Personal Data Protection
Guidelines for Processing and Protecting Personal Data
We consider the protection of our clients' privacy and personal data to be our primary obligation. We handle personal data strictly in line with the relevant legislation. In addition to Regulation (EU) 2016/679 (GDPR), we follow the laws applicable in the Czech Republic. If you are our customer, news subscriber or visitor of our website, you provide your personal data to us. We ensure you that your personal information remains confidential and secure. Please read the AGRO CS's Guidelines for Processing and Protecting Personal Data to find out what we do in order to make your data confidential and secure and to check the rights you have regarding GDPR.
Who is the controller?
AGRO CS a.s., IČO (Company Registration Number) 64829413, registered seat Říkov 265, 552 03 Czech Republic, entered in a register kept by the Regional Court in Hradec Králové, section B, insert 1316. We actively run the following websites:
Furthermore, we run the following e-shops:
We process your personal data as a controller, so it means that we determine how your personal data will be processed, for what purpose and for how long we will keep it. We also choose the processors that help us with the act of processing.
Should you have any questions, you can contact us by phone on 491 457 111 or by e-mail:email@example.com.
We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable law, in particular the Personal Data Protection Act and GDPR and that:
- we will process your personal data only on the basis of valid legal grounds, in particular the legitimate interest, the performance of the contract, under a legal obligation or a given consent,
- we comply with the obligation under Article 13 (EU-GDPR) prior to the processing of personal data,
- we will support you in the enforcement of your rights under the Personal Data Protection Act and GDPR
What kind of information do we process? For what purpose do we process your information?
We process personal data that you provide to us for the following reasons (to fulfil these purposes):
● providing services, performance of the contract
Your personal data: e-mail address, telephone number, name and surname, delivery address, billing address (for the client - entrepreneur also DIČ (Tax Identification Number) and IČ (Company Identification Number). These are the data we need to have to because of the performance of the purchase contract (delivery of goods and documents, sending notification emails about the status of the contract, management of the complaints procedure, compliance with the rights resulting from the guarantee, etc.).
● accounting management
If you are our customer, we need your personal data (billing information) to comply with the statutory obligation to issue and record tax documents.
● marketing - sending newsletters
Your personal data (e-mail and name), what you click on in your e-mail and when you open your e-mails, is used for direct marketing - sending commercial communication.
If you are our customer, we do so because we suppose you are interested in our news. This is valid for two years from the last order (according to Act 480/2004 Coll., §7). In that case, we do not need your consent. If you are not our customer, we send you newsletters on the basis of your consent. This is valid for two years from giving us your consent. In both cases, you can revoke your consent by using the unsubscribe link in every e-mail that you receive from us.
● counselling services
We can respond to inquiries from Contact Us form if you give us your consent (by ticking a box) in the form. Without your consent, the inquiry cannot be sent. At that moment, there is no business or contractual relationship between you and us, which would entitle us to process your personal data without your consent.
● advanced marketing based on your consent
We may also send you third-party offers or use your e-mail address, for example, for remarketing and targeting ads on your Facebook page, based on your consent for a period of two years from your consent. This can be withdrawn at any time by contacting us.
● processing of photography
We can use photography taken during live events such as the receiving of an award or a photography which is a part of a competition regarding the use of the goods from our offer, in order to further promote the functionality of our products and the effect resulting from their use.
We keep your personal data for the duration of the limitation period, unless the law determines a longer period for its retention or we did not state otherwise (in specific cases).
Security and Privacy of Personal Data
We protect your personal data as much as possible by using modern technologies that correspond to the level of technical development. We protect your data as if it was ours. We have accepted all possible (currently known) technical and organizational measures that prevent the misuse, damage or destruction of your personal data.
Transmission of Personal Data to Third Parties
The personal data you have provided to us are processed and stored within AGRO CS a.s. company. Only employees of AGRO CS a.s. can access your personal data.
In order to provide specific processing operations that we cannot provide by ourselves, we use the services and applications of processors, who protect the data and specialize in the processing of data. The entities that cooperate with us are carefully selected on the basis of guarantees to ensure the technical and organizational protection of the personal data we pass on. The processing of personal data may be done by AGRO CS a.s. processors, solely on the basis of a contract regarding the processing of personal data.
AGRO CS a.s. may, for legitimate purposes, provide personal data to the following recipients:
- external employees and suppliers in order to perform the contract
- technology providers and cloud services to manage and run the company's websites and e-shops
- payment service providers and payment processors in order to secure the transfer of funds
- providers of postal, transport and communication services and electronic communications services
- marketing and research agencies because of the business and product offers
- listed companies of the AGRO CS Group (ABEX Substráty a.s., IČ (Company Identification Number) 25273221, Engelmann Czech s.r.o., IČ (Company Identification Number): 24705977, NAHOŘANSKÁ a.s., IČ (Company Identification Number): 25289845, AGROPROVODOV a.s., IČ (Company Identification Number): 48171042)
The list of concrete data processors according to the purposes mentioned above can be found in Appendix 1, which is a part of this document.
It is possible that we will decide to use other applications or processors to facilitate and improve the processing in the future. However, if that happens we will put great security and processing demands on the processor as we do on ourselves.
Transmission of Data Outside the European Union
We process data only in the European Union or in countries that provide an adequate level of protection on the basis of the European Commission's decision.
Your Rights in Connection with the Protection of Personal Data
You have a number of rights regarding the protection of your personal data. If you wish to exercise any of these rights, please contact us by e-mail:firstname.lastname@example.org
You have right to be informed, which is already covered by this information page regarding the principles of processing your personal data.
Thanks to right of access, you can contact us any time and we will provide you with the personal data we process and tell you why we do so. We have 30 days to do that from the day of your request.
If you find your personal information outdated or incomplete, you have right to rectification of your personal data.
You have right to restrict if you believe that we process your data inaccurately or illegally, we can temporarily or permanently stop processing all or some of your personal data.
You may restrict the range of personal data or the processing purposes. (For example, unsubscribing the newsletter restricts the sending of commercial communication.)
Right to data portability
If you would like to take your personal data and transmit that personal data for use in another party’s service, we will proceed in the same way as we do in the right of access. However, we will provide you with the data in a machine-readable format. We need at least 30 days for that.
Right to erasure (‘Right to be forgotten’)
You have the right to request that we delete your personal data. We do not want to lose you, but if you wish to leave us, you have the right to do so. In this case, we will delete all your personal data from our system, from the system of all processors and from backups. We need 90 days to secure the right to erasure.
In some cases, we are bound by legal obligation, e.g. we have to record the issued tax invoice during the period set up by law. In this case, we will delete all the personal data that is not bound by any other law. We will inform you about the completion of the deletion by e-mail.
Right to Lodge a Complaint with The Office for Personal Data Protection
If you think that the use of your data does not comply with the law, you have the right to appeal to The Office for Personal Data Protection. We will be glad if you first tell us about this suspicion so that we can take steps to remedy it.
Unsubscribing the Newsletters and Commercial Communication
If you are our customer, e-mails including articles or products and services are sent to you. We do so based on our legitimate interest. If you are not our customer, we only send you those e-mails on the basis of your approval.
In both cases, you can unsubscribe to our e-mails by pressing the unsubscribe link in every e-mail you get.
Obligations of Secrecy
We would like to assure you that our employees who process your personal data are required to maintain confidentiality about personal data and security measures which would jeopardize the security of your personal data.
This obligation of secrecy persists even after the end of contractual obligations with us. Your personal information will not be given to any third party without your consent.
The General Data Protection Regulation is valid from 25 May 2018.
Should you have any questions regarding personal data, send us an e-mail to:email@example.com or call us on 491 457 111 (from 9 a.m. to 3 p.m.).
The list of data processors that we use:
1) websites, hosting:
2) e-shops and commercial communication
3) postal and transport services
4. marketing, analytic and research agencies
www.google.com (Google Analytics, Google AdWords, including related tools)
www.seznam.cz (Sklik service)