HP Lak s.r.o.
IČO: 26820081
DIČ: CZ26820081
Střádalů 638/59
718 00 Ostrava – Kunčičky, Czech Republic
Dear Clients,
In accordance with European legislation concerning personal data protection (so-called GDPR), we would like to ask you, as the Data Controller, to confirm your consent to the processing of your personal data by our company. Please read the full version of the text, which explains the methods of processing your personal data.
Why are we presenting this document?
- Due to the legal regulations adopted by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), it is necessary for you to be informed about your rights and obligations related to the processing of your personal data in cases where your explicit consent to the processing of your personal data may not be required, and to provide renewed consent for the processing of your personal data in cases where your consent is legally required.
- First of all, we kindly ask you to check that the provided personal data is accurate and complete, and has been obtained and used in accordance with legal regulations.
- The Controller may process the following personal data of yours: name, surname, address, phone number, bank details, communication and login information within IT systems, other network identifiers (IP addresses, cookies), information on the quantity and type of goods and services purchased (hereinafter referred to as "personal data").
- The Controller is authorized to collect, use, record, organize, arrange, structure, store, adapt or modify, edit, search, combine, use, and dispose of your personal data in accordance with legal regulations.
Verification of the current status of processed personal data
- First of all, we kindly ask you to check that the provided personal data is accurate and complete, and has been obtained and used in accordance with legal regulations.
What personal data will be processed?
- The Controller may process the following personal data of yours: name, surname, address, phone number, bank details, communication and login information within IT systems, other network identifiers (IP addresses, cookies), information on the quantity and type of goods and services purchased (hereinafter referred to as "personal data").
What is processing?
- The Controller is authorized to collect, use, record, organize, arrange, structure, store, adapt or modify, edit, search, combine, use, and dispose of your personal data in accordance with legal regulations.
Why and for what purpose will your personal data be processed?
Information on the processing of personal data
- We would like to inform you that the reason for processing your personal data is primarily the requirement to conclude and fulfill a contract, the subject of which is the delivery of the Controller's products or services. Your personal data is therefore processed for the purpose of our mutual communication and informing, as well as managing and maintaining your user account (customer card) and fulfilling our contractual relationship.
Your personal data may also be used to meet legal requirements, especially in relation to the Controller's tax obligations, archiving, and possibly other obligations imposed by law, which may affect your personal data.
The Controller is further authorized to process your personal data for its legitimate interest, primarily for the security and management of the Controller’s IT system or for asserting legitimate claims against you. If any personal data of third parties is obtained from you, you confirm that it is accurate and complete and has been obtained and used in accordance with legal regulations. The Controller guarantees that the processing of all personal data will comply with the purpose for which it was provided and ensures all guarantees for safe processing in accordance with legal regulations.
Consent to the processing of personal data
- If you tick the box "I agree with the principles of personal data processing", you consent that the Controller may also process the personal data listed in Article 3 for the purpose of presenting you with business communications in the form of offers of products and services, including sending advertisements. You consent to the Controller processing your personal data for the purpose of assessing the quality of products and the quantity of your purchases of products and services, including their profiling. The Controller may contact you with product and service offers via phone, SMS, email, letter, or catalog.
To whom may personal data be transferred?
- The Data Controller may share and transfer your personal data to its subcontractors involved in the provision of services for the purpose of concluding and fulfilling a contract, the subject of which is the delivery of the Controller's products or services. Personal data will not be transferred outside the European Union.
Your rights
You may withdraw your consent at any time, without affecting the legality of the processing of personal data prior to the withdrawal of consent.
You have the right to request access to your personal data, which primarily means providing information about the processing of your personal data. You have the right to correct inaccurate or outdated personal data. You have the right to delete personal data and the right to be forgotten, which primarily means the deletion of processed personal data. You have the right to restrict processing, which primarily means limiting the scope of the processing of personal data. You have the right to data portability, which primarily means transferring personal data to another Controller. You have the right to object to the processing of personal data in situations where your personal data is processed based on the Controller's legitimate interest, or if you wish to terminate direct marketing toward you. You have the right to request explanations and file a complaint with the supervisory authority.
Controller's obligations
The Controller has taken appropriate technical, administrative, organizational, and physical security measures to ensure the confidentiality of your personal data.
Duration of consent
If you consent to the processing and transfer of personal data, you grant your consent for the period necessary to fulfill the rights and obligations arising from our contractual relationship.
Your consent may be withdrawn at any time without affecting the legality of the processing prior to its withdrawal. For changes or deletion requests, please contact us at the following email address: info@hplak.cz.