POLICY REGARDING THE PROTECTION OF INDIVIDUALS
regarding processing of personal data and free movement of such data

Within AI CART the right to personal data protection is taken into account in relation to the function it performs in society and balanced with other fundamental rights, in accordance with the principle of proportionality and as enshrined – respect for private and family life, residence, and communications, protection of personal data, freedom of thought, conscience and religion, freedom of expression and information.

AI CART guarantees control over their own personal data, legal and practical security for individuals.

GDPR PRINCIPLES

INTEGRITY AND CONFIDENTIALITY

Personal data is processed in a way that ensures adequate security of personal data, including protection against unauthorized or illegal processing and against accidental loss, destruction or damage, through appropriate technical and organizational measures.

SECURITY AND CONFIDENTIALITY

Personal data are processed in a way that adequately ensures their security and confidentiality, including in order to prevent unauthorized access to them or the unauthorized use of personal data and the equipment used for processing.

TRANSPARENCY

Within AI CART any processing of personal data is legal and fair because it ensures that:

any information and communications relating to the processing of such personal data are easily accessible and easy to understand and that simple and clear language is used.
informing the data subjects about the purposes of the processing, as well as providing additional information, in order to ensure fair and transparent processing regarding the data subjects is done in order to guarantee their right to be confirmed and communicate their personal data. look and which are processed.
persons are informed of the risks, rules, guarantees, and rights regarding data processing and of the rights related to the processing.

CONCISE INFORMATION, EASY ACCESSIBLE AND EASY TO UNDERSTAND

Within AI CART the information regarding the processing of personal data is concise, easily accessible, and easy to understand.

Simple and clear language is used for information, as well as visualization where appropriate.

This information can also be provided in electronic format, for example when it is addressed to the public, through the website AI CART.

LEGALITY OF PROCESSING

Within AI CART the processing is legal only if and insofar as:

the data subject has given his or her consent to the processing of the data
the processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before concluding a contract;
the processing is necessary in order to fulfill a legal obligation of AI CART;
processing is necessary to protect the vital interests of the data subject or of another natural person;
processing is necessary to perform a task that serves a public interest
the processing is necessary for the legitimate interests pursued by AI CART or a third party, unless the interests or fundamental rights and freedoms of the data subject prevail, which require the protection of personal data, especially when the data subject is a child.

PERSONAL DATA

Personal data are:

collected for specified, explicit, and legitimate purposes and are not further processed in a manner incompatible with those purposes;
appropriate, relevant, and limited to what is necessary for relation to the purposes for which they are processed (“minimization of data”);
accurate and, if necessary, updated;
kept in a form that permits identification of data subjects for a period not exceeding the period necessary for the purposes for which the data are processed

In order to ensure that personal data are not kept longer than necessary, AI CART

set deletion deadlines,
sets deadlines for periodic review.
take all reasonable steps to ensure that inaccurate data is rectified or erased.

INFORMATION ON PROCESSING OPERATIONS

AI CART

inform the data subject about the existence/purposes of the processing operations
provides additional information to ensure fair and transparent processing

CONSENT

The person’s consent is given

following a request submitted, which is clear and concise.
by an unequivocal action which constitutes a freely expressed, specific, informed and clear manifestation of the data subject’s consent to the processing of his personal data, such as a written statement, including in electronic or verbal format.
consent is given for all purposes of processing if the data processing is done for several purposes

Conditions of consent

If the processing is based on consent, AI CART is able to demonstrate that the data subject has given his consent for the processing of his data.
The data subject has the right to withdraw at any time

THE RIGHTS OF THE PERSON CONCERNED

The right of access

The data subject has the right to obtain confirmation that personal data concerning him or her are being processed or not and if so, have the right to access those data.

The right of rectification

The data subject has the right to obtain, without undue delay, the rectification of inaccurate personal data concerning him.

The right to be forgotten

The data subject has the right to obtain the deletion of personal data concerning him, and AI CART will delete this data without undue delay.

The right to restrict processing

The data subject has the right to obtain the restriction of the processing of personal data concerning him/her under the conditions of the GDPR Regulation.

The right to data portability

The data subject has the right to receive the personal data concerning him and which he has provided and has the right to transmit this data to another operator.

The right to opposition

At any time, the data subject has the right to object to the processing of personal data under the Regulation, for reasons related to his / her particular situation.

Cooperation with the supervisory authority

AI CART and the person authorized by the operator and, as the case may be, their representative cooperates, upon request, with the supervisory authority in carrying out their tasks.

Inform the data subject about the personal data breach

If the breach of personal data security is likely to pose a high risk to the rights and freedoms of individuals, AI CART informs the data subject without undue delay about this breach.

Data protection officer

AI CART appoints a person in charge based on the professional qualities and, in particular, on the specialized knowledge in the law and practices in the field of data protection, as well as on the basis of the capacity to fulfill the tasks provided in the GDPR Regulation.

COMMITMENT

The management at the highest level maintains its permanent commitment for the continuous improvement of the security measures of the personal data processing activities in order to increase the performance in the fields:

  • Confidentiality
  • Availability
  • integrity of personal data

POLICY will be maintained permanently:

  • as documented information, appropriate to the purpose,
    adapted to the security requirements of personal data processing activities, communicated within the organization and available to interested parties.