Personal Data Protection

The following text describes how we use and process the personal data you have provided to us. You will also find information on how to contact us if you have any questions regarding personal data. We will be happy to answer any questions you may have.

Company / First and Last Name:	Plastoma výrobní družstvo
Registered Office:	Dřevěnice 19, 507 13
Company ID (IČO):	27514951
Phone:	+420 602 255 535
E-mail:	info@plastoma.cz

  

What types of personal data do we collect?

We collect personal data only for the purpose of communicating with website users or providing the offered service or selling goods based on the performance of a concluded contract. This includes: first name, last name, delivery address, billing address, e-mail address, and payment details depending on the type of payment.

For what purposes do we process personal data?

Processing personal data is necessary to communicate with website users or to fulfill a contract created by ordering the offered services, for the following purposes:

• Information about product news and updates

• Provision of the service

• Information about the status of an order

• Delivery of ordered goods

• Handling any complaints/claims

We need your e-mail address so that we can inform you about discounts and special promotions, competitions, and other interesting news. For this extended marketing communication, you must give your explicit consent. Consent is given by completing the registration form for these e-mails or by confirming the e-mail sent to you based on an order of a service/product.

If you do not wish to receive this information, you may withdraw your consent at any time. This option can be found in every newsletter you receive. You can also contact the authorized person at the e-mail address listed above.

Which personal data do we share with third parties?

The website is connected to several third-party applications that further process data for their own purposes. A complete overview of the third-party applications used by our website can be found in the table below:

Service name	Data	Purpose	Type of consent
Facebook	Cookies, anonymous data about group behavior and interests	Legitimate interests of the controller	Opt-in, consent required
Google analytics	Cookies, anonymous data about website usage	Analysis of anonymous data	Consent required
Google Adwords	Cookies, anonymous data about website usage	Campaign optimization based on anonymous data	Consent required
Microsoft Clarity	Cookies, anonymous data about website usage	Analysis of customer behavior on the website	Opt-in, consent required
Ecomail	E-mail	Management and sending of e-mail communication	Legitimate interests of the controller, customer consent
Smartsupp	Cookies, anonymous information about on-page behavior	Analysis of customer behavior on the website	Not required

 

Through third-party applications, we collect information about your computer. This data is anonymous. It cannot identify you as a person and is used only to create statistics and for subsequent analysis.

How do we use cookies?

We use third-party cookies that store anonymous information about visits to the website. These may then be used for analytical or marketing purposes. All information stored in the cookies we use is anonymous. Cookies are not tracked automatically—we use an opt-in option, meaning cookies are tracked only after the website user has given consent.

What security procedures do we use for storing personal data?

The provider has adopted and maintains such technical and organizational measures to prevent unauthorized or accidental access to personal data, their alteration, destruction or loss, unauthorized transfers, any other unauthorized processing, as well as any other misuse of personal data.

• Anonymization of personal data

• Ability to restore the availability of personal data and access to them in a timely manner in the event of physical or technical incidents

• A process of regular testing, assessment, and evaluation of the effectiveness of technical and organizational measures implemented to ensure processing security

• Multi-level firewall

• Antivirus protection and monitoring of unauthorized access

• Encrypted data transmission using IT technologies

• Access to personal data only for authorized persons of the provider

• Servers containing personal data locked in a server room

How can you control the personal data you have provided?

If you want to verify what specific data we process about you, please contact the authorized person—see the e-mail in the first part of this page. The same procedure applies if you wish to have your personal data deleted.

General provisions

1. The customer voluntarily provides their personal data and agrees to their disclosure to third parties under the conditions stated below.

2. Personal data will be processed electronically in an automated manner or in printed form in a non-automated manner.

3. If a website user believes that the controller or processor is processing their personal data in a manner contrary to the protection of private and personal life or contrary to the law—especially if the personal data are inaccurate with respect to the purpose of processing—they may: - request an explanation from the seller or processor by e-mail or in writing, and - request that the controller or processor remedy the situation by submitting a request by e-mail or in writing.

4. If a website user requests information regarding the processing of their personal data, the seller is obliged to provide this information by e-mail or in writing by post. The controller is entitled to request a reasonable fee for providing such information, not exceeding the necessary costs of providing the information, in the case of repeated requests.

5. Customers’ personal data are protected against misuse. The handling of customers’ personal data is governed by the relevant provisions of Act No. 110/2019 Coll., on the Processing of Personal Data and on the Amendment of Certain Acts, as amended and in force.

6. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 June 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

7. Any misconduct, questions, data leaks, or misuse of personal data may be reported to the relevant Office for Personal Data Protection (ÚOOÚ)