Privacy policy

Consent to the processing of personal data (GDPR)

I. Basic provisions

You hereby grant your consent to Supply Bin Company sro , Company Registration Number: 11648490, Tax Identification Number: CZ11648490, with registered office at Husinecká 903/10, Prague 3 130 00 (hereinafter referred to as: ” Controller “), to process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as: ” GDPR Regulation “), to process the following personal data.

II. Category and type of data processed

Name and surname, email address, company name, postal address, telephone number can be processed based on consent and must be processed for the purpose of necessary performance of the contract.

III. Legal basis and purpose of processing personal data

The lawful reason and purpose of processing personal data is:

processing necessary for the performance of a contract to which the data subject is a party pursuant to Article 6(1)(b) of the GDPR;
processing is necessary for compliance with a legal obligation to which the controller is subject pursuant to Article 6(1)(c) of the GDPR;
the data subject has given consent to the processing of his or her personal data for one or more specific purposes pursuant to Article 6(1)(a) of the GDPR;
processing is necessary for the purposes of the legitimate interests of the relevant controller or a third party, for example providing marketing in the form of a newsletter or commercial communications pursuant to Article 6(1)(f) of the GDPR Regulation and pursuant to Section 7(2) of Act No. 480/2004 Coll.

The purpose of processing personal data is:

Processing an order arising from a contractual relationship between the entity and the Administrator pursuant to Act No. 89/2012 Coll., or pursuant to another contractual relationship;
Saving your shopping preferences and subsequently customizing the offer on the Administrator’s website;
Launching marketing and remarketing campaigns on advertising platforms such as Google, Seznam.cz, Microsoft, Facebook, but also using RTB systems such as Adform, Criteo, Pubmatic and others using advertising purchasing via DSP (Demand Side Platforms) and SSP (Supply Side Platforms);
Sending commercial communications (newsletters, push notifications, etc.) as part of marketing and remarketing campaigns using our own resources or third-party resources (e-mail distribution platform, user notification software).

The controller makes automated individual decisions pursuant to Article 22 of the GDPR. You give your explicit consent to this processing. You can withdraw your consent at any time, for example by sending an email or letter to the contact details of Supply Bin Company sro.

IV. The retention period of your data is

The retention period of your personal data depends on the purpose for which this personal data will be used, namely:

For the purpose of fulfilling the contractual relationship between the entity and the Administrator: for the period of provision of the performance
For marketing purposes: 8 years
For performance records: 15 le

After the period defined for the retention of your personal data has expired, this personal data is deleted by the Administrator.

V. Processing of personal data

The following processors may also process the subject’s personal data on behalf of the controller:

Providers of software solutions referred to in Article III., paragraph 3.1, letters a), b), c) and d) of this Consent to the Processing of Personal Data;
Provider of software solutions, applications, services and other processors that the Controller may not currently use;
Company: Supply Bin Company Ltd.

The controller and the processor shall take measures to ensure that any natural person acting on behalf of the controller or the processor and having access to personal data processes such personal data only on instructions from the controller, unless processing is already required by Union or Member State law.

VI. Recipients of the controller’s personal data

Recipients of personal data are companies or individuals who:

Ensuring the implementation of the contract between the controller and the entity concerned (e.g. forwarding companies, payment processing, premium services, etc.);
Providing marketing services, see Article III. paragraph 3.1, letters a), b), c) and d) of this Consent to the Processing of Personal Data;
Ensuring the operation of the website www.aitecrobotics.cz (e.g. partner, marketplace entity, external suppliers, etc.);

The Administrator intends to use services that are not part of the EU and thus intends to transfer personal data to third world countries. The recipients of personal data in third world countries are the providers of the platforms referred to in Article III., paragraph 3.1, letters a), b), c) and d) of this Consent to the Processing of Personal Data.

VII. Your rights

According to the provisions of the GDPR Regulation, you have the right to:

The right to access personal data pursuant to Article 15 of the GDPR Regulation and also Article 22 and Article 46 of the GDPR Regulation;
The right to immediate rectification of personal data pursuant to Article 16 of the GDPR;
The right to erasure of personal data (“right to be forgotten”) pursuant to Article 17 of the GDPR;
The right to restrict the processing of personal data pursuant to Article 18 of the GDPR;
The right to data portability pursuant to Article 20 of the GDPR;
The right to object to the processing of personal data concerning you based on Article 6(1)(e) or (f), including profiling based on these provisions, pursuant to Article 20 of the GDPR;
The right to withdraw consent to the processing of personal data;
Right to complain to a supervisory authority.

The controller shall not further process personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Only you or your authorized representative can obtain information about your personal data. If the Administrator is not sure of your identity, he may ask you for additional information to verify your identity.

The controller shall communicate to the individual recipients to whom the personal data have been disclosed any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 of the GDPR, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject of these recipients if the data subject so requests.

VIII. Security of personal data

Taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons which the processing entails, the controller shall implement appropriate technical and organisational measures, such as pseudonymisation, both at the time of determining the means of processing and at the time of the processing itself, in order to implement data protection principles, such as data minimisation, in an effective manner and to integrate the necessary safeguards into the processing in order to meet the requirements of this Regulation and to protect the rights of data subjects.

The controller shall implement appropriate technical and organisational measures to ensure that, by default, only personal data that are necessary for each specific purpose of the processing are processed. This obligation concerns the amount of personal data collected, the scope of their processing, the period of their storage and their availability. These measures shall in particular ensure that personal data are not made available to an unlimited number of natural persons by default without human intervention.

This consent to data processing takes effect on May 16, 2022.