Privacy policy

Introductory Provisions

Benefit Management, s.r.o., IČ 27069770, with registered office at Doudlebská 1699/5, 140 00 Praha 4, Nusle, Czech republic, registered in the Commercial Register at the Municipal Court in Prague, Section C, Insert 93997, operating this website and the employee benefits management application (hereinafter referred to as the "Company") takes care to properly comply with its obligations in the area of personal data protection, in particular under Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation; GDPR) and Act no. 110/2019 Coll., on the processing of personal data.

The Company acts mainly as a data controller. In specific situations, in particular when working with its business partners, the Company is also a processor of personal data of other data controllers.

The data protection officer is Mgr. Eliška Kutnohorská, MBA. The Company or the Data Protection Officer can be contacted at gdpr@benefit-plus.eu

Personal data subject

The data subject is a natural person who has provided the Company with his/her personal data himself/herself, or whose personal data the Company has obtained from a third party, in particular from its business partners, or whose personal data the Company has obtained from other sources.

The subject may be, in particular but not exclusively, a Client, an employee of a Client, a partner, an employee of a partner, a job applicant, a partner of the Company, etc.

Scope of processing of personal data

The Company processes personal data to the extent that it is provided directly by the data subjects or to the extent that the Company obtains it from other persons, in particular from the subjects' employers - its clients, or from other lawful sources.

Purpose of the processing of personal data

The Company, as the controller, processes personal data for the purpose of contract performance, performance of legal obligations, legitimate interest, in particular for the purpose of direct marketing (i.e. offering the controller's products and services), including sending commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services. In specific cases, the company also processes personal data on the basis of the subject's consent.

Assessment of the necessity of processing

The company is committed to protecting the privacy of data subjects and therefore only processes personal data that are strictly necessary for the stated purposes of processing.

Duration of processing of personal data

The Company processes personal data for the period necessary or prescribed by law. If this period is not specified, it shall process it for the duration of the contractual relationship with the subject or the contractual relationship between the controller and the Company in its capacity as processor, and for a period of 10 years after the termination of such contractual relationship.

Consent to the processing of personal data

If the data subject has given consent to the controller to process personal data, he or she may withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, legal obligation or for other reasons specified in applicable law). Withdrawal of consent is generally carried out in the same way as consent was given. If this is not possible, the subject is entitled to request withdrawal of consent in writing at the address of the Company's registered office.

Transfer of personal data

The Company does not, as a matter of principle, transfer personal data to third parties, with the exception of its suppliers in the capacity of processors or further processors; however, always on the basis of a written contract for the processing of personal data and subject to the same obligations as those of the controller. The Company may also transfer personal data to its partners for the purpose of providing services to subjects in the context of providing employee benefits. Such partners are considered recipients of personal data.

Processing of personal data for marketing purposes

When visiting website, information about the data subject's behaviour on this website is processed. The purpose of the processing is legitimate interest and at the same time to ensure that only relevant marketing actions are provided which do not annoy the data subject in any way and which the data subject subsequently uses to his or her advantage. For this purpose, data is stored that helps to determine what the data subject is specifically interested in, what he or she most frequently views on the website, what he or she orders, how he or she pays for the orders, etc.

From the information collected in this way, the Company then personalizes the offers that are displayed to the subject in an automated way or sends offers directly to the subject according to their preferences.

In addition, in order to make the best use of the benefit points, the Company sends the status of the subject's (employee's) points account on an ongoing but irregular basis, either in a simple form or with tips on how to use the points.

Cookie policy

Cookies are small amounts of data that our servers send to your computer, which allow us to make better use of our servers and adapt their content to your needs.

Almost every website in the world uses cookies. Cookies increase the user-friendliness of a repeatedly visited website and are therefore useful to you. If you use the same computer and the same internet browser to visit our website, cookies help your computer remember the pages you visit and your site settings.

Through our website, cookies may also be stored on your computer by the operators of advertising systems that run on our website. Our company also uses Google's systems in the context of remarketing. We use remarketing data solely to segment visitors in order to deliver more relevant advertising messages. When processing this data, we take care to anonymise any personal data that is not associated with specific individuals and ensure that no personal data is passed on to third parties without your explicit consent.

Standard web browsers (Safari, Internet Explorer, Firefox, Google Chrome, etc.) support the management of cookies. Within the browser settings, you can manually delete, block or completely disable the use of individual cookies, or you can block or enable them only for individual websites. Please use your browser's help for more detailed information.

The first time you visit our website, we will show you a banner with information about the use of cookies and ask you for your consent. You can revoke or change this consent at any time via the cookie settings in your browser or via the links in the footer of our website. If you do not want cookies to be stored, you can block their use in your browser settings.

We do not use cookies for other than purely technical purposes, we do not link the data obtained through them with any other data and we work with cookies in such a way that they do not allow the identification of specific persons.

There are temporary cookies and permanent cookies. Temporary ones are only stored on your computer until you exit your browser. Temporary cookies allow information to be retained as you move from one website to another and remove the need to re-enter certain data. Persistent cookies help identify your computer if you revisit our website, but do not allow you to be identified in any way personally. Persistent cookies allow us to tailor our site to your interests, but we store the relevant data in a completely anonymised way and do not link it to any other data.

Use of Google Analytics

This website uses Google Analytics, provided by Google, Inc. ("Google"), only on the basis of your explicit consent, which you can provide to us when you first visit the site via the consent banner. Google Analytics uses cookies to analyse user behaviour on the site. Information about your use of the site, together with the contents of the cookie, will be transmitted to and stored by Google on servers in the United States. The transfer of this data takes place on the basis of standard contractual clauses that provide adequate data protection in accordance with the GDPR.

Google will use this information for the purposes of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also disclose this information to third parties if required to do so by law or if third parties process this information for Google.

How to disable Google Analytics tracking

If you do not wish to have your data collected by Google Analytics, you can withdraw your consent at any time by setting cookies on our website or by installing a plug-in provided by Google.

Subject's rights in relation to the processing of personal data

You have the right to access your personal data and to have it corrected or completed if it is inaccurate or incomplete. You may also request information about its sources and a copy of the personal data processed. The Company may charge a fee for these services if your request is unreasonable or unfounded. You will be informed in advance of any fee.

If your personal data is no longer needed, you withdraw your consent to processing, object to processing, has been unlawfully processed, or is required to be erased by law, you may request erasure.

If you contest the accuracy of the data or if it is no longer necessary for the purposes of processing, you have the right to request restriction of its processing.

In certain cases, you have the right to obtain your personal data in a structured, commonly used and machine-readable form or to request its transfer to another controller, if technically feasible.

You have the right to object to the processing of your personal data, in particular in the case of profiling or the sending of commercial communications. You can withdraw your consent to processing at any time.

You also have the right not to have decisions based on automated processing, including profiling, which would have legal or similarly significant effects applied to you.