PRINCIPLES OF PERSONAL DATA PROCESSING
VALID FROM 25/05/2018

INFORMATION ON THE PROCESSING OF PERSONAL DATA
JK Nástroje s.r.o. with registered office no. 74, 686 04 Podolí, IČ 29193583, as a data controller, takes care of the protection of personal data that you pass on to us. Despite the fact that our company operates primarily in the B2B sector, it also processes necessary personal data in relation to clients and suppliers resulting from the activities of our organization, especially for the fulfillment of the contract, from legal obligations (tax obligations), for legal protection and within the framework of legitimate interest (typically the campus camera system). It is important for you to know that we protect the personal data you provide us about yourself or authorized representatives, we process it responsibly, transparently and legally in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). Our company does not process data automatically, does not process information about minors, or obtain data from third parties. You have the right to request information about registered personal data, their correction or deletion, if they are granted on the basis of your consent. In case of any questions and requests regarding the processing of your personal data, you can contact us in writing at the address of the company headquarters, or at the email address jk-nastroje@jk-nastroje.cz

SECURITY OF YOUR PERSONAL DATA
JK Nástroje s.r.o. takes care of the security of the personal data you pass on to us. We have taken appropriate technical and organizational measures to adequately protect your data, taking into account the seriousness of their processing. No unauthorized person has access to your personal data that we have obtained from you, and we do not transfer it to other entities for further processing without your consent, unless required by law or in the case of protection of our legal interests.

RIGHT TO INFORMATION
It is your right to ask JK Nástroje s.r.o. about information, what personal data and to what extent and for what purpose we process about you. We will provide you with this information free of charge within 30 days at the latest, and in exceptional situations within 90 days at the latest. We will inform you in time about the extension of the deadline in exceptional cases. If you request the communication of the information we record about you, we will first need to verify that you are indeed the person to whom this information belongs. Please provide sufficient identification of your person in your application. If necessary, we have the right to request additional information for your identification before we provide you with the personal data that we process about you. It is then our right to reasonably reject requests for information that are unreasonable, unreasonably repeated, or require disproportionate effort to obtain them, or would be difficult to obtain (typically from backup systems, archives, etc.).

RIGHT TO DATA PORTABILITY
You have the right to receive the personal data we hold about you in a structured, commonly used and machine-readable format. Based on your request, this data may be transferred to another administrator.

UPDATE OF DATA, RIGHT OF CORRECTION
Since personal data can change over time (for example, a change of Surname), we would be happy if you inform us that there has been a change, so that we have your personal data up-to-date and avoid possible mistakes. The submission of information about the change of data is absolutely necessary in order for us to properly perform our work as Administrator.
Your right to correct the personal data that we record about you is also related to this. If you find that our data is no longer up-to-date, you have the right to request its correction.

OBJECTIONS
If you believe that we are not processing your personal data in accordance with the applicable legislation of the Czech Republic and the Union, you have the right to raise an objection and we will subsequently check the legitimacy of your request. At the time of objection, the processing of your personal data will be restricted until it is verified whether the objection is justified. We inform you that you have the right to object to the personal data we process about you to the relevant supervisory authority for the Protection of Personal Data at the address:
Office for the Protection of Personal Data
Pplk. Sochora 27
170 00 Prague 7

RIGHT TO LIMIT PROCESSING
You have the right to restrict the processing of your personal data, if you believe that the data recorded in this way are not accurate, or that we are processing them illegally, and if you believe that we no longer need this data for the purposes of processing it.

RIGHT TO ERASURE
If you have ever given us consent to the processing of your personal data (for example, an email address as part of a sent newsletter), you have the right to revoke it at any time and we are obliged to delete the data that we process solely on the basis of your consent. The right to erasure does not apply to processed data within the framework of the obligation to fulfill the contract, legal reasons or legitimate interests. If some of your data is stored in backup systems that automatically ensure the resilience of all our systems and perform the function of data loss protection in case of accidents, it is not within our power to delete this data even from the backup systems, and often it is not even technically feasible. However, this data is not further actively processed and will not be used for other processing purposes.

WHERE YOU CAN TURN
You can also contact the email jk-nastroje@jk-nastroje.cz or the headquarters of our company with your questions about the protection of personal data:
JK Nástroje s.r.o.
no. 74
686 04 Podolí

WEBSITES - LOG FILES
If you access and view our website www.jk-nastroje.cz, we process the following log files and store them on our servers. The information we store includes:

Your IP Address
Opening page of our website
Response code http
Identification of your browser
We process this information for a maximum of one year and only for the purposes of our legal protection.

COOKIES
When you visit our website www.jk-nastroje.cz, you are informed that we use technology to collect and store information using cookies on your device. Cookies are small text files, you can delete these files from your browser or disable their use completely. Cookies do not collect any of your personal data, but without these files we cannot ensure the full functionality of the website.
Our website uses "session" cookies to remember user choices and settings. We also use some permanent cookies (e.g. those to remember consent to cookies). These cookies remain on your device until you delete them from your browser or until they expire, usually for a short time (but in some cases for up to two years). If you want to learn more about cookies and their wider use, please use the links below:

http://support.microsoft.com/gp/cookies/cs (CZ)
http://www.aboutcookies.org/ (EN)

ANALYSIS AND STATISTICS
We monitor and analyze the website using analytical services (Google analytics). None of the data we analyze using this service is your personal data. Using this service, we detect traffic and geographic data, information about the browser and operating system from which you access our website. We use all this information for marketing purposes, for the purpose of further improving the website and content, and also for the purposes of legal protection. more information here:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

PROCESSING OF PERSONAL DATA
See how JK Nástroje s.r.o. processes the following personal data/categories of personal data, including the specified legal titles, purposes and periods of processing for individual records of processing activities.

Category: Subscribers
All personal data about customers (in particular identification and contact data), or their representatives, will be processed only for the purpose of fulfilling the contract, for the purpose of fulfilling the legal obligations that apply to the controller and for the purpose of protecting the legitimate interests of the controller, and only for the period which is necessary for these purposes.

PRICE OFFER - CALCULATION
The data was obtained from another entity: No
The record contains information about a minor: No
Legal title: Fulfillment of the contract
Personal data: Address (Personal data), VAT number of the natural person (Personal data), Delivery address ( Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data)
Purpose of processing: Record of offers issued
Processing period: 4 years

REQUEST ACCEPTED
The data was obtained from another entity: No
The record contains information about a minor: No
Legal title: Fulfillment of the contract
Personal data: Address (Personal data), VAT number of the natural person (Personal data), Delivery address ( Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data)
Purpose of processing: record of requests for issuing offers and contracts
Processing period: 4 years

CONTRACTUAL RELATIONSHIP
The data was obtained from another entity: No
The record contains information about a minor: No
Legal title: Fulfillment of the contract
Personal data: Address (Personal data), Date of birth (Personal data), VAT number of a natural person ( Personal data), Delivery address (Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data)
Purpose of processing: Implementation of the contract based on the concluded contractual relationship
Processing time: for the duration of the contract and further according to the statute of limitations

ORDER RECEIVED
The data was obtained from another entity No
The record contains information about a minor No
Legal title Fulfillment of the contract
Personal data Address (Personal data), VAT number of the natural person (Personal data), Delivery address (Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data)
Purpose of order processing and its records
Processing period 4 years
Recipients Contract carrier
Category : Internal records
All personal data (in particular identification and contact data) used for the internal purposes of the administrator will be processed only for the purpose of fulfilling the legal obligations that apply to the administrator and for the purpose of protecting the legitimate interests of the administrator, and only for the period which is necessary for these purposes. In particular, this concerns tax records.

TAX RECORDS
The data was obtained from another entity No
The record contains information about a minor No
Legal title Legal obligation
Personal data Address (Personal data), VAT number of a natural person (Personal data), First name (Personal data), Surname (Personal data)
Purpose of processing tax document records
Processing period 10 years
Legal title Legitimate interest
Personal data Email (Personal data), Telephone (Personal data)
Purpose of processing contacting the client< br>Processing time unlimited
Category: Suppliers
We record the necessary contact details of suppliers and persons with whom we communicate within the framework of legitimate interest and especially for the fulfillment of contracts.

SUPPLIER CARD
The data was obtained from another entity No
The record contains information about a minor No
Legal title Fulfillment of the contract, legitimate interest
Personal data Address (Personal data), Bank account number (Personal data), VAT number of a natural person ( Personal Data), Email (Personal Data), First Name (Personal Data), Surname (Personal Data), Telephone (Personal Data) other follow-up business activities
Processing period 10 years from the last record

REQUEST ISSUED
The data was obtained from another entity No
The record contains information about a minor No
Legal title Fulfillment of the contract
Personal data Address (Personal data), VAT number of the natural person (Personal data), Delivery address (Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data)
Purpose of processing records of issued requests
Processing period 4 years

CONTRACTUAL RELATIONSHIP
The data was obtained from another entity No
The record contains information about a minor No
Legal title Fulfillment of the contract
Personal data Address (Personal data), Date of birth (Personal data), VAT number of a natural person (Personal data), Delivery address (Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data) limitation periods

ORDER ISSUED
The data was obtained from another entity No
The record contains information about a minor No
Legal title Fulfillment of the contract
Personal data Address (Personal data), VAT number of the natural person (Personal data), Delivery address (Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Phone (Personal data)
Purpose of processing records of issued orders
Processing period 4 years
Category: E-shop
If you visit our e-shop at https://jk-n.cz/, you can register with your consent for the purpose of registering a registered customer (facilitating purchase and setting preferences such as delivery and billing address, customer identification and contact details). You can also place an order on this e-shop as part of fulfilling the contract, we use this data for the purpose of processing the order. Necessary personal data may be transferred to a contractual carrier if you choose the option of sending the ordered goods by a contractual carrier.

ORDER RECEIVED
Location Business Department (Physical Security: Yes)
Document Cabinet (Physical Security: Yes)
SyteLine Information Systems
Record Note In case you order goods from our company via http://jk-n.cz/, we will record the necessary personal data about you that we have obtained from you and which are further listed on the order received in this way for the purpose of processing and processing the order based on the fulfillment of the contract. If you use the services of a courier to deliver the order, the data will be transferred to our contractual carrier to the extent necessary.
The data was obtained from another entity No
The record contains information about a minor No
Legal title Fulfillment of the contract
Personal data Address (Personal data), VAT number of natural person (Personal data), Delivery address (Personal data), Email (Personal data), First name (Personal data), Surname (Personal data), Telephone (Personal data)
Purpose of order processing and its records
Processing period 4 years
Recipients Contractual carrier (Contractual carrier)

REGISTRATION ON THE WEBSHOP
Location Business Department (Physical Security: Yes)
Document Cabinet (Physical Security: Yes)
SyteLine Information Systems
Record Note In case you register with our company on the website https://jk- n.cz/, with your consent, we will record personal data for the purpose of customer registration on the e-shop (delivery and billing address preferences, customer identification and contact details).
You can revoke this data at any time by sending an email to jk-nastroje@ jk-nastroje.cz.
The data was obtained from another entity No
The record contains information about a minor No
Legal title Consent
Personal data Address (Personal data), VAT number of a natural person (Personal data) , Delivery address (Personal data), Email (Personal data), Name (Personal data), Phone (Personal data)
Purpose of processing customer registration on the e-shop https://jk-n.cz/
Duration Processing Until withdrawal of consent
Category: Camera system
We inform you that the premises and premises of the company are monitored by a camera system within the legitimate interest of the administrator in order to protect people and property.

DATA PROCESSING FROM THE CAMERA SYSTEM
The data was obtained from another entity No
The record contains information about a minor No
Legal title Legitimate interest
Personal data Camera system recording – audio, video, photo (Personal data)
Purpose of acquisition and storage processing data from the camera system for the purpose of protecting property and asserting any legal claims
Processing time 3 weeks

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
Personal data are not transferred to processors or other recipients in third countries or international organizations.

AUTOMATED PROCESSING
As part of the processing of personal data, there is no automated processing.