1. Controller
The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is CAMEX, spol. s r.o., Company ID 00526886, registered office Zámecká 375, 250 64 Měšice, Czech Republic (the “controller”).
Contact person: David Proška, Zámecká 375, 250 64 Měšice, e-mail proska@camex.cz, phone +420 605 873 422.
The controller has not appointed a data protection officer.
2. What data we process
We only process data that you provide to us yourself or that we obtain while fulfilling your order:
- from the enquiry form: name, company or institution, e-mail, phone (if provided), enquiry subject, the text of your message and any files you attach (drawing, specification);
- from e-mails or phone calls: the details you share with us;
- when you place an order and we perform a contract: identification and contact details and the data necessary to perform the contract;
- from your customer account in the e-shop (eshop.camex.cz): company details (name, company ID, VAT ID, registered office and delivery address), contact person’s name, e-mail, phone, your password in unreadable form and your order history.
When you send the form, we also briefly process the IP address of your connection, solely to protect the form against misuse (limiting the number of submissions). We do not store it with the enquiry and delete it within 24 hours at the latest. The e-shop protects logins in a similar way: it records failed login attempts only in unreadable form (a fingerprint of the e-mail and IP address) and deletes them after 24 hours.
3. Purpose and legal basis
- Handling your enquiry and pre-contractual steps at your request, Article 6(1)(b) GDPR. Without contact details we cannot reply to you.
- Performance of a contract and exercising the rights and obligations arising from it, Article 6(1)(b) GDPR. Without the necessary data a contract cannot be concluded or performed.
- Compliance with legal obligations, such as accounting and tax obligations, Article 6(1)(c) GDPR.
- Protecting the form against misuse, the controller’s legitimate interest under Article 6(1)(f) GDPR.
- Sending commercial communications to existing customers, the controller’s legitimate interest under Article 6(1)(f) GDPR in conjunction with Section 7(2) of Czech Act No. 480/2004 Coll. To others only with your consent, Article 6(1)(a) GDPR. You can opt out at any time.
Your enquiry reaches us by e-mail, together with any attachments. Neither the enquiry nor the attached files are stored on the website, and we do not use them for any other purpose.
The controller does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR.
4. How long we keep data
- We keep an enquiry that does not lead to a contract for no longer than 3 years after our last communication, so that we can follow up on earlier discussions.
- We keep data from a contractual relationship for as long as necessary to exercise the rights and obligations arising from it and to assert claims, for no longer than 15 years after the relationship ends, and for any further period required by law.
- We keep your e-shop customer account for as long as it exists; we will close it at your request.
- We keep orders and related documents for the period required by accounting and tax legislation.
- We keep the IP address from the form and records of login attempts for no longer than 24 hours.
After this period we delete the personal data.
5. Who has access to the data
Only employees authorised by the controller have access to personal data. Recipients of personal data may also include:
- the web hosting and e-mail service provider on whose servers the website and e-mail run (processor);
- persons involved in delivering goods and services or processing payments under a contract;
- persons providing marketing services.
The controller does not intend to transfer personal data to a third country (outside the EU) or to an international organisation.
6. Cookies
This website (camex.cz) does not use cookies or any analytics or advertising tools. Fonts and images are loaded directly from our website, not from third-party servers. Links to maps and project websites lead to other sites with their own policies.
The e-shop (eshop.camex.cz) uses only one strictly necessary cookie, camex_eshop. It remembers your cart and your login and is deleted when you close the browser. The e-shop cannot work without it, so we do not ask for consent to it (Section 89(3) of Czech Act No. 127/2005 Coll.). The e-shop uses no analytics or advertising cookies.
7. Your rights
Under the conditions set out in the GDPR, you have the right:
- of access to your personal data (Article 15 GDPR);
- to rectification (Article 16 GDPR) or restriction of processing (Article 18 GDPR);
- to erasure (Article 17 GDPR);
- to object to processing (Article 21 GDPR);
- to data portability (Article 20 GDPR);
- to withdraw your consent at any time, in writing or by e-mail to the controller’s contact given in section 1.
If you believe your right to the protection of personal data has been infringed, you can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).
8. Security
The controller has taken appropriate technical and organisational measures to secure personal data, including securing electronic and paper records. The website communicates only over an encrypted connection (HTTPS). Only persons authorised by the controller have access to personal data.
9. Final provisions
By sending an enquiry through the form, you confirm that you have read this policy.
The controller may change this policy. The new version will be published on this page.
This version replaces the policy effective from 2 April 2019. The Czech version is binding.