PRIVACY POLICY

SprayVision s.r.o., VAT: CZ07500769, Technologická 372/2, Pustkovec, 708 00 Ostrava (“we“) describes what personal data is processed, for what purpose and other relevant information according to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

We provide solution and services stipulated at https://www.sprayvision.com/ (“website”). In this document we inform you about processing of your personal data through our website.

Information on the use of cookies and similar technologies is contained in the Cookies policy below.

A. SCOPE OF PERSONAL DATA

We may process these types of personal data as personal data controller.

Identification information – name and surname.
Contact details – e-mail address.
Company information – information about company you are acting on behalf.
Communication data, i.e. information about communications with you, such as e-mails, messages, additional information.
Cookie data, i.e. data obtained from cookies and similar technologies (scripts, beacons) that we use. For more information what cookies are used, see our Cookies policy below. As cookies also contain personal data, we describe how we process them in this privacy policy.

All personal data are gathered directly from you or from your device with which you visit our website.

B. PURPOSES OF THE PROCESSING OF PERSONAL DATA

We process your personal data as a data controller for the processing purposes set out below, on the basis of the legal bases set out here, for a limited period of time and only to the extent described here.

B.1 Ensuring communication

We mainly process your personal data to ensure communication with you. That mean that if you use our contact form on website or insert your Contact detail to receive prospects or other materials, we use your personal data for exactly these purposes – communication, evidence of communication and ensuring answers and inquiries.

For this purpose, we process your Identification information, Contact details, Company information, Communication data.

The legal basis for this processing is our legitimate interest in ensuring communication. However, if the communication develops into a cooperation, the personal data may also be processed for the purpose of the performance of this contractual relationship as an introductory communication to the contractual performance.

The data are processed for the duration needed to ensure communication which may vary according to your request or message. The main determinant of the length is the period necessary for handling of the request and ensure the protection of our own legal interests.

B.2 Internal records and protection of our rights

We may process your data for the purposes of keeping internal records within our company, protecting our rights and legal claims.

For this purpose, we process your Identification information, Contact details, Company information, Communication data.

The legal basis for this processing is our legitimate interest in keeping internal records, statistics, and the protection of our rights. Personal data is kept for the duration of any limitation periods which is mainly 3 years subjectively.

B.3 Newsletters and commercial communication

From time to time, we may send you e-mails that are considered as commercial communication. However, we will only do it if you are our customer and you provide us with your e-mail or you subscribe to the newsletter list via our website or use other forms on our website.

For this purpose, we will process your e-mail address and your Identification information.

The legal basis for this processing is divided into two separate parts:

If you contact us via any form on the website, we will ask you for consent do send you marketing communication.
If you order our services, we process your personal data under our legitimate interest (direct marketing), however, you may opt-out at any time.

If you are our customer, in addition to objecting to the processing of data for this purpose, you may opt out of receiving any newsletter at any time by using the unsubscribe links provided in the footer of each message sent. Also, you may withdraw your consent at any time which has the same meaning as opt out described above.

B.4 Site operation and necessary functionality (a necessity)

We also process your personal data through Cookie data as mentioned above. For this purpose, we process personal data to ensure e.g. your consent preferences, user preferences, browser derails, technical information required by CMS of the website, information whether you are logged in or not.

For this purpose, we process Cookie data.

The legal basis for this processing is our legitimate interest in the proper functioning of our website. Personal data are processed, as a rule, for the duration of your visit to the website, for a maximum of 1 year from the date of collection.

B.5 Statistics of website (analytics)

We process your personal data to understand how visitors use our website. As part of this, we can monitor traffic to our website, optimize it and generally make your visit to the website smoother and more user-friendly.

For this purpose, we process Cookie data, mainly through third-party tools as defined below.

The legal basis for processing here is thus your consent given via the cookie bar. The personal data is processed until your consent is withdrawn, but in any case, until a maximum of 2 years after your visit to the website.

B.6 Web support and promotion (marketing)

We process your personal data for the purpose of sending advertising or tracking you on a website or multiple websites for similar marketing purposes.

For this purpose, we process your Cookie data, mainly through third party tools as defined below.

C. SHARING OF PERSONAL DATA

Your personal data may be in some cases for specific purposes shared with third parties that help us with processing of personal data or we are required to do so.

Your personal data may be shared with these personal data recipients:

Google Ireland Limited and Google LLC (which is registered under Data Privacy Framework) which provide us with analytical and marketing tools in connection with Cookie data.
Defiant, Inc., providing security and fraud prevention in connection with necessary cookies. The company has adopted Standard Contractual Clauses.
The Rocket Science Group LLC d/b/a Mailchimp in connection with newsletters and other commercial communication. The company is registered under Data Privacy Framework.
Provider of CRM system located in the Czech Republic in connection with your data if you are our customer.
Automattic Inc. in connection with all personal data gathered through our website, as Automattic is provider of WordPress website solution. The company is registered under Data Privacy Framework.
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement

Where we share your personal data with controllers and processors in third countries (outside the EEA), we only do so where there is a decision by the European Commission that a particular country outside the EEA provides an adequate level of data protection, including where controllers or processors have adopted additional data protection measures such as Binding Corporate Rules (BCRs) or Standard Contractual Clauses (SCCs).

D. YOUR RIGHTS IN PROCESSING AND THE POSSIBILITY OF EXERCISING THEM

In all matters related to the processing of your personal data, whether it is a question, the exercise of rights, sending a complaint to our hands, etc., you can contact us at info@sprayvision.com.

Your request will be processed without undue delay, at most within 1 month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further 2 months. We will, of course, always inform you of any such extension and the reason for it.

D.1 Right of access

You have the right to obtain confirmation from us as to whether or not we are processing your personal data.

If we process your personal data, you also have the right to request access to information about the purpose and scope of the processing, the recipients of the data, the duration of the processing, the right to rectification, erasure, restriction of processing and to object to the processing, the right to lodge a complaint with a supervisory authority and the sources of the personal data (this information is already provided in this document).

You can also ask us for a copy of the personal data we process. We provide the first copy free of charge; further copies may be subject to a fee. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.

D.2 Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time. However, the withdrawal of consent does not affect the lawfulness of the processing prior to such consent, nor does it lead to the termination of the processing of personal data that has already been anonymized.

D.3 Right to repair

You have the right to request us to correct inaccurate personal data concerning you. Depending on the purpose of the processing, you may also have the right to have incomplete personal data completed, including by providing an additional declaration.

D.4 Right to erasure (right to be forgotten)

You have the right to request the deletion of your personal data in cases where:

we no longer need your personal data for the purposes for which it was collected or processed;
you withdraw the consent based on which the personal data was processed and there is no further reason for processing it:
you object to processing and there are no other overriding reasons for processing, or you object to processing for direct marketing purposes;
personal data is processed in violation of the law.

However, you cannot exercise this right where the processing is necessary for compliance with our legal obligations or tasks entrusted to us in the public interest or for the establishment, exercise, or defense of legal claims.

D.5 Right to restriction of processing

You have the right to request restriction of the processing of your personal data in cases where:

you contest the accuracy of your personal data; in this case, you may request a restriction of processing until the accuracy of the personal data has been verified;
the processing is contrary to the law and instead of erasure, you request a restriction of the processing of personal data;
We no longer need your personal data for the purposes for which it was collected or processed, but you require it for the establishment, exercise, or defense of legal claims;
you have objected to the processing of your personal data; in this case, you may request a restriction of processing until it is verified that our legitimate interests prevail.

D.6 Right to portability

You have the right to obtain a copy of your personal data that we process by automated means on the basis of your consent or for the performance of a contract. We will transmit this data in a commonly used and machine-readable format to you or to a controller designated by you, if technically feasible. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.

D.7 Right to object

You have the right to object to the processing of your personal data that we process based on our legitimate interest. We will stop processing your data if there are no other overriding reasons for processing or if the processing is not necessary for the establishment, exercise, or defense of legal claims or if you object to processing for direct marketing purposes.

E. RIGHT TO FILE A COMPLAINT

You can also file a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.

F. CHANGES TO THIS INFORMATION

This processing information is effective as of TBD.