GDPR Privacy Policy
TRUSS ALUMINIUM FACTORY a.s., ID Number: 281 82 600, registered seat: Hodolany 1226, 779 00 Olomouc, Czech Republic, filed in the Commercial Register held by the Regional court in Ostrava, Section B, File 10772 (hereinafter referred to as “controller“) hereby informs you, in accordance with Article 13 of the GDPR, on the nature and purposes of processing of your personal data.
This Privacy Policy becomes effective on 25th May 2018 and are in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter referred to as “regulation“ or “GDPR“).
Purpose of the processing
1. The purposes of the data processing concerning this Privacy Policy are mainly an evidence of our customers and business partners as well as our direct marketing; the purposes of the data processing are as follows:
a. evidence of our business partners;
b. direct marketing.
2. The above purposes and the data processing for these purposes are, to a certain degree, linked together.
I. Evidence of our business partners
If you have done business with us, contacted us in a matter of our business or gave us your contact details maybe on some of the world fairs (e.g. business card), you are listed in our evidence of business partners. This is important so that we can keep track of our wide network of business partners and so that we could contact you when necessary, either with an offer for further business cooperation or through our marketing.
Scope of processing (categories of personal data)
3. The personal data are processed only in the necessary amount. We process mainly these categories:
a. identification data
b. contact data
Legal basis of the processing
4. The legal basis of the processing is:
a. Legitimate interests pursued by the controller – therefore our legitimate interest based on the fact that to run our business, we need to keep evidence of our business partners as well as marketing, which is described further bellow. Contact evidence is part of our know-how and enables us to effectively engage in our business; maintaining our know-how is also our legitimate interest.
The processing period
5. We process your personal data with respect to the nature of its processing until you withdraw your consent, if you have previously given it to us; or until you tell us that you are not interested in further contact with our company.
Persons with access to your personal data
6. Your personal data will be accessed by the authorized person in charge of the marketing and by the employees who communicate with you, business partners, as part of our business activity.
II. Marketing
Scope of processing (categories of personal data)
7. The personal data is processed only in the necessary amount. We process mainly these categories:
a. identification data
b. contact data
Legal basis of the processing
8. The legal basis of the processing is:
a. Legitimate interests pursued by the controller – therefore our legitimate interest based on the fact that to pursue our business successfully we need to spread awareness about the products and services we offer. All this to a reasonable extent and with respect to the privacy of our business partners.
The processing period
9. We process your personal data with respect to the nature of its processing as long as you don’t withdraw your consent, if you have previously given it to us; or until you tell us that you are not interested in further contact with our company. In every e-mail, we offer you an option to unsubscribe from the business communication and other forms of marketing.
Persons with access to your personal data
10. Your personal data will be accessed by the authorized person in charge of the marketing. The personal data can be handed over to the provider of marketing services.
Contact information
11. Although we don’t have a data protection officer (or DPO), you can always contact us via e-mail: taf@taf.cz or in writing by sending us a letter to the following address (Hodolany 1226, 779 00 Olomouc, Czech Republic). The controller is entitled to request proof of identity to prevent unauthorized persons from accessing your personal data.
Your rights under GDPR
12. Pursuant to the GDPR regulation, you have the right to correct or add personal data (rectification), right to the restriction of processing, right to file a complaint against the processing of personal data, request the transfer of data (data portability), right to access your personal data, right to be informed about personal data breach, the right of erasure (right to be forgotten) and other rights set forth in GDPR.
13. You have the right to object to processing based on a legitimate interest of the controller at the above-mentioned e-mail address. If the objections relate to direct marketing, the controller will always comply with these objections.
14. For more information about you rights under GDPR, you can check these websites: CZ, in English language, for example here.
15. You have the right to file a complaint regarding the processing of personal data or the failure of the controller to discharge its GDPR obligations to the Supervisory Authority. The Supervisory Authority for the Czech republic is „Úřad pro ochranu osobních údajů“, based at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, https://www.uoou.cz/en/.
In Olomouc 25.5.2018
