GDPR - ALFUN

GDPR

INFORMATION ON PERSONAL DATA PROCESSING

for customers and contractors in accordance with the General Regulation on Personal Data Protection (GDPR)

ALFUN a.s. is governed by the European Union General Data Protection Regulation (GDPR) No. 2016/679 of 25.05.2016 with effect from 25.05.2018.

1. Personal Data Administrator

ALFUN a.s., with registered office at Zahradní 1610/40, 792 01 Bruntál, Co. Reg. No.: 25828649, entered in the Commercial Register maintained by the Regional Court in Ostrava, Section B, Insert 2732 (hereinafter referred to as the Administrator).

2. Purpose of Personal Data Processing

The personal data Administrator shall process personal data of the subject for the purpose of customer registration, customer identification, purchase of goods, delivery of goods, payment identification, processing of complaints, conclusion of contractual purchase agreements and for commercial communication.

Personal data may also be used for marketing purposes on the basis of the data subject consent or on the basis of a legitimate interest, for the purposes of service or product offers, or for dealing with requests, questions, and comments.

3. Scope of Personal Data Processing

By sending data on the alfun.cz website, filling in the inquiry form, sending an e-mail address or personal confirmation of an order at a branch, the user agrees that to the extent specified here his/her personal data shall be processed in an automatically maintained database of the Administrator, or by a processor with whom the Administrator entered into a contract for the purposes specified.

Purpose, the creation, administration and closure of an order includes the following partial purposes - Customer Registration and Identification, Conclusion of a Purchase Contract, Delivery of Goods and Services, Invoicing and Payments.

4. Period of Personal Data Storage

The data Administrator retains personal data for the duration of the contractual relationship and furthermore for the period required by law. For most contractual relationships, it is necessary to observe an archiving period related to the taxation process (for a period of 10 years from the end of the tax period in which a transaction took place).

Výjimkou může být uchování osobních údajů pro marketingové a obchodní účely. Tyto údaje jsou zpracovány po dobu, po kterou je poskytnut souhlas nebo do jeho odvolání (odvolání souhlasu je možno pomocí e-mailu nebo telefonicky).

5. Further Information on Personal Data Processing

Customer personal data shall be processed in an automated manner or manually in a written form and automatically in an electronic form in accordance with the above laws.

6. Information on Customer Rights

a) Customer's Right to Access Personal Data

The Customer has a right to request the Administrator to provide information on the scope of processing his/her personal data. The customer submits the request in person at any branch of the Administrator. The deadline for provision of the required information is 30 days. For the provision of the information, the Administrator has a right to request a reasonable payment not exceeding the costs necessary for the provision of the information.

b) The Right to Personal Data Transfer in a Machine-Readable Format

Zákazník má právo požádat Správce o přenos svých osobních údajů ve strojově čitelné podobě. Žádost podává zákazník osobně na kterékoliv pobočce Správce. Po ztotožnění zákazníka při převzetí žádosti přenosu osobních údajů začíná běžet 30-ti denní lhůta pro jeho provedení. Osobní údaje budou připraveny ve strojově čitelném kódu a bude předán zákazníkovi osobně, po ztotožnění, na pobočce Správce. Správce si vyhrazuje ponechání osobních údajů zákazníka v souvislostmi s právními povinnostmi (Faktury, Záruční doby) podle doby stanovené v příslušných zákonech (zákon 563/1991 Sb. a ve znění pozdějších úprav a Občanský zákoník 89/2012 Sb. a ve znění pozdějších úprav). Za poskytnutí informace je Správce oprávněn požadovat přiměřenou úhradu nepřevyšující náklady nezbytné na poskytnutí informace.

c) Customer's Right to Personal Data Deletion

The Customer has the right to request the Administrator to delete his/her personal data. The request is submitted by the customer in person at any branch of the Administrator. After identification of the customer upon receipt of the request for the personal data deletion, a 30-day period begins to run for its implementation. Personal data shall be deleted from marketing databases for communication. The Administrator reserves the right to keep the customer's personal data in connection with the legal obligations (Invoices, Warranty Periods) in accordance with the period specified in the relevant laws (Act No. 563/1991 Coll. as amended and Civil Code 89/2012 Coll. as amended) . For the provision of the information, the Administrator has a right to request a reasonable payment not exceeding the costs necessary for the provision of the information.

d) Voluntary Personal Data Provision

The Customer is not obliged under any generally binding legal regulation to provide the Administrator with his/her personal data; the provision of personal data and the granting of consent to its processing is entirely voluntary on the basis of a free and conscious expression of the customer's will granted pursuant to the Article.

e) Additional Customer Rights

Any customer who discovers or believes that the Administrator is processing his/her personal data contrary to the purpose of the granted consent, protection of his/her private life or in breach of the law, or the applicable regulations (e.g. GDPR, etc.), may (i) request the Administrator to provide an explanation, (ii) request the Administrator to rectify the situation, (iii) if necessary, contact the supervisory authority (Office for Personal Data Protection). The deadline for examination of the request by the Administrator is 30 days from receipt of the request. The request may be submitted to the Administrator only in writing, for customers in the Czech Republic at the e-mail address: . If the customer's request is found to be justified, the Administrator shall immediately rectify the situation. If the Administrator fails to comply with the request, the customer may contact the Office for Personal Data Protection; this is without prejudice to the customer's right directly to contact the Office for Personal Data Protection.

7. Consent to the Personal Data Processing and Dissemination of Commercial Communications

By sending an order for goods, services, catalogues, etc., by a completion of a web form, the customer consents to the Administrator's personal data processing for the purpose and to the extent specified in Articles 2, 3 and in the Act and further expresses in accordance with Sec. 7 of Act No. 480/2004 Coll., as amended, consent to the dissemination of commercial communications. The Administrator is entitled to process the customer's personal data even if the web form was completed by a person other than the customer whose personal data was provided in the form. If the customer's personal data is processed in accordance with the previous sentence and the eligible customer so requests, the Administrator shall proceed in a similar manner as in Article 4, unless the customer concerned requests otherwise.