Personal data protection (GDPR)

• Company name: invitech.cz s.r.o.
• Registered address: Klapálkova 2246/17, 149 00 Prague
• Company ID: 02707349
• E-mail: sales@invitech.cz
• Phone: +420 602 450 717

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “Regulation”), the Personal Data Processing Act, and Act No. 18/2018 Coll. on the protection of personal data, as amended.

• Data subject: the natural person (visitor or user) to whom the personal data relates (also referred to as “you” or the “visitor”).
• Personal data: any information relating to an identified or identifiable visitor; an identifiable visitor is a natural person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data or an online identifier.
• Controller: the entity that determines the purposes and means of processing personal data and is responsible for it. The controller is invitech.cz s.r.o. (also referred to as “we”).
• Processor: the entity that processes personal data for the controller under the law or on the controller’s instructions on the basis of a contract (also referred to as the “partner”).
• Website: the website available at https://invitech.cz.
• Purpose of processing: the reason why personal data is processed (e.g. providing information via the website, managing accounts, handling requests and complaints, sending newsletters).
• Cookies: short text files stored by your browser; they contain a unique identifier and are used to improve the functioning of the website, evaluate traffic and better target marketing.

We and our contractual processors process the following categories of personal data in connection with the relevant legal basis and purpose of processing:

• Identification and address data: e.g. first name, surname, contact address.
• Electronic contact data: e.g. phone number, e-mail address.
• Other electronic data: IP address, cookies.
• Other data provided through the contact form: e.g. the content of the message.
• Other personal data provided when communicating with us, including later updates.

We process data that you provide to us, e.g. when registering an account, communicating with us through the contact form or subscribing to newsletters. This typically includes:

• identification and address data;
• electronic contact data;
• other data provided through the contact form.

And also data we obtain automatically as you browse our website. This is usually other electronic data:

• cookies;
• the website from which you arrived at our site;
• IP address;
• date and time of access;
• search queries;
• http and https response codes;
• transferred data volumes;
• information about your browser and computer operating system.

Your personal data may be processed for the following purposes:

• Providing information via the website.
• Managing your user account (where available).
• Communicating with visitors and handling queries and requests.
• Sending informational newsletters and offering our services.
• Direct marketing and the creation of personalised content and advertising.
• Improving the quality of our content and services, analysing traffic and your behaviour on the website.
• Protecting our rights, property or safety, or the rights, property or safety of others.
• Fulfilling other legal obligations.

Your personal data may be processed on the following legal grounds:

• compliance with a legal obligation;
• the controller’s legitimate interest in sending informational newsletters;
• consent to receiving informational newsletters.

Your personal data is processed:

• for the period necessary to handle your request and assert claims (4 years);
• for the period necessary to fulfil a legal obligation;
• for the duration of our legitimate interest in sending newsletters (2 years from the last time a newsletter was opened);
• for the duration of your consent (no longer than 4 years from the date it was granted).

The following categories of recipients may have access to your personal data:

• Providers of IT services and hosting.
• Providers of security and integrity for our services and website.
• Providers of analytics services.
• Providers of assistance services for visitor support.
• Providers of legal services, attorneys.
• Partners who carry out direct marketing for us and provide personalised content and advertising.
• Public authorities.

The controller does not intend to transfer personal data to a third country (outside the European Economic Area) or to an international organisation. Recipients of personal data in third countries are:

• partners to whom we provide data in order to analyse website traffic and your behaviour on the website;
• providers of IT services and hosting, including cloud services;
• providers of mailing services.

Personal data is processed both manually and automatically. We keep proper records of all processing activities in accordance with the applicable legislation.

You are not subject to any decision based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. We do not create profiles from your personal data in order to analyse or predict your preferences, interests, economic situation, reliability or location.

To exercise your rights, please contact us using the contact details given at the beginning of this policy. In connection with the processing of your personal data you have the following rights (Articles 15 to 21 of the GDPR):

• the right of access to personal data;
• the right to rectification of inaccurate data and completion of incomplete data;
• the right to erasure of personal data;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• the right to information about automated decision-making, including profiling.

Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. You also have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úrad pre ochranu osobných údajov), with its registered office at Hraničná 4826/12, 820 07 Ružinov, tel.: 02/323 132 14, web: dataprotection.gov.sk.

The cookies processed can be divided, according to their validity, into:

• temporary cookies (session cookies), which remain stored in your browser only until you close it;
• persistent cookies, which remain stored until their lifetime expires or until you remove them manually.

And, according to their function, into:

• essential cookies, which are necessary for the functionality of our website;
• preference cookies, which allow the website to remember information that changes how it behaves or looks (e.g. your preferred language or region);
• analytics cookies, which help us analyse your experience on our website and understand how you use it.

We do not use third-party cookies that track you across multiple websites in order to provide personalised content and advertising on third-party sites and other channels.

Legislation and our personal data processing practices may change. If we decide to update this policy, we will post the changes on our website and inform you of them. Where a more significant change to this policy is to be made, or where required by law, we will inform you in advance. We ask that you read this policy carefully and review it regularly during any further communication with us and while using our website.