Privacy Policy

This Privacy Policy explains how we process personal data of our customers and website visitors in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and Act No. 480/2004 Coll., on Certain Information Society Services.

1. Data Controller

The controller of your personal data is PAS Jablonec a.s., Company ID: 25411322, with its registered office at Vzdušná 25, 466 01 Jablonec nad Nisou, Czech Republic.

• Email: pas@pas-jablonec.cz
• Phone: +420 483 423 111

2. Categories of Personal Data

We process personal data that you provide to us directly or that we obtain in connection with the performance of a contract, in particular identification and contact details and data necessary for order processing and delivery.

3. Legal Basis for Processing

Personal data are processed on the basis of one or more of the following legal grounds:

• performance of a contract or pre-contractual measures,
• legitimate interests of the controller,
• your consent, especially for marketing purposes where required by law.

4. Purposes of Processing

• processing and fulfillment of orders,
• compliance with legal obligations,
• marketing communication in accordance with applicable laws,
• customer satisfaction surveys,
• publication of user comments where voluntarily submitted.

5. Recipients of Personal Data

Personal data may be disclosed to third parties involved in order fulfillment, such as carriers, payment service providers, IT service providers, accounting and marketing service providers. All processing is carried out in accordance with GDPR and with appropriate technical and organizational safeguards.

6. Data Retention Period

Personal data processed for contractual and legal purposes are stored for the duration of the contractual relationship and thereafter for the period required by applicable legal regulations.

Personal data processed on the basis of consent are stored until the consent is withdrawn, but no longer than 10 years, unless a shorter retention period is required or justified.

7. Rights of Data Subjects

In accordance with GDPR, you have the right to:

• access your personal data,
• request rectification or erasure of personal data,
• request restriction of processing,
• object to processing,
• request data portability,
• withdraw your consent at any time.

You also have the right to lodge a complaint with the competent supervisory authority.

8. Data Security

We have implemented appropriate technical and organizational measures to ensure the security, confidentiality and integrity of personal data and to prevent unauthorized access.

9. Final Provisions

We reserve the right to update this Privacy Policy at any time. The current version is always available on our website.