GDPR

We protect your personal data

KUBOUŠEK Group includes several companies operating in the Czech Republic, Slovakia and Poland, the parent company of which is KUBOUŠEK EU holding a.s. This Policy contains information about the processing of personal data in the following companies of KUBOUŠEK Group:

• KUBOUŠEK EU holding a.s., with its registered office at Lidická tř. 1937, České Budějovice 7, 370 07 České Budějovice, CRN 03664503, entered in the Commercial Register kept at the Regional Court in České Budějovice, Section B, Insert 2242;
• KUBOUŠEK s.r.o., with its registered office at Lidická tř. 1937, České Budějovice 7, 370 07 České Budějovice, CRN 26076306, entered in the Commercial Register kept at the Regional Court in České Budějovice, Section C, Insert 12488;
• KUBOUŠEK Systems., with its registered office at Lidická tř. 1937, České Budějovice 7, 370 07 České Budějovice, CRN 02396106, entered in the Commercial Register kept at the Regional Court in České Budějovice, Section C, Insert 22277;
• KSQ spol. s r.o., with its registered office at Lidická tř. 1937, České Budějovice 7, 370 07 České Budějovice, CRN 26025230, entered in the Commercial Register kept at the Regional Court in České Budějovice, Section C, Insert 9763;
• KUBOUŠEK SK, s.r.o., with its registered office at Vinárska 1006/7, 951 41 Lužianky, Slovak Republic, CRN 36434485, entered in the Commercial Register at the District Court of Nitra, Insert 18039/N;
• KUBOUSEK POLSKA sp. z o.o., with its registered office at Bielska 68, 43-400 Cieszyna, Republic of Poland, registered under No. KRS 0000552611 in the Krajowy Rejestr Sądowy (in the Regional Court Register)

(hereinafter referred to as the “KUBOUŠEK Group”). At KUBOUŠEK Group, we undertake to protect the personal data provided. The protection of your personal data is important to us.

When processing personal data, we follow the applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “the Regulation”), which entered into force on 25 May 2018.

In this document you will find information on why, when, how and what personal data we process in KUBOUŠEK Group. You will also find a way to contact us if you have questions regarding the processing of your personal data or how to correct personal data, for example.

We encourage you to read the information in the Policy carefully and keep an eye on its contents, as the document may be updated. We have made every effort to make the Policy as clear as possible. If something is still not clear to you, we will be happy to explain any term or any part to you.

You can contact us at any time in writing at Lidická 1937, 370 07 České Budějovice or at the registered office of any of the KUBOUŠEK Group companies, by e-mail at gdpr@kubousek.eu, by phone at +420 389 041 111 or in any of our establishments.

Useful terms

Let us explain some basic terms related to personal data protection. We believe that this will give you a better understanding and understanding of why we at KUBOUŠEK Group proceed with the processing of personal data in the chosen manner.

“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or one or more specific elements of physical, physiological, genetic, mental, economic, cultural or the social identity of that natural person;

“Data subject” means a natural person to whom personal data relate;

“Data controller” is the person who determines the purposes and means of the processing of personal data and is primarily responsible for the processing. Unless otherwise stated in this Policy, conditions of a specific contract or in the consent, the personal data controller is one or more companies of the KUBOUŠEK Group;

“Data processor” means the person who processes personal data for the controller;;

“Processing” means any operation or set of operations involving personal data or sets of personal data which is carried out with or without automated procedures such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, viewing, using, making available by transmission, dissemination or any other making available, alignment or combination, restriction, deletion or destruction.

Categories of data subjects

The data subject may be:

• customer of the KUBOUŠEK Group, his employee or representative;
• business partner of the KUBOUŠEK Group, its employee or representative;
• another person who is in a contractual relationship with KUBOUŠEK Group;
• a visitor and another person moving in the premises of KUBOUŠEK Group, which are monitored by a camera system;
• a person participating in events organized by KUBOUŠEK Group, or events in which KUBOUŠEK Group participates;
• visitor to the KUBOUŠEK Group website;
• KUBOUŠEK Group employee;
• job seeker at KUBOUŠEK Group.

Why do we process your personal data?

We process your personal data to the extent necessary for the relevant purpose – for example, so that we can conclude with you and also implement a specific contract. The obligation to process data is also stipulated by a number of legal regulations. For example, we have to process a lot of data for archiving purposes. We process some data, as it is necessary for the protection of the rights and legally protected interests of KUBOUŠEK Group, or of KUBOUŠEK Group companies. However, processing for this reason is limited, we carefully assess the existence of a legitimate interest. In the other cases, we process your data only with your consent.

Selection procedures for for vacancies

For the purposes of selection procedures for vacancies in KUBOUŠEK Group, we collect your personal data through your CVs and also through our contact form for these purposes on our website. We use this personal data for the purposes of a specific selection procedure and negotiations on the conclusion of the contract and only for the duration of this selection procedure. Keeping in the register of candidates even after the end of a specific selection procedure and subsequent communication in the case of a vacancy are subject to your consent.

Legal basis:

• negotiations on the conclusion of the contract
• Your consent.

Human resources

KUBOUŠEK Group or KUBOUŠEK Group companies also process personal data of their employees. Information on the processing of personal data of employees is provided in a separate document.

Sales of products and providing service and calibration services to end customers

For the purposes of concluding a contract, especially a purchase contract or a service contract, we process your personal data necessary for your identification. For the purposes of proper performance of the contract, we process your contact details or basic identification and contact data of employees or customer representatives as well as other personal data that are necessary for the performance of the contract (for example, bank account).

Legal basis:

• conclusion and performance of the contract.

Organizing training and conducting educational courses

For the purposes of concluding the contract, we process your personal data necessary for your identification. Your contact details or basic identification and contact data of employees or representatives of customers of training and courses, we process for the purposes of proper performance of the contract. To keep an attendance list for training, we also process personal data of participants in training and courses in the range of name, surname, title, employer, and for the purposes of issuing certificates of completion of training, also their date of birth.

Legal basis:

• conclusion and performance of the contract.

Contracts with business partners (suppliers, distributors, manufacturers, sales representatives)

For the purposes of concluding the contract, especially the framework purchase agreement, distribution agreement, cooperation agreement, etc., we process your personal data necessary for your identification. For the purposes of proper performance of the contract, we process your contact details or basic identification and contact data of employees or representatives of business partners as well as other personal data that are necessary for the performance of the contract (for example, bank account).

Legal basis:

• conclusion and performance of the contract.

Marketing

As part of our marketing activities, we send business communications regarding KUBOUŠEK Group products and services in various forms, including the use of paper correspondence and e-mail. Processing for direct marketing purposes (e.g. sending e-mails to customers) can be considered as processing carried out for reasons of legitimate interest. We carry out marketing activities to a greater extent on the basis of your consent.

By processing for marketing purposes, we also mean knowing your preferences and offering products and services for you. For this purpose, we use the grouping and evaluation of basic data and data on products and services, even by automatic means. Based on the results of analyses, we can find the most suitable products and services for you so that we do not bother you with irrelevant offers.

You can restrict marketing directly in our business communications, which includes the possibility of stopping their sending, within a telephone call, via e-mail, in writing or in person at the headquarters of our companies or at our premises. Please note that if you restrict marketing, we may still use your contact for purposes other than marketing.

Legal basis:

• Your consent
• our legitimate interests.

Presentation of KUBOUŠEK Group and media communication

For the purposes of the KUBOUŠEK Group presentation and media communication, we organize or participate in various events in which photographs and video are taken. We can then share these photos and videos on social networks, our website, or also on the websites of our partners and in other media. If you have any objections to the processing of such photographic or video recordings by KUBOUŠEK Group, you may object at any time to such processing and we will take the necessary measures.

In case of conditional participation in the event by invitation or registration, we will inform you in advance about taking and using photos in this way. In certain cases, we are also interested in associating your name and function or job position with photographs. However, we will only do so with your consent.

Legal basis:

• Your consent
• our legitimate interests.

Communication via web form and other communication

You can contact us with any questions or comments via our website. In the contact form you fill in the name, surname, telephone, e-mail, company, and possibly other information that you provide to u. We process your personal data for the purpose of processing your request, complaint or answering a question. When filling out the contact form, you give us consent to the processing of your personal data. Also in the case of another form of communication, we process your personal data only for the time necessary to settle the communication with you, unless we have another legal basis for processing your personal data.

Legal basis:

• Your consent.

Presentation of KUBOUŠEK Group and media communication

For the purposes of the KUBOUŠEK Group presentation and media communication, we organize or participate in various events in which photographs and video are taken. We can then share these photos and videos on social networks, our website, or also on the websites of our partners and in other media. If you have any objections to the processing of such photographic or video recordings by KUBOUŠEK Group, you may object at any time to such processing and we will take the necessary measures.

In case of conditional participation in the event by invitation or registration, we will inform you in advance about taking and using photos in this way. In certain cases, we are also interested in associating your name and function or job position with photographs. However, we will only do so with your consent.

Legal basis:

• Your consent
• our legitimate interests.

Communication via web form and other communication

You can contact us with any questions or comments via our website. In the contact form you fill in the name, surname, telephone, e-mail, company, and possibly other information that you provide to u. We process your personal data for the purpose of processing your request, complaint or answering a question. When filling out the contact form, you give us consent to the processing of your personal data. Also in the case of another form of communication, we process your personal data only for the time necessary to settle the communication with you, unless we have another legal basis for processing your personal data.

Legal basis:

• Your consent.

Visit to the website

In general, you can visit the KUBOUŠEK Group website without having to provide your identity or any other information about yourself. With the help of cookies, we process information regarding the use of our website. This information will allow us to improve the quality of our website or our marketing services.

Legal basis:

• Your consent
• our legitimate interests.

Accounting and taxes

We collect and process your identification and transaction data in order to fulfill our accounting and tax obligations to administrative authorities imposed on us by the Accounting Act, the Value Added Tax Act and other accounting and tax regulations.

Legal basis:

• fulfillment of obligations under legal regulations.

Security

We pay attention to the security of physical property, data and people through monitoring by camera systems. Camera systems are installed to protect people and property against wrongdoing, primarily to prevent and clarify robbery, burglary, theft and vandalism. Premises that are monitored by camera systems are always visibly marked and information about the monitoring is available in their vicinity. We store recordings from the cameras in secure areas. We keep the recordings only for a reasonable period of time according to the individual cameras and their location, but for a maximum of 30 days.

Legal basis:

• our legitimate interests.
• Exercise or defense of rights

In the event that we are forced to enforce our receivables through legal means, or if we are parties to legal proceedings and the proceedings concern you or if we resolve a dispute with you out of court, or if you can provide important information for resolving the dispute, we will use your identification data, data on the legal relationship with you, data on the implementation of the contract , or other data necessary to protect our rights.

Legal basis:

• our legitimate interests.

Internal administration, process optimization, certification

Our employees process your personal data in the performance of duties within the processes established in KUBOUŠEK Group. For example, we have set up various approval, registration and reporting systems. Your identification data and contact details are used for planning, project management, evaluation, etc. We obtain your personal data processed for these purposes primarily through forms based on ISO standards for quality management and also standards for occupational safety and health management.

Legal basis:

• Your consent
• our legitimate interests
• fulfillment of obligations under legal regulations.

In addition to the above, any other personal data may be processed if you voluntarily provide it to us. We reserve the right to destroy unsolicited personal data.
In some cases, there may be further processing of personal data that goes beyond the purpose for which the personal data were originally obtained.

Why do we process your personal data?

We process your personal data to the extent necessary for the relevant purpose – for example, so that we can conclude with you and also implement a specific contract. The obligation to process data is also stipulated by a number of legal regulations. For example, we have to process a lot of data for archiving purposes. We process some data, as it is necessary for the protection of the rights and legally protected interests of KUBOUŠEK Group, or of KUBOUŠEK Group companies. However, processing for this reason is limited, we carefully assess the existence of a legitimate interest. In the other cases, we process your data only with your consent.

Selection procedures for for vacancies

For the purposes of selection procedures for vacancies in KUBOUŠEK Group, we collect your personal data through your CVs and also through our contact form for these purposes on our website. We use this personal data for the purposes of a specific selection procedure and negotiations on the conclusion of the contract and only for the duration of this selection procedure. Keeping in the register of candidates even after the end of a specific selection procedure and subsequent communication in the case of a vacancy are subject to your consent.

Legal basis:

• negotiations on the conclusion of the contract
• Your consent.

Human resources

KUBOUŠEK Group or KUBOUŠEK Group companies also process personal data of their employees. Information on the processing of personal data of employees is provided in a separate document.

Sales of products and providing service and calibration services to end customers

For the purposes of concluding a contract, especially a purchase contract or a service contract, we process your personal data necessary for your identification. For the purposes of proper performance of the contract, we process your contact details or basic identification and contact data of employees or customer representatives as well as other personal data that are necessary for the performance of the contract (for example, bank account).

Legal basis:

• conclusion and performance of the contract.

Organizing training and conducting educational courses

For the purposes of concluding the contract, we process your personal data necessary for your identification. Your contact details or basic identification and contact data of employees or representatives of customers of training and courses, we process for the purposes of proper performance of the contract. To keep an attendance list for training, we also process personal data of participants in training and courses in the range of name, surname, title, employer, and for the purposes of issuing certificates of completion of training, also their date of birth.

Legal basis:

• conclusion and performance of the contract.

Contracts with business partners (suppliers, distributors, manufacturers, sales representatives)

For the purposes of concluding the contract, especially the framework purchase agreement, distribution agreement, cooperation agreement, etc., we process your personal data necessary for your identification. For the purposes of proper performance of the contract, we process your contact details or basic identification and contact data of employees or representatives of business partners as well as other personal data that are necessary for the performance of the contract (for example, bank account).

Legal basis:

• conclusion and performance of the contract.

Marketing

As part of our marketing activities, we send business communications regarding KUBOUŠEK Group products and services in various forms, including the use of paper correspondence and e-mail. Processing for direct marketing purposes (e.g. sending e-mails to customers) can be considered as processing carried out for reasons of legitimate interest. We carry out marketing activities to a greater extent on the basis of your consent.

By processing for marketing purposes, we also mean knowing your preferences and offering products and services for you. For this purpose, we use the grouping and evaluation of basic data and data on products and services, even by automatic means. Based on the results of analyses, we can find the most suitable products and services for you so that we do not bother you with irrelevant offers.

You can restrict marketing directly in our business communications, which includes the possibility of stopping their sending, within a telephone call, via e-mail, in writing or in person at the headquarters of our companies or at our premises. Please note that if you restrict marketing, we may still use your contact for purposes other than marketing.

Legal basis:

• Your consent
• our legitimate interests.

Presentation of KUBOUŠEK Group and media communication

For the purposes of the KUBOUŠEK Group presentation and media communication, we organize or participate in various events in which photographs and video are taken. We can then share these photos and videos on social networks, our website, or also on the websites of our partners and in other media. If you have any objections to the processing of such photographic or video recordings by KUBOUŠEK Group, you may object at any time to such processing and we will take the necessary measures.

In case of conditional participation in the event by invitation or registration, we will inform you in advance about taking and using photos in this way. In certain cases, we are also interested in associating your name and function or job position with photographs. However, we will only do so with your consent.

Legal basis:

• Your consent
• our legitimate interests.

Communication via web form and other communication

You can contact us with any questions or comments via our website. In the contact form you fill in the name, surname, telephone, e-mail, company, and possibly other information that you provide to u. We process your personal data for the purpose of processing your request, complaint or answering a question. When filling out the contact form, you give us consent to the processing of your personal data. Also in the case of another form of communication, we process your personal data only for the time necessary to settle the communication with you, unless we have another legal basis for processing your personal data.

Legal basis:

• Your consent.

Presentation of KUBOUŠEK Group and media communication

For the purposes of the KUBOUŠEK Group presentation and media communication, we organize or participate in various events in which photographs and video are taken. We can then share these photos and videos on social networks, our website, or also on the websites of our partners and in other media. If you have any objections to the processing of such photographic or video recordings by KUBOUŠEK Group, you may object at any time to such processing and we will take the necessary measures.

In case of conditional participation in the event by invitation or registration, we will inform you in advance about taking and using photos in this way. In certain cases, we are also interested in associating your name and function or job position with photographs. However, we will only do so with your consent.

Legal basis:

• Your consent
• our legitimate interests.

Communication via web form and other communication

You can contact us with any questions or comments via our website. In the contact form you fill in the name, surname, telephone, e-mail, company, and possibly other information that you provide to u. We process your personal data for the purpose of processing your request, complaint or answering a question. When filling out the contact form, you give us consent to the processing of your personal data. Also in the case of another form of communication, we process your personal data only for the time necessary to settle the communication with you, unless we have another legal basis for processing your personal data.

Legal basis:

• Your consent.

Visit to the website

In general, you can visit the KUBOUŠEK Group website without having to provide your identity or any other information about yourself. With the help of cookies, we process information regarding the use of our website. This information will allow us to improve the quality of our website or our marketing services.

Legal basis:

• Your consent
• our legitimate interests.

Accounting and taxes

We collect and process your identification and transaction data in order to fulfill our accounting and tax obligations to administrative authorities imposed on us by the Accounting Act, the Value Added Tax Act and other accounting and tax regulations.

Legal basis:

• fulfillment of obligations under legal regulations.

Security

We pay attention to the security of physical property, data and people through monitoring by camera systems. Camera systems are installed to protect people and property against wrongdoing, primarily to prevent and clarify robbery, burglary, theft and vandalism. Premises that are monitored by camera systems are always visibly marked and information about the monitoring is available in their vicinity. Premises that are monitored by camera systems are always visibly marked and information about the monitoring is available in their vicinity. We store recordings from the cameras in secure areas. We keep the recordings only for a reasonable period of time according to the individual cameras and their location, but for a maximum of 30 days.

Legal basis:

• our legitimate interests.
• Exercise or defense of rights

In the event that we are forced to enforce our receivables through legal means, or if we are parties to legal proceedings and the proceedings concern you or if we resolve a dispute with you out of court, or if you can provide important information for resolving the dispute, we will use your identification data, data on the legal relationship with you, data on the implementation of the contract , or other data necessary to protect our rights.

Legal basis:

• our legitimate interests.

Internal administration, process optimization, certification

Our employees process your personal data in the performance of duties within the processes established in KUBOUŠEK Group. For example, we have set up various approval, registration and reporting systems. Your identification data and contact details are used for planning, project management, evaluation, etc. We obtain your personal data processed for these purposes primarily through forms based on ISO standards for quality management and also standards for occupational safety and health management.

Legal basis:

• Your consent
• our legitimate interests
• fulfillment of obligations under legal regulations.

In addition to the above, any other personal data may be processed if you voluntarily provide it to us. We reserve the right to destroy unsolicited personal data.
In some cases, there may be further processing of personal data that goes beyond the purpose for which the personal data were originally obtained.

What personal data do we process?

We respect the principle of minimizing personal data. We only process personal data that we absolutely need or personal data that you provide to us with your consent beyond the scope of the necessary processing.

Below you will find out what categories of personal data we process about you. A more specific scope of personal data processed for individual purposes is given in the following section “Why do we process your personal data?”.

KUBOUŠEK Group processes the following categories of personal data:

• identification data: name, surname, title, date of birth, address of permanent residence, illustration of your signature; if you do business ID number, registered office, VAT number;
• contact details: contact address, telephone number, fax, e-mail;
• other data necessary for the performance of the contract: bank details;
• photo and video recordings;
• data processed on the basis of consent;
• transaction data and data on the use of our products and services: number or other identification of the contract, information on the subject of the contract or performance of the contract, data on the use of our products and services, business history;
• data resulting from communication: data from the use of our website.

How long do we keep your personal data?

We will only store your personal data for the time necessary to fulfill the purposes set out in this Policy, or to comply with legal obligations.

The latest period of personal data processing that we apply to you in KUBOUŠEK Group is 10 years from the date when the legal relationship between you and one of the KUBOUŠEK Group companies was terminated, or 10 years from the end of the tax period in which the performance took place. The obligation to store identification and transaction data is imposed on us by the Accounting Act, the Value Added Tax Act and other accounting and tax regulations. However, we also archive your personal data for a period of 10 years due to our legitimate interests, especially in the event that we have to submit evidence in a legal dispute, with regard to the statutory limitation periods under the Civil Code.

We keep the data that we process with your consent for as long as the consent is validly granted to us. In the event that you have given us consent to the processing of data for marketing purposes, we process your personal data for the period specified in the specific consent, but no longer than the duration of our contractual relationship and 5 years from its termination. If you do not become our customer, i.e. the contractual relationship is not concluded, we process your data for the period specified in the specific consent, but for a maximum of 5 years from the granting of the consent. For the avoidance of doubt, we retain the consent itself and the change or revocation of the consent due to our legitimate interests for the entire period of validity of the consent and 10 years after its expiration.

Are you obliged to provide us with personal data?

The transfer of data that you provide to us with your consent is voluntary. We require the transfer of other data, as their processing is necessary for the conclusion or performance of the contract, the fulfillment of our legal obligations or the protection of our legitimate interests. If you do not provide us with such data, we cannot conclude the relevant contract with you or we cannot provide you with the relevant product or service.

Consent

If we ask you for your consent to the processing of your personal data, the request for consent, or the consent we give you for study and signature or other consent is clearly formulated and will provide you with a reasonable basis for decision-making. You may revoke your consent at any time through the contacts listed at the beginning and end of this Policy.

We retain your personal data only for as long as is necessary to fulfill the purposes described in this Policy or for purposes of which you have been otherwise informed. This means that once you give us your consent to the processing of your personal data, we will keep your data in accordance
with your consent and/or until you revoke your consent. However, even if your consent is revoked, we may retain some of your personal data for the time necessary to fulfill our legal obligations and for the purposes of our defense in any legal disputes.

We will not share your personal data with third parties for their marketing purposes unless we have received your consent for those purposes. If you have given us such consent, but you no longer wish to receive marketing materials from a third party, please contact the relevant third party directly

Sources of personal data

Depending on the situation, we process data that we have received from you within the KUBOUŠEK Group, as well as data from publicly available sources and registers as well as data obtained from third parties (for example, our business partners).

Disclosure and transfer of personal data

We manage your personal data primarily within the KUBOUŠEK Group.

Sharing within the KUBOUŠEK Group

We transfer your identification and contact data, data on products and services and data from our communication and interaction within the KUBOUŠEK Group, especially for administrative and legal purposes and also to improve our services, when for example one of the KUBOUŠEK Group companies you contact, will pass on your personal data to another company within the KUBOUŠEK Group, which specializes in the area you are interested in. We do so for the purposes of the legitimate interests of KUBOUŠEK Group and for the purposes of concluding and fulfilling the contract with you. In some cases, mainly of an administrative nature, other KUBOUŠEK Group companies are in the position of processors. . In other cases, however, other companies are also in the position of controller (e.g. when handing over to another company for the purpose of concluding a contract and providing products or services).

If you, as a customer, have given us consent to the use of data in the KUBOUŠEK Group, we may share your data with each other for marketing purposes and thus provide a simpler, faster and better service across the KUBOUŠEK Group. Thanks to the consent, we take better account of your preferences and you gain access to a much wider and more relevant range of services for you. The consent is valid for KUBOUŠEK Group. The consent is completely voluntary and you can revoke it at any time or only limit it to individual companies whose offers you are not interested in.

Other possible recipients

If it is necessary to achieve any of the purposes listed above, especially if the external entity in the field has the necessary professionalism and expertise, your data is processed by cooperating suppliers. If we entrust someone else with the performance of a certain activity forming part of our services, the relevant personal data may be processed during that service. In some cases, these suppliers become processors of personal data. The processor is entitled to handle the data exclusively for the purposes of performing the activity for which he has been authorized by the relevant controller. In this case, your consent is not required for the purposes of processing.

• financial institutions;
• administrative authorities in the framework of the fulfillment of legal obligations stipulated by the relevant legal regulations;
• our business partners (especially suppliers and subcontractors);
• Providers of IT services, including cloud storage;
• marketing agencies and marketing service providers;
• camera system administrator;
• lawyers;
• auditors;
• providers of printing and postal services, including couriers.

In addition to the above, we transfer personal data outside the KUBOUŠEK Group only if we have your consent or if required by law. Some public authorities and other organizations are entitled to request information about you.

In some cases, we also transfer personal data to our business partners or other persons in third countries (outside the EU), such as Japan. These are mainly related to the origin of the product, which is provided to you by KUBOUŠEK Group, and the transfer occurs in the case of an order or product complaint. In some cases, personal data are transferred to a third country in view of the legislative requirements related to the export authorization of the product. However, we always pay attention to the level of protection of personal data provided in this way.

Security

We strive to ensure that the data entrusted by you is as safe as possible. To this end, we have put in place a number of technical and organizational measures to protect your personal data from unintentional or unlawful destruction, unintentional loss or alteration, unauthorized disclosure or access, and any other unlawful forms of processing.

We restrict access to your personal data only to those employees of KUBOUŠEK Group and suppliers of KUBOUŠEK Group who need this information for the purpose of processing it on our behalf and who are contractually obliged to maintain the security and confidentiality of your personal data.

As already mentioned, in certain cases we pass on, or are obliged to pass on, personal data to third parties. In such cases, we choose trusted partners with whom we have ensured that they will observe at least the same level of personal data protection as we provide at KUBOUŠEK Group.

When transferring personal data to administrative authorities, we always use the most appropriate and safest options that the competent authority offers.

We use cloud storage, which is essentially located within the EU and a high level of data security is always ensured.

Website

You can visit the KUBOUŠEK Group website without having to provide your identity or any other information about yourself. When you use the KUBOUŠEK Group website, we record information from your browser that may include personal data. We use various cookies to collect this information. This information may include your IP address, unique identifier using “cookies”, information about cookies, device type, domain, browser type and language, type of operating system, country and time zone, information about your steps on our website and time and date of coming to our website. This information will allow us to improve the quality of our website or our marketing services.

Through the website, third parties may also collect information, using so-called cookies, plug-ins and widgets. These third parties collect data directly from your internet browser and their processing is subject to their own third party data protection policies.

What are cookies?

Cookies are small text files that websites store on your computer or mobile device when you start using these sites. They are used to remember your preferences and the actions you take on them (e.g. login data, language, font size and other display preferences). You do not have to enter this information again for a certain period of time.

Why does KUBOUŠEK Group use cookies and other tracking technologies?

Cookies and other tracking technologies may be used on our website and applications in various ways, for example for the purpose of operating the website, analyzing traffic or for advertising purposes. We use cookies and other tracking technologies mainly to be able to improve and streamline our services.

On our website we use:

• Short-term first-party cookies that are necessary to ensure the functioning of the website.
• Long-term first-party cookies that we use so that we can best adapt the website to you. We use anonymous data measurement using Google Analytics for web analysis.
• Third-party cookies so that we can better customize advertising messages to you. These are mainly cookies from social networks, advertising systems and embedded videos.

More information about cookies, disabling cookies

For more information on what cookies are, how they work, how to manage or delete them, visit www.allaboutcookies.org

In the settings of some internet browsers (Internet Explorer, Safari, Chrome) it is possible to set to disable cookies and other tracking technologies. More options for managing cookies are available at www.youronlinechoices.com/cz/vase-volby.

If you decide to disable certain cookies, the functionality of the services offered through our website may be limited.

Your rights associated with the processing of personal data

If you exercise your rights to the personal data we process, we require your identification. We would like to inform you that if we are unable to verify your identity electronically or if we have reasonable doubts about your identity, we will ask you to present proof of identity or other evidence. We will only exclude that we will not provide your personal data to another person or that your personal data will not be modified without authorization.

The right to information and access to personal data

We respect the principle of transparency in the processing of personal data. In accordance with this principle, we will always provide you with information about what of your personal data we process.

We will process your requests in the shortest possible time, up to a maximum of one month. In more complex cases, we are entitled to extend the deadline by up to two months.

If you request information about the processing of your personal data, we will provide you with information about the purpose of processing personal data, personal data or categories of personal data that are the subject of processing, including all available information about their source, recipient or categories of recipients. You will also be informed of the planned period for which personal data will be stored or, if this cannot be determined, the criteria used to determine this period, and the existence of the right to request or object to the correction or deletion of your personal data or to limit their processing, and also the right to lodge a complaint with the supervisory authority.

You have the right to request a copy of the processed personal data from any KUBOUŠEK Group company, provided that the rights and freedoms of other persons are not adversely affected. For additional copies upon your request, we may charge a reasonable fee based on administrative costs. If you submit your request in electronic form, we will provide you with information in electronic form, which is commonly used, unless you request another method.

Right of correction

When processing your personal data, we strive to ensure their accuracy and timeliness. We will try to delete or correct inaccurate or incomplete personal data. If you find that some of the personal data we process about you is incorrect or out of date, please let us know. You have the right to ask KUBOUŠEK Group companies to correct inaccurate personal data concerning you without undue delay. Taking into account the purposes of processing, you have the right to supplement incomplete personal data.

In some cases, we are unable to correct personal data. These are especially cases where your erroneous or outdated personal data is contained on a tax document, which we archive according to the law.

Any corrections will also be notified to the recipients to whom the personal data have been provided, except where this is impossible or requires a disproportionate effort.

Withdrawal of consent to the processing of personal data

Further processing of your personal data, which is carried out on the basis of consent to the processing of personal data, can be prevented at any time. All you have to do is withdraw your consent to such processing.

Right of erasure (right to be “forgotten”)

You can also exercise your right to “be forgotten”. You have the right to have KUBOUŠEK Group companies delete personal data concerning you without undue delay, and KUBOUŠEK Group is obliged to delete personal data without undue delay if one of the following reasons is given:

personal data are no longer needed for the purposes for which they were collected or otherwise processed;
you withdraw the consent on the basis of which the personal data were processed and there is no other legal reason for the processing;
personal data have been processed illegally;
personal data must be deleted in order to fulfill the legal obligation set out in the law of the European Union or the Czech Republic.

In this case, we will delete all your personal data that we process. Exceptions are cases where the processing takes place out of a legal obligation or because of our legitimate interest in the exercise and defense of legal claims.

Deletion will also be notified to the recipients to whom the personal data have been provided, except where this is impossible or requires a disproportionate effort.

Right to restrict processing

You have the right for KUBOUŠEK Group companies to restrict processing in any of the following cases:

you deny the accuracy of personal data for the time necessary for KUBOUŠEK Group companies to verify the accuracy of personal data;
the processing is illegal and you refuse to delete the personal data and ask instead to restrict their use;
KUBOUŠEK Group no longer needs personal data for processing purposes, but you request it for the purpose of determining, enforcing or defending legal claims; an objection to the processing was raised, until the verification of whether the legitimate interests of KUBOUŠEK Group outweigh your reasons for the objection.

Any restrictions will also be notified to the recipients to whom the personal data have been provided, except where this is impossible or requires a disproportionate effort.

The right to the portability of personal data

You have the right to obtain personal data relating to you provided to KUBOUŠEK Group in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller, and KUBOUŠEK Group shall not prevent from doing so, provided that: the processing is based on consent to the processing of personal data or is the processing of personal data for the purposes of concluding and performing the contract; and at the same time

processing is performed automatically.

In exercising your right to data portability, you have the right to have personal data transferred by KUBOUŠEK Group directly to another controller, if technically feasible. The right to portability of personal data must not adversely affect the rights and freedoms of others.

The right not to be the subject of an automated decision, including profiling

You have the right not to be the subject of any decision based solely on automated processing, including profiling (i.e. any form of automated processing of personal data consisting in their use to assess certain personal aspects relating to you), which has legal effects for you or similarly significantly affects you. This right does not apply if an automated decision is necessary for the conclusion or performance of a contract between you and KUBOUŠEK Group or is based on your express consent; in these cases, however, you have the right to human intervention in the automated decision by KUBOUŠEK Group, the right to express your opinion and the right to challenge the automated decision.

KUBOUŠEK Group does not currently perform automated decision-making in the sense of the above stated.

The right to object

If personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for such marketing, including profiling (i.e. any form of automated processing of personal data consisting in their use to evaluate certain personal aspects relating to the data subject) as far as this direct marketing is concerned. If you object to processing for direct marketing purposes, personal data will no longer be processed for these purposes.

If personal data is processed on the basis of the legitimate interests of KUBOUŠEK Group, you have the right at any time to object to the processing of personal data concerning you for these legitimate interests. This objection must be substantiated on your part so that we can properly assess it. Your objections and the reasons leading to it will then be assessed and compared with the legitimate interests of KUBOUŠEK Group. If your reasons outweigh the legitimate interests of KUBOUŠEK Group, the processing of your personal data will be limited or your personal data will be deleted.

The right to file a complaint with the supervisory authority

You have the right to file a complaint against the processing of your personal data with the supervisory authority, which is the Office for Personal Data Protection, with its seat at Pplk. Sochora 27, 170 00 Prague 7.

In case of any ambiguities or questions regarding the processing of your personal data and to exercise any of the above rights, you can contact us at any time in writing at Lidická 1937, 370 07 České Budějovice or at the registered office of any of the KUBOUŠEK Group companies, by e-mail at address gdpr@kubousek.eu, by phone at +420 389 041 111 or in any of our establishments.