Ugrás a fő tartalomra

Személyes adatok védelme

Processing of personal data - Amplla a.s.

Amplla a.s. undertakes to process personal data in accordance with the applicable legal regulations, i.e. Act No. 110/2019 Coll., on personal data processing, and Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, GDPR), which is directly effective as of 25 May 2018. Below we provide you with important information and conditions for the processing of personal data which relate to your purchase or to your interest in receiving commercial offers.

INFORMATION ON THE PROCESSING OF PERSONAL DATA

PERSONAL DATA CONTROLLER

CONTACT DETAILS
Amplla a.s.
Address: Poličská 1823, 539 01 Hlinsko, Czech Republic
Email: [email protected]
Telephone: +420 739 017 120

The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data is Amplla a.s., with its registered office at Poličská 1823, 539 01 Hlinsko.

SCOPE OF THE PERSONAL DATA PROCESSED

Personal data means any information about an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a certain identifier, for example a name, an identification number, location data, a network identifier or to one or more special elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Amplla a.s. processes personal data provided by the Client upon the establishment of a business relationship, i.e. upon an order and also upon registration of a customer account. Furthermore, the company processes personal data provided by the client for the purpose of participation in the company's events, or for the purpose of sending commercial communications.

The data processed may contain:

  • Ordinary personal data: name and surname, email address, telephone number, billing and delivery address, academic title, date of birth, bank account number, information about the business relationship carried out (reservations, orders, delivery notes, invoices, purchase of goods, stored goods and contact history (emails and SMS messages sent). Furthermore, in the case of electronic access to the company's website, the following data are processed: IP address and cookies).
  • Sensitive personal data: none
  • Other data: Data that we obtain automatically in connection with the use of the website, such as the IP address, the type of browser, device and operating system, the time and number of accesses to the website, information obtained by means of cookies and other similar information. Please note that we may obtain these other data even without registration and regardless of whether you make purchases on the website or not. These other data are ascertained for us by cookies, of the use of which we informed you upon your arrival at the website.

COOKIES AND GOOGLE SERVICES

The website uses so-called “cookies” for its operation. The website further uses the Google Analytics service and, where applicable, other services provided by Google, Inc. (hereinafter “Google”). Cookies are also used within the use of these other services.

What are cookies and how do you express your consent to their use?

Cookies are text files stored on the computer or other electronic device of each visitor to the web interface, which make it possible to analyse the manner in which the web interface is used.

By using the web interface, you grant your consent to the use of cookies and also to the processing of data about you by Google and by our company, in the manner and for the purposes described in more detail on the web interface. You were informed about the use of cookies upon your first access to the web interface.

Can you prevent cookies from being stored on your computer in any way?

You may refuse the use of cookies by making the appropriate selection in the settings of your internet browser. If you do not wish to be part of Google Analytics statistics, you may make use of blocking. We would point out that, if you refuse the use of cookies, it cannot be ruled out that you will not be able to make full use of all functions of the website.

How does Google use the data obtained?

If you are interested in how Google uses the data that it obtains through the use of the web interface, you will find this information by clicking on the following link: How Google uses data when you use our partners' sites or apps.

Remarketing activities

For better targeting and personalisation of internet advertising, we use services such as, for example, Sklik from Seznam.cz, AdWords from Google, and possibly others. For you this means that, while browsing the internet, advertising is displayed to you for products in which you have already shown interest in the past, for example by visiting our internet pages. These services, on the basis of information from cookies, use findings about your movement on the web for the purposes described above. If you do not wish these items of information to be used for the stated purposes, it is necessary to set your internet browser accordingly (set your browser to block the storing of information about your passage through the web).

PURPOSE OF THE PROCESSING OF PERSONAL DATA

The personal data of Clients are processed for the purposes stated below:

1) Registration of the client in the information systems of Amplla a.s. and sending of informational communications

Registration of the Client is important, in particular in order to make it possible to establish a future business relationship and for the subsequent informing of the Client about ongoing business acts (Reservations, Orders, Invoices, etc.). The scope of the data provided by the Client corresponds to the needs of the future business relationship. The Client states their name and surname, billing address, email and, where applicable, other optional data.

For this purpose of processing, the consent of the Client is granted, which may be withdrawn at any time in the same manner in which it was obtained, i.e. in the case of registration of a customer account by the Client via the website www.amplla.cz - after logging in to their customer account.


2) Sending of commercial communications

The sending of commercial communications serves to inform the Client about ongoing marketing activities and offers of Amplla a.s. The scope of the data provided is limited to the email or postal address, name and surname.

For this purpose, the legitimate interest of the controller in providing direct marketing (in particular for sending commercial communications) is applied where a business relationship has already been established with the client. In cases where a business relationship has not been established, the Client must grant consent for this purpose of processing. In both of the cases stated, it may be withdrawn at any time, namely in the footer of every commercial email communication, or by means of the contact details stated above.

3) Processing of personal data for the purpose of a legitimate interest

The processing of the Client's personal data for the purpose of a legitimate interest takes place in particular for the protection of the rights of Amplla a.s. In this connection, the personal data of a Client who expresses an interest in visiting premises requiring an increased level of security (e.g. the company's production section) are recorded.

4) Processing for the purpose of performance of a contract

For the purpose of performance of a contract, Amplla a.s. processes the Client's personal data in connection with valid concluded contracts pursuant to Article 6(1)(b) of Regulation (EU) 2016/679.

5) Statutory grounds for the processing of personal data

Amplla a.s. complies with all applicable laws of the Czech Republic and the EU, for the purpose of which it processes the Client's personal data; these are the cases stated below:

  • The Client's personal data in connection with all accounting documents must be recorded for the period stipulated by law.
    • VAT Act 235/2004 Coll.
    • Accounting Act 563/1991 Coll.
    • Tax Procedure Code – 280/2009 Coll.

SOURCES OF PERSONAL DATA

1) The controller processes personal data that you have provided to it or personal data that the controller obtained on the basis of the fulfilment of your order.
2) The controller processes your identification and contact data and data necessary for the performance of the contract.

WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA

The Client always provides their consent to the processing of personal data voluntarily and has the possibility of withdrawing it at any time, either in whole or in part. The client may carry out the withdrawal of consent in several ways:

  • By means of their customer account on the company's website.
  • By an email request sent to [email protected]
  • By a written request sent to the address of the company's registered office.
  • By means of the unsubscribe link stated in the footer of every commercial communication.

After the withdrawal of consent to the processing of personal data by the Client, Amplla a.s. may process personal data only in cases where another purpose of processing exists, and only to the extent that is adequate for that purpose.

PROCESSORS OF PERSONAL DATA

The controller of the personal data of clients and, at the same time, the main processor of these data is Amplla a.s. In view of ensuring the necessary services for the Client (e.g. transport of goods, sending of emails, etc.), other companies that provide these services to Amplla a.s. also enter into the processing. Amplla a.s. has concluded a personal data processing agreement with all processors, by which the protection of the Client's personal data is declared.

DISCLOSURE OF DATA TO OTHER ENTITIES

Amplla a.s. does not provide the Client's personal data to any entities. Personal data may further be disclosed only to entities authorised under legal regulations, which are bodies active in criminal proceedings, etc.

RIGHTS OF CLIENTS IN CONNECTION WITH THE PROCESSING OF PERSONAL DATA

In connection with the processing of personal data, Clients are granted new rights, which are applied in EU General Regulation 2016/679 (the General Data Protection Regulation).

1) The client's right of access to personal data

Access to personal data means the entitlement of the Client, on the basis of their active request, to obtain from Amplla a.s. information (confirmation) as to whether or not their personal data are being processed and, if they are being processed, the data subject has the right to obtain these personal data and, at the same time, has the right to obtain the following information:

  • the purposes of the processing,
  • the categories of personal data concerned,
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed,
  • the envisaged period for which the personal data will be stored,
  • any available information about the source of the personal data, where they are not obtained from the Client,
  • the fact that automated decision-making, including profiling, takes place.

This is the equivalent of the right of access to personal data laid down in § 12 of the current Act No. 110/2019 Coll., on personal data processing.

2) The client's right to erasure or rectification of personal data

The right to erasure (to be forgotten) represents, in the General Regulation, the obligation of Amplla a.s., expressed in other words, to erase personal data if at least one condition is fulfilled:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
  • the Client withdraws consent and there is no other legal ground for the processing,
  • the Client raises objections to the processing and there are no overriding legitimate grounds for the processing,
  • the personal data have been processed unlawfully,
  • the personal data must be erased in order to fulfil a legal obligation,
  • the personal data were collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.


The right to erasure therefore applies only in the points listed, i.e. when the given circumstance arises. The majority of the cases listed also form part of the current Act No. 110/2019 Coll., on personal data processing, or follow from its substance.

The right to rectification of personal data means that the client may request Amplla a.s. to rectify their data if they are inaccurate or incorrect, and Amplla a.s. must subsequently carry out the rectification of the data.

3) The right to restriction of the processing of the client's personal data

The Client has the right to have Amplla a.s. restrict the processing of their personal data in the following cases:

  • The Client contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful and the Client refuses the erasure of the personal data and requests instead the restriction of their use.
  • Amplla a.s. no longer needs the personal data for the purposes of the processing, but the Client requires them for the establishment, exercise or defence of legal claims.
  • The Client has raised an objection to the processing pursuant to Article 21(1), pending verification of whether the legitimate grounds of Amplla a.s. override the legitimate grounds of the Client.

Where the processing has been restricted on the basis of the cases stated above, such personal data may, with the exception of their storage, be processed only with the consent of the data subject, or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. A Client who has obtained a restriction of processing on the basis of the cases stated above is informed in advance by Amplla a.s. that the restriction of processing is to be lifted.

4) The right to portability of the client's personal data

The right to portability is a completely new right of the Client, the substance of which is the possibility, under certain conditions, of obtaining personal data concerning them which they have provided to Amplla a.s. and of transmitting these data to another controller.

Common conditions for the application of the right to portability:

  • it must involve processing based on the legal ground of consent or a contract,
  • the processing is carried out by automated means.

The exercise of the right to portability must not adversely affect the rights and freedoms of other persons.

5) The client's right to object

The Client has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data that are processed on the following legal grounds:

  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
  • the processing is necessary for the purposes of the legitimate interests of Amplla a.s. or of a third party.

Amplla a.s. shall no longer process the Client's personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the Client, or for the establishment, exercise or defence of legal claims. To a certain extent this is the equivalent of the right to an explanation under § 21 of the current Act No. 110/2019 Coll., on personal data processing.

Furthermore, the Client has the right to lodge a complaint with the Office for Personal Data Protection in the event that they believe that their right to the protection of personal data has been infringed.

PERIOD OF PROCESSING OF PERSONAL DATA

The period for which the client's personal data will be processed depends on the purposes of the processing. The individual processing periods are specified in more detail below:

  • Record of the Client in the information system on the basis of consent to registration:
    • The Client's consent is granted for a period of 3 years; after the expiry of this period the client's data will no longer be processed.
    • If the Client withdraws consent in the course of the 3-year period, the client's data will no longer be processed.
  • Sending of commercial communications:
    • The Client's consent is granted for a period of 3 years; after the expiry of this period the client's data will no longer be processed.
    • If the Client withdraws consent in the course of the 3-year period, the client's data will no longer be processed.
  • Processing of data for the purpose of a legitimate interest:
    • The Client's data will be processed only for the duration of the legitimate interest.
  • Processing for the purpose of performance of a contract:
    • The Client's data will be processed only for the period necessary for the proper performance of contractual obligations.
  • Statutory grounds for the processing of personal data:
    • The Client's data will be processed only for the duration of the statutory ground.

CONDITIONS FOR SECURING PERSONAL DATA

Amplla a.s. declares that it has adopted all appropriate technical, procedural and organisational measures to secure personal data, and that only persons authorised by it have access to the personal data.

FINAL PROVISIONS

You agree with these conditions by ticking the consent box in the internet form, by submitting an order/reservation or by concluding a contract with Amplla a.s., both through the company's internet pages and through the company's sales representatives or partners. By each of the acts specified above you confirm that you have acquainted yourself with the conditions for the processing of personal data and that you accept them in their entire scope.

The controller is entitled to amend these conditions. The current valid wording of the personal data protection conditions is always published at www.amplla.cz.