Information about personal data processing - LazyPhish

By this document as the controller of personal data – company LazyCompany s.r.o., Javorová 413, 250 73, Radonice, Identification No.: 098 79 773, registered in the Register of companies kept by the Municipal Court of Prague under section C file No. 343965, info@lazyphish.com, (hereafter referred to as “LazyCompany“) – we provide information on the personal data processing and your rights related to this processing.

The processing of personal data includes following activities:

Provision of LazyPhish Services

Provision of LazyPhish services which aim to verify/validate, enhance and ensure of protection against phishing and similar attacks.

Description of the purpose of processing

Customer personal data (service subscriber) are used in the LazyPhish Application for registration account creation, subscription order, invoicing and communication.

Personal data of customer employees (users in LazyPhish terminology, hereafter referred to as “users“) are used for:

• sending a simulated fraudulent phishing emails or another simulated fraudulent communication;

• evaluation and analyses of users reactions to fraudulent email or another communication;

• sending of training and awareness materials;

• evaluation and analyses of users reactions to training and awareness materials;

• creation of reports for customer about users awareness status and overall defense level.

Categories of the personal data we process:

Identification data, Contact information, Users reactions to fraudulent email or another communication, Users reactions to training and awareness materials.

Processing and archiving period:

6 months after customer account termination.

Categories of data processors or recipients to whom we may provide the personal data:

LazyCompany and its business partners cooperating on provision of services for customer (service subscriber).
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.

Source of the personal data:

We collect personal data directly from you through the registration form to LazyPhish application and from your import of list of employees (list of users) in the LazyPhish application.

Transfers of personal data to third countries or supranational organisations:

As part of the above-mentioned processing, your personal data will not be transferred to any third country or any other multinational company.

Automated decision-making based on the personal data:

During this personal data processing, automated decision-making based on the personal data does not occur.

Other information

Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In wellfounded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.

What rights you have?

As part of the processing personal data, you have the following rights:

• Access to processed personal data

• Revocation of consent to the personal data processing

• Correction of incorrect, inaccurate or incomplete personal data.

• Erasure of personal data in case of purpose legal basis termination or in case of unlawful processing.

• Restriction of data processing.

• Extract of your personal data in a machine-readable format for yourself or for another controller.

• Object to the data processing, if you believe that processing of personal data is unlawful.

• Not to be subject of automated decision-making.

How you can exercise your rights?

Electronically on address:

https://lazycompany.atlassian.net/servicedesk/customer/portals

By e-mail:

info@lazyphish.com

By post mail:

LazyCompany s.r.o., Javorová 413, Praha východ,, 250 73 Radonice

In connection with the exercise of your rights, LazyCompany may charge a reasonable fee taking into account the administrative costs for the processing when requests from a data subject are apparently unfounded or excessive.

Contact

For the inquiries related to the personal data protection and processing, please contact us on:

info@lazyphish.com

Lodging a complaint

In case you disagree with the way LazyCompany processes or handles your personal data, you can lodge a complaint with a supervisory authority to protect your rights.

Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, +420 234 665 111

http://www.uoou.cz/