GENERAL DATA PROTECTION REGULATION (GDPR) SOVTO s.r.o.
1. General Provisions
SOVTO s.r.o., VAT ID: CZ28563841, registered at Zámostní 1155/23, 710 00, Ostrava, as the data controller, hereby sets out the following principles for personal data protection in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council (“GDPR”).
2. What Personal Data Do We Process?
As part of our services, we may process the following personal data:
-
Name and surname
-
Email address
-
Phone number
-
Billing and delivery address
-
IP address and device information
-
Order history and communication records
-
Payment details (to the extent necessary for processing payments)
3. Purposes of Data Processing
We process your personal data for the following purposes:
-
Fulfilling contractual obligations and providing our services
-
Communication with customers and responding to inquiries
-
Managing customer accounts
-
Marketing activities (with the subject’s consent)
-
Compliance with legal obligations (e.g., accounting and tax purposes)
-
Protection of our legal claims
4. Legal Basis for Processing
We process personal data only in accordance with GDPR based on the following legal grounds:
-
Performance of a contract (Art. 6(1)(b) GDPR)
-
Compliance with legal obligations (Art. 6(1)(c) GDPR)
-
Legitimate interest (Art. 6(1)(f) GDPR)
-
Consent of the data subject (Art. 6(1)(a) GDPR)
5. Retention Period for Personal Data
We retain your personal data only for the necessary period:
-
For contract purposes, during its duration and 3 years after termination
-
For accounting and tax purposes, for 10 years
-
For marketing purposes, until consent is withdrawn
-
For legal claims protection, for the duration of the statute of limitations
6. Sharing of Personal Data
We may transfer your personal data to the following categories of recipients:
-
IT service and hosting providers
-
Payment service providers and banks
-
Accounting and tax consultants
-
Legal representatives and government authorities
7. Personal Data Security
We use modern technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Only authorized personnel have access to the data.
8. Data Subject Rights
In accordance with GDPR, you have the following rights:
-
Right of access to your personal data
-
Right to rectification of inaccurate data
-
Right to erasure (right to be forgotten)
-
Right to restriction of processing
-
Right to data portability
-
Right to object to processing
-
Right to lodge a complaint with a supervisory authority
9. Contact Information
If you have any questions or wish to exercise your rights, contact us at:
Email: sovto@sovto.cz
Phone: +420 773 773 299
Address: Zámostní 1155/23, 710 00, Ostrava