Privacy policy

General duty of information to the customer

Principles of personal data processing

General information obligation to the customer Principles of personal data processing Better industry s.r.o., with registered office at Purkyňova 649/127, Medlánky, 612 00 Brno, ID No.: 06688969, VAT No.: CZ06688969 (hereinafter also referred to as “Controller”), as a personal data controller, hereby informs the customer (hereinafter also referred to as “Data Subject”): The processing of personal data is carried out in accordance with Articles 5 and 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). The processing of personal data for direct marketing purposes is considered to be processing carried out for legitimate interest (recital 47). The data subject has the right of access to personal data, the right to rectification or erasure, or restriction of processing of personal data, the right to object to processing, the right to data portability, the right to lodge a complaint with a supervisory authority, as well as other rights in relation to the personal data of the data subject processed by the Controller.

The rights of data subjects can be exercised via the email address info@betterindustry.cz. We only work with verified processors with whom we have a processing contract. Processors have limited access to personal data and are based in the European Union. Which personal, identification and contact data do we process? We collect and process the following information. – For the conclusion, modification or performance of a contract for the purpose of fulfilling your order. – To send marketing communications about products and services based on consent or legitimate interest. Anyone has the right to opt-out of receiving commercial communications at any time via the link provided in the commercial communication. – To comply with our legal obligations (business records, tax obligations, payment obligations, statistical purposes) for the period of time specified by the relevant legal regulations. – To ensure our communication with each other and for the purpose of enabling you to exercise your rights in relation to data protection. Personal data is kept for the time necessary to carry out the above purposes and/or for the time necessary to ensure the relevant legal obligation or to ensure the protection of rights. Cookies Cookies on our website do not serve to collect personal data about users, but to distinguish individual users accessing the betterindustry.cz website. Our website also contains third-party cookies that are used to obtain anonymous statistics about traffic and typical user behaviour on individual pages. These third parties generally do not store any personal data in connection with the use of cookies, as the identity of the user is not known to them (provided that the user is not also a registered user of the products of such a third party, e.g. Google). The user can disable the use of Cookies in the browser settings, such choice will not affect the correct display of the website. We take the protection and security of your personal data seriously! We will handle your personal data responsibly in accordance with applicable European and Czech legislation. To prevent unauthorised access or disclosure, we have appropriate physical, electronic and managerial procedures in place to protect and secure it. – Your personal data is stored on secure servers in our IT systems. – Your personal data is collected, processed and stored only within the European Union.

Your personal data is under constant control, both electronically and physically. – User access control, control and security mechanisms ensure that data is protected from unauthorised access. – Data is anonymised to the maximum extent possible. Your rights can be exercised via the email address info@betterindustry.cz. Personal data voluntarily provided via social networks is the responsibility of the operator. Right of access to personal data 1. The data subject has the right to obtain confirmation from the controller as to whether or not the personal data concerning him or her are being processed and, if so, to obtain access to such personal data and to the following information. ◦ The categories of personal data concerned. ◦ The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations. ◦ The intended period of time for which the personal data will be stored or, if this cannot be determined, the criteria used to determine this period. 2. The controller shall provide a copy of the personal data processed upon request of the data subject. 3. The right to obtain a copy referred to in paragraph 2 shall not adversely affect the rights and freedoms of other persons. Right to rectification The data subject shall have the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by providing an additional declaration. The right to erasure (“right to be forgotten”) The data subject has the right to have the controller erase the personal data concerning the data subject without undue delay and the controller is obliged to erase the personal data without undue delay if one of the following grounds applies: – The personal data are no longer necessary for the purposes for which they were collected or otherwise processed – The data subject withdraws consent to the processing of the personal data – The data subject objects to the processing of the data – The personal data have been unlawfully processed. Right to restriction of processing

(1) The data subject shall have the right to have the controller restrict processing in any of the following cases: ◦ The data subject denies the accuracy of the personal data for the period necessary for the controller to verify the accuracy of the personal data. ◦ The processing is unlawful and the data subject refuses to erase the personal data and requests instead that the use of the personal data be restricted. ◦ The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims. ◦ The data subject objects to the processing pursuant to Article 21(1) until it is verified that the legitimate grounds of the controller override those of the data subject.

2. Where processing has been restricted pursuant to paragraph 1, such personal data may be processed, except for storage, only with the data subject’s consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. 3. A data subject who has obtained a restriction on processing pursuant to paragraph 1 shall be notified in advance by the controller that the restriction on processing will be lifted. Right to object 1. The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her on the basis of Article 6(1)(e) or (f), including profiling based on those provisions. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling insofar as it relates to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. This privacy policy is effective from 23 January 2023.