Information on Personal Data Processing

MANAGING RELATIONS WITH BUSINESS PARTNERS

By this document, we as the controller of personal data – company ŠKODA AUTO a.s., tř. Václava Klementa 869, 293 01, Mladá Boleslav, Identification No.: 00177041, registered in the Register of companies kept by the Municipal Court of Prague under section B, file No. 332 (hereafter referred to as “company ŠKODA AUTO“) – provide information on the personal data processing and your rights related to this processing.

The processing of personal data includes following activities:
Managing Relations with Business Partners

Business partner check

Purpose of the processing:
Business partner check

Description of the purpose of processing:
Personal data are processed in order to register the external entity in the Group’s database and in ŠKODA AUTO database, which is necessary in subsequently reviewing the integrity of the entity as a potential business partner. In certain situations, it may be necessary to perform an in-depth review of the business partner to ensure a more thorough examination, e.g. through an order placed with an external audit company containing the business partner’s necessary identification personal data.

Legal basis of the processing:
We have a legitimate interest in processing these data. We only wish to cooperate with entities of credible integrity.

Categories of the personal data we process:
Identification data
Contact information

Processing and archiving period:
10 years following the check

Categories of data processors or recipients to whom we may provide the personal data:
External Audit
Upon request, your personal data may be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
Directly from you and from third persons

Transfers of personal data to third countries or supranational organisations:
As part of this processing your personal data may be transferred to other ŠKODA AUTO group companies or potentially also other recipients in third countries, i.e. in the People’s Republic of China, Republic of India and Russian Federation. This transfer will take place in such a case based on standard contractual clauses, i.e. a sample contract issued by the European Commission without a change in its text as anticipated by current legal regulations concerning personal data protection. Up-to-date information can be found at: http://www.skoda-auto.com/data-privacy. 

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases, personal data can also be the subject of processing for the purposes of legal matters resolution, including the performance of obligations towards public administration bodies and monitoring and ongoing evaluation of legal risks.

Implementation and development of business cooperation between ŠKODA AUTO and a business partner

Purpose of the processing:
Implementation and development of business cooperation between ŠKODA AUTO and a business partner

Description of the purpose of processing:
ŠKODA AUTO reaches out to suppliers with a demand for products and services. If the supplier is selected, it uses the personal data to conclude a general contract, or create an order. Furthermore, ŠKODA AUTO uses personal data to reach out to suppliers in order to develop or automate their future cooperation (e.g. by creating an automated systems interface for exchanging information).

Legal basis of the processing:
We have a legitimate interest in processing these data. We need your data in order to communicate with the business partner while implementing the business cooperation.

Categories of the personal data we process:
Identification data
Contact information

Processing and archiving period:
10 years after a record was created or updated

Categories of data processors or recipients to whom we may provide the personal data:
Platform provider
Group companies
Upon request, your personal data may be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:
Directly from you

Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.

Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.

Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases, personal data can also be the subject of processing for the purposes of legal matters resolution, including the performance of obligations towards public administration bodies and monitoring and ongoing evaluation of legal risks.