Personal data processing
Personal data processing
Personal data processing
Personal data processing
Personal data processing
In this document, we describe how we process your personal data for the purpose of recruiting and selecting employees (this especially applies to your name, contact information, education and/or other information included in your CV), as well as for sending our newsletters (this especially applies to your E-mail address and telephone number) and/or for other marketing activities (especially photographs from our events and/or direct marketing).
In this document, we describe how we process your personal data for the purpose of recruiting and selecting employees (this especially applies to your name, contact information, education and/or other information included in your CV), as well as for sending our newsletters (this especially applies to your E-mail address and telephone number) and/or for other marketing activities (especially photographs from our events and/or direct marketing).
In this document, we describe how we process your personal data for the purpose of recruiting and selecting employees (this especially applies to your name, contact information, education and/or other information included in your CV), as well as for sending our newsletters (this especially applies to your E-mail address and telephone number) and/or for other marketing activities (especially photographs from our events and/or direct marketing).
1
1
1
1
1
Administrator’s identity and contact details
Administrator’s identity and contact details
Administrator’s identity and contact details
Administrator’s identity and contact details
Administrator’s identity and contact details
1.1.
1.1.
1.1.
1.1.
1.1.
The Administrator of your personal data is SYMBIO Digital, s.r.o, IČO [Company ID] 26492407, with registered seat at Na Maninách 1040/14, 170 00 Prague 7, registered in the Commercial registry maintained by the Municipal Court of Prague, Section C, Insert 85648 (hereinafter the "Administrator").
The Administrator of your personal data is SYMBIO Digital, s.r.o, IČO [Company ID] 26492407, with registered seat at Na Maninách 1040/14, 170 00 Prague 7, registered in the Commercial registry maintained by the Municipal Court of Prague, Section C, Insert 85648 (hereinafter the "Administrator").
The Administrator of your personal data is SYMBIO Digital, s.r.o, IČO [Company ID] 26492407, with registered seat at Na Maninách 1040/14, 170 00 Prague 7, registered in the Commercial registry maintained by the Municipal Court of Prague, Section C, Insert 85648 (hereinafter the "Administrator").
The Administrator of your personal data is SYMBIO Digital, s.r.o, IČO [Company ID] 26492407, with registered seat at Na Maninách 1040/14, 170 00 Prague 7, registered in the Commercial registry maintained by the Municipal Court of Prague, Section C, Insert 85648 (hereinafter the "Administrator").
The Administrator of your personal data is SYMBIO Digital, s.r.o, IČO [Company ID] 26492407, with registered seat at Na Maninách 1040/14, 170 00 Prague 7, registered in the Commercial registry maintained by the Municipal Court of Prague, Section C, Insert 85648 (hereinafter the "Administrator").
1.2.
1.2.
1.2.
1.2.
1.2.
The administrator's contact information is as follows:
Address: Na Maninách 1040/14, 170 00 Prague 7
E-mail: hello@symbio.agency
Tel: +420 233 370 509
The administrator's contact information is as follows:
Address: Na Maninách 1040/14, 170 00 Prague 7
E-mail: hello@symbio.agency
Tel: +420 233 370 509
The administrator's contact information is as follows:
Address: Na Maninách 1040/14, 170 00 Prague 7
E-mail: hello@symbio.agency
Tel: +420 233 370 509
The administrator's contact information is as follows:
Address: Na Maninách 1040/14, 170 00 Prague 7
E-mail: hello@symbio.agency
Tel: +420 233 370 509
The administrator's contact information is as follows:
Address: Na Maninách 1040/14, 170 00 Prague 7
E-mail: hello@symbio.agency
Tel: +420 233 370 509
2
2
2
2
2
Reason for processing personal data
Reason for processing personal data
Reason for processing personal data
Reason for processing personal data
Reason for processing personal data
2.1.
2.1.
2.1.
2.1.
2.1.
The legal reason for processing your personal data is, in case of processing of personal data for the purpose of selection of employees, negotiations of an employment and/or other contract, which is in keeping with Article 6.1 b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "GDPR"). In case of processing of personal information for the purpose of marketing activities, the legal reason is the Administrator's legitimate interest, which is in keeping with Article 6.1 f) of the GDPR.
The legal reason for processing your personal data is, in case of processing of personal data for the purpose of selection of employees, negotiations of an employment and/or other contract, which is in keeping with Article 6.1 b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "GDPR"). In case of processing of personal information for the purpose of marketing activities, the legal reason is the Administrator's legitimate interest, which is in keeping with Article 6.1 f) of the GDPR.
The legal reason for processing your personal data is, in case of processing of personal data for the purpose of selection of employees, negotiations of an employment and/or other contract, which is in keeping with Article 6.1 b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "GDPR"). In case of processing of personal information for the purpose of marketing activities, the legal reason is the Administrator's legitimate interest, which is in keeping with Article 6.1 f) of the GDPR.
The legal reason for processing your personal data is, in case of processing of personal data for the purpose of selection of employees, negotiations of an employment and/or other contract, which is in keeping with Article 6.1 b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "GDPR"). In case of processing of personal information for the purpose of marketing activities, the legal reason is the Administrator's legitimate interest, which is in keeping with Article 6.1 f) of the GDPR.
The legal reason for processing your personal data is, in case of processing of personal data for the purpose of selection of employees, negotiations of an employment and/or other contract, which is in keeping with Article 6.1 b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "GDPR"). In case of processing of personal information for the purpose of marketing activities, the legal reason is the Administrator's legitimate interest, which is in keeping with Article 6.1 f) of the GDPR.
3
3
3
3
3
Why are we processing your personal data
Why are we processing your personal data
Why are we processing your personal data
Why are we processing your personal data
Why are we processing your personal data
3.1.
3.1.
3.1.
3.1.
3.1.
Your personal data are being processed solely for the purpose of recruitment and selection of employees, sending of our newsletters and implementation of other marketing activities by the Administrator (publication of photographs from our events and/or direct marketing).
Your personal data are being processed solely for the purpose of recruitment and selection of employees, sending of our newsletters and implementation of other marketing activities by the Administrator (publication of photographs from our events and/or direct marketing).
Your personal data are being processed solely for the purpose of recruitment and selection of employees, sending of our newsletters and implementation of other marketing activities by the Administrator (publication of photographs from our events and/or direct marketing).
Your personal data are being processed solely for the purpose of recruitment and selection of employees, sending of our newsletters and implementation of other marketing activities by the Administrator (publication of photographs from our events and/or direct marketing).
Your personal data are being processed solely for the purpose of recruitment and selection of employees, sending of our newsletters and implementation of other marketing activities by the Administrator (publication of photographs from our events and/or direct marketing).
4
4
4
4
4
How long do we keep your personal data
How long do we keep your personal data
How long do we keep your personal data
How long do we keep your personal data
How long do we keep your personal data
4.1.
4.1.
4.1.
4.1.
4.1.
When you send us your CV, we will process your personal data for the duration of the selection process for the given position, but no longer than 6 months from receiving your CV, unless you give us consent with archiving your CV for longer.
When you send us your CV, we will process your personal data for the duration of the selection process for the given position, but no longer than 6 months from receiving your CV, unless you give us consent with archiving your CV for longer.
When you send us your CV, we will process your personal data for the duration of the selection process for the given position, but no longer than 6 months from receiving your CV, unless you give us consent with archiving your CV for longer.
When you send us your CV, we will process your personal data for the duration of the selection process for the given position, but no longer than 6 months from receiving your CV, unless you give us consent with archiving your CV for longer.
When you send us your CV, we will process your personal data for the duration of the selection process for the given position, but no longer than 6 months from receiving your CV, unless you give us consent with archiving your CV for longer.
4.2.
4.2.
4.2.
4.2.
4.2.
If you are our client, we will be sending you our newsletters to your E-mail (and/or telephone number) for a period of 3 years from your last PO.
If you are our client, we will be sending you our newsletters to your E-mail (and/or telephone number) for a period of 3 years from your last PO.
If you are our client, we will be sending you our newsletters to your E-mail (and/or telephone number) for a period of 3 years from your last PO.
If you are our client, we will be sending you our newsletters to your E-mail (and/or telephone number) for a period of 3 years from your last PO.
If you are our client, we will be sending you our newsletters to your E-mail (and/or telephone number) for a period of 3 years from your last PO.
4.3.
4.3.
4.3.
4.3.
4.3.
When we take photos at our events, we will keep such photos in our archive for the duration of our company and reserve the right to use them on Websites and/or social networks for a period of 10 years.
When we take photos at our events, we will keep such photos in our archive for the duration of our company and reserve the right to use them on Websites and/or social networks for a period of 10 years.
When we take photos at our events, we will keep such photos in our archive for the duration of our company and reserve the right to use them on Websites and/or social networks for a period of 10 years.
When we take photos at our events, we will keep such photos in our archive for the duration of our company and reserve the right to use them on Websites and/or social networks for a period of 10 years.
When we take photos at our events, we will keep such photos in our archive for the duration of our company and reserve the right to use them on Websites and/or social networks for a period of 10 years.
5
5
5
5
5
Whom do we give your personal data to
Whom do we give your personal data to
Whom do we give your personal data to
Whom do we give your personal data to
Whom do we give your personal data to
5.1.
5.1.
5.1.
5.1.
5.1.
We may authorise a third party to process your personal data. A Processor of personal data is an entity which, based on special legislation or our authorisation or authorisation by the Administrator, processes personal data. In such cases, your personal data is guaranteed (contractually, or based on legislation) to be subject to the same protection as when processed by the Administrator.
We may authorise a third party to process your personal data. A Processor of personal data is an entity which, based on special legislation or our authorisation or authorisation by the Administrator, processes personal data. In such cases, your personal data is guaranteed (contractually, or based on legislation) to be subject to the same protection as when processed by the Administrator.
We may authorise a third party to process your personal data. A Processor of personal data is an entity which, based on special legislation or our authorisation or authorisation by the Administrator, processes personal data. In such cases, your personal data is guaranteed (contractually, or based on legislation) to be subject to the same protection as when processed by the Administrator.
We may authorise a third party to process your personal data. A Processor of personal data is an entity which, based on special legislation or our authorisation or authorisation by the Administrator, processes personal data. In such cases, your personal data is guaranteed (contractually, or based on legislation) to be subject to the same protection as when processed by the Administrator.
We may authorise a third party to process your personal data. A Processor of personal data is an entity which, based on special legislation or our authorisation or authorisation by the Administrator, processes personal data. In such cases, your personal data is guaranteed (contractually, or based on legislation) to be subject to the same protection as when processed by the Administrator.
5.2.
5.2.
5.2.
5.2.
5.2.
At the moment, we are using the following Processors:
Co-operators on marketing services (consultants, copywriters, strategists and other entities cooperating with the Administrator as subcontractors)
Google
MailChimp
ClickUp
At the moment, we are using the following Processors:
Co-operators on marketing services (consultants, copywriters, strategists and other entities cooperating with the Administrator as subcontractors)
Google
MailChimp
ClickUp
At the moment, we are using the following Processors:
Co-operators on marketing services (consultants, copywriters, strategists and other entities cooperating with the Administrator as subcontractors)
Google
MailChimp
ClickUp
At the moment, we are using the following Processors:
Co-operators on marketing services (consultants, copywriters, strategists and other entities cooperating with the Administrator as subcontractors)
Google
MailChimp
ClickUp
At the moment, we are using the following Processors:
Co-operators on marketing services (consultants, copywriters, strategists and other entities cooperating with the Administrator as subcontractors)
Google
MailChimp
ClickUp
5.3.
5.3.
5.3.
5.3.
5.3.
As an Administrator, we do not intend to transfer your personal data to any third country (a country outside of the EU) or any international organisation.
As an Administrator, we do not intend to transfer your personal data to any third country (a country outside of the EU) or any international organisation.
As an Administrator, we do not intend to transfer your personal data to any third country (a country outside of the EU) or any international organisation.
As an Administrator, we do not intend to transfer your personal data to any third country (a country outside of the EU) or any international organisation.
As an Administrator, we do not intend to transfer your personal data to any third country (a country outside of the EU) or any international organisation.
6
6
6
6
6
How is your personal data secured
How is your personal data secured
How is your personal data secured
How is your personal data secured
How is your personal data secured
6.1.
6.1.
6.1.
6.1.
6.1.
We know how your privacy and security of your personal data is important. We therefore strive to maintain a high level of security during processing of your personal data so that your data cannot be misused.
We know how your privacy and security of your personal data is important. We therefore strive to maintain a high level of security during processing of your personal data so that your data cannot be misused.
We know how your privacy and security of your personal data is important. We therefore strive to maintain a high level of security during processing of your personal data so that your data cannot be misused.
We know how your privacy and security of your personal data is important. We therefore strive to maintain a high level of security during processing of your personal data so that your data cannot be misused.
We know how your privacy and security of your personal data is important. We therefore strive to maintain a high level of security during processing of your personal data so that your data cannot be misused.
6.2.
6.2.
6.2.
6.2.
6.2.
Your data may be processed manually or automatically. Automated processing takes place in our information systems and/or our processors' information systems.
Your data may be processed manually or automatically. Automated processing takes place in our information systems and/or our processors' information systems.
Your data may be processed manually or automatically. Automated processing takes place in our information systems and/or our processors' information systems.
Your data may be processed manually or automatically. Automated processing takes place in our information systems and/or our processors' information systems.
Your data may be processed manually or automatically. Automated processing takes place in our information systems and/or our processors' information systems.
6.3.
6.3.
6.3.
6.3.
6.3.
Your personal data are processed by our employees and/or other processors. We always sign a written processing agreement with all processors of your personal data. These agreements include the same guarantees as those applying to processing of personal data within SYMBIO.
Your personal data are processed by our employees and/or other processors. We always sign a written processing agreement with all processors of your personal data. These agreements include the same guarantees as those applying to processing of personal data within SYMBIO.
Your personal data are processed by our employees and/or other processors. We always sign a written processing agreement with all processors of your personal data. These agreements include the same guarantees as those applying to processing of personal data within SYMBIO.
Your personal data are processed by our employees and/or other processors. We always sign a written processing agreement with all processors of your personal data. These agreements include the same guarantees as those applying to processing of personal data within SYMBIO.
Your personal data are processed by our employees and/or other processors. We always sign a written processing agreement with all processors of your personal data. These agreements include the same guarantees as those applying to processing of personal data within SYMBIO.
7
7
7
7
7
Cookies
Cookies
Cookies
Cookies
Cookies
7.1.
7.1.
7.1.
7.1.
7.1.
Our Website uses cookies to:
Measure site traffic and provide statistics on traffic and user behaviour;
Improve functionality of the site.
Our Website uses cookies to:
Measure site traffic and provide statistics on traffic and user behaviour;
Improve functionality of the site.
Our Website uses cookies to:
Measure site traffic and provide statistics on traffic and user behaviour;
Improve functionality of the site.
Our Website uses cookies to:
Measure site traffic and provide statistics on traffic and user behaviour;
Improve functionality of the site.
Our Website uses cookies to:
Measure site traffic and provide statistics on traffic and user behaviour;
Improve functionality of the site.
7.2.
7.2.
7.2.
7.2.
7.2.
Collecting cookies may be considered processing of personal data. Such processing is possible for a legal reason - legitimate interest of the Administrator and is in keeping with Article 6.1 f) of the GDPR.
Collecting cookies may be considered processing of personal data. Such processing is possible for a legal reason - legitimate interest of the Administrator and is in keeping with Article 6.1 f) of the GDPR.
Collecting cookies may be considered processing of personal data. Such processing is possible for a legal reason - legitimate interest of the Administrator and is in keeping with Article 6.1 f) of the GDPR.
Collecting cookies may be considered processing of personal data. Such processing is possible for a legal reason - legitimate interest of the Administrator and is in keeping with Article 6.1 f) of the GDPR.
Collecting cookies may be considered processing of personal data. Such processing is possible for a legal reason - legitimate interest of the Administrator and is in keeping with Article 6.1 f) of the GDPR.
7.3.
7.3.
7.3.
7.3.
7.3.
Websites may also be used in a mode preventing the site's owner to collect information on user behaviour – this mode may be selected as part of browser settings, or an objection may be made against such collection of information as per Article 21 of the GDPR. Such objection shall be sent to hello@symbio.agency. Objections shall be evaluated without unnecessary delays and no later than 30 days from receipt. Cookies necessary for Website functionality will only be stored for the time necessary for such functionality.
Websites may also be used in a mode preventing the site's owner to collect information on user behaviour – this mode may be selected as part of browser settings, or an objection may be made against such collection of information as per Article 21 of the GDPR. Such objection shall be sent to hello@symbio.agency. Objections shall be evaluated without unnecessary delays and no later than 30 days from receipt. Cookies necessary for Website functionality will only be stored for the time necessary for such functionality.
Websites may also be used in a mode preventing the site's owner to collect information on user behaviour – this mode may be selected as part of browser settings, or an objection may be made against such collection of information as per Article 21 of the GDPR. Such objection shall be sent to hello@symbio.agency. Objections shall be evaluated without unnecessary delays and no later than 30 days from receipt. Cookies necessary for Website functionality will only be stored for the time necessary for such functionality.
Websites may also be used in a mode preventing the site's owner to collect information on user behaviour – this mode may be selected as part of browser settings, or an objection may be made against such collection of information as per Article 21 of the GDPR. Such objection shall be sent to hello@symbio.agency. Objections shall be evaluated without unnecessary delays and no later than 30 days from receipt. Cookies necessary for Website functionality will only be stored for the time necessary for such functionality.
Websites may also be used in a mode preventing the site's owner to collect information on user behaviour – this mode may be selected as part of browser settings, or an objection may be made against such collection of information as per Article 21 of the GDPR. Such objection shall be sent to hello@symbio.agency. Objections shall be evaluated without unnecessary delays and no later than 30 days from receipt. Cookies necessary for Website functionality will only be stored for the time necessary for such functionality.
7.4.
7.4.
7.4.
7.4.
7.4.
When you make an objection to processing of technical cookies necessary for our Website's functionality, full function and compatibility of the Website is not guaranteed.
When you make an objection to processing of technical cookies necessary for our Website's functionality, full function and compatibility of the Website is not guaranteed.
When you make an objection to processing of technical cookies necessary for our Website's functionality, full function and compatibility of the Website is not guaranteed.
When you make an objection to processing of technical cookies necessary for our Website's functionality, full function and compatibility of the Website is not guaranteed.
When you make an objection to processing of technical cookies necessary for our Website's functionality, full function and compatibility of the Website is not guaranteed.
7.5.
7.5.
7.5.
7.5.
7.5.
Cookies collected for the purpose of measuring site traffic and providing traffic and user behaviour statistics are analysed as part of cumulative data and in a pseudonymised version.
Cookies collected for the purpose of measuring site traffic and providing traffic and user behaviour statistics are analysed as part of cumulative data and in a pseudonymised version.
Cookies collected for the purpose of measuring site traffic and providing traffic and user behaviour statistics are analysed as part of cumulative data and in a pseudonymised version.
Cookies collected for the purpose of measuring site traffic and providing traffic and user behaviour statistics are analysed as part of cumulative data and in a pseudonymised version.
Cookies collected for the purpose of measuring site traffic and providing traffic and user behaviour statistics are analysed as part of cumulative data and in a pseudonymised version.
7.6.
7.6.
7.6.
7.6.
7.6.
Cookies are stored for a maximum of 13 months from their last use.
Cookies are stored for a maximum of 13 months from their last use.
Cookies are stored for a maximum of 13 months from their last use.
Cookies are stored for a maximum of 13 months from their last use.
Cookies are stored for a maximum of 13 months from their last use.
7.7.
7.7.
7.7.
7.7.
7.7.
Cookies are processed by the following 3rd parties:
Cookies are processed by the following 3rd parties:
Cookies are processed by the following 3rd parties:
Cookies are processed by the following 3rd parties:
Cookies are processed by the following 3rd parties:
8
8
8
8
8
What are your rights
What are your rights
What are your rights
What are your rights
What are your rights
8.1.
8.1.
8.1.
8.1.
8.1.
Under the terms of the GDPR, you have the right to request access to your personal data from the Administrator, right to request a copy of your personal data from us, right to correction or deletion of your personal data and/or right to request limited processing of your personal data and right to portability of your personal data when such data were obtained by automated processing based on your consent, or contract performance.
Under the terms of the GDPR, you have the right to request access to your personal data from the Administrator, right to request a copy of your personal data from us, right to correction or deletion of your personal data and/or right to request limited processing of your personal data and right to portability of your personal data when such data were obtained by automated processing based on your consent, or contract performance.
Under the terms of the GDPR, you have the right to request access to your personal data from the Administrator, right to request a copy of your personal data from us, right to correction or deletion of your personal data and/or right to request limited processing of your personal data and right to portability of your personal data when such data were obtained by automated processing based on your consent, or contract performance.
Under the terms of the GDPR, you have the right to request access to your personal data from the Administrator, right to request a copy of your personal data from us, right to correction or deletion of your personal data and/or right to request limited processing of your personal data and right to portability of your personal data when such data were obtained by automated processing based on your consent, or contract performance.
Under the terms of the GDPR, you have the right to request access to your personal data from the Administrator, right to request a copy of your personal data from us, right to correction or deletion of your personal data and/or right to request limited processing of your personal data and right to portability of your personal data when such data were obtained by automated processing based on your consent, or contract performance.
8.2.
8.2.
8.2.
8.2.
8.2.
You HAVE THE RIGHT TO OBJECT to processing of your E-mail address (and/or telephone number) for the purpose of sending newsletters when such newsletters are being sent based on our legitimate interest – i.e. you are our customer. Similarly, you have the right to object to processing of other personal data based on legitimate interest of the Administrator – i.e. processing of cookies. Your objection will be evaluated without delay.
You HAVE THE RIGHT TO OBJECT to processing of your E-mail address (and/or telephone number) for the purpose of sending newsletters when such newsletters are being sent based on our legitimate interest – i.e. you are our customer. Similarly, you have the right to object to processing of other personal data based on legitimate interest of the Administrator – i.e. processing of cookies. Your objection will be evaluated without delay.
You HAVE THE RIGHT TO OBJECT to processing of your E-mail address (and/or telephone number) for the purpose of sending newsletters when such newsletters are being sent based on our legitimate interest – i.e. you are our customer. Similarly, you have the right to object to processing of other personal data based on legitimate interest of the Administrator – i.e. processing of cookies. Your objection will be evaluated without delay.
You HAVE THE RIGHT TO OBJECT to processing of your E-mail address (and/or telephone number) for the purpose of sending newsletters when such newsletters are being sent based on our legitimate interest – i.e. you are our customer. Similarly, you have the right to object to processing of other personal data based on legitimate interest of the Administrator – i.e. processing of cookies. Your objection will be evaluated without delay.
You HAVE THE RIGHT TO OBJECT to processing of your E-mail address (and/or telephone number) for the purpose of sending newsletters when such newsletters are being sent based on our legitimate interest – i.e. you are our customer. Similarly, you have the right to object to processing of other personal data based on legitimate interest of the Administrator – i.e. processing of cookies. Your objection will be evaluated without delay.
8.3.
8.3.
8.3.
8.3.
8.3.
Should you feel that processing of your personal data resulted in a breach of the GDPR, you have the right, among other things, to complain to the Office for Protection of Personal Data and/or to appeal to a court.
Should you feel that processing of your personal data resulted in a breach of the GDPR, you have the right, among other things, to complain to the Office for Protection of Personal Data and/or to appeal to a court.
Should you feel that processing of your personal data resulted in a breach of the GDPR, you have the right, among other things, to complain to the Office for Protection of Personal Data and/or to appeal to a court.
Should you feel that processing of your personal data resulted in a breach of the GDPR, you have the right, among other things, to complain to the Office for Protection of Personal Data and/or to appeal to a court.
Should you feel that processing of your personal data resulted in a breach of the GDPR, you have the right, among other things, to complain to the Office for Protection of Personal Data and/or to appeal to a court.