1. GENERAL PROVISIONS
These TOS describe how the Company collects, processes and shares information of users (hereinafter referred to as "user") of the ntc.cz website, as well as customers (hereinafter referred to as "customer") using their services. These TOS do not apply to information that the Company's customers process using their services.
The company is the administrator and processor of the personal data of customers who provide it when ordering goods and services, entering the loyalty program or signing up for the newsletter and users of the ntc.cz website. The company may use other processors listed below to process personal data.
We encourage you to read the entire TOS and make sure you fully understand the information. If you have any questions about these TOSs or the collection, processing and sharing of personal data by the Company, please contact us at email@example.com.
2. WHAT DATA WILL BE PROCESSED
The company processes data obtained based on the use of the website and through cookies. In order to better target advertising campaigns and improve the website, the Company uses information about the user's viewed pages, possibly about the links they clicked and other activities on the website, such as filling out order and contact forms. This data is obtained automatically through the Company's tools and the tools of the data processors listed below. If you have enabled the storage of cookies on your device, this data is also obtained through these files.
The company mainly processes data that you provide when creating and using a user account, creating an order or registering for a loyalty program, and also when signing up for a newsletter. Some personal data are necessary for registration (name and e-mail address) and are used for basic user identification or customer login to the account. The data that the Company processes when registering to subscribe to the newsletter or creating a user account may be the following:
- First and last name, or company name
Company identification data
Access data to servers, e-mail and website
Or other excessively necessary data to perform the contractual relationship
The Company does not knowingly collect information from children under the age of 15, and children under the age of 15 may not use its Services. If you learn that a child has provided us with personal information in violation of these TOS, you can notify us at firstname.lastname@example.org.
3. FOR WHAT PURPOSES THE OU WILL BE USED
The company always processes personal data exclusively for the purposes for which they were collected, based on legitimate interest, legal obligation or consent. We process personal data for various purposes, primarily for:
- fulfillment and implementation of concluded contracts and orders,
fulfillment of legal obligations in the area of bookkeeping, in the area of taxes, or
as required by other applicable laws and regulations, or as required by any legal process or governmental agency.
communication with customers, including sending information about current services and products, updating business conditions and for marketing and promotional purposes,
sending a response to a query from website users,
processing a response to a specific job offer,
analytics of website traffic in order to improve services and their offer,
marketing outreach through electronic contact,
for transaction processing and fraud detection,
targeting potential customers through online advertising. For better advertising targeting and website optimization, the Company uses information about user activity on the website. This information also includes data obtained using cookies.
Push notifications. If you have this function active, the Company can send so-called push notifications directly in the website interface. These notifications are displayed based on your consent given after displaying the relevant notification in the website interface.
4. PROCESSORS WHO HAVE ACCESS TO THE DATA
Personal data is processed primarily by the Company and its employees, who are bound by confidentiality, and also by the Company's suppliers, if they are processed in connection with the fulfillment and implementation of concluded contracts and orders (e.g. transport companies).
The company may also use a so-called processor for the processing of personal data. These entities may process personal data only for the purposes and in the manner determined by the Company and may not expand it without further consent. We only transfer data to processors that they absolutely need to provide their services. The company uses as a processor:
- Google LLC (web analytics and online marketing tools);
Facebook Ireland Ltd. (tools for online marketing);
Seznam.cz, a.s. (tools for online marketing);
ClickUp (a tool for company management)
Costlocker SE (Economy System)
iDoklad, Solitea Czech Republic, a.s. (Accounting system)
In justified cases, the Company may transfer personal data to other entities (processors).
Personal data may be transferred to the following processors:
- processors who process personal data according to the Company's instructions in the area of contact with the public, electronic data management or accounting,
public authorities and other entities, if required by valid legal regulation;
other entities in the event of an unexpected event in which the provision of data is necessary for the purpose of protecting life, health, property or other public interest or if it is necessary to protect our rights, property or safety.
5. PERIOD FOR WHICH PERSONAL DATA WILL BE KEPT
Personal data for the purposes listed in point 3 are processed to the extent necessary for the fulfillment of these purposes and for the time necessary to achieve them or for the time directly stipulated by legal regulations. Personal data are then deleted or anonymized.
After this period, personal data may only be kept for the purposes of the state statistical service, for scientific purposes and for archival purposes.
The basic periods for processing personal data are available below.
- The company processes personal data of registered customers until their registration is cancelled. Data on customer contact persons are processed for the entire duration of the business relationship, or until the customer updates the data.
In the case of service customers, the Company is entitled to process their basic personal, identification, contact data, service data and data from their communication with the Company for a period of 10 years from the date of termination of the last contract.
In case of purchase of goods from the Company, the Company is entitled to process basic personal, identification and contact data of the customer, data about the goods and data from communication between the customer and the Company for a period of 5 years from the date of expiry of the warranty period for the goods.
In accordance with § 35 of Act No. 235/2004 Coll., on value added tax, invoices issued by the Company are archived for a period of 10 years from their issuance. Due to the need to document a legal reason for issuing invoices, contracts are also archived for a period of 10 years from the date of termination of the contract.
The data obtained for marketing purposes are processed for the entire duration of the consent, i.e. for the period when the user allows storage within the cookies settings on the website or in his browser. Processing may continue even after consent has been revoked, at the latest until the expiration of the relevant type of Cookies.
Business and marketing communications via electronic contact are sent until the withdrawal of consent or until the time of unsubscribing.
6. WITHDRAWAL OF CONSENT
Customers may unsubscribe from any marketing and commercial communications at any time by:
- by clicking on the relevant link located in the footer of each commercial communication;
on the dedicated website;
by sending a request to the given contact
The user can disable advertising targeting (Cookies) by changing it directly in their browser. If you disable the storage of selected Cookies, some parts of the website may not work properly.
7. METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA
Personal data will be processed and stored:
- by machine (automated) through computing hardware and software,
in written form.
8. RIGHTS OF THE DATA SUBJECT
If the data subject is an identifiable natural or legal person and proves his identity, he will have the following rights:
Right of access to personal data
According to Article 15 of the GDPR, the data subject has the right to access personal data, which includes, on the one hand, the right to obtain from the Company:
- confirmation whether it processes his personal data,
information on the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be made available, the planned period of processing, the existence of the right to request from the administrator the correction or deletion of personal data concerning the data subject or the restriction of their processing or to raise an objection to this processing, the right to file a complaint with a supervisory authority, about all available information about the source of personal data, if not obtained from the data subject, the fact that automated decision-making takes place, including profiling, about appropriate safeguards when transferring data outside the EU,
in the event that the rights and freedoms of other persons and a copy of personal data are not adversely affected.
In the event of a repeated request, the Company will be entitled to charge a reasonable fee for a copy of personal data.
The right to correct inaccurate data
According to Article 16 GDPR, you have the right to correct inaccurate personal data that the Company processes about you. You are also obliged to report changes to your personal data and to document that such a change has occurred. At the same time, you are obliged to cooperate with the Company if it is found that the personal data it processes about you is not accurate. We will carry out the repair without unnecessary delay, but always taking into account the given technical possibilities.
Right to erasure
According to Article 17 of the GDPR, you have the right to delete personal data concerning you, if the Company does not demonstrate legitimate reasons for the processing of this personal data. The company has set up mechanisms to ensure automatic anonymization or deletion of personal data in the event that they are no longer needed for the purpose for which they were processed.
Right to restriction of processing
According to Article 18 of the GDPR, the data subject has the right to limit processing until the resolution of the complaint, if he denies the accuracy of personal data, the reasons for their processing or if he objects to their processing, in writing to the address of the Company's registered office.
The right to be notified of correction, erasure or restriction of processing
According to Article 19 of the GDPR, the data subject has the right to be notified by the Company in the event of correction, deletion or restriction of the processing of personal data. If personal data is rectified or deleted, the Company will notify individual recipients, except where this proves impossible or requires unreasonable effort.
The right to portability of personal data
According to Article 20 of the GDPR, you have the right to the portability of data that concern you and that you, as the controller, have provided to us in a structured, commonly used and machine-readable format. At the same time, you have the right to ask us to transfer this data to another administrator.
If the exercise of this right could adversely affect the rights and freedoms of third parties, your request cannot be granted.
The right to object to the processing of personal data
According to Article 21 GDPR, you have the right to object to the processing of your personal data by the Studio. In the event that the Company does not prove that there is a serious legitimate reason for the processing that outweighs the interests or rights and freedoms of the data subject, the Company will terminate the processing based on the objection without undue delay.
The right to withdraw consent to the processing of personal data
If you give the Company consent to the processing of personal data, it can be revoked at any time. The appeal must be made explicit, understandable and a certain expression of will, either in writing to the address of the Company's registered office or via the e-mail address email@example.com.
Automated individual decision-making including profiling
The data subject has the right not to be the subject of any decision based solely on automated processing, including profiling, which would have legal effects for him or significantly affect him in a similar way. The company states that it does not make automated decisions without the influence of human judgment with legal effects for data subjects.
The right to contact the Office for Personal Data Protection
You have the right to file a complaint regarding our processing of your personal data with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. Office website: www.uoou.cz.
The company undertakes to protect personal data and other information about its customers and users of its services. To do this, it uses a number of security technologies and measures designed to protect information from unauthorized access, use or disclosure. The measures it uses are designed to provide a level of security appropriate to the risk of misuse of personal data. The security of personal data is regularly tested by the Company and the protection is constantly improved. However, keep in mind that 100% security cannot be guaranteed on the Internet.
All personal data in electronic form are stored in databases and systems to which only persons who need to deal with personal data immediately for the purposes specified in these rules have access, and only to the extent necessary.
The manager of your personal data is NTC STAVEBNÍ TECHNIKA spo. s r. o. Jiřinková 120 552 03 Česká Skalice Czech Republic.
11. UPDATE OF TOS
These TOS are effective from 01/01/2019.