These Principles for Protection of Personal Information stipulate how Boomerang Communication s. r. o., entered in the Commercial Register at the Municipal Court in Prague, section C, insert 82867; registered office: Nad Kazankou 708/37, 171 00 Prague 7; ID no.: 26447657 (hereinafter the “Company“), uses and protects all information it collects.
These Principles of Personal Data Protection apply as of 01 June 2026.
Information from the administrator on the rights of data subjects pursuant to § 12 of the Act on Protection of Personal Data, or Article 13 GDPR.
The Company, as the administrator of personal data, hereby provides information about the manner and scope of personal data processing, including the scope of the data subject’s rights related to the processing of their sensitive and personal data by the Company.
The company processes personal data in accordance with applicable legislation, especially with Act No 101/2000 on the protection of personal data, or with an act replacing this Act (hereinafter “APPD”) and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter the “GDPR”).
Purpose and scope of personal data procession:
The Company processes only precise personal data that it obtained in accordance with the APPD/the GDPR, wherein it collects and processes this personal data only for the stipulated purpose, to the extent stipulated below, for the duration of the contractual relationship and for the three years following its termination or for one year if no contract is concluded.
Principal purposes of personal data processing:
- determining the relevant needs of the Company’s clients;
- fulfilling contracts and providing services;
- accounting and tax purposes;
- debt collection;
- compliance with legal obligations;
- maintaining client records.
Scope of personal data processing:
The company processes the following scope of personal data:
- identifying information: name, surname, date of birth/personal ID number;
- address information: permanent or temporary residence, mailing or other contact address, business premises, phone, email address;
- other personal information: bank account number, phone number and email address, signature.
Sources of personal data:
The Company primarily obtains personal data from data subjects during contract negotiations.
The Company always informs data subjects when the provision of personal data is necessary for the provision of a particular service and when it is voluntary, but the provision of such personal data will facilitate communication between the data subject and the Company and also significantly streamline provision of services.
Processors and recipients:
In addition to being processed by the Company and its employees, personal data may also be processed by external processors for the purposes described above, based on personal data processing agreements concluded in accordance with the APPD/GDPR between the processor and the Company as administrator.
The Company processes personal data both manually and automatically. The company secures protection of personal data from a technical and organizational perspective in accordance with the APPD/GDPR. The Company also requires the same security from personal data processor.
Personal data may be transferred to third parties who have the legal authority to request the transfer of this data.
The rights of data subjects:
Data subjects are entitled to request information on the processing of their personal data, the purpose of personal data processing, the scope or categories of personal data that are subject to processing, the sources of personal data, the nature of automated processing, processors, recipients, or categories of recipients of personal data.
The Company provides the required information without undue delay for a reasonable fee that does not exceed the costs of providing such information.
If a data subject ascertains or suspects that the Company or its contractual processor is processing personal data that is contrary to the protection of the private and personal life of the data subject or against the law, the data subject has the right to:
- ask the Company or its contractual processor for an explanation;
- ask the Company or its contractual processor to correct this state of affairs; a data subject especially has the right to ask for personal data to be blocked, corrected, amended, or erased.
The Company will always, without undue delay, inform the data subject that their request has been granted. The data subject has the right to contact the Office for Personal Data Protection at any time with a complaint or suggestion.
Definitions:
- personal data – personal data means any information relating to an identified or identifiable data subject; a data subject is considered identified or identifiable if the data subject can be identified directly or indirectly;
- data subject – the data subject is the natural person to which the personal data relates;
- controller – a controller is every subject that determines the purposes and means of the processing of personal data, processes it, and is responsible for this processing;
- processor – a processor is every entity that processes personal data pursuant to the APPD based on a special act or for the controller;
- recipient – the recipient is every entity to which the personal data is disclosed;
- customer – a customer or client is a natural person with which the Company concludes a contractual relationship;
- processing of personal data – processing of personal data means any operation or set of operations which is performed on personal data, whether or not by automated means; processing of personal data is especially defined as collection, storage on data media, making accessible, modification, searching, use, transmission, broadcast, dissemination, storage, replacement, sorting or combining, restriction, erasure or destruction.