The company COM PLUS CZ a.s., with its registered office at Nad Krocínkou 317/48, 190 00 Praha 9, processes personal data of its customers, suppliers and business partners and their employees in relation to its business activities as the Data Controller. Your privacy is important to our company. The purpose of this document consists in informing you about the purpose, for which we need your personal data, the way we handle the data and what rights you have in this respect. When processing your personal data, we proceed in accordance with the applicable legal regulations of the Czech Republic and the European Union, in particular the European Parliament and Council regulation No. 2016/679 of 27 April 2016 (hereinafter referred to as the “GDPR Regulation”). We continually try to improve our security standards in terms of your personal data to protect them against any misuse.
Why do we need your personal data?
We process your personal data mainly to offer and deliver our products. We need your personal data for registration and executing your orders and to secure our claims arising from any concluded purchase contracts. In addition, we use your personal data to send business and marketing communications informing you about our events, new releases and discounts.
What personal data do we process and where do we obtain them from?
Personal data shall mean any information about a natural person or any data on the basis of which one can identify the person, either directly or indirectly (for example name, date of birth, permanent address, address for service, e-mail, telephone etc.). Personal data shall not mean any data relating to trade companies or any other legal entities (e.g. CRN, VAT ID, registered office, etc.). In case of self-employed customers, they are personal data of the entrepreneur concerned, in case of business-company customers, data of contacts, usually the customer’s employees. We process only the personal data which you provide us in your order. To be specific, they usually include the name and surname, date of birth, address, e-mail and telephone number.
Do we need your consent to process the personal data?
We may process your personal data in the following cases, even without your consent. First of all, they are the situations related to the execution of your order. Should this be the case, the legal basis for the processing of your personal data is article 6, par. 1(b) of the GDPR Regulation – the processing is necessary to fulfill the obligations arising from the concluded purchase contract because we need your personal data to register the order and deliver the goods or services. Subsequently, we use your personal data to fulfill our statutory obligations in terms of book keeping and tax records (in the field of taxes and accounting). Should this be the case, the legal basis for the processing is article 6, par. 1 (c) of the GDPR Regulation, because the processing is necessary to fulfill the Data Controller’s legal obligation. After the delivery of the goods, we keep your personal data and details relating to the executed transaction in case there are any discrepancies between us regarding the delivered goods or any obligations of the concluded contract is not fulfilled properly and timely in the future. In order to enforce our claims under the contract or to defend claims made by you, we keep your personal data and process them for the purpose of protecting our rights and legitimate interests, which is – within the meaning of article 6, paragraph 1(f) of the GDPR regulation, a separate legal basis for processing the personal data. We also use the personal data of our existing customers to send in business communications, information about new releases, events and special offers. The processing of existing customers’ personal data for the purposes of direct marketing is considered the processing for the legitimate interest of our company in accordance to article 6, paragraph 1 (f) of the GDPR Regulation. In neither case does the law require your consent to the processing of your personal data. We would not be able to fulfill our obligations arising from the concluded purchase contract or supply the ordered goods to you or enforce the proper fulfillment of your obligations without processing your personal data. If you do not wish to receive our commercial communications, it is sufficient if you object. For a more detailed procedure, see the next section.
What to do if you do not want to receive our business communications?
If you do not wish to receive our business communications, please let us know. You can click on the link in the footer of each e-mail message and simply unsubscribe from the sending of our business offers. Alternatively, send us an e-mail at: firstname.lastname@example.org. We will process your request as soon as possible and send back confirmation that you have been unsubscribed from receiving our commercial communications. After that you will no longer receive our business offers. However, we can use your personal data in connection with the delivery of the ordered goods or to enforce the obligations arising from the concluded purchase contract. If you wish to subscribe to our offers, you can do so any time you want. Send in an e-mail at: email@example.com
Who can access your personal data?
We do not pass your personal data to any third parties for the purpose of their own marketing. Your personal data can be accessed by employees of COM PLUS CZ a.s. and our business partners who provide individual services for us (transport companies, etc.). The persons who have access to your personal data are required to comply with sufficient standards to secure your personal data and strict compliance with legal obligations in the area of personal data handling. Your personal data can be passed to be processed only within the European Union. We strictly protect your personal data. We process your personal data electronically and manually. In both the cases, we take technical, mechanical as well as organizational security measures. We require the same standard from our contractors in the position of Data Processors as a minimum.
How long do we keep your personal data?
We keep your personal data for the time necessary to ensure mutual rights and obliged arising from the concluded purchase contract, and for the period, for which we are required to keep the data according to the relevant legal regulation. We use your personal data to send commercial communications until you object and unsubscribe from the commercial communications.
What are your rights regarding the processing of personal data?
You have the following rights in respect of the processing of your personal data:
- Right of access to personal data. Are you interested in what data about you we possess? Upon your request, we will confirm whether your personal data are processed and to what extent, for what purpose, which recipients they are made available to and for how long the data are kept and what other rights you have in relation to the processed of personal data. Upon your request, we will provide you a copy of the processed personal data.
- Right to rectification. Has any of your personal data changed? Let us know as soon as possible. If you notify us, we will update your personal data we keep about you and we will rectify any inaccuracies without undue delay.
- Right to erasure. If you do not want us to use your personal data. If we no longer need your personal data for the purposes, for which we processed them, or if we process your personal data in an unauthorized manner, we will dispose of them upon your request without undue delay.
- Right to restrict processing. Do you want to restrict the scope, to which we use your personal data. If you apply, we will restrict the processing of your personal data in the following cases:
- (i) for the time necessary to verify the accuracy of the personal data if you question the accuracy of the data;
- (ii) we processed your personal data in an unauthorized manner;
- (iii) we no longer need your personal data for the purposes, for which we processed them and/or
- (iv) you have objected to the processing of your data for the purposes of protecting our legitimate interests and we have not assessed whether your legitimate reasons for the disposal of your data outweigh our legitimate interests. Unlike erasure, your personal data remain with us; however, we will not use them for the purposes for which their processing was restricted.
- Right to object to sending any commercial communications. Do you no longer want to receive our commercial communications, information about our new releases, events or special offers? You can lodge an objection anytime. Simply click on the link in the footer of each e-mail message and simply unsubscribe from the sending of our business offers. Alternatively, send us an e-mail at: firstname.lastname@example.org. We will process your request as soon as possible and confirm that you have been unsubscribed from sending of our commercial communications. Then we will no longer use your personal data for marketing purposes.
- Right to object. You may lodge an objection even when you do not agree with the processing of personal data for the purpose of protecting our legitimate rights and interests other than the direct marketing. Your personal data will then be processed only for the purpose of identifying, enforcing or defending our legal claims or where our compelling legitimate reasons for processing outweigh your interests and privacy rights. Do not forget to tell us what specifically bothers you.
- Right to report personal data breaches. Have your personal data fallen into unauthorized hands? If despite all our efforts the security of your personal data was breached and the situation posed a significant risk to you, we would inform you without undue delay. We do not have to notify you only when we have encrypted your personal data to be incomprehensible to the third party or if we have managed to eliminate any risks arising from disclosing your personal data.
- Right to lodge a complaint. Not satisfied with the way we process your personal data? If you believe we process your personal data in violation of generally binding legal regulations, in particular the GDPR Regulation and Act No. 101/2000 Coll., on personal data protection, you have the right to lodge a complaint with the Office for Personal Data Protection. However, we would appreciate if you tell us first to find the right solution.
Something unclear to you? Or do you want to exercise some of your rights? Contact us by e-mail: email@example.com.