Privacy Policy according to Articles 12 et seq. of Regulation (EU) 2016/679 (GDPR)

In this document, we describe how we handle your personal data in the course of providing our services.

1. How we collect personal data.

2. How we use and share this data.

3. How we store and secure it.

Activities involving personal data:

Specifically, these are the services and activities and related categories of personal data:

– Communication – We record identification and contact details (e.g., name, surname, email, telephone, postal address) necessary for providing and improving customer support and care, which we offer through various channels: email, telephone, newsletter, and others.

– Marketing – We record identification and contact details (e.g., name, surname, email, device information) necessary for offering our services, sending newsletters, and better targeting online advertising.

Personal data we collect:

We collect information in order to operate our services and improve them.

We collect information in the following ways:

– Information you provide us:

– For subscribing to our newsletter, you provide us your email, name, and surname.

– Information we obtain while you use our services – If you visit our website, we automatically store some information in server logs. This information includes:

– Device information – We collect data about the specific device and its operating system (e.g., operating system and its version, screen resolution, type, and version of browser).

– Cookies are small text files stored on your computer or mobile device when you visit websites. They help remember your activities and preferences for a certain period, so you do not have to re-enter them when you return to the site or move from page to page.

– Pixel tags – Some sections you visit on our website may also collect information using so-called pixel tags, which may be shared with third parties that directly support our marketing activities and service development. However, the information collected using these pixel tags does not allow identification of a specific person, although it may be linked to your personal data.

– Log information – When using our service, we automatically store information generated during these interactions:

– Device IP address

– Individual requests (date, time, type of request, performance parameters, whether the request was successfully served)

– Information about failures and errors

From a GDPR perspective, we process personal data for these purposes and based on these legal grounds (reasons for processing):

– Identification and contact details necessary for communication with the client. These data are stored at least for the duration of communication with us and the use of related products and subsequent archival period (as defined in the terms of providing the application) and a maximum of 10 years after this period.

– Identification and contact details only for providing and improving customer support and care based on legitimate interest in helping you in difficulties, improving your user experience, and increasing the benefits from using our services. Non-provision of these personal data will result in the inability to provide customer support and care. These data are stored for a maximum of 10 years after the termination of our services or products.

– Identification and contact details only for marketing purposes based on legitimate interest to inform you about new features in services we already provide to you and to offer you our other similar products and services. These data are stored for a maximum of 2 years after the last provision of our services.

– Email only based on consent to send marketing content or articles and other content published on our sites. Revocation of consent will result in the cessation of sending these marketing materials and forgetting (deletion or anonymization) of this email. These data are stored for a maximum of 2 years after the last email sent with marketing content based on consent.

– Identification and contact details only for inclusion on accounting documents based on fulfilling a legal obligation. These data are stored for the period specified by applicable legislation, e.g., “Document archiving according to the VAT law”, which is 10 years from the taxable transaction.

– Identification and contact details only for payroll processing based on fulfilling a legal obligation. These data are stored for the period specified by applicable legislation.

Use of this information:

The information we collect about you is used to provide you with our services and other support in using them, to notify you of changes in our services, and to improve our services. We may also use this information to inform you about other services and products we offer that complement those you have already ordered or inquired about.

Specifically, these are the cases:

– Your email, which you provide when sending an inquiry, is used to process the request and uniquely identify you, further, the email is used to provide user support and possible education, and to send information about news and changes.

– Information we automatically collect and profile when you use our services, we use for diagnosing errors, monitoring, evaluating, and optimizing the operation in which our site is displayed. Based on this information, we improve and optimize our website and services. The processing of all the aforementioned personal data does not involve automated decision-making.

– Contact details, which you fill out on our website in contact forms: Name, surname, email address.

– If you contact us through additional communication channels: phone, Facebook, and other social media, we will store your contact (phone number, URL profile, Skype name, etc.) and use it for further communication.

Sharing information:

We do not share your personal data with anyone unless one of the following cases occurs:

– At your request – if you request us to share your personal data outside our company. Everything will be covered by a new contract covering this transfer of personal data.

– With your explicit consent – if you give us explicit consent, which will contain all the particulars, then we strictly share the subject personal data according to the conditions defined in the expressed consent.

– For external processing – we provide personal data to these categories (types) of entities: accounting company, email service provider, and data storage provider, so they can process them for us only for the specified purposes of processing and based on our instructions, in accordance with these Privacy Policy and other relevant measures to ensure the confidentiality and security of your personal data.

– For legal reasons – we may share your personal data with third parties if we believe in good faith that sharing is reasonably necessary for the purpose of:

– complying with applicable laws or other legal provisions and handling judicial proceedings or processing requests from state administration,

– enforcing relevant contractual terms including investigating potential violations,

– detecting, preventing, or otherwise dealing with legal claims against the company NAWI Europe a.s. (e.g., against fraud), in technical troubles or security issues,

– protecting against harm to the health, property, or security of the company NAWI Europe a.s., our users, or the public as required or permitted by law.

We may share data that does not allow determination of your identity (e.g., statistics and other aggregated data). Therefore, only information without any link to personal data.

Where we store personal information:

The data we collect from you are stored and processed only within the European Economic Area (“EEA”).

For data storage, we use the services of a provider of hardware, network connection, and data storage. With this provider, we have all necessary contractual documentation, which is in accordance with these Privacy Policy and other relevant measures to ensure the confidentiality and security of your personal data.

Data security:

Data security is our top priority, so we work diligently to protect our clients from unauthorized data operations. We strive to take appropriate technical and organizational measures and take all necessary steps to ensure that your personal data is handled securely and according to these principles.

Specifically, these are the security measures:

– Data transmission security (Network securities) – all network communication is encrypted.

– Data insurance.

– Monitoring – all data access is monitored.

– Minimizing access persons – access to personal data is limited only to employees of the company NAWI Europe a.s. who need to know in order to process them, and who are contractually bound by strict obligations to maintain confidentiality.

Transmission of information over the Internet is never completely secure. Although we will do our utmost to protect your personal data, we cannot guarantee the security of data transmitted to our side. We are not responsible for any such transmission, but once we receive your information, we will use strict procedures and security features to protect against unauthorized access.

Your rights:

If relevant in the given case, you have many rights under data protection laws including:

– the right to object to processing according to Art. 21 of the GDPR,

– the right to access and inspect personal data according to Art. 15 of the GDPR, which are held about you;

– you can also ask us to make any necessary changes to ensure their accuracy and up-to-dateness according to Art. 16 of the GDPR;

– further, you can limit the extent of such processed personal data according to Art. 18 of the GDPR;

– request the transfer of your personal data to another organization according to Art. 20 of the GDPR;

– or you have the right to the erasure of your personal data, i.e., the right to be forgotten according to Art. 17 of the GDPR.

– you also have the right to revoke your given consent to the processing of your data;

– and also the right to complain about this processing to the supervisory authority ÚOOÚ according to Art. 77 of the GDPR.

If necessary, we provide a copy of personal data typically free of charge.

Changes to our privacy policy:

Any changes that we may make to this document in the future will be published on our websites and, if appropriate and possible, we will also notify you of this change by email. We will not restrict your rights under these privacy policy without your explicit consent.

Data Processor:

The data processor is NAWI Europe a.s., located at Příčná 1892/4, Nové Město, 110 00 Prague 1, Czech Republic, ID No: 09663371, registered in the Commercial