This document provides information on how Audit Master s.r.o., IČO (Business Identification Number): 03369145, with its registered office at Říjnová 492/32, 182 00 Prague, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 230746 (hereinafter referred to as «Audit Master»), as the controller of personal data, processes personal data in connection with the provision of services and products to its customers and with the operation of the website at https://auditmaster.ai/ (hereinafter referred to as the «Website»). It also includes information about the rights that data subjects have in connection with the processing of their personal data.If you have any questions regarding the protection of personal data, privacy, and the exercise of your rights, please do not hesitate to contact us at our contact email: info@whirrcrew.com
Conclusion and performance of a contract with the customer (provision of services and products) Audit Master provides its services and products to customers always on the basis of a contract concluded with the given customer (hereinafter referred to as the «Contract»). If the customer is a natural person, Audit Master needs the following personal data of the customer to negotiate, conclude, and subsequently fulfill the Contract:
· Identification and contact details of the customer - natural person (name, surname, IČO, DIČ (VAT ID), registered office, telephone, email, delivery address),
· Billing and payment details of the customer - natural person,
· Data on the content of the Contract and the course of its fulfillment, other information from related communication with the customer.
Without the above-mentioned data, it is not possible to conclude or fulfill the Contract (i.e., to provide Audit Master's services or products). The legal reason for processing this personal data is the conclusion and fulfillment of the Contract at the customer's request.
If a Website visitor fills in the contact form available on the Website, Audit Master will process the identification and contact details of this visitor (name, surname, email, phone number) and the content of the message.
Audit Master must also process personal data in cases where it is required by law. For this purpose, Audit Master processes personal data, in particular, to the extent required by the relevant legal regulations in connection with Audit Master's obligation to keep accounts and fulfill related tax obligations, or to fulfill obligations imposed by the Archives Act.
In justified cases, Audit Master may also process personal data based on the legal ground of protecting its legitimate interests. However, in these cases, Audit Master always carefully assesses and ensures that the interest in processing personal data for this purpose does not disproportionately affect the privacy of data subjects.
These are typically members of statutory bodies, employees, or other authorized persons who are not themselves a party to the Contract, but who conclude the Contract on behalf of the customer, communicate with the Audit Master, and otherwise act on behalf of the customer. We need the personal data of these persons in order to be able to communicate and act through them with the customer for the purpose of concluding the Contract with the customer and its further fulfillment.For these persons, we usually process:
· Identification and contact details (name, surname, email, telephone number, delivery address),
· Information about their job position or other relationship to the customer, information about what authorizes them to act on behalf of the customer, and data from communication with them.
Audit Master further processes personal data for the purpose of protecting the legitimate interest, which is to ensure the possibility of Audit Master's defense in any legal disputes, proceedings before a court, or during inspections by state authorities or other public administration bodies. We process this data to be able to prove, if necessary, that we have acted in accordance with our contractual obligations and legal regulations. For this purpose, we typically process:
· Information about customers and their representatives,
· Information about the conclusion of the Contract and the course of its fulfillment,
· Data on any claims asserted or arising in connection with the Contract or with the given customer.
Audit Master collects data about Website visitors and their activity on the Website using cookies and other similar technologies that store data on the visitor's device or obtain data from these devices (hereinafter collectively referred to as «Cookies»). Information about what Cookies the Website stores and why, and how you can set your consents to the use of Cookies can be found on the cookie bar..If the Audit Master, using Cookies, finds out information about specific visitors to the Website and their activity on the Website, Audit Master may, within the legitimate interest in analyzing traffic and improving the Website, typically process personal data that is listed in the cookie bar.For the purposes of defense against any claims by visitors or other persons or during inspections by public authorities, Audit Master keeps a record of the visitor's consent (under their unique ID) to the use of Cookies for the period specified in the Information on the Use of Cookies.
Audit Master obtains personal data primarily from the data subjects. We do not ascertain any additional data about the data subjects, except for those that they provide to us themselves or that arise from their activity within the Website. Audit Master may transfer personal data under the conditions stipulated by legal regulations to public authorities if a legal regulation instructs us to do so or if the given authority requests it within the scope of its competence.For data processing, Audit Master uses the following processors:
· Microsoft Ireland Operations, Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (Microsoft 365 service)
· Google LLC., 1st & 2nd Floors, Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics service)
We process personal data manually in accordance with the relevant purpose, where manual processing is necessary or appropriate. Audit Master employees or other persons working for us may participate in data management, among other things, for the purpose of eliminating errors, inaccuracies, etc. However, these persons may only process personal data under the conditions and to the extent stated above and are bound by the obligation to maintain confidentiality about personal data and security measures, the disclosure of which would compromise the security of personal data.Personal data may be processed in electronic form by automated means, specifically within the systems used in Audit Master, including the systems of individual processors, as listed above.
Contract with the customer Audit Master processes personal data processed for the purpose of concluding and fulfilling the Contract for the duration of the conclusion and fulfillment of the given Contract (i.e., for the period necessary to fulfill the obligations arising from it).
Even after that, Audit Master may process personal data for the following purposes:
Personal data processed for the purpose of fulfilling legal obligations are processed for the period stipulated by the relevant legal regulations.
Personal data required by the legal regulation governing Audit Master's tax and accounting obligations (typically billing data and information about the provided performance) must be processed for accounting purposes and fulfillment of tax obligations. The processing period is 5 years from the end of the accounting period; in the case of documents relevant for VAT payments, it is 10 years from the end of the tax period in which the performance took place. We archive relevant personal data in accordance with the requirements of the Archives Act for the periods specified therein.
We process personal data even after the termination of the Contract to protect our legitimate interests (i.e., for the purpose of defense against any claims by customers or third parties, including before a court, and for the identification of persons acting with Audit Master on behalf of the customer) for the duration of the applicable limitation periods, which in the Czech Republic may last up to 15 years from the occurrence of the relevant event. If no relevant claim is made, this period is typically 5 years from the termination of the Contract.
Personal data may be processed even longer than stated above if a relevant reason for further processing arises, typically administrative or judicial proceedings are initiated for which the personal data are relevant.
First and foremost, you have the right to request access to your personal data, including receiving a copy of all your personal data. You can do this by using the email address provided in the header of this document.
We do not process personal data based on your consent; therefore, it is not possible to withdraw consent to processing. However, at your request, we will always assess whether it is necessary to continue processing your personal data for any of the purposes mentioned above. The settings of consents to the use of cookies and other similar technologies are governed by their own rules; see the information contained in the cookie bar.
We will always provide you with the following information upon request:·· The purpose of processing personal data,
·· The personal data or categories of personal data being processed, including all available information about their source,
·· The nature of automated decision-making, including profiling, and information regarding the procedure used, as well as the significance and envisaged consequences of such processing for the data subject,
·· The recipient or categories of recipients to whom the personal data have been or will be disclosed, and in the case of transfers of personal data to a third country, also information on appropriate safeguards relating to the transfer to ensure the security of personal data,
·· The envisaged period for which the personal data will be stored, or if it is not possible to determine, the criteria used to determine this period,
·· All available information about the source of the personal data if it is not obtained from you.
Your other rights include:·· Requesting an explanation from us,
·· Demanding that we rectify the situation, in particular, this may include blocking, correcting, supplementing, restricting processing, or erasing personal data (the right to be forgotten),
·· Requesting a copy of the processed personal data, or requesting personal data concerning you in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance from us,
·· Lodging an inquiry or complaint with the Office for Personal Data Protection, www.uoou.gov.cz, Pplk. Sochora 27, 170 00 Prague 7,
·· Objecting to the processing of personal data concerning you.
We protect your data. This is mainly achieved through the following security measures: implementation and enforcement of internal regulations for the protection of personal data, ISMS, SIEM and SOC, firewalls, encryption, MDM, access control to personal data and authorization data, backups, physical security measures, and others. This Information on the Processing of Personal Data is effective from January 1, 2024.