Personal Data Protection Policy

This privacy policy ("Policy") is the basic policy that KLEMAT CZ s.r.o., with its registered office at Prostřední Bečva 632, postal code: 756 56, ID No.: 268 52 357, registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, File 4053, represented by Jiří Matušík, the company's managing director (the "Company"), follows when acquiring and processing personal data.

This Policy includes the rights and obligations arising from GDPR Regulation No. 2016/679, Act No. 480/2004 Sb. on Certain Information Society Services and Act No. 127/2005 Sb. on Electronic Communications.

This Policy shall apply to all persons visiting the Company's website www.klematcz.cz (the "Website"), regardless of whether they are in any contractual relationship with the Company or not (the "Data Subjects").

By using the Company's Website you acknowledge this Policy and expressly grant your consent to its application.

In accordance with the GDPR, Personal Data means all information about an identified or identifiable natural person (i.e. not a legal entity). In essence, this means any information that, whether alone or in combination with other information, can be used to identify a specific natural person (a "Personal Datum").

The Company processes particularly the following Personal Data:

• name and surname
• date of birth
• personal ID number
• contact and/or mailing address
• ID document number
• signature
• login information
• password
• age
• telephone number
• email address
• credit card number and associated payment information
• data needed to verify the creditworthiness and credibility of the client and the conclusions of this verification, data on services provided by the Company
• IP address
• Cookies
• information on the equipment used to provide the services
• GPS location information

The Company processes Personal Data particularly for the following purposes:

• provision of the Company's products and services
• internal evaluation of the provided services and possible improvement of the provided products and services
• protection of the Company's legitimate interests

If you grant your consent, the Company will be entitled to use your Personal Data to provide marketing information and offers, as well as (to offer products and services of the Company or its business partners).

In addition to the above, the Company is authorized to send business messages to Data Subjects under the terms of the Act on Certain Information Society Services, i.e. if the Company obtains the Data Subject's electronic contact details for electronic mail in connection with the sale of a product or service.

The Personal Data that the Company acquires about Data Subjects is further transferred:

• within the group [TO BE COMPLETED], i.e. to related parties of the Company
• business partners of the Company, i.e. [TO BE COMPLETED]
• the company [TO BE COMPLETED], which is a Personal Data processor under a contract concluded with the Company
• other third parties to which the Company is entitled (e.g. a general court in the event of a dispute) or obliged (e.g. law enforcement authorities) to provide the Personal Data in accordance with generally binding legal regulations

In order to protect and minimize the risk of unauthorized access to Personal Data, the Company has adopted organizational and technical measures. These measures include:

• organizational restrictions narrowing the range of persons authorized to come into contact with Personal Data; and
• technical security of the Company's servers and Website against unauthorized manipulation.

Persons who come into contact with Personal Data are also bound by confidentiality in accordance with Article 28, paragraph 3, subparagraph b) of the GDPR.

The Company shall keep Personal Data for as long as necessary for the provision of services, and for at least 10 years after the last provision of services to the given Data Subject.

By using the Company's services provided on the Website, you agree that the Company will process your Personal Data for the purpose of verifying your creditworthiness and credit trustworthiness.

For this purpose, the Company is therefore entitled to:

• collect, process, evaluate and store the Personal Data
• transfer the Personal Data for further processing [TO BE COMPLETED]

The Company uses cookies in the operation of its Website; cookies are small text files ("Cookies") that are sent from the Company's server to the Data Subject's browser/device and which, upon a repeat visit to the Company's Website, are sent back to the Company's server, allowing the Company to better tailor the content of the Website to individual Data Subjects.

• Technical Cookies that allow basic Website operation
• Relational Cookies, which are required to properly display the Website and are automatically deleted when the Data Subject leaves the Website
• Permanent Cookies, which allow unique (anonymous) identification of a particular Data Subject, his access to the Website and his behavior on it

In order for the Company to use the Cookies, you must grant your consent in accordance with the Electronic Communications Act. You also have the option of deleting the Cookies or blocking them for a long period of time through your browser.

The Company uses Google Analytics services provided by Google LLC on its Website. Google Analytics allows the Company to collect, process and evaluate data (including Personal Data) about Website traffic. The Google Analytics service also uses Cookies, which are stored on Google LLC's servers and to which the Company has no access. For Google LLC's protection of personal data, see policies.google.com(opens in a new window).

The Company is involved in the NetMonitor project, within which javascript codes were incorporated into the source code of the Company's Website to help the Company gather information about all visitors to the Website.

The Company therefore particularly monitors the traffic of its Website and the technical parameters (such as hardware, operating system and browser) of the devices on which Data Subjects access the Company's Website.

The Company, as Personal Data administrator, hereby, in accordance with Article 14, paragraph 1, subparagraph a) of the GDPR, provides its contact information to Data Subjects:

• KLEMAT CZ s.r.o.
• Prostřední Bečva 632
• 756 56 Prostřední Bečva
• ID No.: 268 52 357
• registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, File 4053

For the purpose of communicating with the Company regarding this Policy, the Data Subject may further use e-mail , +420 608 770 335 or [TO BE COMPLETED: contact details of the data protection officer].

Data Subjects have the following rights:

• the right to revoke their consent to the processing of Personal Data, if the processing is based on their consent
• the right to request access to Personal Data and to the information specified in Article 15, paragraph 1 of the GDPR
• the right to correct inaccurate Personal Data and, where applicable, to complete incomplete Personal Data
• the right, under the conditions set out in Article 17 of the GDPR, to erasure of Personal Data
• the right, under the conditions set out in Article 18 of the GDPR, to restriction of the processing of Personal Data
• the right, under the conditions set out in Article 20 of the GDPR, to obtain the Personal Data concerning them, which they have provided to the Company, in a structured, commonly used and machine-readable format, and the right to transfer that data to another party
• the right, under the conditions set out in Article 34 of the GDPR, to be informed of a breach in the security of Personal Data
• the right, under the conditions set out in Article 21 of the GDPR, to raise an objection against the processing of Personal Data
• the right to file a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, or via data box at qkbaa2n

The Company is not liable for the accuracy or completeness of the content of the Website that has been taken over from third parties.

The Company bears no liability whatsoever for any damages incurred by a Data Subject in connection with the use of the Company's Website.

The Company reserves the right to change the content of the Website at its discretion and without prior notice to Data Subjects at any time.