Information on Personal Data Processing

Sale of Car and Provision of After-sale Services

By means of this document, we, as the controller of personal data – the company ŠKODA AUTO a.s., tř. Václava Klementa 869, Mladá Boleslav II, 293 10, Mladá Boleslav, Identification No.: 00177041, registered in the Commercial Register kept by the Municipal Court in Prague under Section B, File No. 332 (hereinafter referred to as “ŠKODA AUTO“) – provide information on the personal data processing and your rights related thereto.

The processing of personal data is carried out as part of the following activity:
Sale of Car and Provision of After-sale Services

REALISATION OF CAR SALE

Purpose of the processing:
Realisation of car sale

Description of the purpose of processing:
We use your personal data in all steps that are necessary in order for you to be able to buy one of our cars, i.e., for creation of the order of your future car and the subsequent conclusion and performance of a purchase contract, including an invoice creation and the subsequent hand-over of your car at the premises of our business partner.

Legal basis of the processing:
We have to carry out the processing to be able to enter into a contract with you, or to perform the contract you entered in. The provision of your personal data is a contractual requirement and if you fail to provide them, we might not be able to conclude a contract with you or it might not be possible for us to perform the contract already concluded.

Categories of the personal data we process:
Identification data, contact data, descriptive data, transactional data and technical information on the product.

Processing and archiving period:
10 years after the conclusion of the contract.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

PROVISION OF FINANCIAL BENEFIT

Purpose of the processing:
Provision of financial benefit

Description of the purpose of processing:
We will use your personal data for the purpose of your placement in one of the so-called “target groups”, based on which you can receive, together with the member of distribution network you selected, a financial benefit in buying your car. This does not include making of photocopies of disabled persons’ registration cards.

Legal basis of the processing:
We have to carry out the processing to be able to enter into a contract with you, or to perform the contract you entered in. The provision of your personal data is a contractual requirement and if you fail to provide them, we might not be able to conclude a contract with you or it might not be possible for us to perform the contract already concluded.

Categories of the personal data we process:
Identification data, contact data, descriptive data, transactional data and technical information on the product.

Processing and archiving period:
10 years after the conclusion of the contract.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network, agency checking correct drawing of funds by the business partners of ŠKODA AUTO. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

PROVISION OF FINANCIAL BENEFIT TO THE HOLDERS OF DISABLED PERSON’S REGISTRATION CARD

Purpose of the processing:
Provision of financial benefit to the holders of disabled person’s registration card

Description of the purpose of processing:
In the case of the provision of financial benefit as part of the “target group” of disabled persons, we will scan and process your disabled person’s registration card based on which you and the member of distribution network you selected will receive a financial benefit in buying a car.

Legal basis of the processing:
We are authorised to process your personal data based on the consent granted by you. If you did not give your consent to us, we will not process your personal data for this reason.

Categories of the personal data we process:
Copies of personal identity card or another public document.

Processing and archiving period:
Until revocation of the consent.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

PERFORMANCE OF ORDER IN THE ŠKODA AUTO SERVICE

Purpose of the processing:
Performance of order in the ŠKODA AUTO service

Description of the purpose of processing:
In case you want to use the services in our ŠKODA AUTO service, we will use your personal data, in particular in booking your visit, issuing a job order, or, as the case may be, potential approaching regarding your order and issuing an invoice, including potential dealing with an insurance event with an insurance company.

Legal basis of the processing:
We have to carry out the processing to be able to enter into a contract with you, or to perform the contract you entered into. The provision of your personal data is a contractual requirement and if you fail to provide them, we might not be able to conclude a contract with you or it might not be possible for us to perform the contract already concluded.

Categories of the personal data we process:
Identification data, contact data, trading history, technical information on the product.

Processing and archiving period:
10 years after termination of the service order.

Categories of data processors or recipients to whom we may provide the personal data:
Insurance company. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

SIGNING A SERVICE ORDER CONTRACT VIA BIOMETRIC SIGNATURE

Purpose of the processing:
Signing a service order contract via a biometric signature

Description of the purpose of processing:
In case you want to use the services in our ŠKODA AUTO service, we will use your personal data to conclude a service order contract with you in our ŠKODA AUTO service via your (the so-called) dynamic signature.

Legal basis of the processing:
We are authorised to process your personal data based on the consent granted by you. If you did not give your consent to us, we will not process your personal data for this reason.

Categories of the personal data we process:
Biometric data.

Processing and archiving period:
10 years after termination of the service order.

Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

ASSURANCE AND PROVISION OF AFTER-SALE SERVICES

Purpose of the processing:
Assurance and provision of after-sale services

Description of the purpose of processing:
We will use your personal data for the purpose of the conclusion of a contract on after-sale services, about which you express your interest, and provision of the relevant service. It covers a pre-paid service, extended guarantee and assistance services.

Legal basis of the processing:
We have to carry out the processing to be able to enter into a contract with you, or to perform the contract you entered into. The provision of your personal data is a contractual requirement and if you fail to provide them, we might not be able to conclude a contract with you or it might not be possible for us to perform the contract already concluded.

Categories of the personal data we process:
Identification data, contact data, technical information on the product.

Processing and archiving period:
10 years after termination of the contract.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network, info line, ŠkoFIN s.r.o. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

CLIENT SATISFACTION SURVEY

Purpose of the processing:
Client satisfaction survey

Description of the purpose of processing:
We will use your personal data to discover your opinion on the products and services provided as part of the entire distribution network of ŠKODA AUTO. The personal data are transferred to the companies that ensure the survey of your satisfaction for us. In the case of the discovery of your dissatisfaction, we can use your personal data to ensure a remedy (including the hand-over of the case to the relevant member of distribution network).

Legal basis of the processing:
We have an authorised interest to carry out this processing. We want to constantly improve our products and services so that our clients are satisfied with them.

Categories of the personal data we process:
Identification data, contact data, technical information on the product.

Processing and archiving period:
2 years after the provision of the service.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network, reporting agencies, agencies ensuring a satisfaction survey, holding companies. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

DEALING WITH CLIENT COMPLAINTS

Purpose of the processing:
Dealing with client complaints

Description of the purpose of processing:
We will use your personal data to settle your complaint filed through an email, mail, over the phone, in person, at social networks and via website forms. To ensure your satisfaction we may, in case it is necessary for settling your complaint, provide your personal data to the members of distribution network.

Legal basis of the processing:
We have an authorised interest to carry out this processing. We want to meet the expected quality of our products and services and avoid potential disputes.

Categories of the personal data we process:
Identification data, contact data, technical information on the product, trading history, communication, interaction and profiles derived based on these data.

Processing and archiving period:
6 months after the settlement of the complaint.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

SETTLEMENT WITH SUPPLIERS CONCERNING GUARANTEE EXPENSES INCURRED BECAUSE OF THEM

Purpose of the processing:
Settlement with suppliers concerning guarantee expenses incurred because of them

Description of the purpose of processing:
We will use your personal data to seek settlement with our suppliers (among others to ensure a financial compensation) regarding guarantee expenses incurred because of them. In order for us to make the settlement with the suppliers, we have to transfer some of your personal data to them as requested for specific cases.

Legal basis of the processing:
We have an authorised interest to carry out this processing. This interest rests in our settlement with suppliers.

Categories of the personal data we process:
Technical information on the product.

Processing and archiving period:
6 months after the settlement of the compensation.

Categories of data processors or recipients to whom we may provide the personal data:
Supplier of a defective part. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data from third persons.

Transfers of personal data to third countries or supranational organisations:
As part of this processing, your personal data may be transferred to other companies within the ŠKODA AUTO group or, as the case may be, to other recipients in third countries, i.e. the People's Republic of China, the Republic of India and Russian Federation. In such case, this transfer may take place on the basis of standard contractual clauses, i.e. the model contract issued by the European Commission, without any change made in its text, as foreseen by current legal regulation on personal data protection. You can find the latest information at http://www.skoda-auto.com/other/privacy-policy.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

SETTLEMENT WITH MEMBERS OF THE DISTRIBUTION NETWORK REGARDING GUARANTEE REPAIRS AND SERVICE MEASURES

Purpose of the processing:
Settlement with members of the distribution network regarding guarantee and post-guarantee repairs and service measures

Description of the purpose of processing:
We will use your personal data to seek settlement with members of the distribution network for guarantee and post-guarantee repairs of your car and for service measures implemented based on our statutory obligation. The processing of personal data includes exchange of data among ŠKODA AUTO and members of the distribution network.

Legal basis of the processing:
We have an authorised interest to carry out this processing. This interest rests in our settlement with the members of our distribution network.

Categories of the personal data we process:
Trading history, technical information on the product.

Processing and archiving period:
15 years from the settlement date.

Categories of data processors or recipients to whom we may provide the personal data:
Members of distribution network, marketing agencies. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data from third persons.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

ORGANISATION AND ASSURANCE OF SERVICE MEASURES

Purpose of the processing:
Organisation and assurance of service measures

Description of the purpose of processing:
We will use your personal data to organise all types of service measures based on special legal regulations, including assurance of your awareness of the necessary service measures concerning your car or hand-over of your car VIN to the members of distribution network to discover whether a service measure is announced in respect of your car. We have your personal data based on our previous contact with you or they can be provided to us by the person that sold the car to you.

Legal basis of the processing:
We have to carry out the processing to meet the obligation imposed on us by legal regulation. The provision of the data is a statutory requirement and if you do not provide them, you may breach the law.

Categories of the personal data we process:
Identification data, contact data, technical information on the product.

Processing and archiving period:
10 years after the announcement of the service measure.

Categories of data processors or recipients to whom we may provide the personal data:
Agencies ensuring service measures, members of distribution network. Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you and from third persons.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or any multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

REALISATION OF CLIENT’S ORDER

Purpose of the processing:
Realisation of client’s order

Description of the purpose of processing:
Your personal data are used for the purpose of the performance of your order – additional assembly of accessories after the sale of car.

Legal basis of the processing:
We have to carry out the processing to be able to enter into a contract with you, or to perform the contract you entered into. The provision of your personal data is a contractual requirement and if you fail to provide them, we might not be able to conclude a contract with you or it might not be possible for us to perform the contract already concluded.

Categories of the personal data we process:
Identification data, contact data, technical information on the product.

Processing and archiving period:
10 years from entry into the contract.

Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

VERIFICATION OF THE OWNERSHIP OF CLIENT’S CAR

Purpose of the processing:
Verification of the ownership of client’s car

Description of the purpose of processing:
We will use your personal data to verify the ownership of your car in ordering intelligent parts, e.g., keys. By granting approval with your personal data processing you also agree with making a copy of your personal identity document under applicable laws.

Legal basis of the processing:
We are authorised to process your personal data based on the consent granted by you. If you did not give your consent to us, we will not process your personal data for this reason.

Categories of the personal data we process:
Identification data, copies of personal identity document or another public document.

Processing and archiving period:
10 years after making a record.

Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
We receive the personal data directly from you.

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

What are your rights?

As a part of the personal data processing, you have the following rights:

Access to personal data processed.

Revocation of the consent to the personal data processing.

Correction of incorrect, inaccurate or incomplete personal data.

Erasure of personal data in the case of purpose legal basis termination or in the case of unlawful processing.

Restriction of the data processing.

Extract of your personal data in a machine-readable format for yourself or another controller.

Object to the data processing, if you believe that the processing of personal data is unlawful.

Not to be the subject of automated decision-making.

How can you exercise your rights?

In connection with the exercise of your rights, ŠKODA AUTO may charge a reasonable fee taking into account the administrative costs for the processing when requests from a data subject are apparently unfounded or excessive.

For the inquiries related to the personal data protection and processing, use the following communication channels:

Electronically:

By mail:

ŠKODA AUTO a.s.
tř. Václava Klementa 869,
Mladá Boleslav II,
293 01 Mladá Boleslav
Czech Republic

(English language)

By phone or by e-mail

Please contact your Importer.

Data Protection Officer (DPO)

For questions regarding the personal data protection, you can contact directly the Data Protection Officer (DPO) of ŠKODA AUTO.

http://www.skoda-auto.com/data-privacy
dpo@skoda-auto.cz

Lodging a complaint

In case you disagree with the way ŠKODA AUTO processes or handles your personal data, you can lodge a complaint with the Data Protection Officer (DPO) of ŠKODA AUTO or a supervisory authority.

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
+420 234 665 111
http://www.uoou.cz/