ALVAO s.r.o. is committed to protecting confidential information, business secrets and personal data. Protecting the information of our customers, suppliers, employees or jobseekers is included in our contracts or is enforced by the laws and/or regulations of the Czech Republic and the EU. We refer to all such data as protected information. Every one of our staff is therefore obligated to protect this information and to do everything possible to prevent any of it leaking out. The Company’s management undertakes that the Company will comply with ČSN ISO/IEC 27001:2014 accordingly to meet the goals of your organization, the risk level and asset importance:
- set information security objectives
- meet applicable information security requirements
- continuously improve the information security management system
Who is this statement intended for?
This statement covers the processing of personal data we may collect when you:
- use our services and products, specifically:
- ALVAO Service Desk
- ALVAO Asset Management
- visit our websites,
- visit our offices,
- receive information from us,
- take up the option to register for or attend our events and webinars.
Administration of your data
ALVAO s.r.o., a limited liability company with its seat at Hlohová 1455/10, 591 01 Žďár nad Sázavou, Reg. No.: 25561561, Tax ID No.: CZ25561561, registered in the Commercial Register at the Regional Court in Brno, Section C, File 33290 (hereinafter “Alvao”) as an administrator hereby informs you in accordance with the GDPR about the processing of your personal data and about your rights.
What are your rights?
We process your data transparently, correctly, in accordance with GDPR and applicable legislation. You have the right to access your data and the right to correct the data. Whenever your data is processed based on your consent, you are authorized to revoke such consent at any time. If you wish to revoke your consent with processing and if there is no other legal reason for processing of your personal data or if you express disagreement with sending of commercial disclosures, then you have the right to deletion of your data or limitation of data processing.
In the case of a requirement for exercising of rights or information regarding personal data, please send an e-mail to gdpr@alvao.com or in writing to the address specified in the contacts section. The legitimacy of any request will be evaluated within 1 month of its receipt. You can submit your request in written or electronic form or in person. For processing your request, it is essential to perform verification of your identity. Always specify up-to-date contact information to facilitate the handling of your request.
Purposes of personal data processing
- We will process your personal data in the extent necessary for the following purposes:
- Fulfillment of requirements stemming from applicable legislation
- Fulfillment of requirements stemming from contracts
- Fulfillment of requirements stemming from the terms and conditions for used services
- Maintaining of contact information for representatives of customers and business partners
- Sending of commercial disclosures with an offer of products and services
- Holding of conferences, workshops and training, which includes invitations and arrangement of accommodation
- A personalized approach to our Internet services
- Ensuring the protection of our rights and legitimate interests
In accordance with Act No. 480/2004 Coll., on certain services of the information society, Alvao will use your contact details for the purpose of sending commercial disclosures and newsletters, until you express disagreement with such use.
Your details that we process
- Identification details. We process personal data in the following scope: full name, title, business name, work position in the company.
- Contact details. We process personal data in the following scope: e-mail address, phone numbers, business address(es) and contact address(es).
- Details regarding use of Internet services. Records of the use of our Internet services, IP address of the device and cookies as identifiers.
Personal data processors
Your personal data may be processed for Alvao only by processors based on a personal data processing agreement.
Processors of your personal data in third countries may be providers of mailing services, servers hosting data as well as file and analytical tools.
Duration of personal data processing
Your personal data is stored with us for the duration of the contract entered into between the company you represent and Alvao or for the duration of your registration for use of Alvao services.
After the contractual relationship between the company you represent and us or after the end of your registration for use of our services, we will continue to process your personal data only for the purposes and for the periods of time for which we are required to archive such data in order to comply with applicable legislation.
If you have granted consent for processing of personal data for the purposes of sending of commercial offers, then the period of time during which your data will be processed shall last 5 years from when you grant consent.
As soon as the period for archiving of your personal data ends or the period during which we are required by law to archive your personal data ends, your personal data will be deleted from our databases and systems.
Data Residency (SaaS)
Our team is committed to the maximum security and protection of your data. If you run ALVAO as SaaS, your data will be stored in the Microsoft Azure cloud with a choice of three data residency - US, UK and EU. This option allows you to meet your specific data storage and processing requirements in accordance with your security policy and data protection regulations (GDPR).