Information concerning the processing of personal data

We handle and process your personal data in accordance with the applicable laws. Based on GDPR (General Data Protection Regulation) - since the new Regulation 2016/679 of the European Parliament and Council (Personal Data Protection Regulation), new requirements have also entered into force. In this way, we would like to inform you that we meet these requirements. The most important information can be found below, but if you have further questions concerning this, please do not hesitate to contact us at info@tufo.com, where we will be completely at your disposal.

TUFO, s.r.o.
registered office in Otrokovice, U Letiště 1857, posta code 76502
IČO: 25509900, VAT No.: CZ25509900
Registered in the Commercial Register maintained by the Regional Court in Brno, Section C,
Entry 29015

(the "Company")

COMPANY INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA

We appreciate our customers and in the context of changing legislation, we would like to introduce you to the information provided by Regulation (EU) 2016/679 of the European Parliament and of the Council on the Protection of Individuals regarding the Processing of Personal Data (GDPR)

The company is a personal data manager.

What personal information does the Company collect and process?

The company collects and processes this common personal data: basic identification data and contact details of our customers, i.e. name, surname, title, billing and delivery address, CRN, VAT number, telephone, e-mail and bank account details.

For what purposes does the Company use and process personal data?

The company processes personal data without the client's consent to meet legal obligations, contract negotiations and performance of the contract, and due to the legitimate interest of the data controller (direct marketing of its own products, sending business messages). Personal data is processed in electronic form by means of computer technology or in paper form.

We also process your personal data based on your consent. We process it only to the extent necessary. Based on your consent to the processing of personal data, our company processes and manages through computer systems, the computer systems of our processors and also in paper form.

You also give us the consent to the processing of personal data for our marketing purposes:

• Newsletter subscriptions - Sending up-to-date information and news about our product portfolio, alerting you to accompanying events and spreading awareness about our activities. You can opt-out of newsletter subscriptions at any time either directly in the footer of each newsletter or at our email address: info@tufo.com
• Registration / Client Zone - a non-public space on our website that serves to summarise your completed or unfinished orders. If you require a profile deletion, you can always contact us at info@tufo.com
• Contact form: Career - Through this form you can send us a job application for a position in our company. All submissions and data are only for one purpose - application for a position in our company. We process the data in accordance with all legislative and internal norms.

How long does the Company processes the data?

The Company processes personal data in a manner defined by and dependant on its purpose; for the duration of any contractual relationship and for the next 10 years after the termination of the last contractual relationship with the Company; or until the consent to the processing of the data has been withdrawn.

Do we need to provide personal data to the Company?

The provision of personal data is, as well as the conclusion of a contract with the Company, voluntary. However, some data is necessary to meet legal obligations when entering into a contract for the supply of goods or the provision of a service, and without some data, the Company cannot provide the required supply of goods or services. The data required for the purposes mentioned above is: name and surname if the natural person is a business person, also their business name, title or other designations, headquarters and, where applicable, delivery address for goods, telephone, e-mail address.

From what sources does the Company collect personal data?

We process the data you have provided in connection with the negotiation of a contract for the delivery of goods or services (ordered through: e-shop, e-mail, telephone, personally at our premises).

How does the Company ensure the protection of personal data?

Personal data is under physical, electronic and procedural control, and the Company has technical, security and control mechanisms to ensure maximum protection of processed data from unauthorised access or transmission, loss or destruction, and other possible misuse. Everyone who encounters the personal data of their clients in the performance of their work or contract obligations is bound by a contractual duty of confidentiality.

To whom does the Company provide or pass on personal data?

The company passes personal data to state authorities if this obligation is set by the law and further to the extent necessary to protect the rights of the Company. Society can entrust the processing of data to a third party, the so-called processor. Processing is possible only on the basis of a contract that obliges the processor to provide the same data protection as the Company itself. Data can thus be passed on to suppliers providing the Company with the services of sending mail and delivering goods.

What are your rights in relation to processing and forwarding?

In accordance with the applicable laws, you can enforce your rights as the subject of the data. You have the right to access the personal data we process about you, the right to transfer the selected personal data directly to another administrator and the right to request the repair of personal data. You can request the deletion of personal data, or limitation of its processing unless it is necessary to further process it to meet legal obligations or if it is needed to continue to provide you with services. You can apply for these rights in person at the registered office of the company, in writing to the address of the company's registered office or via email to info@tufo.com.

What are your options to restrict the processing and transfer of personal data?

In the case of the Company processing personal data with your consent, you can withdraw your consent at any time. Even if your data is processed with a legitimate interest, you may object to such processing. We will evaluate each such objection and inform you of the outcome. We always consider data processing objections concerning marketing; you can easily contact us here: www.tufo.com

Personal Data and Cookies?

As is common practice, we use Cookies on our website www.tufo.com. (we also use Google Analytics) to collect data about your device (e.g., IP address and other), your location, and visit (visit date and time).

Cookie files are short-term so-called "session cookies" that are stored in your browser only until it is closed, and long-term so-called "persistent cookies" that remain stored on your computer longer (depending on the cookie and browser settings) or until you remove them yourself.

You have the option not to accept cookies when you enter our website by not confirming your consent to the processing of your personal data.

How does the Company inform you about the principles and rules of processing and protecting your personal information?

The client is informed about the rules of processing personal data every time they provide the Company with personal information.

This instruction and other detailed information is publicly available on the Company's website: www.tufo.com

This rule applies as of May 25, 2018.