Personal data protection

INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA — WEBSITE

Controller ID: ITECO s.r.o., ID: 46978321, with registered office at Rosický náměstí 48/6, Brno, 616 00

Administrator contact details: info@iteco.cz

In this document, we would like to inform you about how we process your personal data, what are the purposes of processing, the legality of the processing, the storage period or your rights in connection with the processing of personal data. The processing of personal data takes place in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ('GDPR“).

This document serves as an information document within the meaning of Art. 13 and 14 GDPR and is intended for our website: www.iteco.cz

1. SCOPE OF PERSONAL DATA

Below we have divided the personal data processed into individual categories:

• Identification datawhich are your first and last name, or the name of the organisation you represent. These are used to identify you when we communicate together or when we enter into a contractual relationship.
• Contact detailswhich are the email address and phone number. Your e-mail address is important to us, because it is through e-mail that we will communicate together, a price quote will be sent to you, or follow-up communication will be handled. We will also use the phone number for the purpose of communicating with each other.
• Information from the contact form or mutual communication, provided that you choose to provide us with additional information via the contact form or in the course of communicating with us.
• Data on the use of the site, i.e. information about the use of our site and your behavior on the site, such as IP addresses and logs from the HTTP log about the use of the site obtained through your device used to access the site.
• Data from cookies, i.e. data obtained from cookies and similar technologies that we use. For more information on their use, please read the purposes described below.

2. PURPOSES OF PERSONAL DATA PROCESSING

Your personal data is processed for the processing purposes described below. For each purpose of processing, you will also find the scope of the personal data processed and the period of storage of the personal data.

Processing related to the provision of goods and services

1. Provision of services and related information

We primarily process personal data so that we can provide you with our services and treat you as a customer. Part of this processing is the use of personal data for the purpose of sending a price offer, concluding a contract and subsequently providing the services themselves (communication to agree terms of service provision), other contractual communications. As part of this purpose, we also use your personal data for the purposes of pre-contractual negotiations, data collection, etc.

For this purpose, we process your Identification Data, Contact Information, Information from the contact form or mutual communication.

The legal basis for this processing is the performance of the contract between you and us and the need to take steps at your request prior to the conclusion of the contract, or in the event that you are not directly party to this contract (if you are, for example, an employee of the customer), our legitimate interest in the performance of any concluded contract.

The data are processed for the duration of the concluded contract and further for the period necessary for the performance of the obligations under such contract, or until 3 years after the data are obtained, if the contract has not been concluded (in case of subsequent resumption of possible cooperation).

2. Ensuring communication

We may also process your personal data provided that there is no conclusion of a mutual contractual relationship. In this case, we will process your personal data in order to ensure mutual communication and to ensure answers to your questions.

For this purpose, we process your Identification Data, Contact Information, Information from the contact form or mutual communication.

The legal basis for this processing is our legitimate interest, which consists in ensuring mutual communication.

Personal data will be retained for this purpose for the period necessary to process the communication. Alternatively, they may also be stored for other purposes specified in this document, for example, provided that a contract is subsequently concluded or this is necessary for the protection of one's own legal interests.

3. Internal records, statistics and protection of our rights

We may process your data in order to maintain internal records, record payments made, create statistical reports, protect our rights and legal claims.

For this purpose, we process your Identification Data, Contact Data, Information from the contact form or mutual communication, Data about the use of the website, Data from cookies (if they contain personal data and are needed to protect our rights).

The legal basis for this processing is our legitimate interest in maintaining internal records, statistics and protecting our rights. The data is processed for the period during which you can exercise your rights or for the period during which we can use the data for our own protection. This period is most often established in the range in which the statute of limitations runs, which can be up to 10 years.

4. Sending business messages

We may also use your personal data to send you offers of our services and other commercial communications.

For this purpose, we process your Identification Data (if we know them) and Contact Data.

The legal basis for this processing is your consent to the sending of commercial communications that you have given. If you are our customer, we may send you commercial communications based on our legitimate interest, which consists of direct marketing.

We will process your personal data for as long as you refuse to send us commercial communications, which you can do in each individual email.

Processing related to the use of the website as such

5. Website operation and security (necessary)

We process your personal data for the operation of the website and its security, i.e. for the presentation of information on the website, the internal functioning of the website, and to ensure your security.

For this purpose, we process your Website Usage Data and Cookie Data.

The legal basis for this processing is our legitimate interest in the proper functioning and safe operation of our website. The data is usually processed for the duration of your visit to the website, for a maximum period of 1 year from the date of its acquisition.

6. Website traffic analysis (analytics)

We process your personal data to understand how visitors use our website. As part of this purpose, we can monitor the traffic of our website, optimize it and generally make the visit to the website more pleasant.

For this purpose, we process your Website Usage Data on the basis of our legitimate interest in obtaining information about the use of our website for its further development. Personal data are processed up to a maximum of 1 year after your visit to the website.

With your consent, we may also process Cookie Data for this purpose, which makes it easier for us to carry out a more detailed analysis of website visits (analytical cookies), in which case your personal data may also be transferred to third parties. The legal basis for processing here is your consent, which you have given via the cookies bar. Personal data is processed until your consent is withdrawn, but in any case not more than 1 year after your visit to the website. The specific storage time may vary depending on the different types of tools and cookies that are deployed on the website.

7. Support and promotion on the website (marketing)

We process your personal data to obtain information about your personal preferences and to display relevant advertising. As part of this purpose, we may promote and offer products and services on the website and show you marketing communications related to the products and services you are interested in and promote our brand online.

For this purpose, we process your Website Usage Data based on our legitimate interest in promoting and selling our products and services. Personal data are processed up to a maximum of 1 year after your visit to the website.

Furthermore, with your consent, we may process Data from cookies for this purpose, which make it easier for us to know you better and better target advertisements (marketing cookies), in which case your personal data may also be transferred to third parties. The legal basis for processing here is your consent, which you have given via the cookies bar. Personal data is processed until your consent is withdrawn, but in any case not more than 1 year after your visit to the website. The specific storage time may vary depending on the different types of tools and cookies that are deployed on the website.

3. SHARING OF PERSONAL DATA

We process the above personal data as so-called personal data controllers. Thus, we determine the purposes and means of processing. It is we who decide what personal data we will require from you in the contact form on the Website, or what personal data we will process in connection with the provision of services.

However, we may also use third parties to process personal data to help us provide our services. These third parties act as our personal data processors. Specifically, these are:

• the provider of a system that provides the distribution of e-mails and commercial communications;
• a company that provides the operation and administration of the website;
• cloud storage and infrastructure providers.

If we share your personal data with controllers and processors in third countries (outside the EEA), we do so only if these persons fulfil the sufficient safeguards provided for in Article 44 et seq. GDPR.

4. YOUR RIGHTS IN PROCESSING AND THE POSSIBILITY OF EXERCISING THEM

You have the right to (i) request access to your personal data; (ii) withdraw your consent; (iii) request rectification of your personal data; (iv) request erasure of your personal data; (v) request restriction of processing of your personal data; (vi) request portability of your personal data; (vii) object to the processing of your personal data; or (viii) lodge a complaint with the relevant supervisory authority of the office.

In all matters related to the processing of your personal data, whether it is a question, exercise of rights, sending a complaint to our hands, etc., you can contact us via the e-mail indicated at the beginning of this document.

1. Right of access

You have the right to obtain confirmation from us whether we process your personal data or not.

If we process your personal data, you also have the right to request access to information about the purpose and scope of processing, data recipients, processing time, right to rectification, erasure, restriction of processing and filing an objection to processing, the right to lodge a complaint with the supervisory authority and the sources of personal data (this information is already set out in this document).

You can also ask us for a copy of the personal data processed. We provide the first copy free of charge, the next ones can be charged. The scope of the data provided may be limited in such a way as not to interfere with the rights and freedoms of others.

2. Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time. However, the withdrawal of consent does not affect the legitimacy of the processing prior to the granting of such consent, nor will it lead to the termination of the processing of personal data that has already been anonymized.

3. Right to rectification

You have the right to request rectification of inaccurate personal data concerning you from us. Depending on the purpose of processing, you may also have the right to supplement incomplete personal data, including by providing an additional statement.

4. Right to erasure (right to be forgotten)

You have the right to request the erasure of your personal data in cases where:

• We no longer need your personal data for the purposes for which it was obtained or processed;
• you withdraw the consent on the basis of which the personal data were processed and there is no further reason for the processing:
• you object to processing and there are no other overriding reasons for processing, or you object to processing for direct marketing purposes;
• personal data are processed in violation of the law.

However, you cannot exercise this right where the processing is necessary for the fulfilment of our legal obligations or tasks entrusted to us in the public interest or for the establishment, exercise or defence of legal claims.

5. Right to restriction of processing

You have the right to request restrictions on the processing of your personal data, in cases where:

• you deny the accuracy of your personal data; in this case, you may request a restriction of processing until the accuracy of the personal data is verified;
• the processing is contrary to the law and instead of deletion, you will request the restriction of the processing of personal data;
• We no longer need your personal data for the purposes for which it was obtained or processed, but you require it to establish, exercise or defend legal claims;
• you have objected to the processing of personal data; in this case, you can request a restriction of processing until we verify that our legitimate interests prevail.

6. Right to portability

You have the right to obtain a copy of your personal data, which we process automatically based on your consent or in order to fulfill a contract. We will transmit this data in a commonly used and machine-readable format to you or the controller designated by you, if technically feasible. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.

7. Right to object

You have the right to object to the processing of your personal data, which we process on the basis of our legitimate interest. We will stop processing your data unless there are other overriding reasons for processing or if the processing is not necessary for the establishment, exercise or defence of legal claims, or if you object to the processing for the purpose of direct marketing.

5. THE RIGHT TO LODGE A COMPLAINT

In addition to the possibility of exercising your rights with our company, you can also file a complaint with the competent supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.

6. CHANGES TO THIS PROCESSING INFORMATION

We are entitled to change this processing information from time to time, so please check it regularly. We will post any changes to this document on our website.

‍