Principles of Personal Data Processing and Protection
Preamble
The real estate and commercial broker, EOVP Group s.r.o., through its website www.future-albania.cz, presents to visitors of this website the Dukadjini Resort real estate project in Shëngjin (hereinafter referred to as the "Project"), including the possibility of brokering the direct purchase of apartments in this Project. As part of its business activities, as well as in the operation of the above-mentioned website, the personal data of natural persons – clients/prospective buyers of real estate – is (may be) processed. Through this Personal Data Protection Policy (hereinafter referred to as the "Policy"), the broker assures its clients and website visitors that when providing services or processing personal data, it always acts in accordance with all relevant legal regulations in the field of personal data protection, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as the "GDPR") and Act No. 110/2019 Coll., on the processing of personal data (hereinafter referred to as the "Act"), and at the same time with all industry regulations, in particular Act No. 39/2020 Coll., on real estate brokerage, as amended. Through these principles, the broker also fulfils its legal information obligations within the meaning of Article 12 et seq. of the GDPR. For the purposes of these Principles, the processing of personal data means any automated handling and operation of clients' personal data within the meaning of Article 4(2) of the GDPR.
Administration
EOVP Group s.r.o., with its registered office at U Zahradnictví 83/20, Přerov XI-Vinary, 751 24 Přerov, Company ID No.: 06783597, VAT No.: CZ06783597, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, File 82702, is, with regard to the above-mentioned provision of services, the controller of its clients' personal data within the meaning of Article 4(7) of the GDPR (hereinafter referred to as the "Controller"). The Controller determines the purposes and means of personal data processing and is responsible for fulfilling its legal obligations in relation to such processing.
Any questions, requests or other enquiries can be sent at any time to the following e-mail address: info@future-albania.cz.
When processing personal data, the Controller currently uses the services of a processor (within the meaning of Article 4(8) of the GDPR). The processor is considered to be the website hosting provider, i.e. FORPSI, s.r.o., with its registered office at Vinařská 460/3, 603 00 Brno, Company ID No.: 25584728 (for more details, see https://www.forpsi.com/), and Microsoft, which operates the OneDrive cloud; other processors include the cooperating law firm AKDM (www.ak-dm.cz). If the services of another personal data processor are used, such processing will always be governed by these Principles and the relevant provisions of the GDPR, in particular Article 28 et seq.
In its activities, the controller acts exclusively in accordance with the relevant legal regulations in the field of personal data protection and in accordance with the principles set out in Article 5 of the GDPR, i.e. the principles of lawfulness, transparency, purpose limitation, accuracy, data minimisation and others.
The controller declares that it is aware of all its legal obligations in relation to the processing of personal data.
Personal data
In general terms (Article 4(1) of the GDPR), personal data is any information relating to an identified or identifiable (traceable) person. For visitors to the website who have filled in the contact form, this mainly includes their first name, surname, e-mail address and telephone number. In addition, any other personal data that the applicant/interested party provides to the agent in a sent enquiry or other request. Those interested in purchasing real estate are then obliged to provide the agent or cooperating law firm with their birth number, bank details or other contact details, all for the purpose of properly mediating the conclusion of a real estate contract (contract for the acquisition of: a) ownership of real estate; or b) a right that includes or is associated with the right to use or enjoy real estate, an apartment or non-residential space).
Contact details – this is personal data that the Controller needs for the purpose of performing a real estate brokerage contract.
Specific personal data – this is personal data that the Controller needs for the purpose of providing a specific service, always in accordance with the client's specific communication, after proper instruction from the intermediary.
Analytical data and cookies – the website uses cookies and other publicly available data and information for its proper functioning. Cookies are short text files that the visited website sends to the browser and allow the website to record information about its use, such as traffic, preferred settings, etc. Cookies and analytical data (such as IP address, browser type, time spent on the website, etc.) are used by the Administrator solely for the purpose of improving the services of the website and improving the presentation and information provided by the website in relation to its users (see also Google Analytics). Every user of the web interface from which they access the website is entitled to set the functioning of cookies, including their rejection (e.g. https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=cs).
The Administrator does not process any data other than those mentioned (communicated and provided by the client).
Purposes of processing and legal grounds
The Controller handles contact details solely for the purpose of providing services (the legal basis here is Article 6(1)(b) of the GDPR, i.e. performance of a contract).
At the same time, it should be noted that the Controller is entitled to process certain personal data for the purpose of fulfilling its legal obligations, for the purpose of handling complaints and possible defence in court proceedings, and for communication with clients. The legal basis here is Article 6(1)(c) of the GDPR, i.e. the Controller's legal obligations, and Article 6(1)(f) of the GDPR, i.e. the Controller's legitimate interests.
Period of personal data processing
The Controller is entitled to process personal data only and exclusively for the period necessary to fulfil its obligations and for the period of fulfilment of any of the legal grounds for processing (pursuant to Article 6 of the GDPR). As soon as the Controller has no legal reason for processing personal data, it must immediately anonymise or otherwise destroy it (anonymisation means an irreversible process by which personal data is rendered so worthless that it ceases to be personal data, i.e. it can no longer be used to identify any person/client). The processing period is determined by the purpose of the processing, or the legal basis for the processing, but also by special laws (e.g. Act No. 39/2020 Coll., on real estate brokerage, as amended, Act No. 563/1991 Coll., on accounting, as amended, No. 499/2004 Coll., on archiving and record keeping, as amended, and others).
Transfer of personal data
The personal data processed by the controller is transferred only to the extent necessary to the project developer, while maintaining all the required legal standards for its protection to the above-mentioned processors.
Rights of clients/interested parties
Clients have rights in relation to their personal data arising from Article 15 et seq. of the GDPR.
Right to information – the right to information is fully provided to clients by these Principles, and in the event of any questions, the client is entitled to contact the Controller at: info@future-albania.cz;
Right of access – the client has the right to obtain confirmation from the Controller as to whether or not personal data concerning him or her are being processed (for more details, see Article 15 of the GDPR). The client has the right to contact the Controller at any time at: info@future-albania.cz. The Controller shall respond to the client within 30 days of receiving the enquiry/request at the latest;
Right to rectification – the client has the right to have the Controller rectify inaccurate personal data concerning him/her without undue delay. The client is entitled to contact the Controller at any time with a request for rectification at: info@future-albania.cz;
Right to erasure – the client has the right to have the Controller erase personal data concerning him/her without undue delay, and the Controller is obliged to erase personal data without undue delay if any of the reasons specified in Article 17(1) of the GDPR apply. In other words, the Controller will comply with the client's request if it is justified and the Controller has no other legitimate reason for such processing of personal data;
Right to withdraw consent to the processing of personal data – you have the unquestionable right to withdraw your consent to the processing of personal data at any time and without giving any reason, if you have given such consent (Article 6(1)(a) of the GDPR) to the Controller;
Right to restriction of processing – the client has the right to have the Controller restrict processing if any of the conditions of Article 18(1) of the GDPR are met, or, for example, if the client does not request the erasure of their personal data, but only requests that its processing be stopped.
Right to data portability – the client has the right to obtain personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the Controller to which the personal data have been provided, where any of the conditions set out in Article 20(1) of the GDPR are met;
Right to object – the client has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her on the basis of Article 6(1)(f) (i.e. on the basis of the Controller's legitimate interest, see above), including profiling based on these provisions. The Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims;
Right not to be subject to automated decision-making – the client has the right, subject to the rules in Article 22(2) of the GDPR, not to be subject to any decision based solely on automated processing, including profiling, which has legal effects on them or significantly affects them in a similar manner;
Right to lodge a complaint – the client has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if the client considers that the processing of their personal data infringes the rules of the GDPR. Without prejudice to any other administrative or non-judicial remedy, every client has the right to effective judicial protection against a legally binding decision of a supervisory authority concerning him or her. Without prejudice to any available administrative or non-judicial remedy, including the aforementioned right to lodge a complaint with a supervisory authority, every client has the right to effective judicial protection if they believe that their rights under the GDPR have been violated as a result of the processing of their personal data in violation of the GDPR. The supervisory authority for the Czech Republic is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7 (for more details, see https://www.uoou.cz/).
Final provisions
The Administrator is entitled to unilaterally amend these Principles at any time, with effect from their publication on the website: https://www.future-albania.cz/cs/gdpr
The Client acknowledges that by using the website, they express their agreement with these Principles and also acknowledge that they have duly and fully familiarised themselves with these Principles.
These Principles shall take effect on 30 November 2025*.
* For the purposes of interpretation and legal effect, the Czech version of this document shall be decisive. Other language versions are provided for convenience only.