Who processes your data?

Controller: Master Therm tepelná čerpadla s.r.o.
Praha 1 - Nové Město, Václavské náměstí 819/43, PSČ 11000
IČO: 288 92 275
Registered: C 151453 at the Municipal Court in Prague
Email: info@mastertherm.cz
Phone: +420 800 444 000

referred to as "we" or "controller" or "organization"

What is personal data?

Personal data is practically any information that can identify a living individual directly or is intended to achieve such identification. Personal data can be divided into general (e.g., name and surname, age, phone number, place of birth, personal status, etc.) and sensitive (now referred to as special categories of personal data, which include biometric data, membership in a trade union/political party, ethnic origin, philosophical beliefs, genetic data, information about convictions and criminal offenses, religious beliefs, political opinions, racial origin, sexual orientation/life, health status).

What is the processing of personal data?

Processing of personal data means systematic activities that the controller performs with personal data for a specific purpose. Such activities include: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Sources from which personal data are obtained:

The controller processes personal data (directly from you) that you have provided or personal data obtained based on fulfilling your order.

Categories of personal data:

Your identification and contact details and data necessary for fulfilling the contract.

Legal reason and purpose of processing:

The legal reason for processing is:

• Your consent to the processing of personal data for direct marketing purposes according to Article 6(1)(a) GDPR.
• For the purpose of concluding and fulfilling the contract (i.e., in accordance with providing our services), we process your personal data under Article 6(1)(b) GDPR. The legal basis for processing your general personal data is therefore the contract.
• Once the contract is fulfilled, we must archive your personal data for the period required by applicable legal regulations. Here, the legal reason for processing your general personal data is the fulfillment of a legal obligation, as stipulated in Article 6(1)(c) GDPR.

Purpose of processing personal data:

• Processing your order/request/price quote and exercising rights and obligations arising from the contractual relationship between you and the controller. Personal data necessary for the successful processing of the order/contract are required (this also includes subsequent payment, service delivery, handling complaints, etc.);
• Handling customer inquiries (from current customers) and inquiries (from new, potential customers).
• Communication with the customer for direct marketing purposes (mailing).

For maximum efficiency of our activities and to ensure the security of your personal data, we cooperate with certain processors and recipients in the following areas:

• Providers of information systems and IT services,
• Providers of marketing and communication services,
• Contractual partners, etc.

If we need to transfer your personal data to countries outside the EU, each transfer is based on a decision on adequate protection or appropriate safeguards to ensure maximum security.

When operating a profile on social networks, our interest is to increase awareness of the controller in the online environment and communicate with customers.

Personal data you publish on our social network pages, such as comments, likes, videos, pictures, etc., are published through the social network platform. We do not process personal data for any other purpose.

The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them. Objections can be sent by email to the controller's contact address info@mastertherm.cz.

Social network controllers have their own adopted rules, service infrastructure, and personal data protection provisions. We have no influence on the data transfer and use of your data by social network controllers. We recommend familiarizing yourself with the privacy conditions of the social network platform provider:

• Facebook: https://www.facebook.com/policy.php
• LinkedIn: https://www.linkedin.com/legal/privacy-policy

In certain processing operations, we act as joint controllers with the social network controller within the meaning of Article 26(4) GDPR.

What personal data and to what extent will we process?

To provide our services, we need to know the following personal data: name and surname, permanent residence address, service or goods delivery address, phone number and email, ID number for verification, payment details, IP addresses, city, diagnostic data for service and technical support.

How long will we keep the data?

We will keep your personal data for the duration of our mutual contract. After the contractual relationship ends, we will keep your personal data as long as necessary to fulfill the mandatory archiving obligation according to legal regulations that foresee archiving (such regulations include the Accounting Act, the Value Added Tax Act, the Archiving and Record Keeping Act). In the case of the data subject's consent, we will process your data until you withdraw your consent. In the case of a legitimate interest, we will process your personal data if you do not object to the processing, for a period justified by the life cycle of the purchased product or service, to offer and provide related products and services.

To whom do we further transfer your personal data?

Your personal data may be provided to providers of legal, tax, and accounting services, providers of technical solutions, and shared among the manufacturer, distributor, and service company.

Your personal data may also be transferred to public authorities and courts, but only if required by special legal regulations or if you give explicit consent.

Our processors and subcontractors (especially providers of mailing services, web hosting) are always provided with your personal data based on a processing contract and in accordance with the minimum required standard of personal data protection required by GDPR.

Conditions for securing personal data

The controller declares that it has taken appropriate personnel, technical, and organizational measures to ensure the protection of personal data.

The controller has taken technical measures to secure data storage and personal data storage in paper form.

The controller declares that only authorized persons have access to personal data.

In the context of personal data processing activities that we carry out in our activities, there is no automatic decision-making or profiling.

What are your rights in connection with the processing of your personal data?

Under the conditions set out in GDPR, you have:

• The right to access your personal data - Article 15 GDPR
• The right to correct personal data - Article 16 GDPR
• The right to restrict processing - Article 18 GDPR
• The right to erasure - Article 17 GDPR
• The right to object - Article 21 GDPR
• The right to data portability - Article 20 GDPR
• The right to withdraw consent - Article 7 GDPR (electronically or to the correspondence address)
• The right to lodge a complaint with the Data Protection Authority - Article 77 GDPR

How can you exercise your rights?

Right of access

Upon your request, we must inform you whether we process your personal data or not. If we process them, you have the right to be informed about:

• the purpose of processing your data,
• the extent to which these data are processed,
• how long they will be kept,
• to whom they will be disclosed,
• whether you can lodge a complaint with the Data Protection Authority.

You can submit a request electronically to the email address info@mastertherm.cz or by mail to the address: Praha 1 - Nové Město, Václavské náměstí 819/43, PSČ 11000.

Right to rectification

If you believe that we process your incorrect (inaccurate) personal data, you have the right to have them corrected. If you find such inaccuracy in your personal data, let us know, and we will promptly correct it. You can submit a request electronically to the email address info@mastertherm.cz or by mail to the address: Praha 1 - Nové Město, Václavské náměstí 819/43, PSČ 11000.

Right to erasure

Under certain circumstances, you have the right to have your personal data erased. You can request the erasure of your data at any time. We will erase your personal data if:

• we no longer need your personal data for the purpose for which you provided them,
• you withdraw your consent,
• you object to the processing of your personal data,
• we process your personal data unlawfully,
• personal data must be erased to fulfill a legal obligation,
• you are a child, or a parent of a child, who consented to the processing of personal data over the internet.

Right to restriction of processing

You can request that we restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not further process them. Processing of your data will be restricted if:

• your personal data are incorrect, until we verify their accuracy,
• we process personal data unlawfully, but you do not agree to their erasure and instead request that we only restrict the processing of your personal data,
• we no longer need your data, but you need them to prove, assert, or defend your rights,
• you object to the processing of your personal data, until we verify whether our legitimate interests outweigh your reasons.

Right to data portability

You have the right to request that we provide your personal data in an electronic form (e.g., XML or CSV file) that allows you to easily transfer the data to another company. You can also request that we transfer your personal data directly to a selected company. We will comply with your request if you have provided us with personal data directly and have given us consent to process them.

Right to object

You have the right to object to the processing of your personal data. If we process your personal data in the following cases:

• for our legitimate interest,
• creating a customer profile,
• you can object to their processing if you have personal reasons for doing so.

How can you exercise these rights?

You can contact us with your request in one of the following ways:

• By email: info@mastertherm.cz
• By mail to the address: Praha 1 - Nové Město, Václavské náměstí 819/43, PSČ 11000
• Electronically by clicking on the following links:
• Data subject's request to exercise rights:
• Objection to the processing of personal data by the data subject:
• Withdrawal of consent to the processing of personal data

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection at the address:

Office for Personal Data Protection Pplk. Sochora 27
170 00 Prague 7
IČO: 70837627

Phone: switchboard: +420 234 665 111 (does not provide consultations)
Information: +420 234 665 800 (information line is available on Tuesdays and Thursdays from 13:00 to 15:30)
Website: https://www.uoou.cz
Email: posta@uoou.cz
Data box ID: qkbaa2n

These Privacy Policies become valid and effective upon their publication on the Website.