Personal Data Protection
This text is a translation of the Czech original. In the event of any discrepancy between language versions, the Czech version prevails. The legal relationship is governed by Czech law.
Processing of personal data - Amplla a.s.
Amplla a.s. undertakes to process personal data in accordance with the applicable legal regulations, i.e. Act No. 110/2019 Coll., on personal data processing, and Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, GDPR), which is directly effective as of 25 May 2018. Below we provide you with important information and conditions for the processing of personal data. Part of it concerns your use of this website (traffic measurement, contact form), part concerns the business relationship with our company.
Effective from: 11 August 2026. The previous wording is available on request at [email protected].
INFORMATION ON THE PROCESSING OF PERSONAL DATA
PERSONAL DATA CONTROLLER
CONTACT DETAILS
Amplla a.s.
Address: Poličská 1823, 539 01 Hlinsko, Czech Republic
Email: [email protected]
Telephone: +420 739 017 120
The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data is Amplla a.s., with its registered office at Poličská 1823, 539 01 Hlinsko.
WHAT WE PROCESS ON THIS WEBSITE
You cannot make a purchase or create a customer account on amplla.com. Orders are handled through the configurator at config.amplla.cz and by direct contact. On this website we therefore process personal data in two cases only:
1) Contact form. When you write to us through the form on the Contact page, we process your name, email address and the text of your message. The form collects nothing else. We forward the message by email to our contact address and use it solely to handle your enquiry. We reply to the email address you provided.
Legal basis: steps taken at your request prior to entering into a contract under Article 6(1)(b) GDPR.
Retention period: for the duration of the enquiry negotiations and thereafter for the duration of the business relationship.
2) Traffic measurement. See the section Cookies and traffic measurement below.
The website also stores three technical items in your device (in the browser’s local storage): your cookie choice, the information that you closed the floating campaign badge, and a temporary copy of the Pinterest board content so that it does not have to be loaded on every view. They contain no data by which you could be identified.
On some pages, content is additionally loaded by your browser directly from third-party servers (map, video, Instagram and Pinterest boards). Details can be found in the section Who we pass data to.
SCOPE OF THE PERSONAL DATA PROCESSED
Personal data means any information about an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a certain identifier, for example a name, an identification number, location data, a network identifier or to one or more special elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Amplla a.s. processes personal data provided by the Client upon the establishment of a business relationship, i.e. upon an order. Furthermore, the company processes personal data provided by the client for the purpose of participation in the company's events, or for the purpose of sending commercial communications.
The data processed may contain:
- Ordinary personal data: name and surname, email address, telephone number, billing and delivery address, academic title, date of birth, bank account number, information about the business relationship carried out (reservations, orders, delivery notes, invoices, purchase of goods, stored goods and contact history (emails and SMS messages sent). Furthermore, in the case of electronic access to the company's website, the following data are processed: IP address and cookies).
- Sensitive personal data: none
- Other data: Data that we obtain automatically in connection with the use of the website, such as the IP address, the type of browser, device and operating system, the time and number of accesses to the website, information obtained by means of cookies and other similar information. Please note that we may obtain these other data even without registration and regardless of whether you make purchases on the website or not. These other data are ascertained for us by cookies, of the use of which we informed you upon your arrival at the website.
COOKIES AND TRAFFIC MEASUREMENT
What are cookies?
Cookies are text files stored on the computer or other electronic device of each visitor to the web interface, which make it possible to analyse the manner in which the web interface is used. Our own application stores no cookie in your device – cookies are written only by the Google measurement script described below.
How do you express your consent to the use of cookies?
On your first visit, a bar with two buttons appears at the bottom of the page – Accept and Reject. Both options are equally available, one click each. The website stores your decision in your browser for 12 months and then asks again.
How do you withdraw your consent?
You cancel the stored choice by deleting the data stored by this website in your internet browser settings. The bar will then appear again and you can decide differently. You may also delete cookies or block their storage at any time directly in your browser settings. Neither rejecting nor withdrawing consent affects how the website works.
Traffic measurement – Google Analytics 4
For traffic measurement we use Google Analytics 4, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The measurement ID of our property is G-W82R3H9CHB.
What is measured: IP address, a randomly assigned identifier stored in the cookies “_ga” and “_ga_W82R3H9CHB”, the addresses of the pages visited, the page title and language, the type of browser, device and operating system, and the time and number of visits.
What is not measured: nothing that you fill in the contact form. Your name, email address and the text of your message are not sent to the measurement service.
When measurement is started. At present, traffic measurement takes place for all visitors to the website, regardless of the choice made on the cookie bar. The website is under active development and the measurement serves us to verify that newly deployed parts work correctly. We record your choice on the bar and, once development is finished, measurement will be started solely after consent has been granted; this wording will be amended accordingly. Advertising and personalisation functions are switched off in both cases.
We do not use advertising cookies. Google Analytics is configured so that advertising functions (storage of advertising identifiers, advertising personalisation) are permanently switched off. We do not operate remarketing or targeted advertising.
Recipient: Google Ireland Limited and Google LLC acting as processors. The data may also be processed outside the European Union, in particular in the United States of America. Transfer mechanism: the EU-US Data Privacy Framework, under which Google LLC is certified.
Storage period: the “_ga” cookie has a standard validity of 2 years. The data retention period in Google Analytics is set to 2 months.
How does Google use the data obtained?
If you are interested in how Google uses the data that it obtains through the use of the web interface, you will find this information by clicking on the following link: How Google uses data when you use our partners' sites or apps.
PURPOSE OF THE PROCESSING OF PERSONAL DATA
The personal data of Clients are processed for the purposes stated below:
1) Registration of the client in the information systems of Amplla a.s. and sending of informational communications
Registration of the Client is important, in particular in order to make it possible to establish a future business relationship and for the subsequent informing of the Client about ongoing business acts (Reservations, Orders, Invoices, etc.). The scope of the data provided by the Client corresponds to the needs of the future business relationship. The Client states their name and surname, billing address, email and, where applicable, other optional data.
For this purpose of processing, the consent of the Client is granted, which may be withdrawn at any time in the same manner in which it was obtained, i.e. by an email request sent to [email protected] or by a written request sent to the address of the company's registered office. Registration of the client takes place in our information systems, not on this website – no customer account can be created here.
2) Sending of commercial communications
The sending of commercial communications serves to inform the Client about ongoing marketing activities and offers of Amplla a.s. The scope of the data provided is limited to the email or postal address, name and surname.
For this purpose, the legitimate interest of the controller in providing direct marketing (in particular for sending commercial communications) is applied where a business relationship has already been established with the client. In cases where a business relationship has not been established, the Client must grant consent for this purpose of processing. In both of the cases stated, it may be withdrawn at any time, namely in the footer of every commercial email communication, or by means of the contact details stated above.
3) Processing of personal data for the purpose of a legitimate interest
The processing of the Client's personal data for the purpose of a legitimate interest takes place in particular for the protection of the rights of Amplla a.s. In this connection, the personal data of a Client who expresses an interest in visiting premises requiring an increased level of security (e.g. the company's production section) are recorded.
4) Processing for the purpose of performance of a contract
For the purpose of performance of a contract, Amplla a.s. processes the Client's personal data in connection with valid concluded contracts pursuant to Article 6(1)(b) of Regulation (EU) 2016/679.
5) Statutory grounds for the processing of personal data
Amplla a.s. complies with all applicable laws of the Czech Republic and the EU, for the purpose of which it processes the Client's personal data; these are the cases stated below:
- The Client's personal data in connection with all accounting documents must be recorded for the period stipulated by law.
- VAT Act 235/2004 Coll.
- Accounting Act 563/1991 Coll.
- Tax Procedure Code – 280/2009 Coll.
SOURCES OF PERSONAL DATA
1) The controller processes personal data that you have provided to it or personal data that the controller obtained on the basis of the fulfilment of your order.
2) The controller processes your identification and contact data and data necessary for the performance of the contract.
WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA
The Client always provides their consent to the processing of personal data voluntarily and has the possibility of withdrawing it at any time, either in whole or in part. The client may carry out the withdrawal of consent in several ways:
- By deleting the data stored by this website in your internet browser settings – this cancels the stored choice on the cookie bar and the bar appears again (applies to consent to traffic measurement).
- By an email request sent to [email protected]
- By a written request sent to the address of the company's registered office.
- By means of the unsubscribe link stated in the footer of every commercial communication.
After the withdrawal of consent to the processing of personal data by the Client, Amplla a.s. may process personal data only in cases where another purpose of processing exists, and only to the extent that is adequate for that purpose.
PROCESSORS OF PERSONAL DATA
The controller of the personal data of clients and, at the same time, the main processor of these data is Amplla a.s. In view of ensuring the necessary services for the Client (e.g. transport of goods, sending of emails, etc.), other companies that provide these services to Amplla a.s. also enter into the processing. Amplla a.s. has concluded a personal data processing agreement with all processors, by which the protection of the Client's personal data is declared.
WHO WE PASS DATA TO
We do not sell personal data and do not pass them to anyone for their own purposes. Some of the data are, however, necessarily accessed by the service providers without which the website or our communication would not work. They process the data only for us and according to our instructions:
- Google Ireland Limited / Google LLC – traffic measurement (Google Analytics) and the map on the Contact page.
- Hetzner Online GmbH – operation of the server on which the website runs (Germany).
- Cloudflare, Inc. – website protection and delivery network; all traffic passes through it.
- Seznam.cz a.s. (smtp.seznam.cz) – sending of emails from the contact form.
- Meta Platforms Ireland Limited – the Instagram board content on the References page.
- Pinterest Europe Ltd. – the Pinterest board content on the References and For architects pages.
- Google LLC (YouTube) – the video on the home page, embedded in a mode without tracking cookies.
Data may further be disclosed to authorities to which this is required by law (for example bodies active in criminal proceedings).
Embedded third-party content. The map on the Contact page, the video on the home page and the Instagram and Pinterest boards are loaded directly from the servers of the respective companies, regardless of your choice on the cookie bar. When these pages are displayed, your IP address and information about which page you are viewing are therefore transmitted to them. We embed the video in a mode that does not set tracking cookies until you start it.
RIGHTS OF CLIENTS IN CONNECTION WITH THE PROCESSING OF PERSONAL DATA
In connection with the processing of personal data, Clients are granted new rights, which are applied in EU General Regulation 2016/679 (the General Data Protection Regulation).
1) The client's right of access to personal data
Access to personal data means the entitlement of the Client, on the basis of their active request, to obtain from Amplla a.s. information (confirmation) as to whether or not their personal data are being processed and, if they are being processed, the data subject has the right to obtain these personal data and, at the same time, has the right to obtain the following information:
- the purposes of the processing,
- the categories of personal data concerned,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed,
- the envisaged period for which the personal data will be stored,
- any available information about the source of the personal data, where they are not obtained from the Client,
- the fact that automated decision-making, including profiling, takes place.
This is the equivalent of the right of access to personal data laid down in § 12 of the current Act No. 110/2019 Coll., on personal data processing.
2) The client's right to erasure or rectification of personal data
The right to erasure (to be forgotten) represents, in the General Regulation, the obligation of Amplla a.s., expressed in other words, to erase personal data if at least one condition is fulfilled:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- the Client withdraws consent and there is no other legal ground for the processing,
- the Client raises objections to the processing and there are no overriding legitimate grounds for the processing,
- the personal data have been processed unlawfully,
- the personal data must be erased in order to fulfil a legal obligation,
- the personal data were collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.
The right to erasure therefore applies only in the points listed, i.e. when the given circumstance arises. The majority of the cases listed also form part of the current Act No. 110/2019 Coll., on personal data processing, or follow from its substance.
The right to rectification of personal data means that the client may request Amplla a.s. to rectify their data if they are inaccurate or incorrect, and Amplla a.s. must subsequently carry out the rectification of the data.
3) The right to restriction of the processing of the client's personal data
The Client has the right to have Amplla a.s. restrict the processing of their personal data in the following cases:
- The Client contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful and the Client refuses the erasure of the personal data and requests instead the restriction of their use.
- Amplla a.s. no longer needs the personal data for the purposes of the processing, but the Client requires them for the establishment, exercise or defence of legal claims.
- The Client has raised an objection to the processing pursuant to Article 21(1), pending verification of whether the legitimate grounds of Amplla a.s. override the legitimate grounds of the Client.
Where the processing has been restricted on the basis of the cases stated above, such personal data may, with the exception of their storage, be processed only with the consent of the data subject, or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. A Client who has obtained a restriction of processing on the basis of the cases stated above is informed in advance by Amplla a.s. that the restriction of processing is to be lifted.
4) The right to portability of the client's personal data
The right to portability is a completely new right of the Client, the substance of which is the possibility, under certain conditions, of obtaining personal data concerning them which they have provided to Amplla a.s. and of transmitting these data to another controller.
Common conditions for the application of the right to portability:
- it must involve processing based on the legal ground of consent or a contract,
- the processing is carried out by automated means.
The exercise of the right to portability must not adversely affect the rights and freedoms of other persons.
5) The client's right to object
The Client has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data that are processed on the following legal grounds:
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
- the processing is necessary for the purposes of the legitimate interests of Amplla a.s. or of a third party.
Amplla a.s. shall no longer process the Client's personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the Client, or for the establishment, exercise or defence of legal claims. To a certain extent this is the equivalent of the right to an explanation under § 21 of the current Act No. 110/2019 Coll., on personal data processing.
Furthermore, the Client has the right to lodge a complaint with the Office for Personal Data Protection in the event that they believe that their right to the protection of personal data has been infringed.
PERIOD OF PROCESSING OF PERSONAL DATA
The period for which the client's personal data will be processed depends on the purposes of the processing. The individual processing periods are specified in more detail below:
- Record of the Client in the information system on the basis of consent to registration:
- The Client's consent is granted for a period of 3 years; after the expiry of this period the client's data will no longer be processed.
- If the Client withdraws consent in the course of the 3-year period, the client's data will no longer be processed.
- Sending of commercial communications:
- The Client's consent is granted for a period of 3 years; after the expiry of this period the client's data will no longer be processed.
- If the Client withdraws consent in the course of the 3-year period, the client's data will no longer be processed.
- Processing of data for the purpose of a legitimate interest:
- The Client's data will be processed only for the duration of the legitimate interest.
- Processing for the purpose of performance of a contract:
- The Client's data will be processed only for the period necessary for the proper performance of contractual obligations.
- Statutory grounds for the processing of personal data:
- The Client's data will be processed only for the duration of the statutory ground.
- Messages from the contact form:
- for the duration of the enquiry negotiations and thereafter for the duration of the business relationship.
- Traffic measurement:
- The “_ga” cookie 2 years; the choice on the cookie bar 12 months; data in Google Analytics 2 months.
CONDITIONS FOR SECURING PERSONAL DATA
Amplla a.s. declares that it has adopted all appropriate technical, procedural and organisational measures to secure personal data, and that only persons authorised by it have access to the personal data.
FINAL PROVISIONS
You agree with these conditions by ticking the consent box in the contact form on this website or by concluding a contract with Amplla a.s., both through the company's internet pages and through the company's sales representatives or partners. By each of the acts specified above you confirm that you have acquainted yourself with the conditions for the processing of personal data and that you accept them in their entire scope.
The controller is entitled to amend these conditions. The current valid wording of the personal data protection conditions is always published at www.amplla.com.