INTERLACTO CZECH GROUP

Personal data protection principles within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR, binding as of 25 May 2018)

1. GENERAL PROVISIONS
We regard the protection of privacy and personal data as an obligation and place great emphasis on it. We handle personal data, which is any information relating to an identified or identifiable natural person, exclusively in accordance with applicable legislation.

Below you will find an overview of how we handle your data, how we protect it and what rights you have in relation to the processing of personal data.

2. PERSONAL DATA CONTROLLER
The controller of your personal data is INTERLACTO, spol. s.r.o., with registered office at Koubkova 228/13, 120 00 Prague 2, ID No.: 45243701, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert No. 5689.

Contact details:
Email: interlacto@interlacto.cz
Tel: + 420 222 515 398

3. PURPOSE, SCOPE AND DURATION OF PROCESSING OF PERSONAL DATA
3.1 PURPOSES OF PROCESSING
We process your personal data in several different ways for the respective purposes:

3.1.1 Protecting our legitimate interests – providing information on the composition and use of the products sold, or handling other similar enquiries made most frequently via the contact email address or form;

3.1.2 Fulfilling legal obligations – ensuring the safety of the products distributed and establishing, exercising or defending legal claims related to liability for damage caused by defective products;

3.1.3 Marketing purposes – sending commercial communications and undertaking other marketing activities.

3.2 SCOPE OF PROCESSING
We process your personal data to the following extent:

3.2.1 the data you provide to us when you make an enquiry or in the course of further communication, most commonly your name, telephone number, email address;

3.2.2 data necessary for the performance of legal obligations, mainly name, surname, address, telephone number, e-mail address;

3.2.3 data for marketing purposes, mainly name, surname, e-mail address, telephone number, postal address.

3.3 PROCESSING TIME
We retain your personal data for the period necessary and proportionate to the relevant purposes of processing in accordance with the law.

4. SHARING AND TRANSFER OF PERSONAL DATA (RECIPIENTS OF PERSONAL DATA)
4.1 RECIPIENTS OF PERSONAL DATA

We may share certain categories of personal data that we collect in the ways described above with third parties who provide certain services related to the use of the software resources or the protection of our legitimate interests. These parties are thus in the position of processors of personal data. In particular, we may share your personal data with:

4.1.1 With other companies of the INTERLACTO, spol. s r.o. group, in particular for the purpose of necessary professional support;

4.1.2 with entities managing our IT systems and providing IT services for the purpose of using software resources;

– with external legal representatives for the protection of our legitimate interests;

– with government authorities or other third parties in the performance of our obligations under the law.

5. DATA SECURITY
We have put in place and maintain adequate technical and organisational measures, internal controls and information security processes in line with best business practice appropriate to the potential risk to you as a data subject. We also take into account the state of technological development to protect your personal data from accidental loss, destruction, alteration, unauthorized disclosure or access. These measures may include, but are not limited to, taking reasonable steps to ensure the accountability of relevant employees who have access to your data, employee training, regular backups, data recovery and incident management procedures, software protection of devices on which personal data is stored, etc.

6. YOUR RIGHTS AS A DATA SUBJECT
In accordance with data protection regulations, the data subject has the following rights:

The right of access to Personal Data, which means that the data subject may at any time request confirmation as to whether or not Personal Data concerning him or her is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, and for how long it will be processed. He or she also has the right to obtain a copy of the Personal Data, the first provision of which is free of charge, and further provision of which may be subject to a reasonable charge for administrative costs.

The right to rectification of Personal Data, which means that it is possible (and necessary) to request the rectification or completion of Personal Data should it be inaccurate or incomplete.

The right to erasure of Personal Data, which means that the Personal Data must be erased if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) consent is

withdrawn and there is no further reason for the processing, (iii) an objection to the processing is raised and there are no overriding legitimate grounds for the processing, (iv) the processing is unlawful, or (v) a legal obligation to do so exists.

The right to restrict the processing of Personal Data, which means that until the disputed issues regarding the processing of Personal Data are resolved, specifically if (i) the accuracy of the Personal Data is contested, (ii) the processing is unlawful, but instead of erasure, only restriction of processing is requested, (iii) the Personal Data is no longer needed by the Party for the purposes of the processing, (iv) or where an objection to the processing has been raised, the other Party may only have the Personal Data stored and further processing is subject to consent or the data is needed for the establishment, exercise or defence of legal claims.

The right to data portability, which means that the data subject has the right to obtain his or her Personal Data that he or she has provided to the other party with consent to processing or for the purposes of performance of a contract in a structured, commonly used and machine-readable format and, where technically feasible, to have that data transferred to another controller.

The right to object to the processing of Personal Data under Article 21 of the Regulation, which means the possibility to object in writing or electronically to the processing of Personal Data.

Right to withdraw consent – you may withdraw your freely given consent to the processing of Personal Data at any time free of charge. However, your withdrawal of consent is without prejudice to the processing of your Personal Data to the extent necessary for the performance of other obligations imposed on us by law or regulation.

All of the rights mentioned above can be exercised in writing by registered letter sent to the address of the registered office of INTERLACTO, spol. s.r.o., or electronically to the e-mail address: interlacto@interlacto.cz.

7. COOKIES
To improve the provision of our services, to ensure the functionality of the website, to measure website traffic, to target advertising and for social networking, we use cookies on our website.

Cookies are considered to be small amounts of data that the browser stores on the User’s computer. We collect data about the browser used, operating system, IP address, display resolution (Google Analytics). None of this data is linked to a specific person and this data is anonymous to us.

You have the option to set the level of protection of the use of cookies in your browser or to switch them off completely.

8. UPDATES TO THE PRIVACY POLICY
We may modify or update this Privacy Policy from time to time. Any changes to this Privacy Policy will become effective when we post the updated Privacy Policy on this website.