valid and effective from 1 May 2018
This is the Privacy Policy („Policy“) of PZK BRNO a.s., with its registered office at Křižíkova 68f, Brno, 612 00, Reg. No: 29280958, Tax ID No: CZ29280958, registered in the Commercial Register kept by the Regional Court in Brno Section B, File 6365 (“we”).
As we are a data controller, we would like to inform you, the users of the website www.pzk.cz, how we process your personal data. This Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation, „GDPR“.
You can contact us with any questions via the web form available on our website or by email. Our email address is pzk@pzk.cz.
We process your personal data in order to:
We therefore primarily process your personal data in order to enter into a contract for the provision of our services with you.
The legal basis for processing your personal data is:
We may collect or receive your personal data through our websites, forms, apps, or other devices.
For the purposes of proper functioning and personalisation of the website, we may use cookies. This enables us to process the following personal data about you: login data, history, geolocation data, IP address, browser and device information, and other statistical data. This data allows us to improve the functioning of the site and provides us with statistical data on visitor behaviour on the site.
For the purpose of ensuring communication with the client, in particular answering questions , we may process the following personal data about you: name and surname, telephone number, email address. We process this information for the purpose of processing your enquiry.
We may process personal data for up to 10 years after the provision of our service. In the event that the service has not been, and will not be, provided, the data will be deleted within 12 months of the end of the last communication. 12 months seems to be a reasonable period of time in the event of a resumption of commercial negotiations.
We may process your personal data for a longer period of time in a specific case if this is required by law, in particular in the field of taxation, accounting, or storage.
If we have entered into a contract with you, i.e., we have provided you with a service, and you have not requested NOT to receive commercial communications using the check box, we are allowed to send you commercial communications. A request not to send commercial communications will not and cannot have any negative consequences. Commercial communications will contain information on our services, products or interesting information that may be of interest to you in connection with our services.
You can request to unsubscribe from receiving our commercial communications at any time. You can do so by contacting us at our contact email addresses, using the form on our website, or using the unsubscribe link in any email containing commercial communications.
We may also send you commercial communications if you have given us your prior consent for this purpose without entering into a contract for our services with you. This consent can be withdrawn at any time by sending a message to our contact email addresses, by using the form on our website, or by using the unsubscribe link in any email containing commercial communications.
Our company strives to provide you with individually tailored product and service offers. For this reason, we profile your personal data based on your consent. For this purpose, we use automated information systems, web applications, or calculators. Accordingly, we send you personalised messages and offers of our products and services. Automatic evaluation (profiling) of personal data helps us get to know you and your needs better, estimate future management, and tailor our products and services accordingly.
In your consent, you have also agreed to product offers and the transfer of personal data to our selected business partners. Our business partners comply with the data protection rules anyway and we have entered into a data processing agreement with them. A list of our business partners is available upon request.
For marketing purposes, your data may also be accessed by other entities that process personal data as intermediaries; their task is to provide services to the company. For example, they may include third parties or external companies that manage our systems or other services to ensure the proper operation of the company and the processing of personal data for marketing purposes. We have concluded a personal data processing contract with these intermediaries, on the basis of which they are also obliged to comply with strict data protection rules. We only provide them with the information they need to provide the service. Such companies can be IT companies ensuring the proper operation of IT services, hosting services, and the proper operation of HW. External marketing agencies. External graphic designers. External programmers. External companies providing payment portals.
We do not process personal data of persons under the age of 16.
Your personal data may be disclosed to our subcontractors as our data processors. For example, these may be persons who work closely with us on the basis of a trade licence, or they may be our potential external IT administrators or companies providing cloud or online marketing or emailing services.
We may use online services, such as Google LLC or Microsoft Corporation or the emailing services of The Rocket Science Group, LLC (known as MailChimp), to process your personal data. These companies are located in the United States of America, and are listed in the EU-US Privacy Shield. The shield is available at: https://www.privacyshield.gov. The European Commission has issued an adequacy decision in relation to this shield, under Article 45(9) of the GDPR, so such transfers of personal data do not require specific authorisation.
If we process your personal data, you have the right to:
You also have the right to lodge complaints with the supervisory authority. You can do so with the Office for Personal Data Protection. Web address available here: https://www.uoou.cz/.
The right of access to personal data means that you have the right to obtain confirmation from us as to whether or not personal data relating to you is being processed and, if so, to obtain access to that personal data, including information on the processing, in accordance with Article 15 of the GDPR:
The right to rectification means that you have the right to have inaccurate data corrected or completed in accordance with Article 16 of the GDPR.
The right to erasure means that you have the right to have your personal data erased under the terms of Article 17 of the GDPR. We must erase personal data for you, provided that:
The right to restriction of processing means that you have the right to have us restrict the processing of your personal data under the conditions of Article 18 of the GDPR.
You also have the right to portability, which means that you have the right to receive your data from us in a machine-readable format if the processing is based on consent or on a contract (contract performance) and the processing is also carried out by automated means, in accordance with Article 20 of the GDPR.
You are expressly advised of your right to object. This right means that you have the right to object to any direct marketing. If you raise such an objection, we will stop direct marketing.
The right to object can also be used generally against the processing of personal data on the basis of the legal ground of – „legitimate interest“ or „the performance of a task carried out in the public interest or in the exercise of official authority, including profiling based on these legal grounds“. For this right, see Article 21 of the GDPR.
You can object by emailing us at pzk@pzk.cz.