Privacy
policy

1. Data controller

The controller of your personal data is INTER-PRO CZ, s.r.o., with its registered office at U Kyjovky 3891/10, 695 01 Hodonín, Czech Republic, Company ID (IČO) 25532987, VAT No. CZ25532987, registered in the Commercial Register kept by the Regional Court in Brno, Section C, File 31134 (the “controller” or “we”).

Contact: e-mail info@interprocz.cz, phone +420 603 854 202 (Marek Zdařil, Managing Director), or by post to our registered office.

We have not appointed a data protection officer because the General Data Protection Regulation (GDPR) does not require us to.

2. What data we process and why

We process personal data only to the extent necessary for the given purpose:

• Enquiries and questions (contact form, e-mail, phone): name, e-mail, phone number (optional), the content of your message and the language in which you sent the form. We use them to reply and to prepare a quotation. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for general questions, our legitimate interest in being able to reply (Art. 6(1)(f) GDPR). After you send the form, an automatic confirmation is sent to the e-mail address you provided.
• Protecting the form against abuse: the IP address from which the form was sent. We use it on submission to limit repeated submissions and store it with the enquiry to detect spam. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).
• Concluding and performing a contract: identification and contact details, billing details, the address of the installation site and details of the commission. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations, in particular accounting and tax obligations: data stated in contracts and accounting documents (Art. 6(1)(c) GDPR).
• Protecting our legal claims, for example in a complaint or a dispute: data from the contract and our mutual communication (Art. 6(1)(f) GDPR).
• Operating and securing the website: technical data your browser sends with every visit (IP address, browser and device type, time of access and the page visited), which are stored in the server's operational logs. The legal basis is our legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR).
• Measuring website traffic (Google Analytics) and displaying the Google map: only with the consent you give in the cookie banner (Art. 6(1)(a) GDPR and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications). Details are in our Cookie policy.

Providing personal data is voluntary. However, without contact details we cannot reply to you, and without the details needed to conclude a contract we cannot conclude it. We obtain data directly from you or from the company you represent; technical data are recorded automatically when you visit the website.

3. Who we share data with

We do not sell personal data. We only make it available to those who need it to work for us, and only to the necessary extent:

• TAPP Studio s.r.o., Národní třída 3687/42, 695 01 Hodonín, Czech Republic, Company ID 23839074 – development and technical administration of the website and its hosting, and operation of the tapp cookie consent banner (as a processor under a data processing agreement).
• Amazon Web Services EMEA SARL (Luxembourg) and other companies of the Amazon Web Services group – the cloud infrastructure the website runs on: website hosting, the enquiry database and sending e-mails from the form (as a sub-processor).
• Google Ireland Limited – Google Analytics and Google Maps, only if you give your consent.
• The provider of our e-mail mailbox, which receives notifications of new enquiries.
• Partners involved in delivering a commission (for example transport or installation), only where this is necessary.
• External accountants, tax advisers and lawyers bound by confidentiality, and public authorities where the law requires it.

4. Transfers outside the European Union

The website and the enquiry database run in Amazon Web Services data centres in the USA (region us-east-2 – Ohio); e-mails from the contact form are sent via an AWS service in region us-east-1 (Northern Virginia). Data from the contact form and technical data are therefore transferred to the USA. Google Analytics and Google Maps may transfer data to Google LLC in the USA.

These transfers rely on the European Commission's adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework, under which Amazon Web Services, Inc. and Google LLC are certified (www.dataprivacyframework.gov), and additionally on standard contractual clauses approved by the European Commission, a copy of which we will provide on request.

5. How long we keep data

We keep data only for as long as we need it:

• Enquiries and related communication: until they have been dealt with. If no contract results from an enquiry, we delete the data, including the IP address, no later than 2 years after our last communication.
• Contracts and commission details: for the duration of the contract and of our liability for defects, and then for the limitation periods for claims under the contract.
• Accounting and tax documents: for the periods required by law, in particular 5 years under Act No. 563/1991 Coll., on Accounting, and 10 years under Act No. 235/2004 Coll., on Value Added Tax.
• Server operational logs: only for as long as necessary to operate and secure the website.
• Google Analytics data: no longer than 14 months from collection.
• Cookies: for the periods stated in our Cookie policy; records of cookie consent for 5 years (see Section 6).

6. Cookies and consent records

The website uses necessary cookies and, with your consent, also analytics cookies (Google Analytics) and preference cookies (Google map). The list of tools and cookies and how to change your consent are in our Cookie policy.

Records of cookie consent. When you make a choice in the cookie banner on interprocz.cz, we record it so that we can prove your consent (Art. 7(1) GDPR) and honour your choice. The record contains: a random consent ID that does not identify you directly but lets us find your record (it is also shown in the banner), date and time, your choice per category, the version of the cookie declaration you saw, country and, where applicable, region (derived from the IP address, which is not stored), your browser identification (the User-Agent string, truncated to 200 characters), the page. The legal basis is compliance with our legal obligation to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications). We keep the records for 5 years and then delete them.

The records are processed on our behalf by TAPP Studio s.r.o., Národní třída 3687/42, 695 01 Hodonín, Czech Republic, ID No. 23839074, VAT No. CZ23839074, info@tapp-studio.cz (the provider of the tapp cookie consent tool), under a data processing agreement. The data is stored in the European Union (AWS, region eu-central-1 (Frankfurt am Main, Germany)). Geolocation is derived from the IP address when the page loads and is not stored.

You can change or withdraw your consent at any time via the "Privacy settings" link in the footer; the banner shows your consent ID, which you can quote when exercising your rights by e-mail.

7. Your rights

In connection with the processing of your personal data you have the right:

• of access to your personal data and to obtain a copy of it (Art. 15 GDPR),
• to have inaccurate data rectified or incomplete data completed (Art. 16 GDPR),
• to erasure in the cases set out in Art. 17 GDPR, for example where we no longer need the data, where you withdraw your consent or where you raise a justified objection,
• to restriction of processing (Art. 18 GDPR),
• to portability of data we process by automated means on the basis of consent or a contract (Art. 20 GDPR),
• to object to processing based on our legitimate interest (Art. 21 GDPR),
• to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal (Art. 7(3) GDPR).

You may object at any time to processing we carry out on the basis of our legitimate interest. We will then stop processing the data unless we demonstrate compelling legitimate grounds that override your interests, or the processing is needed to establish, exercise or defend legal claims.

You can exercise your rights by e-mail at info@interprocz.cz or by letter to our registered office. We will respond without undue delay and within one month at the latest. To make sure we do not disclose data to someone else, we may ask you to verify your identity.

If you believe that our processing breaches the law, you may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.gov.cz.

8. Automated decision-making

We do not make automated decisions about you and do not create profiles of you that would have legal or similarly significant effects on you.