INFORMATION ON THE PROCESSING OF PERSONAL DATA – WEBSITE

Controller identification: KOVO Koudelka s.r.o., Company ID: 27508641, with its registered office at Damníkov 62, 561 23 Damníkov (“we”).

Controller contact details: info@kovo-vyroba.cz

This document explains how we process your personal data, the purposes and legal bases of processing, how long the data is retained, and your rights in connection with the processing of personal data. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (“GDPR”).

This document provides information pursuant to Articles 13 and 14 of the GDPR and applies to our website: www.kovo-vyroba.cz

  1. CATEGORIES OF PERSONAL DATA

We have divided the personal data we process into the following categories:

  • Identification data, meaning your first and last name and, where applicable, the name of the organisation you represent. We use this data to identify you when communicating with you or entering into a contractual relationship.
  • Contact details, meaning your email address and telephone number. Your email address is important because we will use it to communicate with you, send you a quotation and handle any subsequent communication. We will also use your telephone number to facilitate communication.
  • Information provided through the contact form or in our communications, if you choose to share additional information with us through the contact form or during subsequent communication.
  • Website usage data, meaning information about how you use our website and behave on it, such as IP addresses and HTTP protocol logs obtained through the device used to access the website.
  • Cookie data, meaning data obtained from cookies and similar technologies that we use. For more information about their use, please see the purposes described below.
  1. PURPOSES OF PERSONAL DATA PROCESSING

We process your personal data for the purposes described below. For each purpose, you will also find the categories of personal data processed and the applicable retention period.

Processing related to the provision of goods and services

  1. Provision of services and related information

We primarily process personal data in order to provide our services and deal with you as a customer. This includes using personal data to prepare and send a quotation, enter into a contract and subsequently provide the services themselves, including communication regarding delivery dates and other contractual matters. We also use your personal data for pre-contractual negotiations and to obtain the information required for the prospective cooperation.

For this purpose, we process your Identification data, Contact details and Information provided through the contact form or in our communications.

The legal basis for this processing is the performance of a contract between you and us and taking steps at your request before entering into a contract. If you are not a direct party to the contract, for example if you are an employee of the customer, the legal basis is our legitimate interest in performing the relevant contract.

The data is processed for the duration of the contract and subsequently for as long as necessary to fulfil obligations arising from it. If no contract is concluded, the data may be retained for up to three years after it was obtained in case potential cooperation is resumed.

  1. Communication

We may also process your personal data where no contractual relationship is established. In that case, we process it to communicate with you and respond to your enquiries.

For this purpose, we process your Identification data, Contact details and Information provided through the contact form or in our communications.

The legal basis for this processing is our legitimate interest in maintaining communication.

Personal data will be retained for as long as necessary to handle the relevant communication. It may also be retained for other purposes described in this document, for example if a contract is subsequently concluded or if retention is necessary to protect our legal interests.

  1. Internal records, statistics and protection of our rights

We may process your data to maintain internal records, record payments, prepare statistical reports and protect our rights and legal claims.

For this purpose, we process your Identification data, Contact details, Information provided through the contact form or in our communications, Website usage data and Cookie data, where it contains personal data and is required to protect our rights.

The legal basis for this processing is our legitimate interest in maintaining internal records and statistics and protecting our rights. The data is processed for the period during which you may exercise your rights or during which we may use the data for our own protection. This period generally follows the applicable limitation periods and may be up to ten years.

  1. Direct marketing communications

We may also use your personal data to send you offers for our services and other marketing communications.

For this purpose, we process your Identification data, where known, and Contact details.

The legal basis for this processing is your consent to receive marketing communications. If you are our customer, we may also send you marketing communications on the basis of our legitimate interest in direct marketing.

We will process your personal data until you opt out of receiving marketing communications, which you may do in any individual email.

Processing related to the use of the website

  1. Website operation and security (necessary processing)

We process your personal data to operate and secure the website, including presenting information, ensuring the website functions internally and maintaining your security.

For this purpose, we process your Website usage data and Cookie data.

The legal basis for this processing is our legitimate interest in the proper and secure operation of our website. The data is generally processed for the duration of your visit and no longer than one year after it was obtained.

  1. Website traffic analysis (analytics)

We process your personal data to understand how visitors use our website. For this purpose, we may monitor website traffic, optimise the website and generally make the visitor experience more user-friendly.

For this purpose, we process your Website usage data on the basis of our legitimate interest in obtaining information about how the website is used so that we can develop it further. Personal data is processed for no longer than one year after your visit.

With your consent, we may also process Cookie data for this purpose. This enables more detailed analysis of website visits through analytics cookies and may involve transferring your personal data to third parties. The legal basis for this processing is your consent given through the cookie banner. Personal data is processed until you withdraw your consent, but in any event for no longer than one year after your visit. The specific retention period may vary depending on the tools and cookies deployed on the website.

  1. Website promotion and advertising (marketing)

We process your personal data to understand your preferences and display relevant advertising. This enables us to promote and offer products and services on the website, show you marketing communications relating to products and services in which you have shown an interest, and promote our brand online.

For this purpose, we process your Website usage data on the basis of our legitimate interest in promoting and selling our products and services. Personal data is processed for no longer than one year after your visit.

With your consent, we may also process Cookie data for this purpose. Marketing cookies allow us to understand you better and target advertising more effectively, and may involve transferring your personal data to third parties. The legal basis for this processing is your consent given through the cookie banner. Personal data is processed until you withdraw your consent, but in any event for no longer than one year after your visit. The specific retention period may vary depending on the tools and cookies deployed on the website.

  1. SHARING PERSONAL DATA

We process the personal data described above as a data controller, meaning that we determine the purposes and means of processing. We decide what personal data to request through the website contact form and what personal data to process in connection with providing our services.

We may also use third parties to process personal data where they help us provide our services. These third parties act as our data processors. In particular, they may include:

  • a provider of a system used to distribute emails and marketing communications;
  • a CRM system provider;
  • a company providing the CMS and website management;
  • a provider of an accounting-document system;
  • an external accountant;
  • a cloud storage and infrastructure provider.

If we share your personal data with controllers or processors in third countries outside the EEA, we do so only where the recipients provide appropriate safeguards in accordance with Article 44 et seq. of the GDPR.

  1. YOUR DATA-PROTECTION RIGHTS AND HOW TO EXERCISE THEM

You have the right to: (i) request access to your personal data; (ii) withdraw your consent; (iii) request correction of your personal data; (iv) request erasure of your personal data; (v) request restriction of processing; (vi) request data portability; (vii) object to the processing of your personal data; and (viii) lodge a complaint with the competent supervisory authority.

For all matters relating to the processing of your personal data, including questions, exercising your rights or sending us a complaint, you may contact us using the email address stated at the beginning of this document.

  1. Right of access

You have the right to obtain confirmation from us as to whether or not we process your personal data.

If we process your personal data, you also have the right to request access to information about the purposes and scope of processing, recipients of the data, the processing period, the rights to correction, erasure and restriction of processing, the right to object, the right to lodge a complaint with a supervisory authority, and the sources of the personal data. This information is already provided in this document.

You may also request a copy of the personal data being processed. We provide the first copy free of charge; additional copies may be subject to a fee. The scope of the data provided may be limited where necessary to protect the rights and freedoms of others.

  1. Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn and does not terminate the processing of personal data that has already been anonymised.

  1. Right to rectification

You have the right to ask us to correct inaccurate personal data concerning you. Depending on the purpose of processing, you may also have the right to have incomplete personal data completed, including by providing a supplementary statement.

  1. Right to erasure (right to be forgotten)

You have the right to request erasure of your personal data where:

  • we no longer need your personal data for the purposes for which it was collected or processed;
  • you withdraw the consent on which the processing was based and there is no other legal ground for the processing;
  • you object to the processing and there are no overriding legitimate grounds for it, or you object to processing for direct-marketing purposes;
  • the personal data has been processed unlawfully.

This right does not apply where processing is necessary to comply with our legal obligations, perform a task carried out in the public interest, or establish, exercise or defend legal claims.

  1. Right to restriction of processing

You have the right to request restriction of the processing of your personal data where:

  • you contest the accuracy of your personal data, in which case you may request restriction while its accuracy is verified;
  • the processing is unlawful and you request restriction of processing instead of erasure;
  • we no longer need your personal data for the purposes for which it was collected or processed, but you require it to establish, exercise or defend legal claims;
  • you have objected to processing, in which case you may request restriction while it is verified whether our legitimate grounds override yours.
  1. Right to data portability

You have the right to receive a copy of personal data that we process by automated means on the basis of your consent or for the performance of a contract. We will provide this data to you, or to a controller designated by you where technically feasible, in a commonly used and machine-readable format. The scope of the data provided may be limited where necessary to protect the rights and freedoms of others.

  1. Right to object

You have the right to object to the processing of your personal data where processing is based on our legitimate interests. We will stop processing your data unless there are overriding legitimate grounds for the processing or the processing is necessary to establish, exercise or defend legal claims. We will also stop processing if you object to processing for direct-marketing purposes.

  1. RIGHT TO LODGE A COMPLAINT

In addition to exercising your rights with us, you may lodge a complaint with the competent supervisory authority, the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

  1. CHANGES TO THIS PRIVACY INFORMATION

We may amend this privacy information from time to time, so please review it regularly. Any changes to this document will be published on our website.