We at KOPLAST spol. s r.o. take personal data protection seriously. With regard to the new Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known under the abbreviation “GDPR”, we wish to inform you how and why KOPLAST spol. s r.o., ID (Reg.) No.: 60737689, with registered office at Horkou 752, 679 06 Jedovnice, contact e-mail: obchod@koplast.cz, as the controller, processes the personal data of natural persons, i.e. our customers, and to assure you that in relation to natural persons we will continue to have control of the rules concerning the processing of their personal data.
What is the legal basis for data processing?
In compliance with valid personal data protection legislation and the GDPR, we process the personal data you provide us based on:
- the agreement we have entered or are about to enter between each other,
- the legal regulation that directly stipulates or allows us to carry out the processing,
- consent, provided that such was given by you for said purpose,
- a legitimate interest to operate our business and develop our services.
What personal data do we process?
This is in particular your name, surname, position, company, ID/VAT, bank account number, address or registered office, postal address, telephone, e-mail and information about the history of your purchases.
For what purposes do we process your personal data?
Your personal data shall be processed for the purpose of fulfilling concluded agreements or delivery of ordered products or services. Furthermore, personal data can be used for the purpose of improving our products and services, provide information about us and the range of our products and services. Last but not least, the reason allowing us to process your personal data is to fulfil the obligations arising for us from the law or the exercise and protection of our rights and claims.
Who can your personal data be transferred to?
We only transfer personal data to third parties as part of the aforementioned defined purposes of processing, to entities with whom we have concluded an agreement on personal data processing or a public authority. These can in particular be shipping companies and other external sub-suppliers. All personal data are processed in a legal and transparent manner, and only those that are adequate, relevant and essential in relation to said purpose of processing are transferred. When transferring personal data, we use contractual provisions and introduce security mechanisms to protect all data and act in accordance with our standards in personal data protection, confidentiality of information and security.
Personal data can also be processed for the Controller by the following processors:
- The business company Shean s.r.o., with registered office at Svitavská 500, 678 01 Blansko, ID (Reg.) No. 26768479, registered in the Commercial Register kept at the Regional Court in Brno in Section C, File 48866, as the provider of marketing services and web services
For how long will we process your personal data?
We process personal data for the period essential for the fulfilment of all obligations arising from the agreement and protection of our rights, as well as for the period for which we, as the controller, are obliged to store personal data according to generally binding legal regulations or for which you gave us your consent for their processing. We will store most of the personal data for the duration of the agreement as well as for a period of 10 years as of the following calendar year after the provision of performance for tax and accounting reasons. In other cases, the period of processing arises from the purpose of processing or is laid down by personal data protection legislation.
What are your rights with regard to personal data?
You have the right of access to personal data, their correction, erasure or restriction of their processing, as well as the right of portability of these data. If you have given us your consent to the processing of personal data, you can withdraw your consent at any time. You can also object to the processing and use of other rights according to the GDPR. You can enforce these rights in person at our company’s registered office, in writing by post or e-mail.
Do you believe that there is unauthorised processing of your personal data, you can contact us, as their controller, or you have the right to lodge a complaint to the supervisory authority which for the Czech Republic is the Office for Personal Data Protection (www.uoou.cz).
Feel free to contact us for more information.
Yours sincerely
Martin Kostka
Managing Director of KOPLAST spol. s r.o.
In Jedovnice, 25 May 2018