Privacy policy

Welcome to Petra-D Type Foundry!

We encourage you to read our Privacy Policy below to understand how we will use your personal data and your rights over your data. This Privacy Policy relates to uses of your personal information by MgA. Petra Dočekalová, Ph.D, with the registered office at Chodounského 1399/21, 716 00 Ostrava 16, Czech Republic, and registered under ID no: 03238431 („We“ or „Us“). We operate the website www.petra-d.com and provide services, mainly accessible through the aforementioned website.

This privacy policy describes how we handle and protect your personal data (“User” or “You”) as a controller in these situations:

• Purchases and account registration (if available on website)
• Contact forms/request a demo/any other inquiry
• Business Partner (in case of a natural person)
• Contact person of Business Partner
• Data subject request

Please refer to our separate document of Cookie Policy describing the use of cookies and data processing in connection with the use of cookies and website visits.

What data we process, purposes, legal basis and duration of data processing:

1. Purchases and account registration

Purpose and Duration of Processing: 

• To be able to provide You with the requested product or services. 
• To secure legal claims, handle them correctly (prove the fulfilment of Our obligation), to protect Our Legal Rights. 
• To develop and improve Our services, to send Our commercial communication.
• For the duration of the contract/provision of the services and contract related date due to the limitation period in Civil code to the max. of 10 years upon contract termination. In case of Legal for a period of 4 years from the processing/solution of the request. In case of commercial communication for the max period permitted by law unless You opted out.

Categories of Personal Data:

• Identification and Contact Information, Information related to purchased product or services, Payment and Billing data.
• Information related to claims. 
• Information related to marketing communication (if not opted out by You).

Legal Basis:

• Art. 6.1 (b) – performance of the contract.
• Art. 6.1 (f) – Our legitimate interest (Handling claims and Protecting Our rights).
• Art. 6.1 (f) – Our legitimate interest (Direct marketing if not opted out by You).
  
   

2. Contact forms, request a demo and other inquiries

Purpose and Duration of Processing: 

• To be able to respond to Your inquiry/request, to ensure Our business operation, communication and development.
• For a period of max. 2 years upon accommodating the inquiry/request.
  Categories of Personal Data:
• Identification and Contact Information
• Content of Correspondence

Legal Basis:

• Art. 6.1 (f) – legitimate interest of Us (Business communication and Development).
  
   

3. Business partner (in case of natural person)

Purpose and Duration of Processing: 

• To ensure performance of a contract or to pre-contractual process, bookkeeping/accounting, to keep records of contracts and proofs of contract performance, to protect Legal Rights.
• For a period of 10 years upon contract termination, in certain cases (assets of permanent or long-term value) the contracts can be archived for a longer period of time or permanently (according to their nature).

Categories of Personal Data:

• Identification and Contact Information, Contract and Related Relevant Information for the Provision of Products/Services, Billing and accounting Information. 

Legal Basis:

• Art. 6.1 (b) GDPR – performance of the contract.
• Art. 6.1 (c) GDPR – compliance with a legal obligation (Bookkeeping, Accounting).
• Art. 6.1 (f) GDPR – Our legitimate interest (Protection of our Legal Rights).
  
   

4. Contact person of business partner

Purpose and Duration of Processing: 

• To ensure mutual communications related to the business activities (in case of current business partners) and to ensure our business development/to provide You marketing communication (in case of former/potential business partners).
• For a period 5 years upon the end of contractual relationship (in case of current/former business partners) or for a period of 2 years upon Your inquiry or upon our acquisiton of Your contact (in case of potential business partners). In any case unless You opt-out from the communication.

Categories of Personal Data:

• Identification and Contact Information, Job Position, Company, Content of Correspondence 

Legal Basis:

• Art. 6.1 (f) – Our legitimate interest (business development, direct marketing).
  
   

5. Data subject request

Purpose and Duration of Processing: 

• To handle requests from data subjects.
• For a period of 4 years from the processing of the request.

Categories of Personal Data:

• Identification and Contact Information
• Subject of the Request, Content of the Correspondence

Legal Basis:

• Art. 6.1 (c) GDPR – compliance with a legal obligation.
• Art 6.1 (f) GDPR – Our legitimate interest (protection of Legal Rights and proof of legal compliance).

Mainly, we obtain the personal data directly from you as a data subject. However, some information we may acquire from public authorities or publicly available registers (e.g. commercial register etc.).

Under certain circumstances, We may transfer Your personal data to so-called recipients other controller, processor) and third parties. Personal data may be disclosed to the following recipients: our supplier, in particular for the purpose of providing legal or accounting services, telecommunications and technical support services, e-shop solution, including data, storage, web hosting and development, payment processing, internal analytics, user preference etc. In addition, personal data may be disclosed to public authorities in accordance with the applicable regulation. The list of recipients will be communicated to You upon Your request.

We, or our processors (typically suppliers), processes Your personal data primarily in the European Economic Area, where uniform data protection is guaranteed in each member country. In some cases, Your personal data may be processed outside the EEA, including the United States of America or other jurisdictions. However, we choose our suppliers carefully to reach similar degree of protection (based on adequacy decision or concluding standard contractual clauses as adopted by European Commission).

How You can exercise Your rights

You exercise Your rights (including the right to object or to withdraw the consent) with the data controller, which is Us. You can also contact us in writing, by telephone +420 728 289 981 or by e-mail contact@petra-d.com. 

In addition, You have the right to file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, phone +420 234 665 111, e-mail: posta@uoou.cz, website: https://www.uoou.cz, if You believe that the processing of Your personal data has violated the law or the European data protection regulation.
 

Your Privacy rights

You have the right to request access to Your data at any time – this means that We will provide You, upon Your request, with information about what personal data We process, for what purpose, from what source the personal data was obtained and for how long it will be processed. You have the right at any time to request the rectification of inaccurate personal data or to have it completed if it is incomplete. 

You also have the right to request the erasure of personal data that are no longer necessary for the purpose for which they were originally collected or that the controller is no longer entitled to use for other reasons (e.g. they have been processed unlawfully, their erasure is required by law, etc.). 

You have the right to request a restriction of the processing of Your personal data – this means that You can ask Us not to delete Your data where We would otherwise be obliged to do so, and You can also ask Us not to process Your personal data any further until it is clear whether the data processed is accurate or whether Your objection to the processing of Your personal data has been raised on reasonable grounds (see right to object below). 

You have the right to the portability of Your personal data – this means that You can request that We provide You with the personal data processed by Us (if it is processed by automated means) in electronic form so that it is easily transferable to another controller (service provider). This right only applies to personal data that We have obtained in electronic form, either on the basis of your consent or on the basis of a contract. 

You have the right to withdraw the given consent and to object to the processing of Your personal data based on our legitimate interest – in which case We will only continue to process Your data if it is demonstrated that there are compelling legitimate grounds for doing so.