Personal data protection

The security and protection of customers' personal data is a priority for us. In accordance with the relevant generally binding legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter referred to as "GDPR"), we would therefore like to inform you about the processing of your personal data in connection with the provision of our services.

1. The identity and contact details of the controller

   1. The data controller is the company CI3, s.r.o., with registered office Jeronýmova 337/6, 252 19 Rudná, IČO 11667770, registered in the Commercial Register under No. C 352575, registered at the Municipal Court in Prague, e-mail info@ci3.co.cz, phone number 736 162 066, address of the office Oldřichova 517/33, 128 00 Praha 2, which is the operator of the internet portal located on the website www.carbonfix.cz (hereinafter referred to as the "Portal").

2. For what purpose and for how long do we process your personal data?

   1. We process your personal data that you provide to us when ordering a service, registering on the portal or on other occasions in the context of mutual business cooperation primarily for purposes related to the performance of the contract:
      1. which you conclude with us as a customer (by selecting the required service on the portal or by registering on the portal), and the handling of your claims arising from any defects in the delivered product;
   2. We process your personal data that you provide to us when ordering services, registering on the portal or on other occasions in the context of mutual business cooperation primarily for purposes related to the performance of the contract:
      1. the fulfilment of the contract and/or the performance of pre-contractual measures - e.g. arranging an order and concluding a contract for the product you have ordered, delivery of the product, etc;
      2. the fulfilment of legal obligations imposed on us by the relevant generally binding legal regulations (in particular Act No. 586/1992 Coll., on Income Taxes, as amended, Act No. 563/1991 Coll., on Accounting, as amended, Act No. 634/1992 Coll., on Consumer Protection, as amended, and Act No. 235/2004 Coll., on Value Added Tax, as amended);
      3. legitimate interest in relation to the protection and enforcement of our potential claims and the optimisation of our website for the widest possible range of devices, or the adaptation of offers and advertising to your preferences;
   3. The personal data we process on the legal basis specified in paragraph 2. a. of this article (fulfilment of the contract) are:
      1. identification data (name, surname, ID number, VAT number, if it is a legal entity, then the name and surname of the contact person);
      2. contact details (billing address, telephone number, e-mail address; in the case of a legal entity, the e-mail address and telephone number of the contact person may be personal data);
      3. payment details (bank account number);
      4. data on orders and contracts concluded by the customer (services purchased, payments made, any complaints).
      5. The personal data that we process for the purposes specified in paragraph 2. b. of this article (the fulfilment of legal obligations) are:
      6. identification data (name, surname, ID number, VAT number, if it is a legal entity, then the name and surname of the contact person);
      7. contact details (billing address, telephone number, e-mail address; in the case of a legal entity, the e-mail address and telephone number of the contact person may be personal data);
      8. payment details (bank account number, details of payments made and tax documents issued).
   4. In order to purchase any of the services offered, you as a customer must create a user account on our portal, which is the legal basis for the processing of personal data provided to us during registration, the performance of the contract, or the implementation of measures prior to the conclusion of such a contract. In the event of any changes to your personal data, please update them immediately in your user account. You can also cancel your user account by using the relevant option in the user section, if available, or by sending a request to the contact email of the controller. The cancellation of your user account does not affect the legitimacy of further processing of your personal data based on another legal basis.
   5. We may process the personal data of visitors to our portal to the extent of the data on the activity on the portal (data on the type of device used, IP address, operating system, your browser, the method and time of viewing the relevant pages and the contents of the basket) on the basis of our legitimate interest in accordance with the provisions of paragraph 2. c. of this article. Information on the use of cookies can be found below.
   6. We may also process customers' personal data within the scope of paragraph 3. a.-d. of this article on the basis of our legitimate interest in connection with the protection and enforcement of our potential claims.
   7. We may further process customers' identification and contact data, as well as data on orders placed, for our legitimate interest to send you offers of our products if you have purchased from us in the past, for a maximum period specified in this article.
   8. In connection with the maintenance of our portal and computer system, your personal data may be accessed by the hosting and IT service provider. Your personal data may also be transferred to our accounting and tax service provider. In connection with the enforcement of our potential claims, personal data may also be transferred to our legal services provider. The recipients are assured of a high level of security for your personal data. Your personal data will not be transferred to an international organisation; any transfer to a third country may only be made in accordance with the GDPR.
   9. Your personal data will be processed for a period of 4 years from the conclusion of the relevant contract to ensure the fulfilment of our contractual obligations and our legitimate interest in protecting and enforcing any claims. We archive tax documents containing your personal data in accordance with the Value Added Tax Act for a period of 10 years. Your user account, if established, will be cancelled in the event of inactivity lasting more than 2 years; the cancellation of the user account will of course not affect the archiving pursuant to the first and second sentence of this paragraph. We process the personal data of visitors to the portal in accordance with the provisions of paragraph 7 of this article for a period of 2 years. The archiving periods are based on the relevant generally binding legal regulations or on a decision of the controller, if not stipulated by law. The processing of personal data by us does not involve automated decision-making or profiling.

3. What rights do you have in relation to your personal data?

   1. You have the right to access your personal data (i.e. the right to obtain information from us about whether we process your personal data and, if so, what data is processed and how it is processed) under the conditions set out in generally binding legal regulations. We provide you with that information primarily through this notice.
   2. You have the right to have inaccurate personal data corrected. If you find that the personal data we process does not correspond to the facts (e.g. name mistranslation, change of address), you have the right to request that we correct or complete the personal data in question.
   3. In certain cases, you also have the right to erasure if:
      1. Your personal data is no longer needed for the purposes for which it was collected or otherwise processed;
      2. you withdraw the consent on the basis of which the relevant personal data was processed by us;
      3. you object to the processing of your personal data in the cases provided for by the applicable generally binding legal provisions and there are no overriding legitimate grounds for processing by us;
      4. there has been unlawful processing of your personal data, or
      5. your personal data must be erased to comply with a legal obligation to which we are subject.
   4. You have the right to restrict processing, provided that:
      1. you deny the accuracy of your personal data for the time necessary for us to verify the accuracy of your personal data;
      2. your personal data has been unlawfully processed and you request a restriction of processing instead of erasure;
      3. you have objected to the processing and in other cases provided for in the relevant generally binding legal regulations.
   5. You also have the right to object to the processing of your personal data based on our legitimate interest and the right to the portability of your personal data in cases provided for by generally binding legal regulations. You also have the right to lodge a complaint with a supervisory authority, which in the Czech Republic is the Office for Personal Data Protection, if you believe that the processing of your personal data is in breach of the law. If you have any doubts or questions about the processing of your personal data by us, you can contact us at any time via the above-mentioned contacts.
   6. Of course, you are not obliged to provide us with your personal data, but without providing the necessary personal data necessary for your proper identification as a contracting party (i.e. the data marked as mandatory in the context of the order in the case of a purchase via the portal), it is not possible to conclude the contract and order the requested service.

4. Use of cookies and analytics services

   1. To ensure the best possible user experience and to ensure the full functionality of the portal, we use cookies. These are small text files that are stored on your device. For more information on the cookies used, please click here.
   2. Some cookies are deleted immediately after you turn off your web browser (temporary cookies), other cookies remain stored on your device and allow us to recognize your browser the next time you visit the portal (permanent cookies). This allows us to identify you on repeat visits so that the login from your device can be saved and you do not have to re-enter your access data each time, you can also, for example, find out what service you were viewing on your previous visit or return to the contents of your shopping cart if you have not completed your order. At the same time, cookies allow us to tailor the content displayed on the portal to your preferences based on your previous activity.
   3. You can set rules for the use of cookies in your internet browser - you can usually decide individually whether to accept them or to exclude them, both for specific cases and in general. Not accepting certain cookies may limit the functionality of the portal.
   4. We also use Google Analytics, a web analytics service provided by Google Czech Republic, s.r.o. Google Analytics uses cookies. However, for this purpose, your IP address is anonymised in full compliance with data protection legislation. Google Analytics provides us with information to evaluate the use of the portal by users and to improve the portal's web environment where necessary. You can prevent the storage of cookies by setting your browser accordingly; however, in this case, not all functionalities of the portal may be available. You can block the use of Google Analytics, for example, by using the following link to save the so-called browser opt-out cookies on your device: https://tools.google.com/dlpage/gaoptout?hl=en.

18. 5. 2023