Privacy Policy
How Allium processes your personal data in accordance with the GDPR.
We strive to tailor our products and services to your needs. To do so we need to use your personal data, which we process in accordance with Regulation (EU) 2016/679 of the European Union on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the GDPR.
Please take a moment to read how Allium processes your personal data. For this purpose we have prepared this Privacy Policy, divided into the following sections:
Data controller
The controller of personal data is Allium, s.r.o.
Allium, s.r.o.
Stamicova 11
623 00 Brno, Czech Republic
Company ID: 60703521
VAT ID: CZ60703521
Registered in the Commercial Register kept by the Regional Court in Brno, Section C, File 14904
(hereinafter referred to as the controller, Allium or we)
If you have any questions about how we collect, store and use personal data, please contact us at kadlecova@allium.cz.
Declaration
We declare that all internal processes concerning the processing of personal data are carried out in compliance with Act No. 101/2000 Coll., on the Protection of Personal Data, as amended, and since 25 May 2018 also in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation, GDPR).
What data we collect and process
We collect only standard personal data, not sensitive (special categories of personal data). Standard personal data includes in particular:
- Identification data – name, surname, job title, company name
- Contact data – address, phone, e-mail, or other ways we can reach you
- Other data – history of e-mail communication, meeting minutes
- Information about the devices you use to access our website (cookies)
Some of this data you provide to us directly, others we obtain by collecting information about interactions with you and how you use our products, or from publicly available sources. The data we collect depends on the context of your interactions with Allium.
Data you provide yourself on the following occasions:
- On first contact
- During e-mail communication
- During recruitment
- During meetings
- When filling in a form on the website
Data we obtain from other sources:
- Publicly available sources
- Cookies when you visit our website
- Third parties, such as your colleagues or business partners
How and why we process your data
We use your personal data for the following purposes:
Conclusion and amendment of contracts
We use the data to prepare contractual documentation and any amendments. This means that processing your personal data allows us to meet the legal requirement of entering into a contractual relationship.
Provision of the requested product or service
We use the data to fulfil orders, deliver products or services and to communicate with you. This means that processing your personal data allows us to pursue our legitimate interest in fulfilling orders.
Accounting
We use the data to issue accounting documents and keep our books. This means that processing your personal data allows us to meet the legal requirement to maintain accounting records.
Customising and developing our products
We use the data to develop our product range and services. This means that processing your personal data allows us to pursue our legitimate interest in testing and developing new products and services, as well as improving existing ones.
Contact and communication
We use the data to provide information and to contact you, for example by phone, e-mail, post or by responding to your messages on social networks. This means that processing your personal data allows us to pursue our legitimate interest in understanding and helping our customers.
Marketing
We use the data to promote and market the company and the products on offer, including sending promotional communications and presenting relevant offers. This means that processing your personal data allows us to pursue our legitimate interest in offering products and services that better match your interests.
For marketing communications we send by e-mail, we rely on your consent. You may withdraw it at any time. Communications related to an existing business relationship are an exception.
Meeting records
We use the data to record the course of meetings and the participants. This means that processing your personal data allows us to pursue our legitimate interest in keeping records.
Disputes and complaints
We use the data to resolve disputes, legal claims or complaints that concern you or Allium. This means that processing your personal data allows us to establish, exercise or defend legal claims or comply with statutory provisions.
We combine the collected data depending on the context, so that we can provide you with tailored products and services and make informed decisions in business matters for other legitimate purposes.
Data retention
Your personal data is retained for the time strictly necessary to provide products and services or for the duration of the contractual relationship, and further in accordance with statutory obligations and our archive rules. Where we process your personal data for the purpose of delivering commercial communications to your e-mail address, or in other cases where you have given us consent, we retain the data until you withdraw the relevant consent. Personal data we do not process on the basis of your consent is processed only for the duration of the purpose of such processing.
Where required by law, certain data may be retained beyond the retention period, in particular for archiving purposes – for the period necessary to comply with statutory archive limits and to fulfil statutory obligations relating to the administration of the company within the statutory limitation periods.
After the end of the contractual relationship, the purpose of processing, the archive period or the withdrawal of consent, we erase personal data that is processed electronically and properly shred paper records.
Your rights in connection with processing
You may contact us at any time about any of the following by sending a request to support@allium.cz.
Erasure of data
You have the right to have your personal data erased where the following conditions are met and no statutory exceptions apply:
- the data is no longer needed for the purposes for which it was collected,
- you withdraw consent to the processing of your personal data,
- your personal data is processed on the basis of our legitimate interest and the legitimate grounds for processing do not prevail, or you object to processing for direct marketing,
- the personal data was processed unlawfully.
Access to your data
You can contact Allium at any time, free of charge, with a request for information on whether we process your personal data and, if so, request detailed information about that processing. We will provide you with information about what data we process about you, for what purpose, to whom your data has been provided, whether it has been transferred to a third country and how long we will retain your personal data.
Change or correction of your data
If during the contractual relationship any change occurs in your personal data, such as a change of name or e-mail address, or if you find that we are working with outdated or incorrect data, please let us know as soon as possible.
Objection to processing
You have the right to object to the processing or use of your data, for example for marketing purposes. We will consider your objection and stop processing the data if your rights and freedoms outweigh our compelling legitimate interests in processing the data or in establishing, exercising or defending legal claims.
If you object to direct marketing, we will stop using your personal data for direct-marketing purposes only.
Restriction of processing
You have the right to request a temporary restriction of processing where you believe that:
- we process inaccurate data – the restriction lasts for the time needed to verify the accuracy of the data;
- the processing of your data is unlawful and you refuse erasure, requesting restriction of use instead;
- your data is no longer needed for the above purposes but you require it for establishing, exercising or defending legal claims;
- you have successfully objected to the processing – the restriction lasts until it is verified whether the controller's legitimate grounds override your own.
You may request restriction of processing for only some of your personal data or for only certain processing purposes.
Data portability
You may contact us at any time to have your available data transferred to a third party according to your specification.
Complaint to the Office for Personal Data Protection
We would appreciate the opportunity to resolve your complaints, however you also have the right to complain directly to the Office for Personal Data Protection about how we have used your personal data.
Data security
Allium aims to protect and secure your personal data. In compliance with the requirements of applicable legislation, we implement all necessary security, technical and organisational measures to protect your personal data. Electronic data is stored in protected databases on servers that we own or that are dedicated to us. We protect your personal data against damage, destruction, loss and misuse. All persons who come into contact with our clients' personal data have a duty of confidentiality regarding the information obtained in connection with the processing of such data.