Personal Data Protection

EUROSTEA CABLES s.r.o („EUROSTEA“)
as the Data Controller undertakes to perform its activities in accordance with the protection of personal data of natural persons under applicable legislation.

Contact details of the controller: Na Pankráci 1618/30, 140 00 Praha 4

Email: gdpr (at) eurostea-cables.com

Data subject: Any natural person whose personal data is processed.

Personal data: Any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as
a name, an identification number, location data, online identifier, or by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Processing: Any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure
by transmission, dissemination or any other form of making available, alignment
or combination, restriction, erasure, or destruction.

Processor: A natural or legal person who processes Personal Data on behalf of the Controller.

EUROSTEA undertakes to ensure that personal data is processed in a lawful, fair, and transparent manner; processed based on and collected for specified, explicit, and legitimate purposes; adequate, relevant, and limited to what is necessary; accurate and, where necessary, kept up to date; kept for no longer than is necessary for the purposes and legal basis in question; processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage; processed in accordance with applicable laws.

In our case, this is as follows:

• Processing of individual inquiries, orders, and implementations
• Handling complaints and other requests
• Answering questions
• Implementing marketing campaigns
• Storing purchase history to facilitate future orders and for marketing purposes
• Improving the quality of our services
• Performing analyses and measurements regarding the use of our services.

• Employees may collect and/or access personal data only to the extent necessary
  for the type and scope of the task at hand
• Employees must not disclose personal data to unauthorized persons, either within the company or externally
• Employees may not share personal data informally
• Employees undergo regular training to understand their obligations when handling personal data.
• Data processing is only possible on the basis of a specific legal title (legitimate interest, consent, legal obligation, etc.).
• Documentation containing personal data is secured against access by unauthorized persons or unauthorized interference.
• Documentation containing personal data is shredded within the shredding deadlines or when the legal basis for processing expires.
• Appropriate information and physical security policies are applied to ensure that unauthorized access to all personal data processed or managed by EUROSTEA is restricted. These include the physical security of all data carriers, including servers,
  as well as rules for backup, encryption, supply chain verification, etc.

We only process personal data that is necessary for the fulfillment of legal obligations or that is necessary for the performance of our activities or the execution of a contract. This includes, among other things, the following:

• Identification data – first name, last name, title, ID number/VAT number
• Contact details – telephone number, email, delivery and contact address
• Payment details – bank details, account number, payment history, etc.
• Your ID as a customer and your identification in our systems
• Access details to our services (if you use them)
• History of your service requests and orders.

In addition to EUROSTEA employees, third parties involved in specific activities related
to data processing may also have access to your personal data. In accordance with company policy, the same requirements apply to third parties as to employees. Similarly, all entities are carefully selected to prevent data misuse or unauthorized access. All these entities are bound by a confidentiality agreement and are required to comply with all technical and organizational measures defined by EUROSTEA.

Within EUROSTEA, only natural persons who need it to fulfill and carry out our business relationship or fulfill another legal title have access to personal data.

Personal data may also be received by our external service providers. In such a case, contractual agreements and verifications are accepted so that personal data is protected, among other things, against misuse. Our external service providers may also receive personal data. In such cases, contractual agreements and verifications are put in place to protect personal data from, among other things, misuse and loss, unauthorized access, disclosure, or modification.

The list of external processors is as follows:

• Suppliers providing direct deliveries to customers
• Service partners ensuring the operation of our services
• Transport companies ensuring the delivery of your orders.

In certain cases, which are precisely defined by law, we are also obliged to provide your personal data to public authorities (e.g. the Czech Police, ÚOOZ, etc.) on the basis of legal regulations.

Under the GDPR legislation, every data subject has the following rights:

• Right of access: In certain cases, the data subject has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and if so, has the right to access the personal data.
• Right to rectification: The data subject has the right to rectify inaccurate personal data concerning him or her.
• Right to erasure: In certain cases, the data subject has the right to erase personal data concerning him or her that are not part of another legal basis for processing.
• Right to restriction of processing: In certain cases, the data subject has the right to restrict processing.
• Right to data portability: In certain cases, the data subject has the right to obtain personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller.
• Right to object: In certain cases, the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

EUROSTEA has an internal process in place to prevent, detect, and stop personal data breaches and, where appropriate, to notify the relevant supervisory authority and data subjects in a timely manner.

The data subject may exercise their rights by sending an email to: gdpr(at)eurostea-cables.com or, after prior arrangement, by visiting the company’s premises at: Plzeňská 3350/18, 150 00 Prague 5, Czech Republic.

Complaints about suspected misuse of personal data may also be filed with the locally competent personal data protection authority, i.e. the Office for Personal Data Protection in Prague (Pplk. Sochora 727, 170 00 Prague 7, Czech Republic).