Privacy Policy

In our mutual business cooperation, OTK printing & packaging a.s., Plynárenská 233, 280 02 Kolín (hereinafter referred to as “we”) processes the personal data of you and your representatives or other contact persons.

In particular, we process your personal data in order to fulfil our obligations under contracts we have concluded or are negotiating with you. However, we also process your data in order to defend our legal claims in various proceedings and to avoid damages that may arise in connection with them, and also to fulfil our legal obligations.

What personal data we process about you:

• Identification data, which means in particular name, surname, title, date of birth Contact data, which means personal data that enables us to contact you, in particular contact address, telephone number and e-mail address

Why we process personal data:

We process your personal data and the data of your representatives, if any, primarily for the purpose of fulfilling the contractual obligation between us as the controller and you as the data subject. In doing so, we process personal data on the basis of the steps leading to the conclusion of the contract, on the basis of our legitimate interests and, where applicable, on the basis of your consent.

Processing without your consent – on the basis of the steps leading to the conclusion of the contract and on the basis of our legitimate interests

On the basis of the steps leading to the conclusion of the contract , we process your identification and contact data for the purpose of concluding the contract and fulfilling the obligations under such contract, for the purpose of our communication with each other. For these purposes, we process personal data for the duration of the contract and for a period of 15 years from the end of this contractual relationship in order to protect our legitimate interests and to comply with our legal obligations. Such obligations are imposed on us by legal regulations – e.g. Act No. 563/1991 Coll., on Accounting, according to which billing data is processed and stored, Act No. 89/2012 Coll., Civil Code, according to which the controller defends its legitimate interests, or Act No. 235/2004 Coll., on Value Added Tax.

Sources of personal data

Most personal data is obtained directly from you by providing it to us as part of the contract process.

In addition, to a limited extent, we obtain and further process personal data obtained from publicly available sources, which are public records (e.g. the commercial or trade register), always in accordance with legal requirements.

Transfer of personal data to another processor

For the processing of personal data, we also use the services of other processors who process personal data on our instructions. Such processors are our IT solution providers, or our suppliers and subcontractors, but we ensure that they also fulfil their data protection obligations to the same extent as we feel obliged to do so.

Transfer of personal data to another controller

We only pass on your personal data to public authorities, courts, law enforcement and supervisory authorities if they ask us to do so.

Your data protection rights

Just as we have rights and obligations when processing your personal data, you also have certain rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it outside of us and what other rights you have in relation to the processing of your personal data. However, if you are unsure which personal data we process about you, you can ask us to confirm whether or not personal data relating to you is being processed by us and, if so, you have the right to access that personal data. As part of your right of access, you can ask us for a copy of the personal data we are processing, and we will provide you with the first copy free of charge and subsequent copies at a charge.

Right to repair

If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.

Right to erasure

In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it.
• You withdraw your consent to the processing of personal data where the data is data for which your consent is necessary and we have no other reason why we need to continue to process the data (for example, to defend our legal claims).
• You will exercise your right to object to processing in respect of personal data that we process on the basis of our legitimate interests and we find that we no longer have such legitimate interests that would justify such processing, or it turns out that the processing of personal data carried out by us is no longer in accordance with generally binding regulations.

But please note that even if it is for one of these reasons, it does not mean that we will immediately delete all your personal data. This right does not apply if the processing of your personal data is still necessary for:

• Fulfilling our legal obligation
• For archival, scientific or historical research or statistical purposes, or to establish, exercise or defend our legal claims.

Right to restriction of processing

In some cases, in addition to the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and not subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:

• You dispute the accuracy of the personal data until we agree what data is correct.
• We process your personal data without a sufficient legal basis (e.g. beyond what we need to process), but you will prefer to limit such data before deleting it (e.g. if you expect to provide us with such data in the future anyway).
• We no longer need your personal data for the above processing purposes, but you request it for the establishment, exercise or defence of your legal claims or object to the processing. For the period of time that we investigate, if your objection is justified, we are obliged to restrict the processing of your personal data.

Right to portability

You have the right to obtain from us all of your personal data that you have provided to us and that we process. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order to enable us to easily transfer the data at your request, it may only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer all the data we have collected from you (for example, your handwritten signature) to you in this form.

Right to object to processing

You have the right to object to the processing of your personal data based on our legitimate interest. We will stop processing your personal data if we do not have compelling legitimate grounds to continue such processing.

You can exercise all of the above rights directly with us as the controller via this contact:

mail: gdpr@otk.cz

Right to lodge a complaint

Exercising your rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection. You can exercise this right in particular if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations. You can file a complaint against our processing of personal data with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.