We respect the confidentiality of your personal data and always proceed in accordance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), and follow this Policy. The Company uses this Policy to inform you about how, for what purposes and to what extent the Company uses your personal data and what information about you as a user of the Websites the Company may process.
“Personal data” means any information relating to a data subject;
“Data subject” means any identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2. Legal ground, purpose and extent of the processing of your personal data
Our Company may process your personal data for the following legal grounds and for the following purposes:
a. Provision and improvement of and support for our Websites
Our Company processes various information about your online activity, e.g. the time of access to our Websites, the time spent on our websites, conversions (i.e. completed activity on our Websites), etc., for the purposes of technical support and improvement of our Websites as well as monitoring of functionalities thereof under the lawful ground of legitimate interest (operation of the Websites, statistical purposes and data security).
b. Contact forms
If you use the contact forms on our Websites for your queries relating to our Company’s services, we process the personal data provided by you. For the above purposes, our Company processes your personal data under the lawful ground of negotiation and performance of a contract and legitimate interest.
c. Order forms
If you use the order forms on our Websites for the order of any software (trial) license, we process the personal data provided by you. For the purposes of fulfilment of your order from the side of our Company, our Company processes your personal data under the lawful ground of negotiation and performance of a contract.
If you subscribe to our newsletter, our Company processes your e-mail address in order to provide you with the respective news in the manner described below. Our Company processes your e-mail address for the newsletter purposes based on you consent, which you can withdraw at any time. Our Company sends newsletter for the following purposes:
1. informational bulletins;
2. segmentation forms to select the visitors who may be invited to early access stage of Company’s products; and
3. invitation to early access stage of Company’s products.
The Company may track your response to the newsletter sent under points 2. and 3. above.
3. What sources do we collect your personal data from?
We collect your personal data from multiple sources:
a. Data collected from you as the data subject
We primarily collect the personal data about you that you provide voluntarily yourself (e.g.in the consent to the personal data processing) or the data that we acquire in connection with your queries, comments, requests, etc.
c. Web analytics tools
Our Websites also use online web analytics services and social plugins for the purposes of continuously optimising the user interface and to maximise its userfriendliness. These automatically collected data are not tied to data from other sources. However, we reserve the right to back-check these data if we are notified of a specific risk of their misuse.
d. Log files
Our Company and the providers hosting our Websites use their databases to log data about each access to the server where the online presentation of our Websites is located. Hence whenever you visit our Websites, your web browser automatically sends certain information to the Websites server to enable communication between your browser and the server. This information is then saved in the so-called logfiles.
e. Google Analytics
Our Company uses the Google Analytics plugin from Google Ireland Limited, Gordon House Barrow Street Dublin 4, D04E5W5 Ireland (“Google”). The Google Analytics plugin analyses your use of our Websites as well as other online activities and connects the data generated by Google Analytics with the cookies of our Company. However, as our Company has activated the IP address anonymisation feature, your IP addressed is anonymised once the data enters the Google Analytics collection network.
f. Google Ads
g. Facebook Pixel
Facebook Pixel from Facebook Ireland Limited, 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland (“Facebook”) is used by our Company to generate reports about your online activity on our Websites (e.g. whether you visited our Websites after viewing an ad on Facebook or whether certain action, such as a purchase, was performed following yourvisit to our Websites.
You give your consent to using the Facebook Pixel cookie with your cookies settings. If you deny your consent, the Facebook Pixel cookies are not used. Please note that the Facebook Pixel cookies from our Websites may also be used by third parties, including Facebook, to collect or obtain acquire information or to provide advertising metric and targeting services. For more information pleasevisit https://www.facebook.com/legal/terms/businesstools.
You can change the privacy settings at Twitter in the account settings under http://twitter.com/account/settings.
Our Websites use features of the LinkedIn social network. Provider is the LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, Ireland. Each time you access our Websites that contain LinkedIn’s features, a connection is established to a LinkedIn server. LinkedIn is informed that you have visited our Websites with your IP address. If you click on the “Recommend-Button” of LinkedIn and you are logged in to your account with LinkedIn, LinkedIn is able to assign your visit to you and your user account. As the provider of our Websites, we have no knowledge of the content of the transmitted data and their use by LinkedIn.
For more information, see the LinkedIn privacy statement at: https://www.linkedin.com/legal/privacy-policy.
If you are interested in the specific source of the processing of your personal data, you may use the contact details provided below to submit your query to us.
4. Recipients of your personal data
Subject to the applicable legislation, our Company transmits your personal data to third parties (recipients) for the purpose of further processing, which parties process the personal data under a data processing agreement.
In particular, the above-mentioned recipients of the personal data include the following categories of recipients:
● entities from to the company group to which our Company belongs;
● administrators of our Websites;
● IT services providers and relay server operators;
● external legal counsel and debt collection agencies;
● social network operators;
● marketing software providers;
● law enforcement authorities, courts, administrative authorities where our Company is so obliged by the legislation.
5. Personal data processing period
We process personal data only for as long as the personal data are necessary for the achievement of the purpose of their processing. As soon as the purpose of the processing is achieved and there is no other purpose for which we would be authorised to process the personal data, we erase the personal data.
As regards personal data processed on the basis of your consent, we also erase your personal data if you withdraw your consent to the processing of your personal data.
If we process the personal data on the basis of legitimate interest and you object to their processing and unless there is are any prevailing legitimate grounds for the processing, your personal data will also be erased after we inform you about this fact.
6. Transfer of data to third countries
Your personal data might be also transferred to relay server operators and other IT services operators outside the European Union and the EEA countries. In such case, our Company has taken adequate measures to secure that your personal data are processed incompliance with GDPR.
7. Your rights as a data subject
As a data subject you have the following rights:
i. Right to be informed
ii. Right of access to personal data
iii. Right to rectification
iv. Right to erasure (‘right to be forgotten’)
v. Right to restriction of processing
vi. Right to data portability
vii. Right to object
viii. Right not to be subject to a decision based solely on automated processing, including profiling
ix. The right to lodge a complaint with the Office for Personal Data Protection or other relevant supervisory authority in connection with the processing of personal data
Except for the right to submit a complaint to the Office for Personal Data Protection or other relevant supervisory authority in connection with the processing of personal data, you may exercise all the rights listed above by making a request using any manner specified below. We will inform you about the action taken on your request within one month of receipt of your request and no later than within three months of receipt of your request if that period has been extended on reasoned grounds.
a. Right to be informed
We will always use this Policy and other notice, if required, to inform you in a concise, transparent, intelligible and easily accessible manner about the processing of your personal data from the moment we obtain personal data from you. If we do not obtain personal data from you directly, we will provide you the information within a reasonable period after obtaining them, but within one month at the latest, unless the provision of such information proves impossible or would involve a disproportionate effort (e.g. we have no contact information about you).
b. Right of access to personal data
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. If we process your personal data, we will provide you with the information that you request or that we are required to provide by the law.
c. Right to rectification
You have the right to the rectification of any inaccurate personal data concerning you and, taking into account the purposes of the processing, to have incomplete personal data completed, including by means of providing a supplementary statement. We communicate any rectification of personal data to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform about those recipients if you request it.
d. Right to erasure / right to be forgotten
We will erase your personal data without undue delay where one of the following grounds applies:
i. your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
ii. you withdraw the consent on which the processing is based and there is no other legal ground for their processing;
iii. you object to the processing of your personal data and there are no overriding legitimate grounds for the processing or you object to the processing of your personal data for the purposes of direct marketing;
iv. your personal data have been unlawfully processed;
v. your personal data have to be erased to comply with a legal obligation under European Union or Member State law to which the Company is subjected;
vi. your personal data have been collected in relation to the offer of information society services to a child.
The above does not apply to the extent that the processing of the personal data is required by applicable laws.
e. Right to restriction of processing
You have the right to restrict your personal data processing in the following cases:
i. the accuracy of the personal data is contested by you; in this case, the processing is restricted for a period enabling us to verify the accuracy of the personal data;
ii. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
iii. we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
iv. you have exercised your right to object the processing of the personal data; in this case, the processing is restricted until we determine whether our legitimate grounds override your legitimate interests.
As a result of restricted processing of personal data, we may continue to store the relevant personal data but they may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State. In such cases you will be informed before the restriction of processing is lifted.
f. Right to data portability
You have the right to receive your personal data processed by us provided that one of the following conditions is met:
i. the personal data are processed for a specific purpose on the basis of your consent;
ii. the personal data is processed by automated means;
iii. if the personal data are from a special category processed for one or more specified purposes on the basis of your explicit consent; or
iv. the processing of the personal data is necessary for the performance of a contract to which you are a party or in order to execute precautions accepted at your request prior to entering into a contract.
g. Right to object
As regards the processing of personal data under the legal ground of legitimate interest of our Company, you may object to the processing of your personal data on grounds relating to your particular situation described in the objection. You may object by using the contact details provided below. You have the right to object at any time to the processing of personal data for direct marketing purposes.
h. Right not to be subject to a decision based solely on automated processing, including profiling
We process your personal data with respect for your right not to be subject to a decision based solely on automated processing which significantly affects you, including profiling (i.e. any form of automated processing of personal data consisting of the use of personal data to analyse, predict or evaluate certain aspects concerning you – e.g. your economic situation, interests, etc.).
i. Right to file a complaint
If you disagree with the way we have handled your request, you may file a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů):
i. by electronic means at firstname.lastname@example.org;
ii. by phone at +420 234 665 111; or
iii. in writing to Pplk. Sochora 27, 170 00 Prague 7, Czech Republic,
or with another competent supervisory authority of a Member State.
8. Exercising your rights and obtaining more information about the processing of your personal data
In order to exercise your rights specified above or make any queries regarding this Policy or the processing of your personal data, please use the following contact details:
Postal address: Superface s.r.o., Šaldova 476/9, Karlín, 186 00 Praha 8
Telephone: +420 724 020 361
Data Protection Officer contacts
Name: Radek Novotný
Postal address: Superface s.r.o., Šaldova 476/9, Karlín, 186 00 Praha 8