Privacy Policy

I. Basic Provisions

1. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) is EneSo s.r.o., Žitavská 56/50, Liberec XI-Růžodol I, 46001 Liberec, Company ID: 22772804 (hereinafter referred to as “controller”).

2. The controller’s contact details are:

   • Address: EneSo s.r.o., Žitavská 56/50, Liberec XI-Růžodol I, 46001 Liberec

   • Email: alois.laska@eneso.cz, Phone: +420 605 502 676

3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. The controller has not appointed a data protection officer.

II. Legal Grounds for Personal Data Processing

1. The legal basis for processing personal data is the performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR (hereinafter referred to as “Performance of the Contract”) – the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

2. The controller does not use automated individual decision-making within the meaning of Article 22 of the GDPR.

III. Purpose, Categories, and Sources of Personal Data

IV. Data Retention Period

1. The controller stores personal data:

   • In the case of an inquiry, only for the purpose of responding or processing your request — for the duration of contract negotiation, no longer than 1 year from your inquiry unless consent for further processing is given.

   • In the case of an order, for the time necessary to exercise rights and obligations from the contractual relationship and to enforce claims from such relationship (up to 15 years from the termination of the contract).

2. After the retention period expires, the controller will delete the personal data.

V. Recipients of Personal Data (Controller’s Subcontractors)

1. Recipients of personal data may include:

   • Providers of web/e-shop services (Alexandr Zlesák, DiS. - AZ Computers, Company ID 70163278) and other related services.

   • The data subject's personal data may also be provided to delivery service providers and to persons providing legal, accounting, and IT services to ensure compliance with legal obligations. The controller does not intend to transfer personal data to a third country, international organization, or other third parties than those mentioned above.

VI. Your Rights

1. Under the GDPR, you have the following rights:

   • Right to access your personal data pursuant to Article 15 GDPR,

   • Right to rectification of personal data pursuant to Article 16 GDPR, or restriction of processing pursuant to Article 18 GDPR,

   • Right to erasure of personal data pursuant to Article 17 GDPR,

   • Right to object to processing pursuant to Article 21 GDPR, and

   • Right to data portability pursuant to Article 20 GDPR.

2. You also have the right to lodge a complaint with the Data Protection Authority if you believe your rights under data protection law have been violated.

VII. Conditions for Securing Personal Data

1. The controller declares that all appropriate technical and organizational measures have been taken to secure personal data.

2. The controller has adopted technical measures to secure data storage and personal data stored in physical form, particularly passwords, antivirus software, backups, and locked storage.

3. The controller declares that only authorized persons have access to personal data.

VIII. Final Provisions

1. By submitting an order through the online order form or an inquiry via the contact form, you confirm that you are familiar with the terms of personal data protection and that you accept them in full.

2. The controller is entitled to change these terms. The new version of the personal data protection terms will be published on the controller’s website.

These terms take effect on 01.01.2025.