ATC Preparation s.r.o., incorporated under the laws of the Czech Republic, ID number 226 31 518, with registered seat at Příčná 1892/4, Nové Město, 110 00 Praha 1, registered in the commercial register maintained by the Municipal Court in Prague under file number C 418702 ("ATC") describes in this privacy policy what personal data is processed, for what purpose, how long and other relevant information according to the Regulation (EU) 2016/679 ("GDPR").
ATC helps with English Screening, provides Training Software, Training Materials and other services for preparation for an Air Traffic Controller career. Details about services and materials are available here: https://atcpreparation.com/ ("website").
ATC processes personal data about you as data controller. You may visit ATC's website, buy ATC software and be licensee of the software, or buy any other materials or services from ATC.
ATC will not process personal data of minors.
PERSONAL DATA PROCESSED
ATC may process these types of personal data as personal data controller.
- Identification information. This includes your first name, last name, identification of organization (if you buy services/materials on behalf of the company).
- Contact details. E-mail address and phone number.
- Billing details. Billing address, shipping address (if required), VAT number, other data related to billing and issuing invoices by the ATC.
- Payment details. Information about payment method, general information about payment card. ATC uses third parties to process payments, thus, it has no access to the full information about payment cards.
- User account and customer data. After you purchase some ATC products, an account is automatically created (see information on ATC website). This may include processing of account usage information, user details, information about bought materials/services/software, information about payments and any other customer related data.
- Software related information. Information about statistics and session data, information about operation system, processor id and other information related to the software usage.
- Communication data. Personal data provided by contacting ATC through website, e-mail or any other means of communication.
- Cookies. During visit to the website, ATC processes necessary cookies to provide you with services and products you requested, ensure functionality of the website. Also, analytics information may be processed as stipulated below or as stipulated in the cookie bar on the website.
All personal data are gathered directly from you or from your device while using ATC software or visiting ATC website.
PURPOSES OF THE PROCESSING OF PERSONAL DATA
Contractual relationship
ATC primarily processes personal data to provide you with services/software/materials and to conclude mutual agreement between you and ATC (which is concluded on-line via website). Personal data are required to deliver you materials, provide you with the access to the software, enable your usage and ensure payments and other contractual duties.
For this purpose, we process your Identification information, Contact details, Billing details, Payment details, User account and customer data, Software related information, Communication data and Cookies in the scope necessary to ensure mutual relationship. Software related information (statistics) may be shared with other users of the software when using.
The legal basis for this processing is the performance of the contract between you and ATC and the need to take steps at your request before entering the contract.
For this purpose, details of your payment card may be stored by third party for automatic renewal of purchased services/software. List of third parties is stipulated in the Part C of this privacy policy.
The data are processed for the duration of the concluded contract and for the period necessary for the performance of the obligations under such contract. When you want to delete your account, it is necessary to contact ATC on e-mail [email protected] and ATC will delete your account according to the rules set in the mutual contract. However, ATC may keep some of your personal data for other purposes as stipulated below.
Protection of rights and duties and protection against frauds and misuse
ATC may use personal information to protect against claims or to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of Terms & Conditions.
For this purpose, ATC processes your Identification information, Contact details, Billing details, Payment details, User account and customer data, Software related information, Communication data and Cookies (necessary).
The legal basis for this processing is legitimate interest in protecting rights and duties of ATC and protection against frauds and misuse.
ATC processes the data for the period during which limitation periods or any other time limits for the assertion of claims may run. This period may be changed according to the current state and according to the specific findings and caused frauds.
Fulfilling legal obligations
ATC may also process your personal data to comply with legal obligations, particularly in the area of taxes, accounting and other relevant areas. At the same time, ATC needs to be prepared to provide cooperation to state authorities if ATC is required to do so by law.
For this purpose, ATC processes your Identification information, Billing details, Payment details, User account and customer data in the scope required to fulfil obligations in connection with accounting and taxes.
The legal basis for this processing is the fulfilment of legal obligations. Those data are processed for the period required by law. This is generally the period in which supervisory authorities may conclude check or start proceeding which is up to 10 years or similar (5-10 years).
Ensuring communication and support
ATC also processes your personal data to ensure communication with you. That means that if you use the contact form on the website, contact ATC via e-mail or any other means of communications, ATC will use your personal data for exactly these purposes -- communication, evidence of communication and ensuring answers, inquiries and support.
For this purpose, ATC processes your Identification information, Contact details, Communication data and other relevant categories according to the type of communication.
The legal basis for this processing is legitimate interest in ensuring communication. However, if the communication is connected with support services, the personal data may also be processed for the purpose of the performance of this contractual relationship.
The data are processed for the duration needed to ensure communication which may vary according to your request or message. The main determinant of the length is the period necessary for handling of the request and fulfil possible contractual obligations.
Newsletters and commercial communication
If you agree with it, ATC may send you newsletter and other commercial communication via your e-mail address.
For this purpose, ATC processes your e-mail address and your Identification information.
The legal basis for this processing is your consent you give ATC while making order on the website.
You may opt out of receiving any newsletter at any time by using the unsubscribe links provided in the footer of each message sent. This is considered as withdrawal of your consent.
Website operation and necessary functionality (a necessity)
ATC also processes your personal data through Cookies. For this purpose, ATC processes personal data e.g., to verify whether you are logged in your account, whether you saved some orders in the basket.
For this purpose, ATC processes Cookies (necessary).
The legal basis for this processing is legitimate interest in the proper functioning of the website. Personal data are processed, as a rule, for the duration of your visit to the website, for a maximum of 1 year from the date of collection.
Website analysis (analytics)
ATC also processes the Cookies (analytics) for the purpose of analytics, which facilitates ATC to make more detailed analyses of the traffic on the website, in which case your personal data may also be transferred to third parties.
The legal basis for processing here is thus your consent given via cookies bar. The personal data is processed until your consent is withdrawn, but in any case, at maximum as stated for each cookie stored. Detailed information is available in the cookie bar.
SHARING OF PERSONAL DATA
Your personal data may be shared with these personal data recipients:
- companies providing accounting and tax services;
- payment provider, which is company Stripe, Inc. The company is registered under Data Privacy Framework;
- Google Ireland Limited, which provides us with possible cookies on the website. If the data are shared with Google LLC, the company is registered under Data Privacy Framework;
- Amazon Web Services which is provider of storage services. If the data are shared with Amazon.com, Inc., the company is registered under Data Privacy Framework.
Where ATC shares your personal data with controllers and processors in third countries (outside the EEA), ATC only does so where there is a decision by the European Commission that a particular country outside the EEA provides an adequate level of data protection, including where controllers or processors have adopted additional data protection measures such as Binding Corporate Rules (BCRs) or Standard Contractual Clauses (SCCs).
YOUR RIGHTS IN PROCESSING AND THE POSSIBILITY OF EXERCISING THEM
In all matters related to the processing of your personal data, whether it is a question, the exercise of rights, you can contact ATC at [email protected].
You have following rights:
Right of access
You have the right to obtain confirmation from ATC as to whether or not ATC is processing your personal data.
If processing is taking place, you may request access to information about the purpose and scope of the processing, the recipients of the data, the duration of the processing, your other rights (rectification, erasure, restriction, objection, complaint), and the sources of the personal data (most of which are described in this document).
You can also request a copy of the personal data that ATC processes. The first copy is provided free of charge; additional copies may be subject to a reasonable fee. ATC may limit the scope of data disclosed if necessary to protect the rights and freedoms of others.
Right to withdraw consent
You may withdraw any consent you have given to ATC at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal and does not require ATC to erase personal data that have already been anonymised.
Right to repair
You have the right to request ATC to correct inaccurate personal data concerning you. Depending on the purpose of processing, you may also ask ATC to complete incomplete data, including by providing a supplementary statement.
Right to erasure (right to be forgotten)
You may request ATC to delete your personal data if:
- ATC no longer needs the data for the purposes for which they were collected or processed;
- you withdraw the consent on which the processing is based and there is no other legal ground for the processing;
- you object to processing and no overriding legitimate grounds exist, or you object to processing for direct‑marketing purposes;
- the data have been processed unlawfully.
This right does not apply where processing is necessary for ATC to comply with legal obligations, perform tasks in the public interest, or establish, exercise, or defend legal claims.
Right to restriction of processing
You may request ATC to restrict processing of your personal data if:
- you contest the accuracy of the data (restriction applies for the period needed to verify accuracy);
- the processing is unlawful, and you request restriction instead of erasure;
- ATC no longer needs the data for the original purposes, but you require them for the establishment, exercise, or defence of legal claims;
- you have objected to processing and verification of overriding legitimate grounds is pending.
Right to portability
When processing is carried out by automated means based on your consent or for the performance of a contract, you have the right to obtain a copy of your personal data from ATC in a commonly used, machine‑readable format. Where technically feasible, ATC will transfer the data directly to another controller designated by you. ATC may limit the scope of transferred data to protect the rights and freedoms of others.
Right to object
You have the right to object to the processing of your personal data that ATC carries out based on its legitimate interests. Unless ATC demonstrates compelling legitimate grounds for the processing or needs the data for the establishment, exercise, or defence of legal claims, ATC will cease such processing.
RIGHT TO FILE A COMPLAINT
You can also file a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.