Privacy Policy

The controller of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 (“GDPR”) is Symtex Brno, Company ID 18071047, registered office Králova 279/9, 616 00 Brno, Czech Republic (the “controller”).

Contact details: Králova 279/9, 616 00 Brno, e-mail office@symtex-brno.com, phone +420 702 222 414.

Personal data means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

The controller has not appointed a data protection officer.

The controller processes personal data you have provided, or data obtained in the course of fulfilling your order.

The controller processes your identification and contact details and data necessary for the performance of the contract.

The legal basis for processing is:

• performance of the contract between you and the controller under Art. 6(1)(b) GDPR,
• the controller's legitimate interest in direct marketing (in particular sending commercial communications and newsletters) under Art. 6(1)(f) GDPR,
• your consent to processing for direct marketing purposes under Art. 6(1)(a) GDPR in conjunction with Sec. 7(2) of Act No. 480/2004 Coll. where no order for goods or services has been placed.
• The purpose of processing is handling your order and exercising rights and obligations arising from the contractual relationship; the data required for a successful order (name, address, contact) must be provided in order to conclude and perform the contract.
• A further purpose is sending commercial communications and other marketing activities.
• The controller does not carry out automated individual decision-making within the meaning of Art. 22 GDPR.

• for the period necessary to exercise rights and obligations arising from the contractual relationship and to assert claims from it (15 years from the end of the contractual relationship),
• until consent to processing for marketing purposes is withdrawn, for a maximum of 2 years, where data is processed on the basis of consent.
• After the retention period expires, the controller erases the personal data.

Recipients of personal data are parties:

• involved in the delivery of goods and services and in processing payments under the contract,
• involved in operating the services,
• providing marketing services.
• Recipients in third countries may include providers of mailing and cloud services.

Under the conditions set out in the GDPR you have:

• the right of access to your personal data under Art. 15 GDPR,
• the right to rectification under Art. 16 GDPR, or restriction of processing under Art. 18 GDPR,
• the right to erasure under Art. 17 GDPR,
• the right to object to processing under Art. 21 GDPR,
• the right to data portability under Art. 20 GDPR,
• the right to withdraw consent in writing or electronically to the controller's address or e-mail.
• You also have the right to lodge a complaint with the Czech Office for Personal Data Protection if you believe your data protection rights have been infringed.

The controller declares that it has adopted all appropriate technical and organisational measures to secure personal data.

The controller has adopted technical measures to secure data storage and storage of personal data in paper form. Only authorised persons have access to personal data.

By submitting an order or enquiry through the online form you confirm that you are familiar with these privacy terms and that you accept them in full.

The controller is entitled to amend these terms. A new version will be published on its website or sent to the e-mail address you provided.