Privacy Policy

Introductory Provisions

The company IZOLACE ARAX JIHLAVA, s.r.o., with registered office at U Rybníka 10, 586 01 Jihlava, Czech Republic, Company ID: 25590146, registered in the Commercial Register kept by the Regional Court in Brno, Section C, Insert 36403 (hereinafter referred to as the “Controller”), fully protects the personal data of data subjects in accordance with:

  • Regulation (EU) 2016/679 (GDPR)
  • Act No. 110/2019 Coll., on the processing of personal data (Czech Republic)

This document explains what personal data we collect, why, for how long, who has access to it, and what your rights are.

Controller Contact Details

Categories of Personal Data

We process the following types of personal data:

  • Identification data (name, surname, ID, VAT No., date of birth, ID card number)
  • Contact data (e-mail address, phone number, mailing address)
  • Order and contractual data (services, payments, bank account numbers)
  • Marketing-related data (communication preferences, interaction data)

Purposes and Legal Bases for Processing

Purpose of Processing Legal Basis Data Retention Period
Contract performance Article 6(1)(b) GDPR 10 years from contract termination
Legal obligations (accounting, tax) Article 6(1)(b) GDPR As required by Czech legislation (typically 10 years)
Legitimate interest – legal defence, internal control Article 6(1)(b) GDPR For the duration of the legitimate interest (max. 3 years from last contact)
Marketing (newsletter and offers) Article 6(1)(a) or (f) GDPR Until withdrawal of consent / objection (max. 5 years)

 

Recipients of Personal Data

Your personal data may be processed by selected processors under a data processing agreement:

  • STORMWARE s.r.o. – accounting software
  • Callida, s.r.o. – budgeting software
  • PROMO PLANET, s.r.o. – marketing consultancy
  • Ecomail.cz, s.r.o. – email marketing platform

All processors process personal data strictly under the Controller’s instructions and only for the purposes specified above.

Data Subject Rights

Under the GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority: Czech DPA –  www.uoou.cz

Automated Decision-Making

The Controller does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR.