Security and protection of personal data

Privacy Policy

With this document we would like to inform you how ABO valve, s.r.o., with registered office at Dalimilova 285/54, 783 35 Olomouc, ID 49609050 will process your personal data. The processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter also referred to as "GDPR").

We process personal data as data controllers, i.e. we determine the purposes and means of processing. 
 

Scope of the personal data processed

Personal data that you provide to us via the website (our forms). Specifically, this includes:

• Name and surname or company name                    
• Telephone number                    
• E-mail address                    
• Text of the message you can leave

Personal data that we obtain from third-party tools that are deployed on our website. This may specifically include:

• Information obtained from Google Analytics and other tools
• Information obtained from Sklik, operated by Seznam.cz, a.s.
• Information obtained from Facebook pixel and other tools operated by Facebook Ireland Ltd.
• Information obtained from Twitter, operated by Twitter International Company.
• Information obtained from LinkedIn, which is operated by LinkedIn Ireland Unlimited Company.
• Candidates' personal details (address, date of birth, educational qualifications, gender, photo, telephone and email) from submitted CVs. The data is used for recruitment and selection purposes.
   

Purpose and legal basis of processing

We use the personal data you provide to us via the website for the following purposes:

• To contact you and, where appropriate, to establish mutual cooperation. If we establish cooperation, the processing is based on the performance of a mutual contractual relationship pursuant to Article 6(1)(b) GDPR. If we do not establish cooperation, the processing is based on our legitimate interest under Article 6(1)(f) GDPR to ensure mutual communication.
• Should you contact us with a request to provide support in connection with the products or services you subscribe to, we will use this information for the purpose of processing this request, based on the fulfilment of our contractual obligations under Article 6(1)(b) GDPR.
• If you are a job applicant, we will process your personal data sent in CVs and other documents related to recruitment for the purpose of the selection process and the establishment of any employment relationship pursuant to Article 6(1)(b) GDPR. We may retain the personal data for a reasonable period of time after the end of the selection procedure, in case the position becomes vacant again or we want to offer you a similar position. We will be happy to provide you with more detailed information about processing in connection with recruitment during the selection process.
• We process the personal data we process when you purchase our products or services from us specifically to provide you with our products or services. The legal basis is the performance of mutual contractual obligations according to Article 6(1)(b) GDPR. At the same time, we need to protect ourselves in case of litigation and in case of requests that may be made to us by public authorities, therefore we will process personal data on the basis of our legitimate interest according to Article 6(1)(f) GDPR. We may also be required by law to store your personal data for a certain period of time, after which we will process personal data on the basis of compliance with our legal obligations under Article 6(1)(c) GDPR.
• The tools used are in most cases based on so-called cookies that are stored in your browser. A specific list of cookies can be found in the information bar that is placed on the website when you access it. We will require your active consent to store cookies.                    
• We process your personal data in accordance with this policy on the basis of the performance of a mutual contract or your request, on the basis of our legal obligations, on the basis of our legitimate interest and/or on the basis of your consent, if any, given for specific processing. We will always assess whether your consent is required before using information for a purpose not set out in this policy. If so, we will inform you and ask for your consent. If consent is not required, we will inform you in advance of the new scope of processing.

You may receive an email from us. If this email is related to the provision of our services or goods, or is related to answering an enquiry you have made via our forms, we do so on the basis of a contractual relationship or our legitimate interest.

Recipients of personal data

Our company takes care to protect your personal data, so we only pass on personal data to third parties for the above purposes and only to the extent necessary.

The following recipients have access to your personal data:

• Government authorities according to our legal obligations, in particular the Financial Administration of the Czech Republic and the Czech Social Security Administration, or other authorities for the defence of legal claims, or on the basis of an official request sent to us.
• The company that manages our website and web analytics tools.
• Providers of server, web, cloud or IT services.
• eBRÁNA Ltd, registered office: Staňkova 1322, ID: 25984764.
   

Cookies

Cookies are small data files that websites store on your computer or mobile device when you browse our website. We subsequently obtain information from these files, for example, to find out what pages you are viewing, to be able to tailor the advertising you see to your preferences or simply to ensure the functioning of our website.

We use cookies on our website to:

• perform analytics
• providing marketing
• provide functionality that is not necessary to view the site and provide other services

We may also use so-called technical cookies on the website to ensure that the website functions as intended or to record whether or not you have consented to cookies. Unfortunately, there is no way to refuse the use of these cookies.

However, in addition to technical cookies, we also use other cookies for the purposes set out above. We only store all of these cookies with your consent, and for each of these purposes separately. If you choose to consent to only certain cookies according to your consent settings, those cookies for which you have not consented will not be turned on. You can also withdraw your consent at any time by changing the settings according to the relevant button on the website. However, the withdrawal of consent does not affect the lawfulness of the processing prior to its withdrawal. In other words, until you withdraw your consent, the use of cookies is legitimate.

In relation to cookies, we specifically use tools:

• Google Analytics and other tools from Google Ireland Ltd., Further information: https://policies.google.com/technologies/cookies?hl=cs.
• Facebook pixel and other tools from Facebook Ireland Ltd., Further information: https://www.facebook.com/policies/cookies/.
• Tools from LinkedIn Ireland Unlimited Company, Further information: https://cz.linkedin.com/legal/l/cookie-table?#thirdparty.
• Tools from Twitter International Company, Further information: https://help.twitter.com/en/rules-and-policies/twitter-cookies

In the event that any of the tools involve the transfer of personal data to a territory outside the EU, such transfer is based on appropriate safeguards (in particular standard contractual clauses and additional measures taken) or on the basis of an adequacy decision.

Retention period of personal data

We will only process your personal data for as long as is necessary to fulfil the above purposes for which it was collected. The necessary retention period may vary for different types of data in the context of different products and services and therefore the actual retention period will vary. The criteria used to determine the retention period include:

• How long is the personal information needed to provide our products or services and to run our business? This includes activities such as maintaining and improving our products or services, maintaining the security of our systems and maintaining relevant business and financial records. This is a generally applicable rule of thumb and in most cases is the basis for determining how long data is retained.
• Do you provide us with your data with the expectation that we will retain it until you specifically want it deleted? If so, we will keep it for that period.
• Is the personal data sensitive? If yes, it is generally appropriate to use a reduced retention period.
• Have we established and communicated a specific retention period for a particular type of data? If so, we will certainly never exceed it.
• Have you provided consent to extend the retention period? If yes, we will retain the data in accordance with your consent.
• Are we under any legal, contractual or similar obligations to retain data? If yes, we will retain the data in accordance with these obligations. Examples include laws governing mandatory retention of data, government regulations to retain data related to investigations, or data that must be retained for litigation purposes.
• If you receive commercial communications from us, we will continue to send them until you opt-out of receiving them, in this case for the period of time specified in the text when you subscribe or consent to us sending them.
   

What rights do you have in relation to the protection of your personal data?

You have the following rights in relation to our processing of your personal data:

• the right to access your personal data
• the right to rectification
• the right to erasure 
• the right to restriction of data processing
• the right to object to processing
• the right to data portability
• the right to withdraw consent to the processing of personal data
• the right to lodge a complaint about the processing of personal data

Your rights are explained below to give you a clearer idea of their content.
The right of access means that you can ask us at any time to confirm whether or not personal data relating to you is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, for how long we will process it, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data and whether or not automated decision-making, including profiling, is taking place on the basis of the processing of your personal data. You also have the right to obtain a copy of your personal data.

The right to rectification means that you can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.
The right to erasure means that we must erase your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is unlawful, you object to the processing and there are no overriding legitimate grounds for the processing, we are under a legal obligation to do so, or you withdraw your consent in relation to personal data that you have consented to the processing of.

The right to restrict processing means that until we have resolved any disputed issues regarding the processing of your personal data, we may not process your personal data other than by storing it and, where appropriate, using it only with your consent or for the establishment, exercise or defence of legal claims.

The right to object means that you can object to us processing your personal data for direct marketing purposes or for legitimate interest, including profiling based on our legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. If you object to processing based on other grounds, we will evaluate the objection and then tell you whether we have complied with the objection and will no longer process your data, or that the objection was not justified and processing will continue. In any case, processing will be restricted until the objection is resolved.

The right to withdraw consent to the processing of personal data means that if you have given us consent for a particular purpose (for example, in connection with commercial communications), you have the right to withdraw it at any time, for example, by contacting us at the email address below. If we send you commercial communications based on your consent, you can also withdraw your consent by unsubscribing in each individual commercial communication. We will always provide specific rules for withdrawing consent when we obtain your consent. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

The right to data portability means that you have the right to obtain personal data relating to you which you have provided to us on the basis of consent or contract and which is also processed by automated means, in a structured, commonly used and machine-readable format, and the right to have that personal data transmitted directly to another controller.
If necessary, data subjects may contact us by e-mail at gdpr@abovalve.com or in writing to ABO valve, s.r.o., GDPR, Dalimilova 285/54, 783 35 Olomouc. We will respond to your questions or comments within 30 days. 

SECURITY AND PROTECTION OF PERSONAL DATA

We protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We protect it as if it were our own. We have adopted and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.

This policy is effective as of May 25, 2023