Privacy Policy

1. Who we are

The business company Quanda International s.r.o., company ID (IČ) 02285665, with its registered office at Národních hrdinů 44, Dolní Počernice, 190 12 Praha 9, registered in the Commercial Register at the Municipal Court in Prague, Section C, Insert No. 217649 (hereinafter the „Provider“), provides the QUANDA service, which consists of a set of on-line tools and means for creating, keeping and managing information about persons and companies, for creating, keeping and managing online questionnaires and online analyses, for creating, keeping, managing and sending out bulk e-mail campaigns and for creating, keeping and managing Active forms (hereinafter the „service“). The Provider further operates the web portal www.quanda.com and organises professional lectures, seminars, workshops, conferences, online courses and webinars (hereinafter „educational events“).

2. Whose personal data we process

Within its activity, the Provider processes, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the „Regulation“), the personal data of the following data subjects:

users of the Service
participants of events organised by the Provider

3. What personal data we process within the provision of the Service (the Quanda application)

Within the provision of the Service, the Provider processes in particular the following personal data of users of the Service:

first name and surname
gender
e-mail address
telephone number
company identification data (e.g. company ID, VAT ID, company registered office address)
answers from sent questionnaires
system data (information on the handling of the e-mail message)

4. Why we process personal data

This personal data will be processed for the purpose of identifying the contracting parties and performance under the contract, and further for the purpose of keeping records of the contract and the future potential assertion and defence of the rights and obligations of the contracting parties. Such processing is permitted by Article 6(1)(b) and (f) of the Regulation.

5. How long we process personal data

This personal data will be processed for the period of the provision of the Service and thereafter for a period of 10 years, or, to the extent necessary, for the period stipulated by the applicable legal regulations.

6. What personal data we process when organising educational events

When organising educational events, the Provider, within its activity, processes in particular the following personal data of their participants:

first name and surname
e-mail address
telephone number
company identification data (e.g. company ID, VAT ID, company registered office address)
answers from sent questionnaires
system data (information on the handling of the e-mail message)

7. Why we process personal data

8. How long we process personal data

This personal data will be processed from the moment of registration until the relevant educational event takes place and thereafter for a period of 10 years, or, to the extent necessary, for the period stipulated by the applicable legal regulations.

9. Profiling

In the processing of the above personal data, the Provider uses profiling, for the purpose of improving the quality of the Services and creating individually assembled content of commercial communications, whereby it does so on the basis of its legitimate interest, i.e. for the reason under the provision of Art. 6(1)(f) of the Regulation.

10. Information on the sending of commercial communications

The e-mail address may be processed for the purpose of inclusion in the database for sending commercial communications. This procedure is permitted by Section 7(3) of Act No. 480/2004 Coll., on information society services, on the basis of the concluded contract, unless the users of the Service or the participants of an event refuse it. These communications may relate only to similar goods or services, and can be unsubscribed at any time in a simple manner, by sending a letter, an e-mail or by clicking on the link in the commercial communication. For this purpose, the e-mail address will be processed by the Provider for the period of subscribing to the Services and thereafter for a period of 3 years from their last use.

11. Other processors

The personal data is processed by the Provider as the controller. However, the personal data may also be processed for it by the following processors:

The company RAYNET s.r.o., with its registered office at Francouzská 6167/5, Poruba, 708 00 Ostrava, company ID: 26843820
the company COEX s.r.o., with its registered office at Pod Hájkem 2204/1, Libeň, 180 00 Praha 8, company ID: 27563341
the company Linode, LLC, with its registered office at 329 E. Jimmie Leeds Rd, Ste. A Galloway, NJ 08205
the company Sendgrid, with its registered office at 1801 California Street, 1801 California St, Denver, CO 80202
a list of further entities to which the personal data will be made available will be submitted by the Controller at the Data subject's request

12. Storage of data within the provision of the Service (the Quanda application) by the subscriber (our customers) on the Provider's (our) servers

The Provider further collects and retains data which, within the provision of the Service, the subscriber collects when using the Service about third parties, in particular about their customers, and stores it on the Provider's servers. On the basis of the concluded Terms of Service, the subscriber is obliged to obtain from these third parties consent to the collection and processing of their personal data, is obliged to duly inform these persons about the processing of personal data, including informing them about the processing of personal data by the Provider in the position of processor, and is liable to the Provider for ensuring that all personal data obtained by the subscriber, as well as the manner of its acquisition, meets all the requirements stipulated by law.

The Provider will ensure sufficient technical and organisational security so that no unauthorised or accidental access to the stated data of users of the Services, its alteration, destruction or loss, unauthorised transfers or its unauthorised processing or other misuse can occur.

13. What your rights are in connection with the Regulation on the protection of personal data (GDPR)

The right to request from us information on what personal data of yours we process.

We will be very happy to provide you with this information quickly – write your request to support@onquanda.com or call +420 605 163 892.

The right to request from us access to this data and to have it updated or corrected, or to request restriction of the processing.

Write your request to support@onquanda.com or call +420 605 163 892.

The right to request from us the erasure of this personal data.

Write your request to support@onquanda.com or call +420 605 163 892.

The right to data portability and the right to request a copy of the processed personal data.

Write your request to support@onquanda.com or call +420 605 163 892. The data can be provided in the *.csv or *.xlsx formats.

The right in the case of processing carried out on the basis of the legitimate interest of the Controller.

You have the right to object to the processing. Contact support@onquanda.com or call +420 605 163 892.

The right to lodge a complaint with the Office for Personal Data Protection.

You have the right to an effective judicial remedy if your rights under the Regulation are breached. The Office's website: https://www.uoou.cz/

Questions concerning the GDPR, data security and your rights: support@onquanda.com or +420 605 163 892.

The Quanda Team