Privacy Policy

Information on the protection and processing of personal data in connection with the activities of ATEsystem s.r.o.

The personal data controller is:

ATEsystem s.r.o.,

registered address: Ostrava – Pustkovec, Technologická 378/9, Postal Code: 708 00,

registered in the Commercial Register maintained by the Regional Court in Ostrava, File No. C 55698,

Company Identification Number (IČ): 01392042

(hereinafter referred to as “we”, “the company”, or “the controller”)

We process personal data exclusively in compliance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”), Act No. 480/2004 Coll., on Certain Information Society Services and Amendments to Certain Laws (hereinafter referred to as “the Act on Certain Information Society Services”), and Act No. 110/2019 Coll., on the Processing of Personal Data. Through this text, we inform our customers, visitors to these websites, our business partners, those interested in our products and services, and potentially other individuals regarding the processing of their personal data within the company, providing the following information:

Purposes of Processing Personal Data

The controller processes personal data to the extent necessary for fulfilling a specific processing purpose. The most common purposes of processing personal data include: processing related to the conclusion and fulfillment of contracts and related activities such as invoicing, processing complaints, etc.; processing based on a legal obligation imposed on the controller, e.g., by tax laws or laws in the area of competition protection; processing based on the legitimate interests of the controller, such as informing customers about new products; and other purposes in the case of processing based on the consent of the data subject, specifically expressed when obtaining consent.

Legal Grounds for Processing

The controller processes personal data primarily on the basis of the following legal grounds:

The data subject has given consent to the processing of their personal data for one or more specific purposes, pursuant to Article 6 (1) (a) of the GDPR.
Processing is necessary for the performance of a contract to which the data subject is a party or for the taking of steps at the request of the data subject prior to entering into a contract, pursuant to Article 6 (1) (b) of the GDPR.
Processing is necessary for compliance with a legal obligation to which the controller is subject, pursuant to Article 6 (1) (c) of the GDPR.
Processing is necessary to protect the vital interests of the data subject or of another natural person, pursuant to Article 6 (1) (d) of the GDPR.
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where those interests are overridden by the interests, rights and freedoms of the data subject requiring the protection of personal data, in particular if the data subject is a child, pursuant to Article 6 (1) (f) of the GDPR.

Recipients of Personal Data

Personal data is processed by the company, or by individuals who need this personal data to fulfill their work or contractual obligations. As the company is part of the ELVAC group, some personal data is shared with other companies in the group in justified cases (especially for creating a unified accounting and information system). Specifically, these are the following companies:

ELVAC a.s., IČ 258 33 812, registered address: Ostrava – Hrabůvka, Hasičská 930/53, Postal Code: 700 30
ELVAC DELIVERY s.r.o., IČ 267 25 576, registered address: Ostrava – Hrabůvka, Hasičská 930/53, Postal Code: 700 30
ELVAC EKOTECHNIKA s.r.o., IČ 268 39 652, registered address: Ostrava – Vítkovice, Tavičská 337/23, Postal Code: 703 00
ELVAC PROMEDIA s.r.o., IČ 277 65 806, registered address: Ostrava – Hrabůvka, Hasičská 930/53, Postal Code: 700 30
ELVAC SOLUTIONS s.r.o., IČ 273 96 649, registered address: Ostrava – Hrabůvka, Hasičská 930/53, Postal Code: 700 30
ELVAC SK s.r.o., IČ 363 44 575, registered address: Trenčín, Višňová 192/11, Postal Code: 911 05

Recipients of personal data may also include our IT and other technical service providers, as well as business and contractual partners – e.g., courier services and banks. Our legal, tax, and other advisory service providers may also be data processors. The controller ensures that only processors who provide sufficient guarantees of implementing appropriate technical and organizational measures to ensure compliance with the GDPR and the protection of the rights of data subjects are selected and used.

In connection with the operation of the website and the use of cookies, some personal data may be transmitted to providers of analytical and other related services. The recipient may also be the provider of e-mail marketing.

In justified cases, the recipients of personal data may be law enforcement agencies, administrative bodies for the purposes of administrative offense proceedings, and other entities for the fulfillment of the processing purpose (insurance company, the Czech Social Security Administration, etc.). The recipients may also be the data subjects themselves in the event of exercising the right of access to personal data, etc.

The controller primarily does not transmit personal data to third countries or international organizations, but it may be the case that the recipient from a third country is a provider of cloud services – in such cases, the company ensures that the security of the transmitted personal data is at the same level as if this transfer took place in the EU.

The company does not have a designated data protection officer.

Rights of Data Subjects

The data subject has the following rights:

The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restriction of processing
The right to data portability
The right to object
The right to withdraw consent
The right to lodge a complaint

To exercise their rights, the data subject may contact the company’s statutory representative at its registered office, use electronic communication channels used by the company in communication, or contact the controller by sending a written notice by regular mail to the company’s address.

The company will respond to requests from data subjects regarding the exercise of their rights without undue delay, no later than 30 days from receipt of the request. The deadline may be extended by a further month if necessary. The company will always inform the data subject of such extension, including the reasons for it. Communication will be conducted in the manner chosen by the data subject at the beginning (e.g., e-mail or letter).

The data subject has the right to lodge a complaint with the supervisory authority (the Office for Personal Data Protection, registered address: Pplk. Sochora 27, 170 00 Prague 7, telephone: +420 234 665 111) if they believe that the processing of their personal data has violated the rules on the protection of personal data.

Specific Processing Activities of the Controller

1. Conclusion and Fulfillment of a Purchase Agreement

Purpose of processing: Conclusion of a purchase agreement, ensuring the order, delivery, invoicing, and accounting, processing complaints, and any related communication.
Legal basis for processing and consequences of not providing the required personal data: Personal data is processed for the performance of a contract to which the data subject is a party or for the taking of steps at the request of the data subject prior to entering into a contract, pursuant to Article 6 (1) (b) of the GDPR. Some personal data is processed on the basis of the legal obligation of the controller, pursuant to Article 6 (1) (c) of the GDPR, as determined by tax and accounting regulations. In some cases, the legal basis for processing is the legitimate interest of the controller in processing, pursuant to Article 6 (1) (f) of the GDPR, in particular for the purpose of protecting the controller’s legal rights. If you do not provide the required personal data, the contract may not be concluded, or if it has already been concluded, it may not be fulfilled.
Categories of personal data concerned: (e.g., first name and last name, date of birth, telephone number, e-mail address), transaction data (e.g., bank account number or credit/debit card number), delivery data, data on ordered goods or services, and other data related to complaints or any communication.
Retention period: Personal data is stored for the duration of the contractual relationship and then for a period necessary to protect our legal rights and fulfill legal obligations.
Recipients of personal data: The primary recipient of personal data is the controller; for accounting purposes and to ensure customer needs, some data is shared across the ELVAC group. In justified cases, other entities may also be recipients (e.g., law enforcement agencies, the data subject himself).
Automated decision-making: This processing does not involve automated decision-making.

2. Communication with Customers

Purpose of processing: The purpose of processing is communication with customers through inquiry and contact forms on our websites, telephone and e-mail communication for the purpose of creating an offer, providing requested information, processing orders, and other related activities.
Legal basis for processing and consequences of not providing the required personal data: Personal data is processed for the performance of a contract to which the data subject is a party or for the taking of steps at the request of the data subject prior to entering into a contract, pursuant to Article 6 (1) (b) of the GDPR, or it may be the legitimate interest of the controller, pursuant to Article 6 (1) (f) of the GDPR. If you do not provide the required personal data, we may not be able to contact you and process your request.
Categories of personal data concerned: Identification and contact information (e.g., first name and last name, date of birth, telephone number, e-mail address), the name of your company and job title, or other information you provide.
Retention period: After the communication ends, and if no contractual relationship is established, personal data is stored for only as long as necessary for possible continuation of the communication and for the protection of our legal rights. If a contractual relationship is established, the personal data is stored for the duration of the contractual relationship and subsequently for the necessary period to protect our legal rights and fulfill legal obligations.
Recipients of personal data: The primary recipient of personal data is the controller; for ensuring customer needs, some data is shared across the ELVAC group. In justified cases, other entities may also be recipients (e.g., law enforcement agencies, the data subject himself).
Automated decision-making: This processing does not involve automated decision-making.

3. Commercial Communications

Purpose of processing: The company sends commercial communications to inform existing and potential customers about its products and services, news, and promotions.
Legal basis for processing and consequences of not providing the required personal data: The company sends commercial communications with the consent of the recipient, pursuant to Article 6 (1) (a) of the GDPR (by subscribing to the newsletter on the company’s website) or through the so-called customer exception under Section 7 (3) of the Act on Certain Information Society Services (commercial communication sent to customers whose e-mail address was obtained in connection with the sale of a product or service, if the commercial communication concerns similar products or services). The sending of commercial communications can be rejected by clicking on a deactivation link contained in the commercial communication. The company may then process personal data on the basis of the legitimate interest of the controller, pursuant to Article 6 (1) (f) of the GDPR, in order to protect its legal rights. If you do not provide the required personal data, we may not be able to send you our commercial communications (newsletter).
Categories of personal data concerned: e-mail address, and possibly first name, last name, and company name.
Retention period: Personal data is processed until you unsubscribe from our newsletter. After that, we may process personal data for as long as necessary to protect our legal rights and to a limited extent, in order to fulfill our obligation not to send you any further commercial communications.
Recipients of personal data: The recipient of personal data is the controller and the company providing e-mail marketing. In justified cases, other entities may also be recipients (e.g., law enforcement agencies, the data subject himself).
Automated decision-making, including profiling: This processing does not involve automated decision-making.

4. Operation of Websites and Cookies

Purpose of processing: The purposes include ensuring the proper functioning of the website, displaying relevant advertisements, monitoring the number of visitors to the website, and measuring its functionality. You can find more information about cookies in the separate section below, entitled “Cookies.”
Legal basis for processing and consequences of not providing the required personal data: The legal basis for processing is, in the case of technical cookies, the legitimate interest of the Controller in the proper functioning of the website, pursuant to Article 6 (1) (f) of the GDPR. In the case of non-technical cookies, the legal basis for processing is the consent of the data subject, pursuant to Article 6 (1) (a) of the GDPR. The consent granted may be revoked at any time in the cookie bar. If you do not provide the required personal data, the website may not have customized content for you, or the website may not be able to be opened at all.
Categories of personal data concerned: in particular, location and network identifiers (IP address, advertising ID, Cookie ID, etc.), technical data on user behavior and preferences (time spent on the website, clicks on links, etc.).
Retention period: This depends on the type – short-term cookies, especially technical cookies, are stored only for the duration of the visit to the websites, and are automatically deleted when the internet browser is closed. Long-term cookies are then stored for longer, depending on their purpose, but always for as long as necessary.
Recipients of personal data: service providers
Automated decision-making, including profiling: This processing does not involve automated decision-making.

Cookies

The controller processes the personal data of website visitors to determine their behavior when browsing these websites on a computer or mobile device, to monitor the number of visitors to these websites and to measure their functionality, using so-called cookies and the Google Analytics tool.

Marketing cookies help to select the services that may be of interest to you. They also connect our e-shop with third-party social and advertising networks, which may then show you their advertisements outside our website. These are the services of Google Ads, Seznam SKlik, and LinkedIn Ads.

Cookies are information stored in simple text files placed on a computer from a website. These cookies may be read by websites during subsequent visits to the controller’s websites. The information stored in a cookie file may relate to the person’s behavior when browsing the website or contain a unique identifier so that the website can remember it on its next visit. When visiting the controller’s websites, the analytical software stores anonymous cookies. These help to determine how many visitors come to the controller’s websites repeatedly, how visitors behave on the site, what they prefer, and what interests them. For these purposes, the controller also uses the tool of the company Google, the so-called Google Analytics, which allows website owners to obtain statistical data on users of their websites. Thanks to this service, it is possible to monitor current and historical attendance, visitor behavior and their characteristics, sales, and more.

The controller may collect personal data of visitors to these websites through cookies only on the basis of their demonstrable active consent (the so-called opt-in principle). This consent is not necessary only for technical cookies, which are necessary for the proper display of the page, transmission of messages, ensuring secure communication, etc.

The controller stores the following cookies:

Technical cookies, which are necessary for the websites to function properly. These are always stored.
Statistical cookies, which help the controller to determine what needs to be improved on the websites. These are stored on the basis of the active consent of the website visitor.
Preference cookies, which help the website visitor to find what they are looking for more quickly. The controller stores these on the basis of their active consent.
Marketing cookies, on the basis of which advertisements of interest to the visitor are displayed. The controller also stores these only on the basis of the visitor’s active consent.
Unclassified/security cookies, which we are in the process of classifying together with the providers of individual cookies.

The legal basis for processing the personal data of visitors to the controller’s websites using cookie files is the legitimate interest of the controller, whereby the controller provides data subjects with the possibility of browsing the content of the websites, and the actively given consent of the visitor to the controller’s websites, on the basis of which the controller can provide the visitor with customized content on the websites.