Moravio
Legal

Personal data protection (GDPR)

Information on the processing of personal data by Moravio s.r.o. and Moravio Online Marketing s.r.o. Issued in Ostrava on 15 May 2018; last updated on 19 October 2026.

I. General information

  1. This information is intended for all natural persons who transfer their personal data (hereinafter "Personal Data") for processing and storage to Moravio s.r.o., with its registered office at Kukučínova 799/10, Hulváky, 709 00 Ostrava, Company ID 29265266, registered in the Commercial Register kept by the Regional Court in Ostrava, section C, file 56452, or to Moravio Online Marketing s.r.o., with its registered office at Kukučínova 799/10, Hulváky, 709 00 Ostrava, Company ID 05969018, registered in the Commercial Register kept by the Regional Court in Ostrava, section C, file 70106 (Moravio s.r.o. and Moravio Online Marketing s.r.o. hereinafter jointly the "Company"), as the controller of personal data.
  2. The information is provided in particular to:
    • persons in an employment or similar relationship with the Company
      • Section A + common provisions on the protection of personal data
    • job seekers or applicants for a similar relationship with the Company
      • Section B + common provisions on the protection of personal data
    • clients of the Company
      • Section C + common provisions on the protection of personal data
    • suppliers and contractors of the Company participating in projects as subcontractors, and subcontractors of investors (i.e. clients of the Company)
      • Section D + common provisions on the protection of personal data
    • the Company's contractual partners (in particular legal advisers and representatives, financial and tax advisers, accountants, landlords and tenants, etc.)
      • Section E + common provisions on the protection of personal data
    • persons who book a meeting with the Company through its website
      • Section F + common provisions on the protection of personal data
  3. The Company requests Personal Data, stores, processes and transfers them to third parties, and protects them, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "GDPR").

II. Information on the processing of personal data by the Company

Section A — Processing of personal data of employees and persons in a similar relationship

  1. For the purposes of this section, the personal data subject means employees of the Company or persons with whom an agreement on work activity or an agreement to perform work has been concluded (under the relevant provisions of Act No. 262/2006 Coll., the Labour Code).
  2. The Company requests, stores and processes only Personal Data that are necessary for the proper performance of its activities. The provision of Personal Data is required because they are necessary for the fulfilment of obligations under the contract or agreement, or because their provision is required by law. Failure to provide them may result in the contract or agreement not being concluded.
  3. The Company stores and processes Personal Data only for the purposes listed below and on the basis of the stated legal titles:
    • fulfilment of the employer's obligations arising from the concluded employment contract or agreement (legal title: fulfilment of obligations under the contract pursuant to Article 6(1)(b) of the GDPR)
    • fulfilment of the Company's legal obligations as an employer towards administrative authorities, especially within the framework of labour law, tax regulations and sickness and social security regulations (legal title: fulfilment of the legal obligation of the personal data controller pursuant to Article 6(1)(c) of the GDPR)
  4. If the Company uses the Personal Data for a purpose other than the one set out in paragraph 3, it shall without delay inform the personal data subject of this other purpose and provide other necessary information, or request the personal data subject's prior consent to such use, unless the use is based on another legal title of the Company as the controller of personal data.
  5. The Company will provide Personal Data to the following third parties:
    • external accounting companies
    • administrative authorities in the performance of the Company's legal obligations as an employer
    • an external law firm (when resolving legal matters in which the provision of Personal Data is necessary, and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company, or who are its business partners
    • clients, suppliers and contractors of the Company (where the communication of Personal Data is in the legitimate interest of the Company, and to the extent necessary for the given matter, i.e. typically the name, surname and telephone or e-mail contact of the personal data subject)
  6. Personal Data will not be provided to third parties outside the EU and the EEA.
  7. No automated decision-making or profiling takes place on the basis of the processed Personal Data.
  8. The Company will process Personal Data for the duration of the contractual relationship and then for the time necessary to fulfil the Company's archiving obligations under the applicable legal regulations.
  9. The rights of personal data subjects and the ways to exercise them are set out in Article III of this document.

Section B — Processing of personal data of job seekers

  1. Personal data subject. For the purposes of this section, the personal data subject means any applicant for employment or a similar relationship (an agreement on work activity or an agreement to perform work), regardless of whether an employment contract or an agreement is concluded with the applicant.
  2. The Company requests, stores and processes only Personal Data that are necessary for the proper performance of its activities.
  3. The Company stores and processes Personal Data only for the following purposes and on the basis of the following legal titles:
    • the legitimate interest of the Company as an employer — for record-keeping purposes and the possibility to contact applicants for employment or a similar relationship (legal title: fulfilment of obligations under the contract pursuant to Article 6(1)(b) of the GDPR)
  4. If the Company uses the Personal Data for a purpose other than the one set out in paragraph 3, it shall without delay inform the personal data subject of this other purpose and provide other necessary information, or request the personal data subject's prior consent to such use, unless the use is based on another legal title of the Company as the controller of personal data.
  5. Personal Data will not be provided to any third parties.
  6. No automated decision-making or profiling takes place on the basis of the processed Personal Data.
  7. The Company will process Personal Data for the duration of the selection procedure. With the express written consent of the personal data subject, these Personal Data (in particular the name, surname and telephone and e-mail contact) may be kept for a maximum of 2 years from the end of the selection procedure, in order to contact the subject when a position becomes vacant.
  8. The rights of personal data subjects and the ways to exercise them are set out in Article III of this document.

Section C — Processing of personal data of the Company's clients

  1. For the purposes of this section, the personal data subject means the Company's clients, i.e. natural persons concluding a contract for work with the Company for the preparation of project documentation and/or related activities (author's supervision, engineering activities, etc.).
  2. The Company requests, stores and processes only Personal Data that are necessary for the proper performance of its activities. The provision of Personal Data is required because they are necessary for the fulfilment of obligations under the contract, or because their provision is required by law. Failure to provide the data may result in the contract not being concluded.
  3. The Company stores and processes Personal Data only for the following purposes and on the basis of the following legal titles:
    • fulfilment of the Company's obligations as a contractor or agent arising from the concluded contract (legal title: fulfilment of obligations under the contract pursuant to Article 6(1)(b) of the GDPR)
    • fulfilment of the Company's legal obligations towards administrative authorities, especially within the framework of tax regulations (legal title: fulfilment of the legal obligation of the personal data controller pursuant to Article 6(1)(c) of the GDPR)
  4. If the Company uses the Personal Data for a purpose other than the one set out in paragraph 3, it shall without delay inform the personal data subject of this other purpose and provide other necessary information, or request the personal data subject's prior consent to such use, unless the use is based on another legal title of the Company as the controller of personal data.
  5. The Company will provide Personal Data to the following third parties:
    • external accounting companies
    • administrative authorities within the framework of fulfilling the Company's legal obligations as a tax entity (in the case of an inspection by these authorities)
    • an external law firm (when resolving legal matters in which the provision of Personal Data is necessary, and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company, or who are its business partners
    • suppliers and contractors of the Company (where the communication of Personal Data is in the legitimate interest of the Company, and to the extent necessary for the given matter and the performance of the contract, i.e. typically the name, surname and telephone or e-mail contact of the personal data subject)
  6. Personal Data will not be provided to third parties outside the EU and the EEA.
  7. No automated decision-making or profiling takes place on the basis of the processed Personal Data.
  8. The Company will process Personal Data for the duration of the contractual relationship, for the warranty period and then for the time necessary to fulfil the Company's archiving obligations under the applicable legal regulations.
  9. The rights of personal data subjects and the ways to exercise them are set out in Article III of this document.

Section D — Processing of personal data of the Company's suppliers and contractors

  1. For the purposes of this section, the personal data subject means the suppliers or contractors of the Company, i.e. natural persons concluding a contract for work with the Company for the preparation of part of the project documentation and/or partial performances related to the Company's contract as a general contractor.
  2. The Company requests, stores and processes only Personal Data that are necessary for the proper performance of its activities. The provision of Personal Data is required because they are necessary for the fulfilment of obligations under the contract, or because their provision is required by law. Failure to provide the data may result in the contract not being concluded.
  3. The Company stores and processes Personal Data only for the following purposes and on the basis of the following legal titles:
    • fulfilment of the Company's obligations as a contractor or agent arising from the concluded contract (legal title: fulfilment of obligations under the contract pursuant to Article 6(1)(b) of the GDPR)
    • fulfilment of the Company's legal obligations towards administrative authorities, especially within the framework of tax regulations (legal title: fulfilment of the legal obligation of the personal data controller pursuant to Article 6(1)(c) of the GDPR)
  4. If the Company uses the Personal Data for a purpose other than the one set out in paragraph 3, it shall without delay inform the personal data subject of this other purpose and provide other necessary information, or request the personal data subject's prior consent to such use, unless the use is based on another legal title of the Company as the controller of personal data.
  5. The Company will provide Personal Data to the following third parties:
    • external accounting companies
    • administrative authorities within the framework of fulfilling the Company's legal obligations as a tax entity (in the case of an inspection by these authorities)
    • an external law firm (when resolving legal matters in which the provision of Personal Data is necessary, and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company, or who are its business partners
    • clients of the Company (where the communication of Personal Data is in the legitimate interest of the Company, and to the extent necessary for the given matter and the performance of the contract, i.e. typically the name, surname and telephone or e-mail contact of the personal data subject)
  6. Personal Data will not be provided to third parties outside the EU and the EEA.
  7. No automated decision-making or profiling takes place on the basis of the processed Personal Data.
  8. The Company will process Personal Data for the duration of the contractual relationship, for the warranty period and then for the time necessary to fulfil the Company's archiving obligations under the applicable legal regulations.
  9. The rights of personal data subjects and the ways to exercise them are set out in Article III of this document.

Section E — Processing of personal data of the Company's contractual partners

  1. For the purposes of this section, the personal data subject means a natural person concluding a contract with the Company which is not directly related to the Company's business but which establishes a legal relationship between the personal data subject and the Company requiring the storage and processing of Personal Data.
  2. The Company requests, stores and processes only Personal Data that are necessary for the proper performance of its activities. The provision of Personal Data is required because they are necessary for the fulfilment of obligations under the contract, or because their provision is required by law. Failure to provide the data may result in the contract not being concluded.
  3. The Company stores and processes Personal Data only for the following purposes and on the basis of the following legal titles:
    • fulfilment of the Company's obligations as a contractor or agent arising from the concluded contract (legal title: fulfilment of obligations under the contract pursuant to Article 6(1)(b) of the GDPR)
    • fulfilment of the Company's legal obligations towards administrative authorities, especially within the framework of tax regulations (legal title: fulfilment of the legal obligation of the personal data controller pursuant to Article 6(1)(c) of the GDPR)
  4. If the Company uses the Personal Data for a purpose other than the one set out in paragraph 3, it shall without delay inform the personal data subject of this other purpose and provide other necessary information, or request the personal data subject's prior consent to such use, unless the use is based on another legal title of the Company as the controller of personal data.
  5. The Company will provide Personal Data to the following third parties:
    • external accounting companies
    • administrative authorities within the framework of fulfilling the Company's legal obligations as a tax entity (in the case of an inspection by these authorities)
    • an external law firm (when resolving legal matters in which the provision of Personal Data is necessary, and only to the extent necessary for the matter)
    • persons providing server, web, cloud or IT services to the Company, or who are its business partners
  6. Personal Data will not be provided to third parties outside the EU and the EEA.
  7. No automated decision-making or profiling takes place on the basis of the processed Personal Data.
  8. The Company will process Personal Data for the duration of the contractual relationship and then for the time necessary to fulfil the Company's archiving obligations under the applicable legal regulations.
  9. The rights of personal data subjects and the ways to exercise them are set out in Article III of this document.

Section F — Meetings booked through the Company's website

  1. For the purposes of this section, the personal data subject means a natural person who books a meeting with the Company through the booking page on the Company's website (www.moravio.com).
  2. The Company uses the following processor for this purpose:
    • Calendly, Inc. — purpose: scheduling meetings booked through our website; data: name, e-mail, the chosen time and the answers given in the booking form; location: USA — the transfer of Personal Data to the USA takes place on the basis of the European Commission's standard contractual clauses or the EU–US Data Privacy Framework, where applicable.
  3. The rights of personal data subjects and the ways to exercise them are set out in Article III of this document.

III. Protection of personal data

  1. The Company processes Personal Data and ensures their protection in accordance with its adopted internal directive, which is based on the GDPR and related regulations.
  2. Under the rules on the protection of personal data, each personal data subject has the following rights:
    • Right of access to Personal Data held by the Company
      • The personal data subject may at any time request confirmation from the Company as to whether or not Personal Data concerning him or her are processed and, if so, for what purposes, to what extent, to whom they are made available, for how long they will be processed, whether he or she has the right to rectification, erasure, restriction of processing or to object, where the Personal Data were obtained, and whether automated processing, including possible profiling, takes place on the basis of the processing of Personal Data.
      • The right to obtain a copy of all Personal Data; the first copy is free of charge, and the Company may require a reasonable fee covering administrative costs for further copies.
    • Right to rectification of Personal Data
      • The personal data subject may request the Company to correct or complete the Personal Data if they are inaccurate or incomplete.
    • Right to erasure of Personal Data
      • The Company must erase Personal Data if (i) they are no longer needed for the purposes for which they were collected or otherwise processed, (ii) consent has been withdrawn and there is no other reason for the processing, (iii) an objection to the processing has been raised and there are no overriding legitimate reasons for the processing, (iv) the processing is unlawful, or (v) erasure is a legal obligation.
    • Right to restriction of the processing of Personal Data
      • Until disputes concerning the processing of Personal Data are resolved, in particular if (i) the accuracy of the Personal Data is contested, (ii) the processing is unlawful but, instead of erasure, only restriction of the processing is requested, (iii) the Company no longer needs the Personal Data for the purposes of the processing, or (iv) an objection to the processing has been raised, the Company may only store the Personal Data, and any further processing is subject to the consent of the personal data subject, unless the data are needed for the establishment, exercise or defence of legal claims.
    • Right to data portability
      • The right to obtain the Personal Data provided to the Company with consent to the processing or for the purpose of performing a contract in a structured, commonly used and machine-readable format and, where technically feasible, the Company shall also transfer such Personal Data to another controller on the instruction of the personal data subject.
    • Right to object to the processing of Personal Data
      • The possibility to file a written or electronic objection with the Company against the processing of Personal Data, as a result of which the Company will not process the Personal Data further unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the personal data subject.
  3. All the rights under paragraph 2 may be exercised with the Company either in writing, by registered letter sent to its registered office, or electronically at the e-mail address info@moravio.com (for personal data where the controller is Moravio s.r.o.) or info@moravio.com (for personal data where the controller is Moravio Online Marketing s.r.o.).
  4. If the Company does not meet the requirements for the processing and protection of Personal Data and/or the rights of the personal data subject are violated or threatened, the personal data subject has the right to file a complaint about the processing of Personal Data with the Office for Personal Data Protection at www.uoou.cz.
  5. This information is communicated to all data subjects concerned, is available at the Company's registered office and on the Company's website at www.moravio.com and, on request, may be sent by e-mail to the e-mail address provided.

In Ostrava on 15 May 2018