GDPR

Privacy Policy

Bio HI-TECH Surface Technology s.r.o., with its registered office at Rybná 716/24, 110 00 Prague 1 – Staré Město, Company ID: 06732984, VAT ID: CZ06732984, as the operator of the website www.biohitech.cz and thus the controller of the personal data provided to it by customers, undertakes to process such personal data in accordance with the applicable legislation, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).

Personal data processed
When operating the website www.biohitech.cz, Bio HI-TECH Surface Technology s.r.o. processes the following personal data: name, surname, address, telephone number, e-mail address, IP address, and cookies.
Personal data is processed on the legal basis of fulfilling the contractual obligations of Bio HI-TECH Surface Technology s.r.o. towards its customers, as well as on the legal basis of defending the legitimate interests of Bio HI-TECH Surface Technology s.r.o.

Recipients of personal data may include:

• courier/delivery services in the case of ordered goods,

• public authorities where required by law,

• providers of external services, in particular tax and legal advisors,

• operators of selected direct marketing tools.

Bio HI-TECH Surface Technology s.r.o. only processes personal data that is strictly necessary for the fulfillment of the purposes of processing, i.e. to meet its contractual obligations (especially the delivery of goods) and to defend its legitimate interests, including direct marketing.

Processors of personal data may include:

• Ecomail.cz s.r.o., Na Zderaze 1275/15, 120 00 Prague 2

• Google – Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Google Ads

• Google Analytics

• Google Tag Manager

• Aleš Rýdl, U Sokolovny 1693, 396 01 Humpolec

Personal data will be processed for the period necessary to fulfill contractual obligations and protect legitimate interests. After this period, the data will be handled in accordance with the applicable legal regulations, in particular Act No. 499/2004 Coll. (the Archives and Records Service Act) and Regulation (EU) 2016/679 (GDPR).

Customer rights
The customer has the following rights with respect to their personal data:

• Right of access: the right to know whether their data is processed, what data it is, and how it is processed.

• Right to rectification: the right to request correction of inaccurate or incomplete personal data without undue delay.

• Right to erasure: the right to request deletion of personal data if certain conditions are met.

• Right to restriction of processing: the right to request limited processing of their data in specific cases.

• Right to object: the right to object to processing based on legitimate interests, third-party interests, or tasks carried out in the public interest.

• Right to data portability: the right to receive personal data provided to the controller in a commonly used, machine-readable format and to transfer it to another controller.

• Right to withdraw consent: this does not apply here, as personal data is processed for the purpose of fulfilling a contract, not on the basis of consent.

If the customer is dissatisfied with the processing of their personal data, they may file a complaint directly with the controller or with the Office for Personal Data Protection.

Controller’s statement
The controller declares that it will collect personal data only to the extent necessary for the specified purpose and process it solely in accordance with that purpose. Employees of the controller, as well as other natural persons processing personal data on the basis of a contract with the controller, are obliged to maintain confidentiality about personal data even after the termination of their employment or contractual relationship.