I. Content and purpose of this document
1. This document contains information regarding the protection of personal data provided by customers of the company
BONNEL TECHNOLOGIE s.r.o., Wolkerova 2304/38, Cheb 350 02, Czech Republic.
Registration court Pilsen, CZ – No. C/1305 | Reg. no. 18230407 | registered in the Trade Register at the Regional Court in Pilsen, CZ, Section C, Insert 1305
VAT-ID: CZ18230407
2. This document aims to familiarize the current and potential customers (data subjects) with their rights and to provide comprehensible information about their personal data processing.
3. The BONNEL TECHNOLOGIE s.r.o. company highly values customer’ trust with which they share their personal data with us and, therefore, the company proceeds in the personal data processing in compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation). The Privacy Policy of BONNEL TECHNOLOGIE s.r.o. furthermore complies with Act No. 110/2019 Coll. on Personal Data Processing.
II. Controller of personal data – who we are and how you can contact us
BONNEL TECHNOLOGIE s.r.o., headquartered at Wolkerova 2304/38, Cheb 350 02; VAT-ID: 18230407 (hereafter as „Controller “). Contact email: gdpr@bonnel.cz, contact phone number: +420 354 435 927, homepage: www.bonnel.cz
III. Which personal data do we process and how do we obtain them?
Personal data is any information relating to an identified or identifiable natural person. BONNEL TECHNOLOGIE s.r.o. specifically proceeds following data: First name, family name, academic title, address, identification number, tax identification number, phone number, email addresses and information about prior orders. This information is provided by a customer or an applicant himself/herself as they are a contractual necessity or with an independent consent of his/her own free will.
The hosting provider’s server automatically records technical information which may contain personal data such as IP addresses, the time of access, and basic technical data such as browser and operating system information. The processing of this data is carried out exclusively by our hosting provider as part of their legitimate operational responsibilities (Art. 6(1)(f)) for security and functionality.
Personal data is any information relating to an identified or identifiable natural person. BONNEL TECHNOLOGIE s.r.o. specifically proceeds following datas: First name, family name, academic title, address, identification number, tax identification number, phone number, email addresses, information about prior orders and IP addresses.
IV. For which purposes do we process personal data, for which period and what entitles us to do so?
A. Personal data processing for the purpose of a purchase contract conclusion
To conclude a purchase contract and to deliver the requested or ordered goods, respectively to communicate, we process the following personal data: First name, academic title, address (invoicing and delivery addresses if they differ), identification number, tax identification number, phone number, email address.
The legal entitlement (authorization) to process these personal data is a direct fulfilment of contractual obligations based on a purchase contract concluded between the aforesaid parties. For the above purpose we shall process the personal data. After the contractual relationship is terminated, some personal data are stored to meet legal obligations or legitimate interests (see in the following sections of this document). Another authorization to process and store personal data can be an explicit, voluntary consent to data processing which can be withdrawn at any time as specified in Section VI.
B. Personal data processing to comply with the duties of accounting, taxation and other legal regulations
In order to meet the obligations resulting from the valid legislation in the field of accounting, taxation and other legal obligations we shall process the following personal data:
First name, family name, academic title, address, identification number, tax identification number. The time period for which the data are processed is determined in Paragraph IV - F.
C. Processing of personal data for the purpose of legitimate interests and email marketing
BONNEL TECHNOLOGIE s.r.o. processes personal data based on our legitimate interests (Art. 6(1)(f) GDPR. This may also include email marketing to existing customers.
Email marketing to non-customers requires your explicit consent.
D. Processing of personal data based on your consent
If you award us your consent, we process your personal data to send an offer of our services and products. Before you award us your consent, we shall inform you to which data and to which specific purpose of processing your consent shall be related to. You can withdraw your consent at any time. If we already process some of your personal data also based on another legal title (see letters A to C above), we shall continue to process these personal data even after your withdrawal since for such specific purposes your consent is not necessary.
E. Automatically collected data by visiting our website for the purpose of reliable operation of the website
Some technical access data for our websites are automatically collected and stored through standard server processes. No behavioural analytics are made and statistically analysed.
Following data are collected to ensure an error-free operation of the website and to analyse a general usage pattern (no tracking): web browser type, operating system, time of site access. The hosting provider’s server automatically records technical information which may include personal data such as IP addresses, the time of access, and basic technical data such as browser and operating system information. This is necessary to ensure the secure and reliable operation of the website. The processing of this data is carried out exclusively by our hosting provider as part of their legitimate operational responsibilities (Art. 6(1)(f)) for security and functionality.
F. Data Retention period
Should it not be agreed otherwise, the explicit consent to keep personal data is valid for 3 years. For dealing with potential customer complaints or defending legal claims we keep personal data such as contract data, customer communication, email marketing data, technical logs, website data and consent records for 3 years. BONNEL TECHNOLOGIE s.r.o. is obliged by law to keep accounting documents (including VAT-related documents) for 10 years.
V. Right to make personal data accessible for other persons/parties
Personal data is made accessible for appropriate administrative authorities if this duty is set for the specific situation (particularly in case of an inspection during which the given authority is authorized to require the presentation of personal data) given by law to fulfil legal obligations. These authorities may be the Office for Personal Data Protection (UOOU), the Police of the Czech Republic, courts, prosecutors’ offices, or other authorities empowered by law.
VI. Information about your further data protection rights
A. Right of access to personal data by the data subject
It is the right to receive a confirmation to process your personal data and if so, the right of access to these personal data and information about their processing.
B. Right to rectification of personal data
It is the right that without any necessary delay we correct incorrect personal data concerning you. Regarding the purpose of their processing, you have the right to complement the incomplete personal data, including an additional declaration.
C. The right to erasure („right to be forgotten“)
In cases specified by the legislation or by GDPR you have the right to require that, without any necessary delay, we erase your personal data (see GDPR Art. 17, including exceptions where the erasure will not be realized).
D. Right to restriction of processing
In cases specified in GDPR Art. 18 you shall have the right to require that we restrict the processing of your personal data.
E. Right to data portability
Under the conditions specified in GDPR Art. 20 you shall have the right to obtain your personal data and transfer them to another controller. If it is technically feasible, you shall have the right to require direct transfer of your personal data to another controller.
F. Right to object
In cases when we process your personal data for compelling legitimate grounds, you shall have the right to object, and we shall no longer process the personal data if our legitimate interest does not override your interests or rights or freedoms. Should the legitimate interest be direct marketing, then, the objection shall result in the termination of further processing of personal data for the purpose of direct marketing.
G. The right to file a complaint at the supervising authority
If you assume that there is a breach/infringement of your rights to protect your personal data, you shall have the right to file a complaint at the “Úřad na ochranu osobních údajů” (Czech Office for personal data protection). You can find more information about this Office and personal data protection directly at their homepage at www.uoou.cz.
Should you have any questions regarding the processing of your personal data at BONNEL TECHNOLOGIE, you can contact us here: gdpr@bonnel.cz.
