I. Basic Provisions

  1. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR”) is Bratři Zátkové SE, company registration number 28115414 with registered office at U Sila 246, 373 82 Boršov nad Vltavou. (hereinafter referred to as: controller”).
  2. The contact details of the administrator are:
  3. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  4. The controller has not appointed a data protection officer.

II. Lawful reason for processing personal data

  1. The lawful reason for processing personal data is
    • the legitimate interest of the controller in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) of the GDPR (“Legitimate Interest”),
    • your consent to processing for the purpose of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services in the absence of an order for goods or services (hereinafter referred to as Consent”).
  2. There is no automatic individual decision-making by the controller within the meaning of Article 22 GDPR.

III. Purpose of processing, categories, sources and recipients of personal data

Legal groundPurposeDataData sourceRecipients of personal data (processors)
ConsentCurrent traffic analysis, server error detection and prevention of fraud and server attacksFor 14 months: third party cookies, pseudo-anonymised identifiers of registered users such as UserIDs, IP addresses and web browsing data. User movement on the site, registration and creation of an anonymized user ID, display of error pageGoogle Analytics, web hosting services and possibly other analytics services
ConsentAdvanced traffic analysisTracking user movement on the site and form fillingUser movement on the site, mouse movement, clicking, typing on the keyboardServices to track user movement on the site
ConsentTargeted advertising (retargeting)For up to 13 months: third-party cookies, IP addresses, browser data and web browsing dataShowing certain pages on the siteAdvertising platforms enabling retargeting (AdWords, Sklik, Facebook)
ConsentWeb marketing and promotionE‑mails, leads’ names, IP addresses and other technical identifiersE‑mails receivedWeb hosting company and email distribution services

IV. Data retention period

  1. Unless otherwise stated in the preceding paragraphs, the Controller shall store personal data
    • until consent to the processing of personal data for analytics and marketing purposes is withdrawn, where personal data is processed on the basis of consent.
  2. After the retention period expires, the controller shall delete the personal data.

V. Cookies

  1. Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognises them on each subsequent visit.

  2. Cookies perform a variety of tasks, such as allowing you to navigate between websites efficiently, remembering your preferences and generally improving the user experience. They can also ensure that advertisements displayed online are better tailored to your personality and interests.

  3. We use the following cookies on the website:

    • Necessary cookies: are required for the operation of the website, for example, to allow you to log into secure areas of the site and other basic functionality of the site. This category of cookies cannot be disabled.
    • Analytical/​statistical cookies: allow us, for example, to recognise and measure the number of visitors and to track how our visitors use the website. They help us to improve the way the site works, for example by enabling users to easily find what they are looking for. We only run these files with your prior consent.
    • Advertising cookies: are used to track preferences and allow you to see advertising and other content that best matches your interests and online behaviour. We only run these cookies with your prior consent.
  4. Please note that third parties (including, for example, external service providers) may also use cookies and/​or access data collected by cookies on the website.

  5. Information about cookies and the current list of cookies can be found via individual web browsers, most often under Developer Tools.

  6. Consent can be expressed by means of a check box contained in the so-called cookie bar. You can also refuse cookies in your browser settings or set your browser to use only some of them.

  7. Další informace o správě cookies v jednotlivých prohlížečích naleznete na následujících odkazech:

VI. Recipients of personal data (subcontractors of the controller)

  1. The controller intends to transfer the personal data to a third country (non-EU country) or an international organisation. Recipients of personal data in third countries are: providers of emailing services, data and file storage, analytical tools and direct marketing services.

VII. Your rights

  1. Under the terms of the GDPR, you have
    • the right to access your personal data according to Article 15 GDPR,
    • the right to rectification of your personal data pursuant to Article 16 GDPR or restriction of processing pursuant to Article 18 GDPR,
    • the right to erasure of personal data pursuant to Article 17 GDPR,
    • the right to object to processing under Article 21 GDPR,
    • the right to data portability pursuant to Article 20 GDPR,
    • the right to withdraw consent to processing in writing or electronically to the address or email of the controller set out in Article III of these terms and conditions.
  2. You also have the right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been violated.

VIII. Personal data security conditions

  1. The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data.
  2. The controller has taken technical measures to secure data storage and storage of personal data in paper form.
  3. The controller declares that only persons authorised by the controller have access to the personal data.

IX. Final provisions

  1. By sending an email, you confirm that you are aware of the privacy policy and that you accept it in its entirety.
  2. The controller is entitled to change these terms and conditions. It will publish the new version of the Privacy Policy on its website and will also send you a new version of the Privacy Policy to the email address you have provided to the controller.

These terms and conditions take effect on 2nd October 2023