Duc Long Hoang
Business ID: 19088957
Registered office: K Nádraží 246/25, 322 00, Plzeň - Křimice
Entrepreneur registered in the Trade Register
e-mail: web@duclonghoang.com
phone: +420 735 006 245
websites: duclonghoang.com and duclonghoang.cz (hereinafter referred to as “websites”)
(hereinafter referred to as “Controller”)

Within the scope of its activities, the Controller processes personal data of the subjects listed below. These personal data processing principles (hereinafter referred to as “Principles”) inform data subjects about the circumstances of their personal data processing and about the rights they have in relation to this processing.

Data subjects, purposes, scope, duration, and legal basis of processing

Person who contacts the controller

The Controller processes personal data of persons who contact the Controller via email, telephone, or through the contact form for the following purpose, scope, legal basis, and duration:

Purpose: Answering inquiries and processing requests of the inquiring person
Scope of data: Name, surname, email address, telephone number
Legal basis: Legitimate interest in providing a response and processing pre-contractual relationships
Duration: The time necessary to answer the inquiry and for any subsequent contractual relationships

Voluntary provision of data

The data subject provides their personal data to the Controller voluntarily. Failure to provide personal data may affect the Controller’s ability to enter into a contract or provide the data subject with services that are based on the necessary knowledge of information about the data subject, including personal data.

Method of processing personal data

The Controller processes personal data manually (in electronic form) and electronically by automated means.

Rights of data subjects

The data subject has the following rights:

a) Right of access to personal data

The data subject has the right to obtain confirmation from the Controller as to whether personal data concerning them are being processed, and if so, the right to access such personal data and the following information:

• the purposes of processing the personal data
• the categories of personal data concerned
• the recipients or categories of recipients to whom the personal data have been or will be disclosed
• the planned period for which the personal data will be stored, or if it is not possible to determine, the criteria used to determine that period
• the existence of the right to request from the Controller rectification or erasure of personal data concerning the data subject or restriction of processing or to object to such processing
• the right to lodge a complaint with a supervisory authority
• all available information on the source of the personal data, if they are not obtained from the data subject

The data subject also has the right to request a copy of the processed personal data from the Controller, provided that this does not adversely affect the rights and freedoms of others. The Controller may charge a reasonable fee based on administrative costs for any further copies requested by the data subject. If the data subject makes the request by electronic means, the information shall be provided in an electronic form that is commonly used, unless the data subject requests otherwise.

b) Right to rectification

The data subject has the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c) Right to erasure (right to be “forgotten”)

The data subject has the right to obtain from the Controller the erasure of personal data concerning them without undue delay, and the Controller has the obligation to erase personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
• the data subject withdraws consent on which the processing is based, and there is no other legal ground for the processing
• the data subject objects to the processing and there are no overriding legitimate grounds for the processing
• the personal data have been unlawfully processed
• the personal data must be erased for compliance with a legal obligation in European Union or Czech Republic law
• the personal data have been collected in relation to the offer of information society services based on consent given by a child

d) Right to restriction of processing

The data subject has the right to obtain from the Controller restriction of processing in any of the following cases:

• the data subject contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
• the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims

e) Right to data portability

The data subject has the right to receive the personal data concerning them, which they have provided to the Controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the Controller, where:

• the processing is based on consent or on a contract with the data subject, and
• the processing is carried out by automated means

In exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible. The right to data portability shall not adversely affect the rights and freedoms of others.

f) Right to object

The data subject has the right to object to processing of personal data. If the data subject raises a legitimate objection to processing for direct marketing purposes or profiling, the personal data shall no longer be processed for these purposes.

The objection will be evaluated, and subsequently, the Controller will inform the data subject whether the objection has been complied with and the data will no longer be processed by the Controller, or that the objection was not justified and the processing will continue. During the time until the objection is resolved, the processing will be restricted.

g) Right not to be subject to automated decision-making, including profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling (i.e., any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to the data subject), which produces legal effects concerning them or similarly significantly affects them. This right shall not apply if the automated decision is necessary for entering into, or performance of, a contract between the data subject and the Controller, or is based on the data subject’s explicit consent, in these cases, however, the data subject has the right to obtain human intervention on the part of the Controller, to express their point of view, and to contest the automated decision.

h) Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint against the processing of their personal data by the Controller with the supervisory authority, which for the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.

Final provisions

The Controller has not appointed a Data Protection Officer.
The Controller reserves the right to unilaterally modify these personal data protection and processing principles.
These personal data protection and processing principles shall become effective on April 15, 2025.