GDPR
Information on the Processing and Protection of Personal Data of Natural Persons - Customers
Bateria Slaný CZ, s.r.o., with its registered office at Netovická 875, 274 01 Slaný, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 52910 (hereinafter referred to as “the company”), Telephone contact: 312 522 845, +420 603 804 707, Email: sales@bateria.cz, as the personal data controller, hereby informs about the manner and scope of personal data processing by this Company, including the scope of rights of data subjects related to the processing of their personal data by the Company.
hereinafter referred to as (“the company”)
The Company processes personal data in accordance with European Union law, specifically with the Regulation of the European Parliament and of the Council (EU) of 27 April 2016 No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and in accordance with Act No. 101/2000 Coll., on the Protection of Personal Data, as amended.
The company, as the data controller, hereby informs about the manner and scope of personal data processing by this company, including the extent of the rights of data subjects related to the processing of their personal data by the company.
The company processes personal data in accordance with European Union law, especially Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and with Act No. 101/2000 Coll., on the protection of personal data, as amended.
Data Collected
The company processes personal data in the following scope:
-
First and last name
-
Residential address/registered office
-
National ID number/company registration number (ICO)
-
Email address
-
Telephone number
-
Bank account information
-
Records of behavior on the website obtained from cookies (if cookies are enabled in the browser)
Categories of Data Subjects:
-
Customers
-
Suppliers
-
Employees
-
Third parties (e.g., from the camera system)
Sources of Personal Data
Personal data are obtained from the following sources:
-
Data subjects
-
Public registers
-
Publicly accessible information (e.g., the internet)
-
Camera system
Camera System Processing
For property protection purposes, a camera system is used to record the appearance and behavior of individuals in the monitored area. Recordings are retained for 20–30 days, depending on the number of cameras and storage capacity. Recordings capturing incidents may be stored for the necessary time for case investigations.
Security Measures
To ensure the protection of personal data, the following measures are in place:
-
Access to personal data is granted only to employees who need it for their work activities.
-
Personal data in physical form are stored in lockable cabinets.
-
Access to office premises is restricted to authorized personnel.
-
The IT system is regularly tested and secured against unauthorized access or data transfers.
Personal data are not transferred abroad and are not accessible from abroad.
Purpose of Processing
To execute purchases and deliver goods (including services) to the location specified by the customer, to communicate with the customer, and to fulfill other legal obligations, the company needs the above-mentioned data. These data are obtained from the customer upon ordering, either permanently or temporarily. Since these personal data are obtained for the purpose of fulfilling a contract of which the customer is a contracting party, or they are necessary for compliance with legal obligations, explicit consent from the customer is not required.
Additional purposes of processing:
-
Employee records (including timesheets)
-
Camera system (property protection)
-
Business and marketing communication (e.g., sending commercial messages and promotional offers)
Processing with Consent
The customer may give consent during the order process for the processing of the above-mentioned personal data for the purposes of:
-
maintaining a user account
-
sending information related to goods and services
-
sending business communications/newsletters/magazines to the customer
-
sending invitations to promotional events organized by the company
The purchase of goods/services is not conditional upon this consent, and the customer may withdraw their consent to the retention and processing of the above-mentioned personal data or to receiving business communications, information related to goods and services, newsletters/magazines, invitations to promotional events at any time by sending an email to sales@bateria.cz or by notifying the company by phone. This withdrawal does not affect the processing of personal data for the purpose of fulfilling the contract to which the customer is a party or where it is necessary for compliance with a legal obligation.
Form and Duration of Processing
The customer’s personal data is processed in electronic form by automated means or in printed form by non-automated means. Data processed for the purpose of fulfilling a contract to which the customer is a party or is necessary for compliance with a legal obligation (e.g., to ensure the delivery of goods or services, handling of complaints, accounting obligations, and others) is retained for the period required by legal regulations (e.g., Act No. 89/2012 Coll., the Civil Code, Act No. 563/1991 Coll., on Accounting, and others), but no longer than 10 years.
Data Processors
To ensure the above-described purposes, personal data is processed by the company and its employees as well as by data processors based on data processing agreements concluded in accordance with the GDPR and the law.
Data processors include:
-
external accountants
-
IT technicians
-
law firms
-
tax advisors
Information on Rights
Customers are entitled to the following rights to ensure the protection of their personal data:
-
Right to Information
The right to information includes all the customer’s rights contained in Article 13 of the GDPR. This includes, in particular, the customer’s right to know the identity and contact details of the data controller and to know the purpose for which the customer’s personal data is collected and processed.
-
Right of Access to Personal Data
The right of access to personal data includes all the customer’s rights contained in Article 15 of the GDPR. This includes, in particular, the customer’s right to obtain confirmation from the company as to whether, and for what purpose, the customer’s personal data is being processed.
-
Right to Rectification
The right to rectification includes all the customer’s rights contained in Article 16 of the GDPR, especially the right to have the company correct, without undue delay, any inaccurate or incorrect personal data relating to the customer.
-
Right to Erasure (Right to be Forgotten)
The right to erasure includes all the customer’s rights contained in Article 17 of the GDPR, especially the right for the customer to have the company erase their personal data without undue delay, provided that the conditions specified in the GDPR are met.
-
Right to Restrict Processing
The right to restrict processing includes all the customer’s rights contained in Article 18 of the GDPR.
-
Right to Data Portability
The right to data portability includes all the customer’s rights contained in Article 20 of the GDPR, especially the customer’s right to obtain their personal data provided to the company in a structured, commonly used, and machine-readable format.
-
Right to Object
The right to object includes all the customer’s rights contained in Article 21 of the GDPR.
If the customer discovers or believes that the company is processing their personal data in violation of their private life, GDPR, or the law, they may request an explanation from the company or request that such a situation be rectified.
The customer also has the right to file a complaint with the Office for Personal Data Protection, which acts as the supervisory authority in matters of personal data protection.
The customer’s right to other judicial and administrative remedies is not affected.