The aim of this Privacy Policy for customers under the GDPR (hereinafter the “Policy”) issued by PF GROUP a.s., registered office: Mlýnská 326/13, 602 00 Brno, business ID number: 270 690 52, registered in the Commercial Register maintained by the Regional Court in Brno, file ref.: B 5201 (hereinafter “PF GROUP”), is to provide information on what personal data (hereinafter “Data”) PF GROUP, as the controller, processes about individuals during visits to websites operated by the PF GROUP and contacts with potential customers. The Policy also states for what purposes and for how long ČNP processes such personal data in accordance with applicable legal regulations, to whom and for what reason it may transfer them, as well as information on what rights natural persons have in connection with the processing of their personal data.
This Policy is effective as of 25 May 2018 and is issued in accordance with Regulation (EU) 2016/679, on the protection of natural persons with regard to the processing of personal data (the “Regulation” or “GDPR”) for the purpose of ensuring the information duty of ČNP as a personal data controller pursuant to Article 13 of the GDPR.
This Policy concerns the processing of personal data of PF GROUP customers, users of PF GROUP services, those interested in PF GROUP goods and visitors to websites operated by PF GROUP, always to the extent of personal data protection under the GDPR corresponding to their position with respect to the PF GROUP.
Below you will find an overview of the main principles of protection of personal and other data processed. Further information can be found on our website www.PF GROUP.cz, in the privacy section.
Personal data is processed by PF GROUP a.s., registered office: Mlýnská 326/13, 602 00 Brno, business ID number: 270 69 052, as the data controller under the GDPR. We will process your data in accordance with the conditions specified below.
The term personal data means any information relating to an identified or identifiable natural person to whom the personal data relate. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a number, a code or to one or more elements specific to his/her physical, physiological, mental, economic, cultural or social identity. The handling of such data may be restricted due to the right to privacy, while the protection of personal data is regulated by the GDPR.
We only process personal data that you provide to us in connection with your interest in our products and their purchase (e.g. as a part of registration, ordering or granting consent to the processing of personal data and granting consent to receive news and information about special offers, etc.), meaning the conclusion of a contract on purchase of goods.
This is most often the data you provide when registering and/or purchasing goods:
These data are required for the conclusion and performance of a contract. They are, in particular:
The provision of personal data necessary for the performance of a contract, the performance of the PF GROUP’s legal duties and the protection of the PF GROUP’s legitimate interests is mandatory. Without the provision of personal data for these purposes, it would not be possible to ensure the performance of the PF GROUP’s duties regarding customers. We do not need consent to process personal data for these purposes. Here we use the legal grounds resulting from a contract for personal data processing.
Personal data for these activities are processed to the extent necessary for the performance of these activities and for the period necessary to achieve them or for the period directly stipulated by legal regulations.
For subjects that have given their consent to marketing through electronic contact details, the PF GROUP processes, with their consent for the time specified in the consent, the data that the subject makes available to it for marketing purposes and sending information about PF GROUP products, news and special offers. If such consent is granted through a website operated by the PF GROUP, the data from the PF GROUP cookies that are placed on the website on which the consent was granted are processed together with these contact details only if the subject has cookies enabled in his/her web browser. Opting out of receiving news and information about special offers can be done in the settings of the service for which the user registered to receive such communications, or by e-mail sent to: gdpr@pfgroup.cz.
If the subject has cookies enabled in his/her web browser, we process records of behaviour from cookies placed on websites operated by the PF GROUP for the purpose of ensuring better operation of PF GROUP websites, performing analyses and measurements to determine how our services are used and for the purposes of PF GROUP internet advertising.
Cookies are small data files that allow websites visited to remember the actions and settings of individual users that they have made on them, so they do not have to be entered repeatedly. Cookies are stored on individual computers using a web browser. Cookies do not pose a danger, they are not used to obtain any sensitive personal data, but they are important for privacy protection. We do not use cookies to ascertain the identity of website users or misuse login information.
For example, cookies allow us to recognise a user as an existing user (e.g. when logging into their e-mail account, when authorizing payment, etc.) or to customize a website to their user preferences. We also use cookies to serve behaviourally targeted online advertising on and off PF GROUP websites, more simply to show only those advertisements that are relevant to a particular user without bothering them with advertising that they are not interested in.
Another group consists of third-party cookies (e.g. Google Analytics to analyze traffic to a particular website or certain services or cookies of the operators of advertising systems that are operated on our websites).
You as a user have the option to refuse the use of cookies. However, in some cases it may not be possible to view a particular product without the use of cookies.
If your browser allows the use of cookies, we will assume that you agree to the use of standard cookies by our websites.
If you do not want to store these cookies, you can block their use.
More information about the types of cookies and their use in our services can be found here
The PF GROUP uses the professional and specialized services of other entities in fulfilling its obligations and duties under contracts. If these suppliers process personal data transferred from the PF GROUP, they have the status of personal data processors and process personal data only within the framework of instructions from the PF GROUP and may not otherwise use them.
We carefully select the partners to whom we entrust your data and who are able to ensure such technical and organizational security of your data so that unauthorized or accidental access to your data or other misuse of your data cannot occur. Protecting your data is a priority for us. All our partners are bound by confidentiality duties and may not use the data provided for any purpose other than that for which they were disclosed to them.
Third parties who may have access to your personal data are:
Under certain, well-defined conditions, we are then obliged to transfer some of your personal data to the Police of the Czech Republic or to other law enforcement authorities, including specialized units (Unit for Uncovering Organized Crime, Customs Administration, etc.) and other public authorities, based on applicable legal regulations.
We will process your data throughout the use of our services (i.e. the duration of the contractual relationship between us) and subsequently based on your consent for a further period of 24 months, unless you rescind your consent to the processing of personal data.
However, we would like to draw your attention here to the fact that we must process the personal data necessary for the proper provision of the products you have ordered and for the fulfilment of all our duties, whether these duties arise from a contract between us or from generally binding legal regulations, regardless of your consent for the period stipulated by or in accordance with the relevant legal regulations, even after the rescinding of your consent.
CCTV recordings from PF GROUP premises and the surrounding areas of PF GROUP buildings or premises are kept for a maximum of eight days from the date of recording.
Yes, we can process your personal data without your consent, but only for the purpose of:
The possibility and lawfulness of such processing arises directly from applicable legal regulations and your consent to such processing is not required.
As already mentioned, we may process your personal data both based on your consent, but also, for example, based on our legitimate interest (in particular processing for direct marketing purposes) or for the performance of a contract concluded between us, to the extent that personal data are necessary for such performance. Last but not least, the performance of duties arising for us under the law is a reason allowing us to process your personal data without your consent. The specific purposes for which we carry out the individual processing of your personal data are set out above.
All personal data you provide to us are secured using standard procedures and technologies. However, it is not objectively possible to completely guarantee the security of your personal data. Therefore, it is not 100% possible to ensure that the personal data provided cannot be accessed by a third party, copied, disclosed, altered or destroyed by breaking our security measures.
However, in this context, we assure you that we regularly check the system for vulnerabilities, have not been subjected to an attack, use security measures to prevent unauthorized access to your personal data as far as possible and they provide sufficient security in view of the current state of technology. The security measures adopted are then regularly updated.
In order to better secure your personal data, access to this data is password protected and sensitive data are encrypted when transmitted between your browser and our website.
However, without your help and responsible behaviour, we are unable to fully ensure the security of your data. Please therefore help us to ensure the security of your data by keeping your unique passwords and login credentials confidential and by following basic security principles. Please always remember that e-mails may not be encrypted. Therefore, we strongly recommend that you do not use these forms of communication when providing confidential information.
You may rescind your voluntarily granted consent to the processing of your personal data at any time free of charge by sending an e-mail to: gdpr@pfgroup.cz. The rescinding of consent does not affect the processing of your personal data based on your consent given before its rescinding. The rescinding of consent also does not affect the processing of personal data that we process on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, a legal duty or for other reasons specified in applicable legal regulations).
You provide us with your personal data voluntarily (for some services, however, the handover of some personal data is required to make the service available, i.e. if you do not hand it over to us, you will not be able to use the service).
The processing of your personal data, often only in anonymized form, without us being able to identify you as a specific user at all, enables us to provide you with our products and to continuously improve and develop new ones. If you do not give us your consent or rescind it subsequently, we may no longer be able to provide you with some of our products in full. However, it is naturally not your duty to use our free services.
In particular, you have the following rights in relation to your personal data:
If you no longer want to receive commercial communications from us or other information about new products in our portfolio, you have the option to object to the further processing of your personal data for direct marketing purposes. If you do this, we will no longer process your data for this purpose and we will no longer send you further commercial communications and newsletters.
Article 21 of the GDPR, in particular, provides further information on this right.
If you have any questions about personal data protection or rescinding your consent to further processing of your personal data, please use the e-mail address: gdpr@pfgroup.cz
In this context, we would like to point out that we may want you to prove your identity to us in an appropriate manner so that we can verify your identity. This is a precautionary security measure to prevent unauthorized persons from accessing your personal data. In order to improve the quality of our services and to keep a record of compliance with our duties under the law, all communications with you are monitored.
