General Data Protection Regulation (GDPR)

I. Basic provisions

The controller of personal data under Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR") is LTING s.r.o., ID: 02017491, with registered office at Klaricova 873/22, 370 04 České Budějovice, Czech Republic (hereinafter referred to as "Company").

The Company is the controller and processor of personal data of users of the website www.nittin.cz (hereinafter "users"). Within the Company, personal data is only accessible to authorized employees to the extent necessary for processing purposes. The Company may utilize the following processors for personal data processing.

This document describes how the Company collects, processes, and shares information of users utilizing their services. These principles do not apply to information that customers of the Company process using their services.

Controller contact details:

  • Ing. Josef Sura, Ph.D.
  • Klaricova 873/22, 370 04 České Budějovice, Czech Republic
  • info@lting.cz

II. Sources and categories of processed personal data

The Company processes data provided by users based on filling out the contact form. Some personal data is necessary for form submission (name and email address) and is used for basic user identification. The data processed by the Company when submitting the contact form may include:

  • Name and surname,
  • Email address,
  • Phone number.

III. Legal basis and purpose of personal data processing

The legal basis for personal data processing is:

  • Performance of a contract between the user and the Company under Art. 6(1)(b) GDPR,
  • Company's legitimate interest in providing direct marketing (especially for sending commercial communications and newsletters) under Art. 6(1)(f) GDPR,
  • User's consent to processing for marketing purposes (especially for sending commercial communications and newsletters) under Art. 6(1)(a) GDPR in conjunction with § 7(2) of Act No. 480/2004 Coll., on Certain Information Society Services if no goods or services have been ordered.

The purpose of personal data processing is:

  • Order processing and performance of rights and obligations arising from the contractual relationship between the user and the Company; personal data required for successful order processing (name and contact) are requested when placing an order, providing personal data is a necessary requirement for contract conclusion and performance by the Company, without providing personal data, it is not possible to conclude or fulfill the contract by the Company,
  • Sending commercial communications and conducting other marketing activities

The controller engages in automated individual decision-making under Art. 22 GDPR. You have provided explicit consent to such processing.

IV. Other recipients of personal data

Personal data is primarily processed by the Company and its employees, who are bound by confidentiality. The Company may further utilize so-called processors for personal data processing. These entities may process personal data only for purposes and in a manner determined by the Company and may not expand it without further consent. We only provide processors with data they absolutely need to provide their services. The Company, as a processor, utilizes:

  • Google Analytics (web analytics tool)

V. Data retention period

The Company retains personal data

  • for the time necessary to ensure all rights arising from the contract, i.e., at least for the duration of the contract realization (including the complete settlement of rights and obligations arising from the contract and simultaneous demonstration of the contract history)
  • for the duration until the consent to personal data processing for marketing purposes is revoked, for a maximum of 5 years, if personal data is processed based on consent.

After the expiry of the personal data retention period, the Company will delete the personal data.

Data obtained for marketing purposes are processed for the entire duration of consent, even after the user allows storing in cookie settings on websites or in their browser. Processing may continue after consent revocation, but not beyond the expiration of the relevant type of cookies.

VI. Data subject rights

The data subject, if identifiable natural or legal person, has the following rights:

  • Right to access personal data pursuant to Art. 15 GDPR,
  • Right to rectification of personal data pursuant to Art. 16 GDPR, or restriction of processing pursuant to Art. 18 GDPR.
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to erasure of personal data pursuant to Art. 17 GDPR.
  • Right to object to processing pursuant to Art. 21 GDPR and
  • Right to data portability pursuant to Art. 20 GDPR.
  • Right to withdraw consent to processing in writing or electronically to the address or email of the Company provided in Article VIII of these terms.
  • Right to lodge a complaint with the Office for Personal Data Protection. A complaint may be lodged with the supervisory authority at the place of residence, place of employment, or the place where the alleged breach occurred. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

VII. Personal data security conditions

  1. The Company declares that it has taken all appropriate technical and organizational measures to secure personal data.
  2. The Company has taken technical measures to secure data storage and storage of personal data on paper.
  3. The Company declares that only authorized persons have access to personal data.

VIII. Contact

For any questions regarding these Privacy Policy, the collection, processing, and sharing of personal data, or exercising your rights, please contact us at info@lting.cz.

The controller of your personal data is LTING s.r.o., ID: 02017491, with registered office at Klaricova 873/22, 370 04 České Budějovice, Czech Republic.

IX. Final provisions

  1. By checking the consent via the internet form, you agree that you have read and fully accept the terms of personal data protection.
  2. By submitting data from the internet contact form, you confirm that you have read and fully accept the terms of personal data protection.
  3. The Company is entitled to change these terms. The new version of the terms of personal data protection will be published on its website, or a new version of these terms will be sent to the provided email address.

These terms become effective as of March 1, 2024.