Privacy Policy

I. Introductory Provisions

This document was prepared by HGN Power CZ s.r.o., Company ID (IČO): 11976063, with its registered office at Na Šafránce 1803/24, 101 00 Prague 10, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague (hereinafter referred to as „HGN Power CZ“).

The purpose of this document (hereinafter referred to as the „Document“) is to inform about the principles and procedures for the processing of personal data within the meaning of Article 4(2) of the GDPR Regulation specified below.

This Document is issued by HGN Power CZ, which is also, together with other companies, a member of a concern within the meaning of Section 79 of Act No. 90/2012 Coll., on Business Corporations, as amended. This Document also applies to the rights and obligations of entities related to the processing of personal data.

HGN Power CZ obtains and processes all personal data in accordance with the applicable legal regulations, in particular Act No. 110/2019 Coll., on the Processing of Personal Data (hereinafter referred to as „PDPA“), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (hereinafter referred to as „GDPR“) and Act No. 480/2004 Coll., on Certain Information Society Services, all as amended.

The purpose of processing any personal data is always determined only by the scope of the specific service provided or the purpose of processing. For easier orientation in this Document, any natural person whose personal data is managed and processed by HGN Power CZ shall be referred to as the „Data Subject“. A customer of HGN Power CZ is a natural or legal person who has entered into a contractual relationship with HGN Power CZ (hereinafter referred to as the „Customer“).

II. Data Controller

The controller of personal data is HGN Power CZ s.r.o., Company ID (IČO): 11976063, with its registered office at Na Šafránce 1803/24, 101 00 Prague 10, Czech Republic (hereinafter referred to as the „Controller“).

Contact details of the Controller:

  1. Phone: +420 123 456 789
  2. Email address: info@hgnpower.cz
  3. Correspondence address: Na Šafránce 1803/24, 101 00 Prague 10, Czech Republic

III. Processed Personal Data and Their Classification by Category

The Controller processes in particular the following personal data of Data Subjects:

  1. identification and address data: title, first and last name, residential/registered address, billing address, date of birth, Company ID (if assigned), Tax ID (if assigned), signature;
  2. contact data: telephone number, email address, data box ID (if applicable);
  3. electronic data: IP address, location data;
  4. other personal data related to the contractual relationship: bank account number, other data related to the contractual relationship;
  5. other personal data related mainly to employees, sales representatives and suppliers of the Controller, the processing of which is required by law, e.g. for accounting, tax records, payroll accounting and personnel records;

hereinafter collectively referred to as „Personal Data“.

The Controller typically obtains Personal Data directly from Customers. This data is obtained through the contact form available on the website www.hgnpower.cz. Additional Personal Data is obtained during negotiations on the conclusion of a contract, during its performance and also from third parties.

IV. Purpose of Processing Personal Data

The Controller processes Personal Data for the purposes of communication with Data Subjects, i.e. potential and/or existing Customers, for the purposes of negotiating and concluding a contract and exercising rights and obligations under the contract, i.e. for recording orders, their execution and providing services related to the contract (hereinafter referred to as „Services“).

The legal basis for processing Personal Data is primarily the performance of a contract to which the Data Subject is a party, or the implementation of measures taken prior to the conclusion of a contract at the request of the Data Subject, all pursuant to Art. 6(1)(b) of the GDPR.

The Controller also processes Personal Data of the Data Subject for marketing purposes, in accordance with Art. 6(1)(f) of the GDPR. The legal basis for such processing is the legitimate interest of the Controller.

The Controller also processes Personal Data where the legal basis is the fulfilment of legal obligations applicable to the Controller, in accordance with Art. 6(1)(c) of the GDPR.

The Controller processes Personal Data on the basis of consent to the extent necessary, with reference to Art. 6(1)(a) of the GDPR.

V. Method of Processing Personal Data

Personal Data of Data Subjects is processed by the Controller manually or automatically through the Controller’s employees or third parties providing services to the Controller to enable the proper performance of the contract. The Controller does not use automated decision-making or profiling when processing Personal Data.

The Controller processes Personal Data using organisational, physical and software security measures, in particular through secured databases, access rights settings for employees to the relevant software, physical security of premises and data carriers, and software protection against unauthorised access to data via the internet.

The Controller processes Personal Data for the period necessary to fulfil the purpose of processing, i.e. to fulfil obligations under the contract, for the period necessary to settle all rights and obligations under the contract and for the period stipulated by law.

VI. Rights of the Data Subject

Each Data Subject has the right in relation to their Personal Data to request from the Controller:

  1. right of access to their Personal Data – the Data Subject has the right to request that the Controller provide access to their Personal Data processed within the meaning of this Document;
  2. right to explanation and rectification of their Personal Data – if the Data Subject believes that the Controller processes their Personal Data in breach of this Document or legal regulations, they are entitled to request an explanation and remedy;
  3. right to erasure of their Personal Data – the Data Subject is entitled to request the Controller to erase their Personal Data if the data is no longer necessary for the defined purposes of processing, the Data Subject has withdrawn consent, the data must be erased due to a legal obligation, or the data has been processed unlawfully;
  4. right to restriction of processing of their Personal Data;
  5. right to object to the processing of Personal Data;
  6. right to data portability – the Data Subject has the right to receive Personal Data concerning them in a structured, commonly used and machine-readable format;
  7. right to withdraw consent at any time – if the processing of Personal Data is based on consent, the Data Subject has the right to withdraw consent at any time.

The Data Subject has the right to lodge a complaint with the supervisory authority regarding Personal Data if they believe that the processing of their Personal Data has violated the GDPR or PDPA. The supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).