Privacy
Privacy Policy (GDPR)
Effective from 1 September 2026
1. Data controller
The data controller is IM Czech s.r.o., registered office Fráni Kopečka 798/4, Znojmo, Czech Republic; plant Bohumilický mlýn 438/6, 671 81 Oblekovice (the "controller"). Company ID: [TO BE COMPLETED], registered in the Commercial Register kept by [TO BE COMPLETED].
Contact for privacy matters: info@imczech.cz, phone +420 516 802 570.
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling enquiries, e-mail and phone communication | name, e-mail, phone, company name, message content | pre-contractual steps / legitimate interest (Art. 6(1)(b) and (f) GDPR) | for the duration of negotiations, max. 3 years after last contact |
| Performance of contracts with business partners | identification, contact and invoicing data of contact persons | performance of contract / legal obligation (Art. 6(1)(b) and (c) GDPR) | duration of the contract and thereafter per statutory periods (accounting records 10 years) |
| Recruitment – job applicants | CV, contact details, education and work history | pre-contractual steps (Art. 6(1)(b) GDPR) | for the duration of the selection process; longer only with consent (max. 1 year) |
| Website operation, security, statistics | IP address, cookies, technical data about device and browser | legitimate interest / consent (Art. 6(1)(a) and (f) GDPR) | see Cookie Policy |
3. Recipients of personal data
Personal data may be disclosed to the following categories of recipients:
- IT, web hosting and e-mail service providers,
- external accountants and tax advisers,
- carriers and logistics companies to the extent necessary for deliveries,
- public authorities where required by law,
- Google (Maps, YouTube) when embedded content is displayed on the website – see the Cookie Policy.
We do not transfer personal data outside the EU/EEA, except for Google services, which are covered by an adequacy decision of the European Commission.
4. Your rights
In relation to the processing of your personal data you have the right:
- to access your personal data and information about its processing,
- to rectification of inaccurate or completion of incomplete data,
- to erasure ("right to be forgotten") where the purpose of processing no longer applies,
- to restriction of processing,
- to data portability,
- to object to processing based on legitimate interest,
- to withdraw consent where processing is based on consent,
- to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
You can exercise your rights by e-mail at info@imczech.cz. We will respond within one month at the latest.
5. Security
We have taken appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Only authorised staff bound by confidentiality have access to the data.
6. Changes to this policy
We may update this policy from time to time. The current version is always available on this page.
This document is a draft prepared for IM Czech s.r.o. Complete the items marked [TO BE COMPLETED] and have the text reviewed by a lawyer before publishing.