Privacy Policy

ALUTEC KK s.r.o. – valid and effective from 25 May 2018

If you are one of our business partners or a visitor to our website, you are entrusting us with your personal data and thereby become a data subject. We are responsible for the protection and security of your personal data, just as we are for the personal data of our employees and job applicants. Please therefore familiarise yourself with our data protection practices, policies and the rights you have under the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)) and Act No. 101/2000 Coll., the Act on the Protection of Personal Data and on Amendments to Certain Acts.

I. Data Controller

Company name/Data Controller: ALUTEC KK s.r.o. (hereinafter referred to as the ‘Controller’)
File number: C 258187, registered with the Municipal Court in Prague
Identification number: 015 67 942
Registered office: Zálužská 120, Záluží, 250 88 Čelákovice

II. Declaration

We hereby declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:

  • We process personal data for a clearly defined purpose and only on the basis of a valid legal ground, in particular the performance of a contract, a legitimate interest, a legal obligation or consent given.
  • We collect only basic personal data, not sensitive categories of personal data.
  • We have implemented appropriate technical and organisational measures to ensure the highest level of security.
  • All employees and data processors are bound by a duty of confidentiality regarding the data being processed.
  • We will enable you to exercise and fulfil your rights under the Personal Data Protection Act and the GDPR, and we will support you in doing so.

III. The purpose of the processing of personal data by the controller

  • the fulfilment of a commercial relationship (processing enquiries, preparing quotations, concluding orders/contracts, carrying out deliveries, providing warranty and post-warranty services)
  • providing support for the sale of goods, including marketing activities
  • protection of the data subject’s vital interests
  • protection of the rights of the controller, the recipient or other data subjects (e.g. debt recovery by the controller)
  • protection of property, health and safety at work, and fire safety
  • archiving carried out in accordance with the law
  • offering goods or services
  • creating internal databases, analyses, forecasts and statistics
  • recruitment procedures for vacant positions
  • human resources development
  • fulfilment of the controller’s legal obligations

IV. Categories of data subjects

  • the controller’s customers (clients)
  • service providers
  • visitors and persons on the controller’s premises
  • other persons with whom the controller has a contractual relationship
  • the controller’s employees
  • job applicants

V. Categories of personal data subject to processing

The controller obtains personal data directly from data subjects or from publicly available sources (the Commercial Register, the Trade Register, online directories and telephone directories, etc.); this personal data comprises the following:

  • address and identification details used to uniquely and unambiguously identify the data subject (e.g. first name, surname, title, and, where applicable, personal identification number, date of birth, permanent address, company registration number, VAT number, bank account numbers) and data enabling contact with the data subject (contact details – e.g. contact address, telephone number, fax number, email address and similar information)
  • descriptive data (e.g. bank details)
  • other data necessary for the performance of the contract
  • data provided beyond the scope of the relevant legislation and processed on the basis of consent granted
  • by the data subject (processing of photographs, use of personal data for human resources development purposes, specimen signatures, photocopies of identity documents for the purpose of identifying a participant in a selection procedure)

VI. Personal data processors

Personal data is processed both automatically and manually and is made available to the controller’s employees where necessary for the performance of their duties. Furthermore, the data controller may provide personal data to external providers of accounting services, legal services, transport companies, providers of postal and communications services and electronic communications services, as well as authorised contractual partners in the fields of IT services and technologies, marketing services, consultancy services and certification services, for further processing. Most processors have restricted access to data subjects’ personal data, limited solely to the purposes necessary for processing. Depending on the scope of processing, the controller has entered into a Data Processing Agreement or a Confidentiality Agreement with these processors. The controller will provide the data subject with a list of these processors upon request.

VII. Other recipients of personal data

For the purposes of state supervision, the prevention, investigation, detection or prosecution of criminal offences, or the enforcement of criminal sentences, including the protection against and prevention of threats to public security, the data controller provides personal data to the relevant public authorities or other bodies authorised to process personal data.

VIII. Other purposes of processing

The data controller may also use the personal data provided for commercial and marketing purposes.

IX. Use of cookies

If the data subject has cookies enabled in their web browser, the controller processes data on user behaviour derived from cookies placed on its website for the purposes of ensuring the website functions more effectively and for the controller’s online advertising purposes.

Types of cookies used:

  • Functional cookies are necessary for the basic functions of the website and make it easier for visitors to navigate the site. They are always enabled; their use is permitted on the grounds of a legitimate interest, and the controller is obliged to inform website visitors of their use.
  • Analytical cookies collect non-personal information that helps us understand visitor behaviour on the website. If the consent box is not ticked, data will not be sent to Google Analytics.
  • Marketing cookies are used to personalise adverts, making them relevant and interesting to individual users and thus more valuable to publishers and third-party advertisers.

All cookies used by the administrator’s server are used in accordance with current EU cookie legislation.
Cookies can be deleted at any time; however, this may result in the loss of all information that enables faster and more efficient access to the website, including personalisation settings.
Cookie settings are part of your web browser. Most browsers accept cookies automatically by default. You can use your web browser to refuse cookies or restrict them to selected types.
Information about browsers and how to set your cookie preferences can be found in the documentation for your web browser or on the following websites:

X. Duration of personal data processing

The data controller retains personal data for the duration of the contractual relationship and for any further period required by law. Where personal data is processed on the basis of consent, the data will be retained until a request is made to cease further processing of such data.

XI. Rights of the data subject

In relation to the protection of personal data, data subjects have a number of rights. If you wish to exercise any of these rights, please contact us via the email address provided below.
Right to information: this is fulfilled by this information page setting out our personal data processing principles.
Right of access: the data subject has the right to access personal data relating to them; the data controller is obliged to provide a copy of the personal data being processed.
Right to rectification: the data subject has the right to have the data controller rectify or complete any inaccurate personal data concerning them without undue delay.
Right to restriction of processing: the data subject has the right to have the data controller restrict the processing of personal data in justified cases.
Right to data portability – the data subject has the right to receive personal data concerning them in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller.
Right to erasure – the data subject has the right to have the data controller erase personal data concerning them without undue delay where:

  • the personal data are no longer necessary for the purposes for which they were processed
  • the data subject withdraws their consent to the processing of personal data
  • the data subject objects to the processing
  • the personal data has been processed unlawfully
  • the retention of personal data is not required by other relevant statutory provisions
  • it does not concern a public interest in the areas of public health, archiving, scientific or historical research, or statistics
  • it does not concern the exercise or defence of legal claims.

The right to lodge a complaint with the supervisory authority – the data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection.

XII. CONTACT

Contact email address for all correspondence regarding personal data: gdpr@aluteckk.cz

Thank you for taking the time to read our Privacy Policy. You can find the full text of our General Terms and Conditions here.

On behalf of ALUTEC KK s.r.o.

David Kočí
Managing Director