Personal data controller

The personal data controller of PentaGen s.r.o., company ID 27865410, with its registered office at Luční 239, 273 51 Horní Bezděkov (hereinafter referred to as the "controller"), declares that all personal data processed by the controller are strictly confidential. The controller handles them in accordance with national and European Union legislation in force in the field of personal data protection.
The Controller collects, stores and uses your personal data within the meaning of Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the "Personal Data Processing Act"), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"). The individual purposes for which the Controller processes personal data are defined below.
The controller also collects this personal data through its website at pentagen.cz (hereinafter referred to as the "website").
This policy is issued by the controller so that you are sufficiently informed about what personal data the controller processes, for what purpose, for how long, who will have access to your personal data and what your rights are. This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or consent.

Data processed

The controller is entitled to process the following personal data by purpose, by categories of personal data, by categories of data subjects, by categories of recipients and by retention period as follows.

No. Purpose of processing Categories of personal data Categories of data subjects Categories of recipients Retention period
1 Sending of commercial communications Identification data Customers Controller 5 years

 

The individual purposes of processing are understood to be the following:

  • Performance of a contractual relationship means: the relationship between you and the controller arising from an order, registration, on the basis of a contract, on the basis of an application and participation in a competition, etc;
  • sending commercial communications and offering products and services means: sending commercial offers, by electronic mail (e-mail), by short text messages or by telephone call;
  • accounting and tax purposes means: accounting records as defined in accounting and tax legislation;
  • personnel, payroll means: concluding commercial contracts, processing of salaries, social and health insurance payments according to Act No. 262/2006 Coll., Labour Code No. 582/1991 Coll., On the organisation and implementation of social security No. 48/1997 Coll., On public health insurance and on amendment and supplementation of some related acts;
  • Statistical purposes means: anonymized detection of website traffic, as well as monitoring of the number of page views, time spent on the website, type of device from which you access the website. We collect data in order to improve the services we provide and to offer relevant content to our clients;
  • displaying advertisements means: displaying advertisements on the website based on statistically determined customer preferences;
  • Legitimate interest means: effective defence in the event of a dispute; the period of processing of personal data in this case is 4 years from the expiry of the warranty period of the goods and is extended by the period for which the dispute is being conducted. We want to continuously improve our services and, where appropriate, provide new and better services; we want to avoid obstructing such activities; therefore, activities that contribute to this objective are our legitimate interest. The legitimate interest includes such processing for the purposes of fraud prevention (e.g. assessing the risk of entering into a contract), direct marketing (e.g. offering relevant services to existing customers), transfer of personal data within the group of companies for internal administrative purposes, notification of criminal offences and transmission of personal data to the competent authority, ensuring network and information security. This list is only indicative.
  • Fulfilling other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, etc.

We process your personal data for the time necessary to ensure all rights and obligations arising from the mutual legal transaction, that is, at least for the period of order processing, execution of a transaction, provision of a service, etc., as well as for the period for which the controller is obliged to keep the personal data under generally binding legal regulations or for the period for which you have given your consent to the controller, if applicable. Otherwise, the period of processing results from the purpose for which the personal data are processed or is determined by legal regulations.
Personal data are processed automatically. The controller is entitled to process some information automatically, for example, to create statistical information about traffic to its website.

Personal data processed on the basis of consent

If we have obtained consent from you to process your personal data. This is for any of the following purposes:
Sending you commercial communications and offering you products and services.

Rights of the data subject

As a data subject, you have rights under the law which you can exercise at any time, such as:

  • The right of access to personal data, under which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is determined by the provisions of the GDPR article. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;
  • the right to rectification or erasure of personal data or restriction of processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If your personal data is no longer necessary for the purposes for which it was collected or if it has been unlawfully processed, you have the right to have it erased. If you do not want to request the erasure of personal data, but only to temporarily restrict its processing, you can request a restriction of processing;
  • the right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;
  • the right to contact the Data Protection Authority in case of doubts about compliance with the obligations related to the processing of personal data;
  • the right to data portability, i.e. the right to obtain personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format, see Article 20 GDPR for more details;
  • The right to object to the processing of personal data which are processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing which overrides your interests, rights or freedoms;
  • the right to withdraw consent to the processing of personal data at any time if you have given your consent to the controller to process your personal data.

Transfers to third countries

Your personal data will not be transferred to third countries.

Information and questions

The data subject may obtain further information about the rights and obligations regarding the protection of personal data on the pentagen.cz website or by e-mail at info@pentagen.cz.