Data Protection and Processing

Last updated: 1 September 2023

We are ASKOCAD s.r.o., Company ID (IČO): 05204356, with registered office at Dětmarovice no. 1399, 735 71 Dětmarovice, Czech Republic (“Company”, “we”, “us” or “our”), a company registered in the Czech Republic and entered in the Commercial Register maintained by the Regional Court in Ostrava under file no. C 66612.

These Privacy Policy terms describe how and why we may collect, store, use and/or share (“process”) your information when you use our services (“Services”), for example when you:

  • visit our website at https://www.vykresovapohotovost.cz/ (the “Site”) or any website of ours that links to this Privacy Notice;
  • engage with us in other related ways, including sales, marketing or events.

Have questions or concerns about personal data? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, contact us at radek@vykresovapohotovost.cz.

What personal data do we process?

When you visit, use or navigate our Services, we may process personal data depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process sensitive personal data?

We do not process sensitive personal data.

Do we receive any information from third parties?

We do not receive any information from third parties.

How do we process your data?

We process your information to provide, improve and administer our Services, to communicate with you, for security and fraud prevention, and to comply with the law. With your consent, we may also process your information for other purposes. We process your information only where we have a valid legal basis to do so.

In what situations and with which types of parties do we share personal data?

We may share information in specific situations and with the categories of third parties specified in this Policy.

How do we keep your information safe?

We have organisational and technical processes and procedures in place to protect your personal data. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal or modify your information. Learn more below about how we keep your information safe.

What are your rights?

Depending on where you are located geographically, applicable privacy law may mean you have certain rights regarding your personal data.

How do you exercise your rights?

The easiest way is to contact us at radek@vykresovapohotovost.cz, or you can update your preferences on our website at any time. We will consider and act upon any request in accordance with applicable data protection laws.


1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In short: We collect personal data that you provide to us.

We collect personal data that you voluntarily provide when you register for the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us. All personal data you provide must be true, complete and accurate, and you must notify us of any changes to such personal data.

Data provided through interaction with the Services

The personal data we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. This may include:

  • names
  • email address
  • contact or authentication details
  • billing addresses

Sensitive information

We do not process sensitive information.

Information collected automatically

In short: Some information—such as your IP address and/or browser and device characteristics—is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (such as your name or contact details) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting.

Like many companies, we also collect information through cookies and similar technologies. You can learn more in our Cookie Policy.

Information we collect includes:

  • Log and usage data. Log and usage data is service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Services, which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings, and information about your activity in the Services (such as timestamps associated with your usage, pages and files viewed, searches and other actions you take, including which features you use), device event information (such as system activity, error reports—sometimes called “crash dumps”—and hardware settings).
  • Device data. We collect device data such as information about your computer, phone, tablet or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, internet service provider and/or mobile carrier, operating system and system configuration information.
  • Location data. We collect location data, such as information about your device’s location, which can be precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information by refusing access or by disabling your device’s location settings. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve and administer our Services, communicate with you, for security and fraud prevention, and in compliance with applicable law. With your consent, we may also process your information for other purposes.

We process your personal data for various reasons depending on how you interact with us and the Services, including to:

  • facilitate account creation and authentication and otherwise manage user accounts;
  • provide user services and deliver the service you request;
  • respond to user enquiries and offer user support;
  • send administrative information (e.g. details about our products and services, changes to our terms and policies and other similar information);
  • fulfil and manage your orders, payments, returns and exchanges made through the Services;
  • protect our Services, including monitoring and preventing fraud;
  • protect and preserve an individual’s vital interests, such as preventing harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In short: We process your personal data only when we believe it is necessary and we have a valid legal basis (e.g. your consent, compliance with laws, performance of a contract, protection of your rights or our legitimate interests).

If you are located in the EU or the United Kingdom, this section applies to you.

The EU General Data Protection Regulation (GDPR) and the UK GDPR require us to explain the valid legal bases we rely on to process your personal data. Accordingly, we may rely on the following legal bases:

  • Consent. We may process your data if you have given us permission (consent) to use your personal data for a specific purpose. You can withdraw your consent at any time.
  • Contractual necessity. We may process your personal data when we believe it is necessary to perform our contractual obligations to you, including providing our Services, or at your request prior to entering into a contract.
  • Legitimate interests. We may process your data when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not override your interests and fundamental rights and freedoms (for example, to diagnose problems and/or prevent fraudulent activities).
  • Legal obligations. We may process your data where we believe it is necessary to comply with our legal obligations, such as cooperating with a law-enforcement or regulatory body, exercising or defending our legal rights, or providing your information as evidence in litigation in which we are involved.
  • Vital interests. We may process your data where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

In short: We may share information in specific situations described in this section and/or with the following third parties.

Vendors, consultants and other third-party service providers. We may share your data with third-party vendors, service providers, contractors or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties designed to help safeguard your personal data. This means they cannot do anything with your personal data unless we have instructed them to do so. They will also not share your personal data with any organisation other than us. They commit to protect the data they hold on our behalf and to retain it for the period we instruct. Categories of third parties we may share personal data with include:

  • payment processors
  • finance and accounting tools
  • cloud computing services
  • data analytics services
  • data storage providers
  • user account registration and authentication services

We may also need to share your personal data in the following situations:

  • Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

Cookies and similar technologies: Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies. If you choose to remove or reject cookies, this may affect certain features or services of our Services. For more detail, please see our Cookie Policy.

If you have questions or comments about your privacy rights, email us at radek@vykresovapohotovost.cz.


6. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless otherwise required by law.

We will only keep your personal data for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (e.g. tax, accounting or other legal requirements). No purpose in this Notice will require us to keep your personal data for longer than six (6) months.

When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.


7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We aim to protect your personal data through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal data we process.

Despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal or modify your information. Although we will do our best to protect your personal data, transmission of personal data to and from our Services is at your own risk. You should only access the Services within a secure environment.


8. DO WE COLLECT INFORMATION FROM MINORS?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor’s use of the Services.

If we learn that personal data has been collected from users under age 18, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at radek@vykresovapohotovost.cz.


9. WHAT ARE YOUR PRIVACY RIGHTS?

In short: In some regions, such as the European Economic Area (EEA), the United Kingdom (UK) and Canada, you have rights that allow you greater access to and control over your personal data.

In certain regions (like the EEA, UK and Canada), you have specific rights under applicable data protection laws. These may include your right to:

  • request access to and obtain a copy of your personal data;
  • request rectification or deletion;
  • restrict the processing of your personal data; and
  • where applicable, data portability.

In certain circumstances, you may also have the right to object to the processing of your personal data. You can make such a request by contacting us using the contact details set out in this Privacy Policy.

We will consider and act upon any request in accordance with applicable data protection laws and other relevant legislation.

If you are in the EEA or the UK and believe we are unlawfully processing your personal data, you also have the right to complain to your local data protection authority.

If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal data, which may be express and/or implied consent depending on applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent by contacting us using the contact details in this Privacy Policy or by updating your preferences in your user account.

Please note that this will not affect the lawfulness of processing before its withdrawal, and—where permitted by applicable law—it will not affect processing of your personal data conducted on the basis of other lawful grounds than consent.

Right to request deletion — Erasure request

You can request deletion of your personal data. If you ask us to delete your personal data, we will respect your request and delete your personal data, subject to certain exceptions provided by law, such as (but not limited to):

  • the exercise of another consumer’s right to freedom of expression;
  • our compliance with a legal obligation; or
  • any processing that may be required to protect against illegal activities.

Right to be informed — Request for information

Depending on the circumstances, you have the right to know:

  • whether we collect and use your personal data;
  • the categories of personal data we collect;
  • the purposes for which the collected personal data is used;
  • whether we sell or share your personal data with third parties;
  • the categories of personal data that we sold, shared or disclosed for a business purpose;
  • the categories of third parties to whom the personal data was sold, shared or disclosed for a business purpose;
  • the business or commercial purpose for collecting, selling or sharing personal data; and
  • the specific pieces of personal data we collected about you.

In accordance with applicable law, we are not required to provide or delete de-identified consumer information in response to a consumer request, nor to re-identify individual data to verify a consumer request.

Right to non-discrimination for exercising privacy rights

We will not discriminate against you for exercising your privacy rights.

Right to limit the use and disclosure of sensitive personal data

We do not process consumers’ sensitive personal data.

Verification process

Upon receiving your request, we will need to verify your identity to determine that you are the same person about whom we have information in our systems. Verification requires that we ask you to provide information for us to compare with information you have previously provided. For example, depending on the type of request you submit, we may ask you to provide different information of a similar type to that which we already hold. Alternatively, we may contact you through a communication method (e.g. email) that you have previously provided. We may also use other verification methods as appropriate.

We will use the personal data provided in your request only to verify your identity or authority to make the request. Wherever possible, we will avoid requesting additional information for verification purposes.

However, if we cannot verify your identity from the information we already hold, we may ask you to provide additional information for verification and for security or fraud-prevention purposes. We will delete any additional information you provide as soon as we have completed verification.

Additional privacy rights

  • You may object to the processing of your personal data.
  • You may request correction of your personal data if it is inaccurate or no longer relevant, or request restriction of processing.
  • You may request to opt out of future sale or sharing of your personal data to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, and no later than fifteen (15) days from the date of submission.

To exercise these rights, you may contact us by email at radek@vykresovapohotovost.cz or using the contact details at the end of this document. If you have a complaint about how we handle your data, we would like to hear from you so we can put things right.


10. CONTROLS FOR DO-NOT-TRACK (DNT) FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.


11. DO WE MAKE UPDATES TO THIS PRIVACY POLICY?

In short: Yes, we will update this Policy as necessary to remain compliant with relevant privacy laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised date, and the updated version will be effective as soon as it is accessible on our Site.

If we make material changes to the Policy, we may notify you either by prominently posting a notice of such changes or by sending you a notice directly. We encourage you to review the Policy frequently to be informed of how we are protecting your information.


12. HOW CAN YOU CONTACT US?

If you have questions or comments about this Policy, you may contact our Data Protection Officer (DPO), Ing. Radek Solich, by email at radek@vykresovapohotovost.cz.

You can always contact us by post at:

ASKOCAD s.r.o.
Dětmarovice no. 1399
735 71 Dětmarovice
Czech Republic


13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on the laws of your country of residence, you may have the right to request access to the personal data we collect from you, change that information, or delete it. To request to review, update or delete your personal data, please contact us or write to us at the postal address above (ASKOCAD s.r.o., Dětmarovice no. 1399, 735 71 Dětmarovice, Czech Republic).