This personal data processing policy (the “Policy”) describes how GPL Europlastics spol. s r.o., Zahradní 1299, 751 31 Lipník nad Bečvou, Czech Republic, Company ID: 29394236, VAT ID: CZ29394236, registered with the Regional Court in Ostrava, Section C, Insert No. 45744 (the “Company” or “we”) processes your personal data for the purpose of providing our services, consisting of the purchase and sale of plastic materials (the “Services”), on the website www.prodejplastu.cz (the “Website”).
WHAT INFORMATION DO WE COLLECT AND FOR WHAT PURPOSE?
We collect the following personal data about you (the “Personal Data”) depending on how and to what extent you use our Website and/or Services:
A. Information necessary for registration and access to the Website
For the purpose of registering on our Website, subsequently logging in to our Website and accessing our personalised services on the Website, we process the following personal data: (i) your first name, (ii) surname and (iii) e-mail.
The processing of this data is necessary for the performance of a contract to which you and we are parties.
The legal basis for processing this information is Article 6(1)(b) GDPR.
B. Information necessary for providing the Services
For the purpose of providing our Services (i.e. delivering the goods you ordered / providing the service you purchased) we process the following personal data: (i) your first name, (ii) surname, (iii) address, (iv) e-mail, (v) telephone number and (vi) information about your payment card (in particular the card number, expiry date and CVV code).
The processing of this data is necessary for the performance of a contract to which you and we are parties.
The legal basis for processing this information is Article 6(1)(b) GDPR.
C. Information obtained for marketing purposes
For the purpose of receiving our newsletters and/or leaflets, information about discounts, updates, improvements and offers and other marketing materials in the form of e-mails, text messages or postal mail and/or notifications, we process your: (i) first name, (ii) surname, (iii) e-mail, (iv) telephone number and (v) address.
We process this personal data on the basis of your express consent. The legal basis for processing this information is Article 6(1)(a) GDPR.
If you decide that you no longer wish to receive such messages, you have the right to withdraw your consent by clicking on the hyperlink directly in the e-mail communication or by writing to us at gpl@gpleuroplastics.com. Withdrawing your consent may result in you no longer receiving notices of discounts, updates, improvements and offers. It is not possible to withdraw consent to receiving e-mails containing notices related to the provision of the Services.
D. Information obtained when you use our Website
In order to continuously improve our Services and develop your user experience when using our Website, we process information relating to: (i) your computer, (ii) visits to or use of our Website and/or our Services (including your IP address, geographical location, type and version of your browser/operating system, referring links, length of visit, pages viewed and movements on our website, or any similar information that the Company may obtain directly or indirectly from third-party providers), (iii) generated when you use our Website and/or Services or generated in the course of using our Services (including the timing, frequency and pattern of use of the Website).
We process this personal data on the basis of your express consent. The legal basis for processing this information is Article 6(1)(a) GDPR.
E. Information obtained when you leave a comment / review
For the purpose of leaving a review or publishing a comment on our Website, we will process the personal data that you leave together with the review/comment on our Website, i.e. your: (i) first name, (ii) surname, (iii) alias you choose for leaving the comment/review and (iv) any other data you decide to include in the review/comment.
We process this personal data on the basis of your express consent. The legal basis for processing this information is Article 6(1)(a) GDPR.
F. Information obtained when communicating with us
For the purpose of communicating with us for any reason (for example support when using the Website / Services, complaints, resolving any problems, etc.) we will process the following personal data: (i) your first name, (ii) surname, (iii) address, (iv) e-mail, (v) telephone number, (vi) the content of the communication, (vii) metadata associated with the communication and (viii) any other necessary data you decide to include in the communication.
The processing of this data is necessary for the performance of a contract to which you and we are parties.
The legal basis for processing this information is Article 6(1)(b) GDPR.
ON WHAT OTHER BASIS MAY WE PROCESS YOUR PERSONAL DATA?
In addition to the above, we have the right to process your Personal Data in order to comply with our legal obligations under Article 6(1)(c) GDPR or to protect our legitimate interests under Article 6(1)(f) GDPR, for example for fraud prevention, network and information security and direct marketing.
We will process your Personal Data in accordance with applicable law and will protect your Personal Data against misuse and/or unlawful disclosure.
HOW DO WE SHARE YOUR PERSONAL DATA?
In order to make our Website and/or Services available (and where necessary in the circumstances), we have the right to disclose your Personal Data (and you agree to such disclosure), in accordance with the principle of data minimisation, only to a limited circle of persons, namely our employees, subcontractors, officers, advisers, sales representatives, suppliers or persons affiliated with the Company and service providers, to the extent reasonable and necessary to achieve the purpose set out in this Policy.
We may also disclose your personal data: (i) to the extent required by applicable law, (ii) in connection with any ongoing or future legal proceedings, or (iii) in order to establish, exercise or defend our legal rights (including disclosing your Personal Data to third parties for the purpose of fraud prevention and minimising payment risks).
Information that does not identify you: We have the right to provide your Personal Data that cannot be used to identify you (including anonymous data on the use of our Website and/or Services, referring/exit pages and URLs, platform types, number of clicks, etc.) to third parties interested in such information, in order to understand how certain services are used.
We do not share your Personal Data that allows you to be identified or located with third parties for direct marketing purposes.
We may allow certain third parties to publish advertisements and marketing information on our Website. Such third parties use technology that sends offers or links to offers directly to your browser, which are then displayed as part of the web page you are viewing.
In such a case they automatically receive information about your IP address. They may also use other technologies (e.g. cookies, JavaScript or web beacons) that measure the effectiveness of their advertisements and personalise the content of the advertisements shown to you. We do not make available to such third parties information that would allow them to personalise the data obtained in this way.
Please note that if an advertiser asks us to show an advertisement to a certain group of customers and you respond to such an advertisement, the advertiser or advertising server may conclude that you belong to the group it is trying to reach. This Policy is not intended to regulate your relationship with any third party that uses the technologies mentioned above. For more information, please read the personal data processing policies of such advertisers.
DO WE TRANSFER YOUR PERSONAL DATA TO THIRD COUNTRIES?
The personal data we collect may be stored or otherwise processed and transferred within the countries in which we carry out our business activities, in order to achieve the purpose of processing set out in this Policy. For the same purpose, your data may be transferred between member states of the European Union or the European Economic Area and countries that, according to the European Commission, guarantee an adequate level of personal data protection. An up-to-date overview is published by the Office for Personal Data Protection on its website: https://uoou.gov.cz.
HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?
Unless otherwise provided by applicable law, we have the right to process your Personal Data in a form that allows you to be identified for the period necessary to achieve the purpose for which the Personal Data was provided (this may include the period during which you visit our Website or use our Services and/or the entire duration of the purpose of processing the Personal Data), unless stated otherwise, for the following periods:
A. Information necessary for registration and access to the Website
We will process the data necessary for registration and access to the Website from the day of your registration on the Website until 30 days after the day you cancel your registration. During this period (i.e. 30 days after cancelling the registration) we will process the data solely for the purpose of terminating the contractual relationship between us that arose from your registration on the website, resolving any disputes arising from it and protecting any of our legitimate interests.
B. Information necessary for providing the Services
We will process the data necessary for providing the Services from the day you ordered the Service until it has been demonstrably provided (i.e. until the day the goods are delivered to you and the price is paid).
C. Information obtained for marketing purposes
We will process data obtained for marketing purposes from the day you give us consent to such processing until the day (i) you withdraw your consent or (ii) you cancel your registration on the Website.
D. Information obtained when you use our Website
We will process data obtained when you use the Website from the day you give us consent to such processing until the day (i) you withdraw your consent or (ii) you cancel your registration on the Website.
E. Information obtained when you leave a comment / review
We will process data obtained when you leave a comment or review from the day you give us consent to such processing until the day (i) you withdraw your consent or (ii) you cancel your registration on the Website.
F. Information obtained when communicating with us
We will process data obtained when communicating with us from the day it is obtained until the day your request arising from the e-mail communication has been handled.
We have the right to process your personal data for longer than stated above if this is necessary (i) to comply with our legal obligations, (ii) to establish, exercise or defend our legal rights (including providing information to third parties for the purpose of fraud prevention and minimising payment risks).
HOW CAN YOU WITHDRAW YOUR CONSENT?
You can withdraw your consent at any time at your own discretion via the e-mail contact you will find here: gpl@gpleuroplastics.com, or by phone at +420 602 754 656.
WHAT ARE YOUR RIGHTS AND OBLIGATIONS?
You have the right:
To access your Personal Data
In particular, to request information about: (i) the purpose of processing the Personal Data, (ii) the categories of personal data processed, (iii) the recipients to whom the Personal Data is disclosed and (iv) the period for which your Personal Data is stored.
To rectification of Personal Data
If you find out that we are processing incorrect Personal Data about you, please inform us and we will correct such incorrect data without undue delay.
To erasure of Personal Data (right to be forgotten)
We will erase your Personal Data if: (i) the Personal Data is no longer necessary for the purpose for which it was obtained, (ii) you withdraw your consent to the processing of personal data under the conditions set out in this Policy, (iii) you object to the processing of the Personal Data, (iv) we obtained your Personal Data unlawfully, (v) we have a legal obligation to erase your Personal Data, or (vi) the Personal Data was obtained in connection with the offer of information society services.
To restriction of processing of Personal Data
You have the right to restrict the processing of your Personal Data if: (i) you contest the accuracy of the Personal Data, for a period enabling us to verify its accuracy, (ii) the processing of your Personal Data is unlawful and you oppose the erasure of the Personal Data and request the restriction of its use instead, (iii) we no longer need your Personal Data for the purposes of processing, but you need it for the establishment of a legal claim, or (iv) you object to the processing of the Personal Data, pending verification whether our legitimate grounds override your legitimate interests.
To portability of Personal Data
You have the right to receive from us your Personal Data processed by us in a structured, commonly used and machine-readable format for the purpose of transferring this Personal Data to another controller.
To object to the processing of Personal Data
You have the right to object to the processing of Personal Data based on legitimate interest, marketing and profiling related to direct marketing.
To initiate proceedings before a supervisory authority
If you suspect that your rights related to the protection of your Personal Data have been violated, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic (https://uoou.gov.cz).
DO WE USE AUTOMATED DECISION-MAKING AND PROFILING? HOW DOES IT WORK?
To provide our Services we do not use: (i) automated individual decision-making (i.e. collecting your Personal Data, which is then evaluated by technical means without any human intervention, and providing our Services to you on the basis of such evaluation) and (ii) profiling (i.e. collecting and evaluating your Personal Data and data about your behaviour on our Website in order to assign you to a certain group of people and subsequently analyse and predict your interests, further behaviour, etc.).
DO WE PROCESS CHILDREN’S PERSONAL DATA?
We consider the protection of your children’s privacy to be particularly important. For this reason, we do not knowingly collect any personal data from persons under 16 years of age. If you are under 16, please do not send us any of your Personal Data, including your name, permanent address, telephone number or e-mail address. No person under 16 is permitted to provide their Personal Data on the Website. If we find that any Personal Data we process relates to a person under 16 and we have not been given the consent of that person’s legal guardian, we will delete such Personal Data without delay. If you suspect that we might be processing information from or about persons under 16, please contact us at: gpl@gpleuroplastics.com or by phone at +420 602 754 656.
HOW DO WE PROCESS FINANCIAL TRANSACTIONS?
All financial operations and transactions carried out electronically on our Website or in connection with our Services will be processed through online payment service providers. We will provide your Personal Data to online payment service providers only to the extent necessary to process the payments you make through our Website, to refund such payments and to handle complaints and queries relating to such payments and refunds.
HOW DO WE WORK WITH THIRD-PARTY WEBSITES?
Our Website contains hyperlinks to and details of third-party websites.
We have no control over and accept no responsibility for the privacy policies and practices of third parties.
DO YOU HAVE ANY FURTHER QUESTIONS?
If you wish to contact us regarding the processing of personal data, including when you want to exercise any of the rights set out in this Policy, please contact us by e-mail at: gpl@gpleuroplastics.com or by phone at +420 602 754 656.
HOW DO WE UPDATE OUR PERSONAL DATA PROCESSING POLICY?
We reserve the right to change this Policy. If we change the Policy or our processes, we will publish these changes on the Website so that you always know what information we collect, how we use it and under what circumstances we may disclose it to a third party. It is important that you review this Policy regularly to make sure you are aware of any changes.
WHICH COOKIES DO WE USE?
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and stored by the browser on your mobile device or computer in order to identify you (usually on the basis of anonymous identifiers). The identifier is then sent back to the server each time the browser requests a page from the server, in order to identify your visit to a particular page, the list of advertisements you responded to, the type of browser you use, and to remember the data you entered on our Website.
We use cookies to personalise the content and advertisements shown to you, to enable social media features and to analyse traffic. We share information about your use of our Website with our social media, advertising and analytics partners, who may combine it with other information that you have provided to them or that they have collected from your use of their services.
We use cookies so that we can adapt to your needs, distinguish you from other users, prevent advertisements that are not of interest to you from being displayed in your browser, and so that you do not have to log in to our Website repeatedly.
We use either “persistent” or “temporary” cookies: persistent cookies will be stored in your web browser until their set expiry date unless you delete them before that date; temporary cookies, on the other hand, expire when you close your web browser.
We also use third-party cookies: third-party cookies are cookies set by a website other than our Website. For example, social media “Like” buttons placed on our website. Such a button may download cookies that can be read by the operator of the social media. The purpose of these third-party cookies is usually to collect certain information for research into behaviour and demographics and, not least, for targeted marketing.
Cookies usually do not contain information that could be used to identify you, but the Personal Data we store about you may be linked to data obtained and stored from cookies.
Technical cookies: we use technical cookies so that our website works properly (e.g. so that you can create a user profile, log in to it and use our services). Without them our website could not work at all.
Functional cookies: functional cookies help you avoid having to log in constantly and set your preferences again and again (e.g. the language in which our website is displayed to you). In this case your password is always encrypted.
The use of these cookies is not essential, but it makes your visit to our website much more pleasant and easier.
Analytical cookies: analytical cookies help us improve our website, which in turn benefits you. Analytical cookies on our website are collected by a script from Google Inc., which then anonymises the data. After anonymisation it is no longer personal data, because anonymised cookies cannot be attributed to a specific user or person.
We only work with cookies in anonymised form. We therefore cannot determine from cookies how a specific user behaved on our website (which pages they visited, which goods they viewed, etc.).
We also use the findings from these cookies for advertising purposes, whereby on the basis of this data we may show you advertisements, including on other websites, that we consider relevant to you.
Please note that blocking and/or deleting cookies may have a negative impact on your ability to use the Website and/or the Services.
GPL Europlastics spol. s r.o.
Drážní 138/2
750 02 Přerov – Lověšice