Privacy policy

I.             DEFINITIONS

1.            Administrator – NIKSMAT SOLUTIONS S.R.O. with its registered office at Soukenická 877/9, Moravská Ostrava, 702 00 Ostrava, the Czech Republic, company registration number C 373278,

2.            Personal data – all information about a physical person that is either identified or possible to identify by one or more of specific factors describing its physical, physiological, genetic, psychological, economic, cultural or social identity, including device IP, localization information, internet ID and information gathered via cookie or similar technology,

3.            Policy – this Privacy Policy,

4.            GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,

5.            User – physical person using the website https://niksmat.cz;

 

II.            PURPOSES OF PROCESSING DATA

1.            Data, including Personal data of Users are gathered and used for the following purposes:

1)           using the Site;

2)           contacting Users who filled in the contact form displayed on the website;

3)           marketing activities;

4)           direct marketing if User’s consent was obtained.

2.            Personal data of all Users using the Site (including IP addresses and information gathered via cookie and similar technologies) is processed by the Administrator:

1)           to provide electronic services (clause 6.1.b of the GDPR);

2)           for analytical and statistical purposes (clause 6.1.f of the GDPR);

3)           to conduct context marketing (clause 6.1.f of the GDPR);

4)           for technical purposes (clause 6.1.f of the GDPR).

3.            Contacting Users relates to instances when a User sends his contact details to the Administrator through the contact form. Submitting mandatory data is required to send the contact form. Personal data is processed by the Administrator:

1)           to communicate with the User based on his request (clause 6.1.b of the GDPR);

2)           to fulfil legal obligations of the Administrator (clause 6.1.c of the GDPR);

3)           for analytical and statistical purposes (clause 6.1.f of the GDPR);

4)           to pursue any claims (clause 6.1.f of the GDPR);

5)           for satisfaction surveys (clause 6.1.f of the GDPR);

4.            The Administrator processes Personal data of Users for marketing purposes which may be of the following kind:

1)           displaying to the User marketing content which is not preselected according to his preferences; (clause 6.1.f of the GDPR);

2)           sending SMS or e-mail messages regarding offers or content that may include trade information, based on previous consent (clause 6.1.f of the GDPR).

 

III.          PERIOD OF DATA STORAGE & PROCESSING

1.            Data is stored for the period in which services are provided, until consent is withdrawn or until an objection against data processing is submitted in cases where processing of data is justified by Administrator’s legitimate interest. 

2.            Data processing period may be extended in cases where it is necessary for identification and pursuing of claims of defending against these claims and after that time only insofar as it is possible under relevant legal provisions. After the processing period data is irreversibly deleted or anonymized.

 

IV.           USER’S RIGHTS

1.            Right to be informed about data processing – based on this right the Administrator will provide information on data processing to any person submitting such request, including in particular information on purpose and legal grounds of processing, scope of processing, processing entities and planned deletion time of these data.

2.            Right to receive copy of data – based on this right the Administrator shall transmit to the person submitting such request all data regarding that person in possession of the Administrator.

3.            Right to amend – based on this right the Administrator shall erase errors in data, supplement or update it if they are incomplete or were altered.

4.            Right to delete data – based on this right it is possible to request deletion of all data which processing is no longer necessary to achieve any of the purposes for which they were obtained.

5.            Right to restrict processing – based on this right the Administrator shall cease to process personal data excluding the operations, for which the person whose data are being processed consented to as well as to store them following the retention rules as long as the restriction is in place.

6.            Right to transfer data – based on this right the Administrator shall provide the requesting person data regarding that person in a format possible to be read by a computer. It is also possible to request for the data to be sent to a third party, provided that there are technical possibilities on both sides for such a transfer to be made.

7.            Right to object to processing data for marketing purposes – any person may at any time object to processing his or her Personal data for marketing purposes.

8.            Right to object to processing data for surveying purposes – any person may at any time object to processing his or her Personal data for surveying purposes.

9.            Right to object to processing data for other purposes - any person may at any time object to processing his or her Personal data for legitimate interest purposes. Objection shall include a justification and shall be assessed by the Administrator.

10.         Right to withdraw consent – if data are processed based on consent, the person who gave the consent may withdraw it at any time which should not influence legitimacy of processing prior to the withdrawal.

11.         Right to complain – any person whose data are being processed may file a complaint with a proper authority if he or she believes that processing of Personal data infringes GDPR or other regulations covering data protection.

12.         Any communication regarding the above rights shall be submitted to the Administrator’s address provided in the e-mail containing access to the Content.

 

V.            TRANSMITTING AND SECURITY OF DATA

1.            In order to fulfil the purposes indicated above Personal data may be made available to third parties, including in particular providers and entities like banks, payment processes, accountancy firms, law firms, transporting companies, marketing companies and entities related to the Administrator.

2.            Personal data of Users is not transmitted outside the EOG.

3.            Administrator performs an ongoing risk assessment to ensure that Personal data are being processed in a safe way – ensuring in particular that access to data is restricted to authorized personnel only and only to the extent necessary for performance of their duties Administrator ensures that all operations on data are registered and conducted only by authorised workers and co-workers.

4.            Administrator conducts all necessary activities to ensure that his subcontractors and all other entities working with the Administrator guarantee applying appropriate measures of security in every case when they process Personal data based on the Administrator’s order.

 

VI.          FINAL PROVISIONS

1.            The Administrator reserves the right to amend this Privacy Policy at any time.

2.            Unless binding legal provisions enforce otherwise, this Privacy Policy is governed by the laws of the Administrator’s seat.