Personal Data Protection – CZGDPR Information
Dear customers,
in light of new European legislation concerning the protection of personal data (known as GDPR), we would like to inform you about how our company processes personal data.
Please read the full text, which explains how your personal data is processed.
The data controller in relation to your personal data is Cymedica CZ, a.s., Company ID: 27419941, based in Hořovice, Pod Nádražím 308. Contact email: [email protected].
1. Why are we presenting this document?
Due to new legislation adopted by Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), you must again be informed about your rights and obligations related to the processing of your personal data in cases where your explicit consent is not required, and to renew your consent in cases where it is required by law.
2. What personal data will be processed?
The controller may process the following personal data: name and surname, title, address, telephone number, email, bank details, tax and financial information, contact details of responsible persons, communication and login data in IT systems, other network identifiers (IP addresses, cookies), information about our business relationship, and information about the quantity and type of goods and services purchased (hereinafter referred to as "personal data").
3. What is data processing?
The controller is authorized to collect, use, record, organize, classify, structure, store, adapt or alter, modify, search, combine, use, and dispose of your personal data in accordance with legal regulations.
4. Why and for what purposes will your personal data be processed?
I. Information on Personal Data Processing
We would like to inform you that the reason for processing your personal data is primarily the requirement to conclude and fulfill a contract concerning the supply of products or services by the controller. Your personal data is therefore processed for the purpose of our mutual communication and information sharing, maintaining and managing your customer account, and fulfilling our contractual relationship.
Your personal data may also be used to fulfill legal obligations, particularly tax obligations, archiving, or other obligations imposed on the controller by law, which may involve your personal data.
The controller is also authorized to process your personal data based on legitimate interest, especially for the security and management of the controller’s IT systems or the enforcement of legitimate claims against you. If the controller provides you with IT services or software, your personal data may also be processed for technical support of such services.
If you provide personal data of third parties, you confirm that such data is correct and complete and has been obtained and used in accordance with applicable legal regulations.
II. Who may your personal data be shared with?
The controller may share and transfer your personal data with cooperating distributors and manufacturers of feed, veterinary medicines, medical devices, and pet supplies, depending on the type of goods you have purchased. This is for the purpose of providing discounts or other benefits, as well as for business analysis of the type and amount of goods you purchase. Personal data will not be transferred outside the European Union.
Your personal data will also be shared within the controller’s group with the following entity: Cymedica, spol. s r.o., Company ID: 61682535, based in Hořovice, Pod Nádražím 308, for the purpose of contract fulfillment, including handling product complaints and analyzing the economic performance of the controller within its business group.
III. Purpose of Data Processing
The purpose of data processing is your participation in an online event or providing access to a recording of the event. Processing is necessary for the performance of a contract in which you are a party. Another purpose is marketing – sending newsletters about future online events. We process your personal data (email and name), your email activity (what you click on and when you open it) for direct marketing purposes. Since you attended a webinar, we rely on legitimate interest, assuming you are interested in information about future webinars, for up to 3 years from the last webinar you attended. You can withdraw this consent at any time by using the unsubscribe link in every email. We retain your personal data for the duration of limitation periods unless the law requires a longer retention or we state otherwise in specific cases.
Your Rights
You have the right to request access to personal data, including information on how your data is being processed. You have the right to correct inaccurate or outdated personal data. You have the right to have your personal data deleted and the right to be forgotten. You have the right to restrict processing, meaning limiting how your personal data is used. You have the right to data portability, meaning transferring your data to another controller. You have the right to object to the processing of your personal data, especially when it is based on the controller’s legitimate interest or for direct marketing purposes. You also have the right to request an explanation and to lodge a complaint with the supervisory authority – the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
Controller’s Obligations
The controller has adopted appropriate technical, administrative, organizational, and physical security measures, as well as confidentiality protections for your personal data. The controller guarantees that all personal data processing will comply with the purpose for which the data was provided (e.g., IT support, machine or equipment service, etc.) and will ensure secure processing in accordance with legal regulations.
Duration of Consent
If you grant consent to process and transfer personal data, you give consent for the period necessary to fulfill rights and obligations under our contractual relationship, or for the period necessary to process your data in accordance with the controller’s legitimate interests or legal obligations. After the end of the contractual relationship, your personal data will be deleted or anonymized, unless applicable laws or legitimate interests require it to be retained (e.g., for tax purposes, claims enforcement, etc.).