Privacy Policy

Information on the Processing of Personal Data of Customers of ALUKOV a.s.

Who are we and what is our position with regard to the processing of personal data?

ALUKOV a.s., with its registered office at Orel No. 18, 538 21 Slatiňany, Company ID No.: 64257746, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section B, File No. 3254, acts in relation to the personal data of its customers as the controller of personal data (hereinafter also referred to as the “Controller”).

ALUKOV a.s. processes the personal data of all its customers who act as contracting parties under a contract for work for the manufacture/assembly/installation of ALUKOV a.s. products, or who are interested in concluding such a contract for work, and who are at the same time natural persons, or who are listed as contact persons (natural persons) of legal entities (hereinafter referred to as the “Customer”).

In accordance with which legal regulations do we process your personal data?

Your personal data are processed on the basis of and in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).

Personal data are always processed for specific purposes and by means and methods corresponding to the applicable legal basis within the meaning of Article 6 of the GDPR.

This Information on the Processing of Customers’ Personal Data contains transparent information pursuant to Articles 13 and 14 of the GDPR as well as information on the rights of data subjects pursuant to Articles 15 to 22 of the GDPR.

The Controller bears full responsibility for the processing of Customers’ personal data and has adopted internal organizational, technical and other measures to ensure the security and protection of processed personal data, as set out in the Internal Directive on the Processing and Protection of Personal Data of ALUKOV a.s. (hereinafter the “Directive”).

How can you contact us regarding your personal data?

Customers have the right to contact ALUKOV a.s., as the Controller, with any questions concerning the processing and protection of personal data and to exercise their rights as data subjects, as follows:

in writing by letter/notification to the Controller’s registered office:
Contact Point for Personal Data Protection – ALUKOV a.s., Orel 18, 538 21 Slatiňany
electronically via the Contact Point e‑mail address for the purpose of unsubscribing:
📧 odhlasit@alukov.cz
electronically via the Contact Point e‑mail address for the purpose of data modification:
📧 gdpr@alukov.cz
by telephone at:
☎ +420 469 681 488
in person at the Personal Data Contact Point located at the reception of ALUKOV a.s., Orel 18, 538 21 Slatiňany

You are or would like to become a customer. What personal data do we need and how do we process them?

With regard to the scope of processed data categories, the Controller processes the following personal data of Customers:

during negotiations of a contract for work: first name, last name, e‑mail address, telephone number, residence/contact address;
under contracts for work: first name and last name, business name (if applicable), residence address or registered office, Company ID number (if assigned), VAT number (if assigned), e‑mail address, telephone number;
where the Customer (client) is a legal entity: with regard to contact persons (natural persons): first name, last name, e‑mail address, telephone number.

The above personal data are a necessary prerequisite for concluding a contract for work (identification of contractual parties, delivery and installation/assembly of products, handling of complaints, etc.). Without providing these data, the contract cannot be concluded.

Marketing and commercial communications

For the purpose of sending marketing and commercial communications, we process:

e‑mail address (for electronic communications),
first name, last name and contact address (for written communications).

These personal data are necessary in order to deliver such communications. Without them, we unfortunately cannot send you marketing or commercial messages.

Who else processes your personal data?

Personal Data Processors

In relation to the personal data of Customers with whom it has concluded a contract for work, the Controller has contractually entrusted the following entities (processors) with further processing of personal data:

the company’s IT network administrator, administrators of websites and web applications, subsidiaries, contractual partners of the distribution network, IPC TEAM, and contractual suppliers, strictly for the purpose of order fulfilment;
personal data may also be transferred to attorneys or law firms for the purpose of handling potential disputes arising from contracts for work.

Guarantees

We have concluded personal data processing agreements with all processors ensuring at least the same level of protection of personal data as provided under these Personal Data Protection Principles.

For what purposes and on what legal grounds do we process your data?

Purposes of personal data processing

The Controller processes selected personal data of Customers for the following purposes:

performance of a business contract / negotiation of a contract for work;
protection of property and personal safety (video recordings from camera systems when Customers visit the Controller’s premises);
fulfilment of obligations arising from tax and accounting regulations;
only with explicit consent: sending commercial and marketing communications, including offers of the Controller’s goods and services, information on promotions and discounts, monthly newsletters, or invitations to marketing and social events organised by the Controller;
only with explicit consent: creation and use of photographs or video recordings for promotion of the Controller’s products and services.

Legal bases for processing

The legal bases for processing personal data within the meaning of Article 6 of the GDPR are:

performance of a contract (contract for work);
fulfilment of legal obligations of the Controller (especially accounting and tax obligations);
legitimate interests of the Controller;
consent of the Customer (marketing communications, photographs, video recordings).

Existing Customers from whom the Controller obtained an e‑mail address in connection with the sale of a product may be sent commercial communications concerning similar products even without prior consent, in accordance with Act No. 480/2004 Coll., on certain information society services. Customers may always opt out of such communications free of charge.

How and by what means do we process your data?

Methods and means of personal data processing

Personal data of Customers are processed by the Controller using the following means:

automated processing
- in information systems: CRM system CONTACT PRO, accounting system POHODA, order records and web content management system;
- camera system;
manual processing
- in paper form: contracts for work (including orders/order confirmations), delivery notes, handover reports, complaint records, price offers, affidavits, installation evaluation questionnaires, tax documents (especially invoices and corrective tax documents).

The Controller does not use personal data for profiling or automated individual decision‑making.

How long do we retain your personal data?

Data retention period

Personal data of Customers are processed for the following periods:

until negotiations of the contractual relationship are terminated if no contract is concluded;
for the duration of the contractual relationship (including warranty period);
for the period required by tax and accounting regulations (up to 10 years);
in the event of a legal dispute, for the duration of out‑of‑court settlement or relevant judicial proceedings;
until consent is withdrawn, where processing is based on explicit consent (marketing communications).

Marketing communications

Marketing communications include offers of the Controller’s goods and services, information on promotions and discounts, monthly newsletters, or invitations to marketing and social events.

Such communications may be sent:

based on your explicit consent, provided in writing or electronically, or via our website
(https://www.alukov.cz/katalogy), with the right to opt out at any time free of charge; or
to existing Customers whose e‑mail address was obtained in connection with the sale of a product, in accordance with applicable law, with the right to opt out at any time.

Required personal data

In the case of written consent or an e‑mail request: e‑mail address, first name and last name;
in the case of subscription via the website: e‑mail address only, with subsequent confirmation.

Consent may be withdrawn at any time using the opt‑out link in the communication or by any of the above methods.

Request and enquiry forms

If you complete an enquiry form on our website (footer at www.alukov.cz or https://www.alukov.cz/kontakt), you do so for the purpose of expressing interest in our products and services and requesting additional information. This contact does not create any contractual obligation. Based on the provided information, we will contact you to find the most suitable technical and pricing solution.

Required data:

first name, last name, postal code, telephone number, e‑mail address and a brief description of requested products;
optionally street and city, to forward the request to the nearest branch.

Do we process sensitive personal data?

Sensitive personal data (special categories of personal data under the GDPR) include data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, sexual life, or criminal convictions.

We do not collect or process any sensitive personal data.

Video surveillance

If you visit our premises in person, video cameras may record you.

The camera system is operated by the Controller at its registered office and premises at:

Orel 18, 538 21 Slatiňany
Kočí 202, 538 61

The system consists of 22 cameras monitoring entrances, access points and handling areas.

Processing conditions:

purpose: protection of property and personal safety;
legal basis: legitimate interests of the Controller;
no consent required;
data subjects: employees, agency workers, suppliers, apprentices/students and visitors;
data category: visual recordings (faces, figures);
storage location: on‑site at the Controller’s premises;
retention period: 7–10 days from recording;
security measures: restricted access, secured storage rooms.

Monitored areas are clearly marked with information signs.

What rights do you have as a data subject?

Customers have the following rights pursuant to Articles 15–22 of the GDPR:

the right to withdraw consent at any time;
the right of access to personal data;
the right to rectification of inaccurate data;
the right to erasure (“right to be forgotten”);
the right to restriction of processing;
the right to data portability;
the right to object to processing;
the right not to be subject to automated decision‑making, including profiling.

You also have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
E‑mail: posta@uoou.cz

Cookies

When using our website, your personal data may be processed through cookies. More information on our use of cookies is provided below.

Cookie settings

You may adjust which cookies are used on our website using the following settings. A description of each cookie type is available in the table on this page.

Necessary cookies

These cookies are essential for the operation of the website and its features, such as privacy settings, login or form submission. They do not require user consent and may be blocked in your browser, although this may limit site functionality.

Analytical cookies

These cookies allow us to analyse traffic and improve site performance. All collected data are aggregated and anonymous.

Marketing cookies

These cookies are used to display advertisements on third‑party websites that better match your interests and to measure advertising effectiveness.