Introduction
Kov company s.r.o. (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, process, store, disclose, and protect personal information obtained through our website, business communications, contractual relationships, and related services.
The processing of personal data is carried out in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
- Act No. 110/2019 Coll., on the Processing of Personal Data of the Czech Republic;
- Other applicable European Union and Czech legal regulations.
By using this website, contacting us, or engaging with our services, you acknowledge the practices described in this Privacy Policy.
Data Controller
The controller of personal data is:
Categories of Personal Data We Collect
Depending on your interaction with us, we may collect and process:
Identification Data
- Name and surname;
- Job title;
- Company name.
Contact Data
- Email address;
- Telephone number;
- Postal address.
Contractual and Business Information
- Information necessary for preparing quotations and contracts;
- Billing information;
- VAT identification numbers;
- Transaction records.
Technical Data
- IP address;
- Browser type and version;
- Operating system;
- Device information;
- Time zone settings;
- Website interaction information.
Communication Data
- Messages submitted through contact forms;
- Email correspondence;
- Customer service requests.
Marketing Data
- Preferences regarding marketing communications;
- Newsletter subscription information.
We do not intentionally collect special categories of personal data unless required by law or explicitly provided by the data subject.
Purposes and Legal Bases for Processing
Contract Performance
We process personal data when necessary to:
- Provide services;
- Negotiate contracts;
- Manage business relationships;
- Issue invoices;
- Process payments.
Legal basis: Article 6(1)(b) GDPR.
Compliance with Legal Obligations
We may process personal data to comply with:
- Accounting regulations;
- Tax regulations;
- Anti-money laundering obligations;
- Court orders and regulatory requirements.
Legal basis: Article 6(1)(c) GDPR.
Legitimate Interests
We may process personal data for:
- Website security;
- Fraud prevention;
- Business administration;
- Customer relationship management;
- Protection of legal claims.
Legal basis: Article 6(1)(f) GDPR.
Consent
Where required, we process personal data based on consent for:
- Marketing communications;
- Optional cookies;
- Newsletter subscriptions.
Legal basis: Article 6(1)(a) GDPR. Consent may be withdrawn at any time.
Data Sharing and Recipients
Personal data may be shared with:
- Hosting providers;
- IT service providers;
- Cloud infrastructure providers;
- Accounting and tax advisors;
- Legal advisors;
- Banking institutions;
- Regulatory authorities where legally required.
All processors are contractually bound to maintain confidentiality and comply with GDPR requirements.
We never sell personal data.
International Transfers
Personal data may be transferred outside the European Economic Area (EEA) where necessary.
When such transfers occur, we ensure appropriate safeguards through:
- Adequacy decisions of the European Commission;
- Standard Contractual Clauses (SCCs);
- Other GDPR-compliant transfer mechanisms.
Data Retention
We retain personal data only for as long as necessary. Typical retention periods include:
- Contractual documentation: up to 10 years;
- Accounting and tax records: according to Czech legal requirements;
- Business correspondence: up to 5 years;
- Marketing consent records: until consent is withdrawn;
- Technical logs: as reasonably necessary for security purposes.
After expiration of retention periods, data are securely deleted or anonymized.
Security Measures
We implement appropriate technical and organizational safeguards, including:
- Access controls;
- Authentication mechanisms;
- Encryption where appropriate;
- Regular security monitoring;
- Internal confidentiality obligations;
- Data minimization procedures.
Despite our efforts, no method of transmission or storage can be guaranteed to be completely secure.
Rights of Data Subjects
Under GDPR, you have the right to:
Right of Access
Obtain confirmation whether personal data concerning you are processed.
Right to Rectification
Request correction of inaccurate or incomplete information.
Right to Erasure
Request deletion of personal data where legally applicable.
Right to Restriction
Request limitation of processing under certain circumstances.
Right to Data Portability
Receive personal data in a structured, commonly used format.
Right to Object
Object to processing based on legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time.
Right to Lodge a Complaint
You may file a complaint with the Czech supervisory authority:
Automated Decision-Making
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Third-Party Websites
Our website may contain links to external websites.
We are not responsible for the privacy practices of third-party websites and encourage users to review their privacy policies.
Changes to this Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on this website together with the effective date.
Continued use of our services after publication of updates constitutes acknowledgment of the revised policy.
Contact
For all privacy-related requests: