Privacy Policy

1. Data Controller

The data controller is:

The Controller processes personal data in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
• Act No. 110/2019 Coll., on personal data processing

2. What Personal Data We Process

The Controller may process in particular the following personal data:

• first name and surname
• address of residence or installation site
• telephone number
• email address
• billing details
• information about ordered services
• technical data related to the execution of the order

These data are obtained in particular through:

• enquiry forms on the website
• email communication
• telephone communication
• conclusion of a contract or order for services

3. Purpose of Personal Data Processing

Personal data are processed in particular for the following purposes:

a) Performance of the contract or enquiry

for example:

• preparing a price quotation
• communication with the customer
• carrying out installation or service work
• issuing invoices

The legal basis is the performance of the contract.

b) Compliance with legal obligations

for example:

• accounting and tax obligations
• archiving documents

The legal basis is compliance with legal obligations.

c) Legitimate interest of the Controller

for example:

• protection of rights and legal claims
• records of orders
• basic communication with customers

d) Marketing (where consent is given)

for example:

• sending commercial communications
• information about services

Consent may be withdrawn at any time.

4. Retention Period

We retain personal data only for as long as strictly necessary.

Typically:

• for the duration of the contractual relationship
• for the period required by statutory archiving rules
• for a maximum of 10 years where required by accounting or tax legislation

5. Recipients of Personal Data

Personal data may be disclosed to the following categories of recipients:

• accounting and tax advisers
• IT service providers
• service technicians or subcontractors
• public authorities (where required by law)

The Controller does not transfer personal data outside the European Union.

6. Rights of the Data Subject

Any individual whose data are processed has the right to:

• request access to their personal data
• request the rectification of inaccurate data
• request the erasure of personal data
• request restriction of processing
• object to processing
• request data portability

These rights may be exercised by email: info@smartair.cz

7. Right to Lodge a Complaint

If you believe that your right to personal data protection has been infringed, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection (ÚOOÚ) – www.uoou.cz

8. Security of Personal Data

The Controller has adopted appropriate technical and organisational measures to protect personal data against:

• unauthorised access
• loss
• misuse
• unauthorised alteration

9. Final Provisions

This Privacy Policy may be updated by the Controller. The current version is always published on the company’s website.