Personal Data Processing Policy of Emco spol. s r.o.

1 Personal Data Controller

1.1 Personal Data Controller Emco spol. s r.o., with registered office at Türkova 2319/5b, Chodov, 149 00 Prague, Czech Republic, registered in the Commercial Register kept at the Municipal Court in Prague 4, Section C 6522 (“Controller”) declares that all personal data processed by the Controller is strictly confidential. The Controller handles them in accordance with national and European Union legislation applicable in the field of personal data protection.

1.2 The Controller collects, stores and uses your personal data within the meaning of Section 6 of Act No. 101/2000 Coll., on the protection of personal data and on amendments to certain acts, as amended (hereinafter referred to as “Personal Data Protection Act”), or Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”). The individual purposes for which the Controller processes personal data are defined below.

1.3 The Controller also collects this personal data through its website at https://emcodistribution.eu/ (hereinafter referred to as “website”).

1.4 This policy is issued by the Controller so that you are sufficiently informed about what personal data the Controller processes about you, for what purpose, for how long, who will have access to your personal data, and what your rights are. This policy applies to all personal data collected by the Controller, whether collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest, or consent.

2 Data Processed

2.1 The Controller is entitled to process the following personal data according to the purpose, according to categories of personal data, according to categories of data subject, according to categories of recipients, and according to the retention period as follows.

No.	Purpose of processing	Categories of personal data	Preservation time
1.	Sending commercial communications and offering products and services	Address and identification data, descriptive data	5 years
2.	Statistical data	Address and identification data, descriptive data	5 years

2.2 The individual purposes of processing are:

2.2.1 Performance of a contractual relationship, meaning: the relationship between you and the Controller arising from an order, registration, contract, entry and participation in a competition, etc;

2.2.2 Sending commercial communications and offering products and services, meaning: sending commercial offers by electronic mail (e-mail), by text message, or by telephone call;

2.2.3 Accounting and tax purposes, meaning: accounting records within the meaning of accounting and tax legislation;

2.2.4 Statistical purposes, meaning: anonymised website traffic detection, monitoring of the number of page views, time spent on the website, type of device from which you access the website. We collect data so that we can improve our services and offer relevant content to our clients;

2.2.5 Display advertising, meaning: the display of advertisements on the website based on statistically determined customer preferences;

2.2.6 Legitimate interest, meaning: effective defence in the event of a dispute; the period of processing of personal data in such a case shall be 4 years from the expiry of the warranty period for the goods and shall be extended by the period for which the dispute is pending. We want to continually improve our services and, where appropriate, provide new and better services; we want to avoid obstructing such activity; therefore, activities that contribute to this objective are our legitimate interest. Other legitimate interests also include processing for fraud prevention purposes (e.g. assessing the risk of entering into a contract), direct marketing (e.g. offering relevant services to existing customers), transfer of personal data within the group of companies for internal administrative purposes, notification of criminal offences and transmission of personal data to the competent authority, ensuring network and information security. This list is only exemplary;

2.2.7 Fulfilling other legal obligations, meaning: providing information to law enforcement authorities, providing information to other public authorities, etc.

2.3 We process your personal data for the time necessary to ensure all rights and obligations arising from the mutual legal transaction, at least for the period of processing the order, execution of the transaction, installation of the service, etc., as well as for the period for which the controller is obliged to store personal data under generally binding legal regulations or for the period for which you have given your consent to the Controller, if applicable. Otherwise, the processing period is based on the purpose for which the personal data are processed or is determined by law.

2.4 Personal data are processed manually and automatically by the Controller. The Controller is entitled to process certain information automatically, for example, to create statistical information about traffic to their website.

3 Personal Data Processed on the Basis of Consent

3.1 If we have obtained consent from you to process your personal data, it is for one of the following purposes:

3.1.1 Sending commercial communications and other marketing activities;

3.1.2 Processing of your order and the exercise of rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data is required that is necessary for the successful processing of the order (name and address, contact); the provision of personal data is a necessary requirement for the conclusion and performance of the contract; without the provision of personal data, it is not possible to conclude the contract or its performance by the Controller;

3.1.3 Communication between the Subject and the Data Controller.

4 Rights of the Data Subject

4.1 As a Data Subject, you have the following rights under the law, which you can exercise at any time. These include:

4.1.1 the right of access to personal data, under which you have the right to obtain information from the Controller about whether the Controller processes your personal data. The Controller is obliged to forward this information to you without undue delay. The content of the information is determined by the provisions of Section 12(2) of Act No. 101/2000 Coll., on the Protection of Personal Data, as amended. The Controller shall have the right to request a reasonable fee for the provision of the information, not exceeding the costs necessary to provide the information;

4.1.2 the right to rectification or erasure of personal data or restriction of processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If your personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its deletion. If you do not want to request the erasure of personal data, but only to temporarily restrict its processing, you can request a restriction of processing;

4.1.3 The right to request an explanation if you suspect that the processing of personal data by the Controller is in breach of the law;

4.1.4 The right to contact the Office for Personal Data Protection in case of doubts about compliance with the obligations related to the processing of personal data;

4.1.5 The right to data portability, i.e. the right to obtain personal data concerning you that you have provided to the Controller in a structured, commonly used and machine-readable format; see Article 20 of the GDPR for more details;

4.1.6 The right to object to the processing of personal data processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the Controller. The Controller shall terminate the processing without undue delay unless they can demonstrate that there is a legitimate interest/reason for the processing that overrides your interests, rights, or freedoms;

4.1.7 The right to withdraw consent to the processing of personal data at any time if you have given your consent to the Controller to process your personal data.

5 Cookies

5.1 Cookies are short text files that a website sends to your browser. They allow the website to record information about your visit, such as your chosen language and so on, so that subsequent visits to the site can be easier and more enjoyable for you. Cookies are important because without them, browsing the Internet would be much more difficult. Cookies allow us to make better use of our website and to tailor its content to your needs; almost every website in the world uses them. Cookies are useful because they increase the user-friendliness of a repeatedly visited website.

5.2 The following types of cookies may be used on the website of the Controller:

5.2.1 Session (i.e. temporary) cookies allow us to link your individual activities while you are browsing this website. These files are activated when you open your browser window and deactivated when you close your browser window. Session cookies are temporary, and all these files are deleted when you close your browser.

5.2.2 Persistent cookies help us to identify your computer when you revisit our website. Another advantage of persistent cookies is that they allow us to tailor our website to your needs.

5.3 In accordance with the provisions of Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, as amended, we hereby inform you that our website uses cookies for its operation, i.e. that we process your cookies, including persistent cookies.

5.4 Internet browsers usually include cookie management. Within your browser settings, you can probably delete individual cookies manually, block or completely disable their use. For more information, please use your browser’s help function. If you do not allow the use of cookies, some features and pages may not work as they should.

5.5 We use cookies to personalise content and ads, provide social media features, and analyse our traffic. We share information about how you use our website with our social media, advertising, and analytics partners. By using the website, you consent to the linking of the following services:

5.5.1 Google

5.5.2 Facebook

5.5.3 Smartlook

5.6 To serve targeted advertising on advertising and social networks on other websites, we transmit information about your web behaviour to these advertising and social networks; however, we do not transmit your personally identifiable information to them.

6 Transfers to Third Countries

6.1 Your personal data will not be transferred to third countries.

Do you have a question?

If you have any questions about data protection, please do not hesitate to contact us at: import@emco.cz

This data protection declaration is valid from 8 November 2023 and is issued by Emco spol. s r.o.