Privacy Policy and Personal Data Processing Principles

1. Introduction

The company reallocate s.r.o., ID No.: 13988158, registered at Lublaňská 40, 120 00 Prague 2, as the personal data controller (hereinafter referred to as the "Controller"), processes the personal data of its clients, their representatives, potential clients, and website visitors in accordance with applicable legal regulations, especially Regulation (EU) 2016/679 (GDPR).

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.

Data Subject: A natural person to whom the personal data relates.

Processing: Any operation or set of operations performed on personal data, such as collection, storage, modification, access, deletion, etc.

3. Data Controller

Name: reallocate s.r.o.

Address: Lublaňská 40, 120 00 Prague 2

ID No.: 13988158

Website: www.reallocate.cz

4. Legal Basis and Principles of Processing

Personal data is processed based on:

• Contract Performance: Processing is necessary to perform a contract to which the data subject is a party.
• Legal Obligation: Processing is necessary to comply with legal obligations of the Controller.
• Legitimate Interest: Processing is necessary for the legitimate interests of the Controller or a third party.
• Consent: The data subject has given consent for processing for one or more specific purposes.

The Controller adheres to the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

5. Collection and Use of Personal Data

The Controller collects personal data:

• Directly from the data subject: During contract signing, website registration, or communication via email or phone.
• Automatically: Through cookies and other technologies when visiting the website.

Personal data is used for:

• Fulfilling contractual and legal obligations.
• Client communication.
• Marketing purposes based on legitimate interest or consent.
• Service and user experience improvement.

6. Recipients of Personal Data

Personal data may be disclosed to:

• Processors providing services to the Controller (e.g., IT, accounting) under a processing agreement.
• Public authorities if required by law.

7. Data Retention

Personal data is retained for as long as necessary to fulfill the purpose of processing, but no longer than:

• During the contractual relationship and for 10 years thereafter.
• As required by law.
• Until consent is withdrawn, if processing is based on consent.

8. Data Subject Rights

Data subjects have the right to:

• Access their personal data.
• Correct inaccurate or incomplete data.
• Erase personal data.
• Restrict processing.
• Data portability.
• Object to processing.
• Withdraw consent.

9. Data Security

The Controller takes technical and organizational measures to secure personal data against unauthorized access, loss, destruction, or damage.

10. Contact

To exercise your rights or if you have any questions regarding data processing, contact us at: .

Updated on June 1, 2025.