Privacy Policy

1. Processing of Personal Data

A) Processing of personal data when using the contact form

If you inquire about our products and services, we will work with the contact details you provide, primarily through the inquiry form. These include: first name, last name, email, phone number, and IP address.

For what reason?

We will use these to contact you for further arrangements regarding products and services.

On what legal basis?

This processing is based on Art. 6(1)(b) GDPR – negotiating a contract, or performing measures prior to entering into a contract at your request.

How long will we process the personal data?

If we do not establish further cooperation, we will process your data for a maximum of 5 years from our last communication.

B) Processing of personal data in the event of a purchase

If you make a purchase from us, we will work with the data you provide. These are mainly billing details: first name, last name, address, email, phone number, ID number (IČ), and VAT number (DIČ).

For what reason?

We need to process personal data to fulfill our contract – to deliver our products or services to you. We will also use your contact details to communicate with you regarding the status of your order, or regarding complaints or your inquiries.

We will further process personal data to fulfill our legal obligations (mainly for accounting and tax purposes, or for handling complaints and others).

On what legal basis do we process personal data?

This processing is based on Art. 6(1)(b) GDPR – performance of a contract, and Art. 6(1)(c) GDPR – compliance with our legal obligation.

How long will we process the personal data?

For the duration of our service and then for 5 years from the last provision of such service or delivery of goods.

C) Newsletters (commercial communications)

If you are a purchasing customer and did not opt-out during the purchase, we will use your email address to send our news.

On what legal basis?

This is permitted by Section 7(3) of Act No. 480/2004 Coll., on certain information society services, provided you did not opt-out during the purchase.

How long will we process the personal data?

For 5 years from your last purchase. You can unsubscribe from the mailing list at any time via email.

2. Who gets access to the data?

Your data stays with us. However, some companies or other persons work for us and access the data because they help us with the operation of our website. These are:

• Web server provider
• Companies involved in the shipping of goods
• Email service provider
• Marketing agency

We process personal data only within the European Union.

3. What else you should know

Our company has not appointed a Data Protection Officer.

Our company does not engage in decision-making based on automated processing or profiling.

If you have any questions regarding personal data, please contact us at the email address grios@grios.cz or call +420 608 831 575.

Your rights in connection with the processing of personal data

The GDPR gives you, among other things, the right to contact us and request information about what personal data of yours we process, to request access to this data and have it updated or corrected, or to request restriction of processing; you can request a copy of the processed personal data, request the erasure of personal data in certain situations, and in certain cases, you have the right to data portability. You may object to processing based on legitimate interest.

If you believe that we are not handling the data correctly, you have the right to file a complaint with the Office for Personal Data Protection, or to take your claims to court.

These terms are effective from May 25, 5. 2018