This page explains how we handle personal data on the website czechminerals.cz and which cookies we use. It serves as the information notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and as the information on cookies under Section 89(3) of Act No. 127/2005 Coll., on electronic communications.
1. Who is the controller
The controller of your personal data is Czechminerals International s.r.o., Company ID (IČO) 09667628, VAT ID CZ09667628, registered office Úslavská 419/14, 326 00 Plzeň, Czech Republic (“we”).
Contact for all privacy matters: [email protected], tel. +420 732 192 987. We have not appointed a Data Protection Officer; please contact us directly.
Our products are sold to businesses (wholesale), so the personal data we handle mostly concerns sole traders and contact persons of companies.
2. What data we process and why
2.1 Visiting the website
- Data
- Technical data about your visit (IP address, date and time, browser and device information).
- Purpose
- Operating and securing the website.
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR).
- Retention
- Up to 12 months.
2.2 Contact form and email
- Data
- Name, email address, the content of your message and any other data you give us.
- Purpose
- Answering your enquiry and keeping the correspondence.
- Legal basis
- Steps prior to entering into a contract at your request (Art. 6(1)(b)) or our legitimate interest in handling your enquiry (Art. 6(1)(f)).
- Retention
- While the enquiry is being handled and then up to 3 years.
2.3 Newsletter
- Data
- Email address and a record of your sign-up.
- Purpose
- Sending business communications.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR; Section 7 of Act No. 480/2004 Coll.). You can withdraw it at any time, free of charge, via the link in the newsletter or by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
- Retention
- Until you withdraw consent; after that a record of the sign-up and withdrawal for up to 3 years to be able to prove our compliance.
2.4 Registration and customer account
- Data
- Identification and contact details (name, email, telephone, company name, company ID, address, country), a description of your business and the data related to your account and logins. If you sign in with Google, we receive only the verified email address of your Google account.
- Purpose
- Verifying that the applicant is a business entitled to wholesale purchases, creating the account, giving you access to prices and ordering, and securing the account.
- Legal basis
- Performance of a contract and steps prior to a contract (Art. 6(1)(b)); legitimate interest in verifying applicants and securing accounts (Art. 6(1)(f)).
- Retention
- For as long as the account exists. Rejected or unanswered requests: up to 12 months.
2.5 Orders and invoicing
- Data
- Customer identification, billing and delivery details, content of orders and invoices, payments, communication about the order.
- Purpose
- Processing orders, delivery, invoicing, complaints, accounting and tax obligations.
- Legal basis
- Performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)).
- Retention
- As required by law (tax documents 10 years, other accounting records usually 5 years).
3. Cookies and similar technologies
Cookies are small files stored in your browser. Technical cookies that are necessary to provide a service you have requested (e.g. login) are used without consent. Analytical cookies are used only if you give us your consent (Section 89(3) of Act No. 127/2005 Coll.). Consent is voluntary, you can refuse it without any consequences for using the website, and you can withdraw it at any time via “Cookie settings” on the website or in your browser.
| Name | Provider | Purpose | Lifetime | Consent |
|---|---|---|---|---|
| cm_session | czechminerals.cz | Keeps you logged in. Set only after you log in. | Until logout or session expiry | Not required (technical) |
| czechminerals.headerBannerHiddenUntil (local storage) | czechminerals.cz | Remembers that you closed the top banner. | 7 days | Not required (functional) |
| Form protection | Cloudflare | Verifies that a form is submitted by a person, not a robot. | Set by the provider | Not required (security) |
| Sign in with Google | Loaded only to let you sign in with your Google account. | Set by the provider | Not required (requested by you) | |
| _ga, _ga_5M5TG339RS | Google Analytics 4 | Statistics about visits. Used only after you consent. | 2 years | Required |
For the website to display correctly, your browser also downloads fonts and scripts from third-party providers, who see your IP address when the files are requested. Our legitimate interest is a correctly functioning and quickly loading website.
4. Who receives the data
We pass personal data only to the extent necessary and to these categories of recipients:
- providers of hosting and technical infrastructure;
- providers of services used on the website (e.g. Cloudflare, Google);
- carriers – delivery data of the recipient;
- our accountants, tax advisers and IT administrators, bound by confidentiality;
- public authorities, where required by law.
We do not sell personal data. We will tell you the current list of specific processors on request.
5. Transfers outside the EU/EEA
Some providers (in particular Google and Cloudflare) may process data in the USA. Such transfers rely on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses.
6. Automated decision-making
We do not use automated decision-making or profiling that would have legal or similarly significant effects on you.
7. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR);
- have inaccurate data rectified (Art. 16);
- erasure, unless we must keep the data by law or need it to defend legal claims (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time (Art. 7(3));
- lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
To exercise your rights write to [email protected]. We will respond within one month at the latest; we may ask you to verify your identity. Providing data is voluntary, but without the data marked as required in the forms we cannot handle your request or order. Signing up to the newsletter is entirely optional.
8. Changes
We may update this page, for example when we change the tools used on the website. The current version is always published here, with the date it takes effect.