Consent to sending of commercial messages

CONSENT TO  SENDING OF COMMERCIAL MESSAGES

In accordance with Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ES (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”), I grant to the company NEXT, s.r.o., Identification no. 14892162, with its registered office at Potoční 404, Budyně nad Ohří, Postal code 411 18 (hereinafter referred to as the “Administrator”), this consent to the processing of my personal data obtained from me by the Administrator in the scope of identification data (particularly my name, surname, customer number and contact information – particularly my physical address, telephone number and e-mail address) (hereinafter referred to as “Personal Data”). The purpose of such data processing is direct marketing – sending of offers of products and services of the Administrator and of third parties, including sending of e-mail and other electronic commercial messages. In connection with the processing of personal data, profiling will occur, the subject of which will be targeting of marketing messages – offers of products and services, particularly with respect to the location in which I reside. The purpose of such profiling is to ensure that I will be sent offers only of those products which, in the Administrator’s opinion, are not obviously inappropriate for me. I grant consent for the period of duration of the contractual relationship between me and the Administrator and for an additional ten years following termination of such contractual relationship. If no such contractual relationship exists between me and the Administrator at the time of granting this consent, then I grant consent for a period of ten years from the data of granting it. I shall bear in mind that, in connection with the processing of my personal data according to this consent, I have rights pursuant to Articles 15 to 22 of the GDPR, particularly the following:

The right to demand from the Administrator confirmation of whether or not it is processing my personal data; furthermore, I can demand more detailed information on such processing. If the Administrator has inaccurate data, I can demand that such data be corrected.

If the conditions of Article 17 of the GDPR are fulfilled, I can demand deletion of my personal data. I can exercise this right especially if I withdraw consent to processing and the Administrator has no further legal reason for processing.

In the cases set forth in Article 18 of the GDPR, I have the right to demand that the Administrator restrict the processing of my personal data. During the period of such restriction, my data can be processed, with the exception of storage, only with my consent or for the purpose of determining, exercising or defending legal claims, for the purpose of protecting the rights of other persons or for reasons of important public interest.

Under the conditions of Article 20 of the GDPR, I have the right to obtain, in a commonly used and machine-readable format, from the Administrator all personal data about me that has been acquired by the Administrator. In such a case, I can demand that the Administrator transfer my personal data to a different data administrator if it is technically feasible to do so.

I have the right to raise objections against processing. If I exercise this right, the Administrator shall no longer process my personal data for the purposes of direct marketing.

If I believe that the processing of my personal data has resulted in a violation of the GDPR, I can file a complaint with any of the supervising authorities, particularly in the member state in which my usual place of residence, place of employment or the scene of the apparent violation is located. In the case of the Czech Republic, such supervising authority is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7, tel.: + 420 234 665 111, www.uoou.cz.

I provide this consent entirely voluntarily and I can withdraw it at any time. However, withdrawal of consent does not have an impact on the legality of personal data processing conducted prior to the withdrawal of consent.

Furthermore, I grant to the following members of the NEXT group – NEXT BRNO, s.r.o., Identification no.: 253 41 308, with its registered office at Mlýnská 324/9a, Brno, Postal code 602 00; NEXT Hradec Králové spol. s r.o., Identification no.: 632 19 000 with its registered office at Foerstrova 1682/3a, Hradec Králové - Pražské Předměstí, Postal code 500 02; NEXT Security Ostrava s.r.o., Identification no.: 253 87 791 with its registered office at Slévárenská 427/22, Ostrava – Mariánské Hory, Postal code 709 00; NEXT Security & Communications, s r.o., Identification no.: 493 58 928 with its registered office at Potoční 404, Budyně nad Ohří, Postal code 411 18; NEXT Plzeň spol. s r. o., Identification no.: 626 23 788 with its registered office at Pod Všemi svatými 6, 301 00 Plzeň, Plzeň, Postal code 301 00; NEXT Dvere spol. s r. o., Identification no.: 444 01 558 with its registered office at Komenského 26, Bernolákovo, Postal code 900 27 operating as joint administrators of data (hereinafter referred to as the “Joint Administrators”) – consent to the processing of my personal data for the purpose of direct marketing – sending of offers of products and services of any of the Joint Administrators and third parties, including sending of e-mail and other electronic commercial messages. In connection with the processing of personal data, profiling will occur, the subject of which will be targeting of marketing messages – offers of products and services, particularly with respect to the location. The purpose of such profiling is to ensure that I will be sent offers only of those products which, in the opinion of the relevant Joint Administrator, are not obviously inappropriate for me. The Joint Administrators have defined their respective shares of responsibility for fulfilling the obligations pursuant to the GDPR so that each of them bears full responsibility for provision of information and for enabling the exercise of my rights that are set forth in the GDPR.

I grant consent for the period of duration of the contractual relationship between me and any of the Joint Administrators and for an an additional ten years following termination of such contractual relationship. If no such contractual relationship exists between me and any of the Joint Administrators at the time of granting this consent, then I grant consent for a period of ten years from the date of granting it.

I shall bear in mind that, in connection with the processing of my personal data on the basis of my consent, I have rights pursuant to Articles 15 to 22 of the GDPR, as are briefly summarised in the consent above. When exercising those rights, I can contact any of the Joint Administrators.