GDPR – Personal data protection
N-Medical s.r.o’s principles relating to the processing of personal data
Introductory provisions
N-Medical s.r.o., ID number: 05006899, tax ID number: CZ05006899, with its registered seat at U Olivovny 1640, 251 01 Říčany (hereinafter also referred to as “we” or “us”), as the personal data controller, informs you, as users of the www.n-medical.cz, www.elastin.cz, www.urokapky.cz, www.premedi.cz and www.13drops.eu websites and as our business partners, about the collecting of personal data and the privacy protection principles described below.
- What personal data of yours we will be processing
- How we will be processing your personal data and for what purposes
- To whom your personal data can be transferred
- How long we will be processing your personal data
- What rights you have in connection with the protection of your personal data
Should you need to have any part of the text explained to you, get advice or discuss the further processing of your personal data, you can contact us anytime at the e-mail address info@n-medical.cz.
These principles relating to the protection of personal data will be used in a similar fashion for our other customers and suppliers who are not users of our websites, but are our business partners on the basis of contracts concluded in documentary non-electronic form or on the basis of partial orders made in written or oral form.
Extent of processing personal data
When you contact us via our websites, you may be asked to fill in certain data about yourself or your company. This data can include in particular:
a) name and surname,
b) commercial company,
c) your address or the registered seat of your company,
d) identification number of the entity and tax identification number,
e) telephone number, and/or
f) e-mail address.
Purpose of processing personal data
The data you provide to us is used to fulfil contracts and agreements concluded with you, or to contact you and provide you with any information you request. All of the personal data is processed in a legal and transparent manner, and only appropriate, relevant and necessary data in relation to the aforementioned purpose of processing is required.
In addition, we may use your name, surname, commercial company, address or company seat, telephone number and/or e-mail address to send you commercial messages, i.e. to inform you about events, publications, or goods and services we provide that may be of interest to you.
The provision of personal data for the purpose of contract performance and the provision of personal data for the purposes of answering your questions or providing you with requested information are contractual requirements; their non-provision can result in the non-closing of a contract or the non-provision of answers to your questions.
In addition, you can always refuse to allow the processing of your personal data for the purpose of sending commercial messages to you and it will not affect our other mutual relations. Just send us an e-mail with this request to info@n-medical.cz or to the address from which you received the commercial message.
Who has access to your personal data?
Your personal data will be processed by us, as the controller. We can transfer your personal data for the aforementioned purposes to our sub-suppliers so that they can process it for us. Your personal data can be transferred to:
our external accounting and tax company,
our external IT company that provides us with server, web, cloud and other IT services, and
our external legal adviser.
Duration of processing personal data
We will be processing your personal data for the duration of our providing you with our goods and services or performing a mutual contract or for a period long enough to fulfil archiving duties according to valid legislation, such as Act no. 563/1991 Coll., on accounting; Act no. 499/2004 Coll., on archiving and records management; Act no. 133/2000 Coll., on the register of population and birth numbers; and Act no. 235/2004 Coll., on value added tax.
After the termination of the performance of a mutual contract and after the expiration of mandatory archiving deadlines, your personal data, both documentary and electronic, will be safely and thoroughly deleted.
Use of cookies
In accordance with valid legislation, our websites save files commonly known as cookies on your device. Cookies are small data files that remember the settings and operations performed on the websites you visit so that you do not have to enter this information repeatedly. Cookies do not present any threat; however, they are significant with regard to privacy protection. Cookies cannot be used to identify website visitors or to misuse log-in information.
The majority of browsers automatically accept cookies, unless the browser is configured otherwise. By using our websites, you agree to the saving of cookies. You can restrict or block the use of cookies at any time in your web browser settings.
Your rights stemming from personal data processing
You have the following rights with regard to the processing of your personal data:
a) the right of access to personal data;
b) the right to rectification of personal data;
c) the right to erasure of personal data (“the right to be forgotten”);
d) the right to restriction of the processing of personal data;
e) the right to personal data portability;
f) the right to object to personal data processing; and
g) the right to file a complaint relating to personal data processing.
Your rights are explained below so that you can have a clearer idea of their content. You can assert all of your rights by contacting us at the e-mail address info@n-medical.cz.
The right of access to personal data means that you can, at any time, obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, for what purposes, to what extent, who has access to it, and how long it will be processed by us; whether you have the right to rectification, erasure, restriction of or objection to processing; and where we obtained your personal data and whether automated decision-making, including profiling, is being performed based on the processing of your personal data. You also have the right to receive a copy of your personal data, with the first provision being free of charge and additional provisions subject to the appropriate reimbursement of related administrative costs.
The right to rectification of personal data means that you can request, at any time, the rectification or completion of your personal data, if inaccurate or incomplete.
The right to erasure of personal data means that we must erase your personal data when
(i) it is no longer necessary in relation to the purposes for which it was collected or otherwise processed
(ii) you withdraw your consent and there is no other reason for processing
(iii) you object to the processing and there are no overriding legitimate grounds for the processing
(iv) the processing is unlawful, or
(v) for compliance with a legal obligation.
The right to restriction of the processing of personal data means until disputed questions regarding the processing of your personal data are resolved, for example
(i) you contest the accuracy of the personal data,
(ii) the processing is unlawful, but instead of erasure of the personal data you request the restriction of its use,
(iii) we no longer need your personal data for the purposes of processing, but you require it, or
(iv) you object to the processing (see further below in the text),
we can only store your personal data, and further processing is subject to your consent or for the establishment, exercise or defence of legal claims.
The right to personal data portability means that you have the right to receive the personal data you provided to us with your consent for processing or for the purposes of performing a contract in a structured, commonly used and machine-readable format and, if technically feasible, you have the right to transmit this data to another controller.
The right to object to personal data processing means that you can file a written or electronic objection to the processing of your personal data, which will result in us no longer processing your personal data unless we can demonstrate compelling legitimate grounds for its processing which override your interests, rights and freedoms.
These Principles of Personal Data Protection are effective as of May 25, 2018.