communication activities

• processing is only ever carried out where necessary in a legitimate manner, as determined by the legal basis of the State

• processing is based on the explicit consent of the client or subject. Direct consent is only required in cases that do not involve the aforementioned legal titles.

RECIPIENTS OF PERSONAL DATA

The recipients of personal data are the Administrator’s employees and its subcontractors. These entities have access to a secure server with client data. Subcontractors are contractually bound by confidentiality. The server is protected by encryption and the access address is hidden. Only the Administrator and the subcontractors know it. The access itself is password protected. All data is backed up regularly.

All physical materials or other storage devices containing personal data are kept in a locked room.

No personal data is passed on to third parties or other organisations.

RIGHTS OF DATA SUBJECTS

Subjects have the following rights in accordance with Chapter III of the GDPR:

• in the case of processing of personal data on the basis of consent, to withdraw such consent at any time,

• to provide information about the processing of your personal data in accordance with Article 13 and Article 14 of the GDPR,

• to access, rectify and complete the personal data processed,
• to erasure of such data pursuant to Article 17 GDPR or restriction of processing,
• the transfer of your personal data to another controller,
• to object to the processing of personal data, including profiling and decision-making based on automated processing,
• to contact the supervisory authority in the event of a breach of the above or of the data processing principles.

If you wish to claim any of the above rights, please contact the Administrator in a written form at Poupětova 1128/22, Prague, 17000 or by email at studio@studiodesira.cz.

USE OF COOKIES

Desira Studio s.r.o. uses cookies on this website, which are used here to measure website traffic. Cookies for measuring website traffic and customizing the display of the website are processed on the basis of the legitimate interest of the company.

The data obtained by the operator in this way may be made available to other processors, in particular to the operators of Google and Facebook services and platforms.

The website can also be used in a mode that does not allow the collection of data on the behaviour of website visitors.

The cookies collected are processed in particular by Google Analytics, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google’s privacy statement on the processing of personal data is available on the website https://www.google.com/intl/cs/policies/privacy/#nosharing.

Type	Name	Purpose	Expiration
Third party cookies	Google Analytics	Statistical information collection	According to the browser settings or after removal

LIST OF SPECIFIC GOOGLE ANALYTICS COOKIES

Cookie name	Expiration date	Description
_ga	2 years	It’s used to specify users.
_gid	24 hours	It’s used to specify users.
_gat	1 minute	It’s used to meausure demands.
_gac_<property-id>	90 days	It contains information for campaigns settings. If Google Analytics and AdWords accounts are connected, AdWords will measure conversion tags unless you ban them. More info here.