Data Privacy

Personal data protection

Personal data processing policy

Contact details of the owner

Name: XERTEC a.s.

Address: Údolní 212/1, Praha - Braník

CIN: 27399508

Phone: +420 225 004 111

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the "Regulation"), the Act on the processing of personal data and Act No. 480/2004 Coll., on certain information society services, as amended.

1.Concepts

Data subject: The natural person (both consumer and self-employed) to whom the personal data relates (hereinafter also referred to as "you" or "customer");

Personal information: Any information about an identified or identifiable customer; an identifiable customer is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, network identifier or to one or more specific elements of that natural person's physical, physiological, genetic, psychological, economic, cultural or social identity (hereinafter also "data" or "information");

Administrator: The entity which determines the purpose and means of processing personal data carries out the processing and is responsible for that processing. The controller of the personal data is XERTEC a.s. (hereinafter also referred to as "we");

Processor: An entity that, on the basis of the law or on behalf of the controller, processes personal data for the controller on the basis of a contract for the processing of personal data (hereinafter also "business partner" or "partner");

Website: Website available at https://dist.xertec.cz.

Purpose of processing personal data: The reason why personal data is processed. This reason may be, for example, to perform a contract, manage user accounts, handle complaints and complaints, send commercial communications (newsletters) or display advertisements based on customer interests;

Cookies: Short text files that are stored by your web or mobile browser. Most cookies contain a unique identifier, called a cookie ID. This is a string of characters assigned by websites and servers to the browser that stored the cookie. This allows websites and servers to distinguish and identify individual browsers. Cookies are used to improve the functioning of websites, to evaluate website traffic and to better target marketing activities. If you browse our website, we assume that you consent to the use of these files.

Third country: Countries outside the European Economic Area, which mainly includes the member countries of the European Union and Iceland, Liechtenstein and Norway.

2. What personal data is processed?

We and its contractual processors process the following personal data or categories of personal data in accordance with the respective legal title and purpose of processing:

Identification and address data: e.g. name, surname, delivery or other contact address, address of the place of delivery, business address, VAT number;
electronic contact details: e.g. telephone number, e-mail address;
other electronic data: IP address, cookies;
other personal data related to the contractual relationship: bank account number, order history;
other personal data: typically data provided by the customer in the order form or other documents and in communication with us, including subsequent updates.

3. What is the origin of the personal data?

We process the data you provide to us, for example, when ordering our services, registering a user account, communicating with us or subscribing to our newsletter. Typically this includes

identification and address details;
electronic contact details;
other personal data related to the contractual relationship.

As well as data that we collect automatically as a result of you browsing our website. Typically this includes:

other electronic data:
cookies
the website from which you came to our website;
IP address;
date of access and time of access;
search queries;
http and https response code;
data groups transmitted;
browser and computer operating system information.

4. Why is personal data processed?

Your personal data may be processed for the following purposes:

Performance of the contractual relationship
Managing customer accounts
Communicating with customers, evaluating satisfaction, handling suggestions, complaints and claims
Sending commercial communications and offering our goods
Direct marketing and creation of personalised content and advertising
Improving the quality of our goods and services, analysing traffic to our website and your behaviour on the website
Running customer competitions and delivering prizes
Protecting our rights, property or safety or the rights, property or safety of others
Accounting and tax purposes
Fulfilling other legal obligations

Your personal data may be processed on the basis of the following legal grounds:

Performance of the contract
Performance of a legal obligation
Legitimate interest of the controller in sending commercial communications
Consent to receive commercial communications

The processing of personal data for the purposes of the performance of a contractual relationship, accounting and tax purposes and the performance of other legal obligations are legal or contractual requirements. If you intend to place an order through our website, you are obliged to provide us with your personal data for these purposes.

5. How long is personal data processed?

Your personal data is processed:

for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and us and to assert claims arising from this contractual relationship (4 years);
for as long as necessary to fulfil a legal obligation (accounting documents for 5 years, tax documents for 10 years);
for the duration of our legitimate interest in sending you commercial communications (2 years from the last time you opened a commercial communication);
for the duration of your consent (for a maximum of 4 years from the date of consent or 4 years from the last order).

6. Who is the personal data disclosed to?

The following categories of our partners (recipients) may have access to your personal data:

Goods transport providers
Providers of accounting and tax consultancy services
IT service and hosting providers
Providers of security and integrity of our services and websites
Analytics service providers
Providers of customer support assistance services,
Payment gateway providers (payment card providers)
Legal service providers, attorneys
Printing and mailing service providers
Partners working with us in loyalty programs, conferences, seminars and other events
Partners who provide direct marketing for us and partners and operators of technical solutions that allow us to show you personalized content and advertising
Public authorities
Mailing service providers

7. Are personal data transferred outside the EU?

The controller has / does not have the intention to transfer personal data to a third country (outside the European Economic Area) or an international organisation. The recipients of personal data in third countries are:

Partners to whom we provide data for the purpose of analysing traffic to our website, your behaviour on the website and business conversions (Google)
IT service providers and hosting providers, including cloud services
Mailing service providers

8. How are personal data processed?

Personal data is processed manually and automatically. We keep proper records of all processing activities in accordance with the relevant legislation.

You are not subject to any decision based solely on automated processing, including profiling, which would have legal effects on you or would affect you in a similarly significant way. We do not create profiles from your personal data for the purpose of analysing or predicting your preferences, interests, economic situation, reliability, where you are located or your movements (a typical example of profiling is monitoring the behaviour of website visitors in order to track their preferences so that a trader can approach them in the future with a tailored offer).

9. What are the rights of data subjects?

To exercise your rights, please contact us using our contact details set out at the beginning of this policy.

You have the following rights in relation to the processing of your personal data (Articles 15 to 21 GDPR):

Right of access to personal data
Right to rectification of inaccurate and completion of incomplete personal data
Right to erasure of personal data
Right to restriction of the processing of personal data
Right to data portability
Right to object to processing
Right to information about automated decision-making, including profiling

If we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time.

You also have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochova 27, 170 00 Prague 7, tel.: 234 665 111, web: www.uoou.cz

10. How are cookies processed?

The cookies processed can be divided according to their validity into:

temporary cookies (session cookies), which remain stored in your browser only until you close your browser,
persistent cookies, which remain stored in your browser for a long time until their lifetime expires or until you manually delete them (the length of time cookies are stored in your browser depends on the setting of the cookie itself and your browser settings).

And according to the features on:

essential, which are necessary for the functionality of our website,
preferential, which allow our website to remember information that changes how the website behaves or looks (e.g. your preferred language or the region you are in), these cookies are not strictly necessary for the functioning of our website, but enhance the functionality and usability of the website,
analytical cookies, which help us analyse your experience on our website (called User Experience) and help us understand how you use our website,

We do not use third-party cookies that track multiple websites to provide you with personalized content and advertising on third-party websites and other sales channels.

11. Are data on children also processed?

Our website is not intended for children under the age of 16. We therefore do not intentionally collect their personal data. If we become aware that we have inadvertently collected personal data about children under the age of 16, we will take steps to delete that data as soon as possible, except where we are required by law to retain it.

12. Conclusion

Legislation and our business strategy and related processing of your personal data may change. If we decide to update this policy, we will post the changes on our website and notify you of these changes. Where there is to be a more fundamental change to this policy, or where we are required to do so by law, we will inform you in advance. We ask that you read this policy carefully and check this policy regularly when you continue to communicate with us or use our website.

Cookies Privacy Policy

We use Google technologies that allow us to reach users who have previously visited the www.xertec.cz website and display the right advertising message to each user.

All information is provided by Google, which adheres to strict security measures imposed by the European Union. For more information about privacy in ads.

We respect your decision. In some cases, if you do not want to be served relevant ads that better match your personal characteristics and interests, you can unsubscribe from individual lists on the Google website.