Refrastar

Privacy Policy (GDPR)

1. Data Controller

The controller of your personal data is:

Refrastar s.r.o.
Masarykova 391/1, 678 01 Blansko, Czech Republic
IČO: 08707511
Email: info@refrastar.cz

This Privacy Policy explains how we collect, use, store and protect personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR") and applicable Czech data protection legislation.

2. Categories of Personal Data

We may process the following categories of personal data:

  • Identification data: name, surname, job title, company name;
  • Contact data: email address, telephone number, business address;
  • Technical data: IP address, browser type, device information;
  • Cookie data: information collected through cookies and similar technologies (see our Cookie Policy).

3. Purposes and Legal Basis for Processing

Contract Performance (Art. 6(1)(b) GDPR)

We process personal data as necessary for the performance of a contract or to take steps prior to entering into a contract. This includes processing orders, arranging delivery, issuing invoices and managing the business relationship.

Legitimate Interest (Art. 6(1)(f) GDPR)

We may process personal data on the basis of our legitimate interests, which include:

  • Direct marketing communications to existing business customers regarding similar products and services;
  • Website security, fraud prevention and protection of our IT systems;
  • Internal administration and business analytics.

Consent (Art. 6(1)(a) GDPR)

Where required, we process personal data on the basis of your freely given consent. This applies in particular to:

  • Subscription to our newsletter or marketing communications (for non-existing customers);
  • Setting of analytical and functional cookies.

You may withdraw your consent at any time by contacting us at info@refrastar.cz, without affecting the lawfulness of processing carried out prior to the withdrawal.

Legal Obligation (Art. 6(1)(c) GDPR)

We process certain personal data to comply with legal obligations, including tax, accounting and archiving requirements under Czech law.

4. Data Retention

  • Contract-related data: for the duration of the contractual relationship plus 10 years thereafter, in accordance with statutory retention periods for tax and accounting records;
  • Consent-based data: until the withdrawal of consent;
  • Website logs and technical data: up to 12 months from collection.

5. Data Recipients

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described above:

  • Hosting and IT service providers;
  • Email and communication service providers;
  • Accounting and tax advisory firms;
  • Transport and logistics companies;
  • Public authorities, where required by law.

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place in accordance with the GDPR.

6. Data Subject Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access: to obtain confirmation of whether your data is being processed and to receive a copy of such data;
  • Right to rectification: to request correction of inaccurate or incomplete data;
  • Right to erasure: to request deletion of your data where there is no legitimate reason for continued processing;
  • Right to restriction of processing: to request limitation of processing under certain circumstances;
  • Right to data portability: to receive your data in a structured, commonly used and machine-readable format;
  • Right to object: to object to processing based on legitimate interest, including direct marketing.

To exercise any of these rights, please contact us at info@refrastar.cz. We will respond to your request within 30 days.

7. Cookies

Our website uses cookies. For detailed information about the types of cookies we use and how to manage them, please refer to our Cookie Policy.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. These measures are reviewed and updated regularly to ensure an adequate level of security.

9. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the supervisory authority:

Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
Website: www.uoou.cz

10. Updates to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page. We recommend reviewing this page periodically.

This Privacy Policy is effective as of 1 January 2024.

For any questions regarding this page, please contact us at info@refrastar.cz.