Privacy Policy

I. Basic Provisions

1. The personal data controller according to Article 4, point 7 of the Regulation of the European Parliament and Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is AD Aqua Europe s.r.o., Company ID 03052800, registered office at CTPark Brno Líšeň, Trnkova 3118/19c, 628 00 Brno - Líšeň (hereinafter: "Controller").
2. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, especially by reference to a specific identifier such as a name, identification number, location data, network identifier, or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
3. The Controller has not appointed a Data Protection Officer.

II. Sources and Categories of Processed Personal Data

1. The Controller processes personal data provided by you or personal data obtained by the Controller based on the fulfillment of legal obligations, contract performance, legitimate and vital interest, or data subject consent for processing personal data.
2. The Controller processes your identification and contact details and data necessary for content personalization, advertisements, traffic analysis, and contract fulfillment.

III. Legal Basis and Purpose of Personal Data Processing

1. Processing of personal data based on the legitimate interest of the Controller: In some cases, the Controller processes personal data to protect its rights and legally protected interests, or the rights and legally protected interests of other entities. Such processing can be performed without the data subject's consent. The existence of legitimate interest is always carefully assessed by the Controller.
2. Processing of personal data based on contractual conditions:

• performance of the contract between you and the Controller according to Article 6(1)(b) GDPR,
• legitimate interest of the Controller in providing direct marketing (especially for sending commercial messages and newsletters) according to Article 6(1)(f) GDPR,
• your consent to processing for the purpose of direct marketing (especially for sending commercial messages and newsletters) according to Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on Certain Information Society Services, if no goods or services have been ordered.
• order processing and performance of rights and obligations arising from the contractual relationship between you and the Controller; personal data necessary for the successful order fulfillment (name and address, contact details) are required when placing an order. Providing personal data is a necessary requirement for concluding and performing a contract. Without providing personal data, it is not possible to conclude or fulfill the contract.

IV. Data Retention Period

1. The Controller retains personal data:

• for the duration of the mutual contractual relationship,
• for the period necessary to exercise rights and obligations arising from the contractual relationship and to assert claims from these contractual relationships (for 5 years after the end of the contractual relationship),
• until consent for marketing processing is revoked, for a maximum of 5 years if personal data are processed based on consent.

1. After the expiration of the data retention period, the Controller deletes the personal data.

V. Recipients of Personal Data (Controller's Subcontractors)

1. Recipients of personal data are entities involved in the delivery of goods/services/payment processing based on a contract.
2. The Controller does not intend to transfer personal data to a third country or international organization.

VI. COOKIES

1. Our website uses "cookies" to provide visitors with greater convenience when browsing.
2. Our website uses both "session cookies" and "persistent cookies." Session cookies are automatically deleted when the browser is closed, while persistent cookies remember your preferences and settings for future visits.

VII. Your Rights

1. Under GDPR, you have the right to:

• access your personal data (Article 15 GDPR),
• rectify personal data (Article 16 GDPR) or restrict processing (Article 18 GDPR),
• erase personal data (Article 17 GDPR),
• object to processing (Article 21 GDPR),
• data portability (Article 20 GDPR),
• withdraw consent for processing at any time without affecting the lawfulness of processing before withdrawal.

VIII. Final Provisions

1. By submitting an order via the online order form, you confirm that you are familiar with and fully accept these personal data protection terms.
2. The Controller may change these conditions and will publish the new version on its website.

These conditions are effective as of 30.05.2023.

© All rights reserved.