Privacy Policy

I. General Provisions

1. The operators of this website and the Data Controllers within the meaning of Article 4(7) of Regulation (EU) No. 1095/2006 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the GDPR) are KOEXPRO OSTRAVA, a.s., U Cementárny 1303/16, Vítkovice, 70300 Ostrava, Czech Republic, ID No.: 23743867, VAT No.: CZ23743867

2. To exercise your rights regarding the processing of your personal data, you can contact the Data Controller using the following contact information:

• Email: [email protected]
• Phone: +420 595 782 251
• Data box: 57afx8q
• Address: Milešovská 366, 683 54 Otnice

3. Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

4. The controller has not appointed a data protection officer.

II. Categories of personal data processed

1. The controller processes personal data that:

• you provided to him personally in connection with the contractual relationship. This personal data includes: email address, first and last name, phone number
• The Administrator collects your personal data through your activity when using the website’s various services, when communicating with the Administrator via online chat, when posting comments under articles published on the Administrator’s website, when publishing articles, when registering, when subscribing to newsletters, or when filling out an online form—all with your express consent. This may include the following personal data: email address, first and last name, IP address (see Article IV), or
• The Administrator may collect information based on your mere visit to the Administrator’s website and your behavior on it through cookies and other online browser identifiers. In this case, we collect the following personal data: see Section V. Cookies do not allow for the personal identification of website visitors.

III. Legal basis and purpose of data processing

1. The legal basis for the processing of personal data under the category specified in Article II.1 is the performance of a contract to which you are a party as the client (order for the Controller’s services), in accordance with Article 1(b) of the GDPR, as well as the Controller’s legitimate interest in providing direct marketing to its customers (e.g., sending commercial communications and newsletters) in accordance with Article 1(f) of the GDPR. We retain this data for a period of 5 years from the conclusion of the Controller’s last contract with you.

2. The legal basis for the processing of personal data under Article II.2 that you have provided to the Controller is your explicit consent, as set forth in Article 2.2. IV.

3. The Controller processes personal data obtained through cookies and other online identifiers based on your explicit consent, as stated in Section V. This does not apply to so-called functional cookies, which are necessary for the operation of the website (for which you consent to the use of this technology simply by visiting the site).

4. The purpose of processing personal data is:

• processing your order and fulfilling the rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data is required that is necessary for the successful processing of the order (name and address, contact information); the provision of personal data is a necessary requirement for the conclusion and performance of the contract; without the provision of personal data, it is not possible to conclude the contract or for the Controller to perform it,
• sending commercial communications or offers, newsletters, and conducting other marketing activities (including automated individual decision-making).

5. The Controller engages in automated individual decision-making within the meaning of Article 22 of the GDPR. You have provided your explicit consent to such processing..

IV. Consent of website visitors to the processing of personal data for marketing purposes

1. You grant your consent to receive commercial communications/offers or newsletters, including profiling (consent for marketing purposes) as a visitor to the Controller’s website by entering your email address in the field provided for this purpose on the website and then confirming your consent by clicking on the link that will be sent to the email address you provided (double opt-in).

2. You may withdraw your consent to the processing of your personal data for marketing purposes at any time. Withdrawal of consent does not affect the processing of your personal data based on another legal basis (e.g., performance of a contract)..

V. Cookies and Online Identifiers

1. Cookies and other online identifiers enable websites to function properly, remember customer login credentials, analyze website traffic, and optimize the Controller’s marketing activities and profiling (by determining which pages and features customers use most frequently, we can best tailor our offerings to website visitors, including the ads displayed, etc.). The purpose of cookies is to make it easier and more enjoyable for visitors and customers to use the website and to enable the targeting of relevant advertisements.

2. The Administrator primarily uses the following cookies on the website:

• Functional cookies: These are automatically deleted as soon as you leave the website and help ensure that the site functions properly during your visit,
• Persistent cookies: These are stored permanently and may contain an anonymous identifier for the website visitor’s browser. These cookies do not identify you as an individual; they are completely anonymous and only track your access to the website and your behavior. Cookies are used primarily for measurement and statistical purposes (i.e., a cookie recognizes a repeat visit from the same browser and device) and to personalize websites and advertisements, where the cookie allows, through browser identification, the website content to be customized or targeted ads to be displayed to a specific user on the website or on partner sites that use this advertising system,
• Marketing cookie: Based on your behavior on the website, this cookie displays ads and offers that are tailored to your interests and relevant to you (profiling).

3. You can consent to the use of cookies and online identifiers for the provision of services, personalized advertising, and traffic analysis by checking the box in the pop-up window at the bottom of the screen or on the Cookie Policy page.

4. You can use the Administrator’s services even without the use of persistent and marketing cookies.

5. You can manage the use of cookies through your web browser. If you do not consent to the collection of cookies, you can prevent them from being collected by changing your browser settings and/or on the Cookie Policy page.

6. The administrator collects cookies on its website, which are listed on the Cookie Policy page and updated regularly.

VI. To whom may the controller disclose personal data?

1. The recipients of personal data are:

• persons involved in the delivery of the Controller’s goods and services and in the processing of payments,
• persons who handle accounting and provide tax advisory services to the Controller,
• persons responsible for operating the Controller’s website, such as providers of processing software, services, and applications used by the Controller, web hosting providers, etc.
• persons providing marketing services to the Controller,
• The Controller may transfer personal data to a third country (outside the EU) to providers of mailing services and cloud services, or to providers of automated spam detection services.
• The current list of data processors is available on the page titled “Consent to the Processing of Your Personal Data.”

VII. How long does the controller retain personal data?

1. The controller retains personal data:

• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to enforce claims arising from such contractual relationships (for a period of 5 years from the termination of the contractual relationship).
• until consent to the processing of personal data for marketing purposes is revoked, for a maximum of 5 years if personal data is processed on the basis of consent,
• in the case of cookies, personal data is stored for a maximum of one year,
• after the retention period for personal data has expired, the Controller will delete the personal data.

VIII. How is personal data protected?

1. The controller declares that it fully respects all the principles underlying the GDPR and that it has implemented all appropriate technical and organizational measures to safeguard personal data.

2. The controller has also implemented technical measures to secure data storage systems and physical storage of personal data, including encryption, password protection, restricted access, and physical locking.

3. The controller declares that access to personal data is restricted to persons authorized by the controller and trained in data protection.

IX. What rights do you have regarding the protection of your personal data?

1. Under the conditions set forth in Articles 15 through 21 of the GDPR, you have the right to:

• the right of access to personal data, which entails the right to obtain from the Controller confirmation as to whether or not personal data concerning the data subject are being processed; if so, the data subject has the right to access such data and the information specified in Article 15 of the GDPR,
• to rectification of inaccurate personal data concerning him or her, and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by means of providing a supplementary statement pursuant to Article 16 of the GDPR,
• to erasure (the so-called “right to be forgotten”), which entails that the controller shall erase personal data concerning you without undue delay once they are no longer necessary for the performance of the contract, unless there is another legal basis for their further processing,
• to data portability within the meaning of Article 20 of the GDPR,
• to object to the processing of personal data pursuant to Article 21 of the GDPR,
• the right to withdraw consent to processing in writing or electronically to the address or email of the Controller specified in Article I.2 of these Terms and Conditions.

2.Upon request, the administrator shall provide the buyer with information regarding the measures taken, in any event no later than one month from the date of receipt of the request.

3. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

X. Final Provisions

1. You agree to these Terms by checking the consent box on the online form. By checking the consent box, you confirm that you are familiar with the terms of the Privacy Policy and that you accept them in their entirety.

2. The Administrator reserves the right to amend this Policy. The Administrator will publish the new version of the Privacy Policy on its website.

These terms and conditions take effect on April 17, 2026