IX. Integration of Google Maps
- Description and extent of data processing
We use the Google Maps service on this website. This enables us to display interactive maps directly on the website, making it easy and convenient for you to use the map function.
Should you visit the website, Google receives the information that you have activated the corresponding subpage of our website. In addition, the following data is transmitted:
(1) IP address of the accessing computer
(2) Date and time of enquiry
This happens regardless of whether or not Google has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account. If you do not wish the data to be assigned to your profile with Google, you must log out before clicking on the link.
Further, depending on what settings the user has made, it is even possible for Google to collect location data. However, your consent to such data being used is always necessary, and you can refuse to let Google have this in your response to the query.
Further information concerning the purpose and scope of data acquisition and its processing by the plugin provider can be found in the provider's data privacy statements, where you will also find additional information on your rights in this respect and setting options to protect your private sphere:
https://policies.google.com/privacy?hl=en&gl=en.
Google also processes your personal data in the USA, and for this reason, the conclusion of standard contractual clauses have been agreed with Google.
- Legal basis for data processing
The legal basis for processing is Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions in accordance with the applicable data protection legislation.
- Purpose of data processing
Google stores your data as usage profiles, which it then uses for advertising or market research purposes, and/or the needs-based design of its website. An analysis of this type is carried out (even for users who have not logged on) in particular to provide needs-based advertising, and to inform other people using the social network of your activities on our website.
- Storage duration
We have no influence on the data collected and data processing operations, nor do we know the full extent of data acquisition, the purposes for which it is processed, or storage periods. Likewise, we have no information regarding the deletion by Google of any data collected.
- Right to object and right of elimination
To prevent data from being assigned to an existing profile with Google, log out before activating the link. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.
X. Use of Google Web Fonts
- Description and extent of data processing
We use the web fonts provided by Google to ensure that font types are shown consistently. When you call up a page, your browser loads the required web fonts into its browser cache so that texts and fonts are displayed correctly. If your browser does not support web fonts, a default font from your computer is used.
No cookies are set when you call up the page. Data transmitted in connection with the page view is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. It is not brought into contact with data that might be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
- Legal basis for data processing
The legal basis for processing is Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions in accordance with the applicable data protection legislation.
- Purpose of data processing
Google Fonts is a freely available library of over 800 fonts. Google Fonts allows us to present our website to the user in an attractive design and in the same quality across all devices. This is the only way of making it technically possible for all visitors to our homepage to have a consistent and pleasant user experience. This purpose is also in our legitimate interests in the processing of personal data under Art. 6 para. 1 point f of the GDPR.
- Storage duration, right to object and right of elimination
We have no influence on the data collected and data processing operations, nor do we know the full extent of data acquisition, the purposes for which it is processed, or storage periods. Likewise, we have no information regarding the deletion by Google of any data collected.
For more information on Google Web Fonts see https://developers.google.com/fonts/faq and Google's data privacy statement: https://www.google.com/policies/privacy/
XI. Integration of YouTube videos (via plugin)
- Description and extent of data processing
We have integrated YouTube videos into our online service; these are stored at www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode,” which means that no data about you as a user is transferred to YouTube unless you play the videos. The data mentioned below will not be transmitted until you play the videos. We have no influence on this data transmission.
Should you visit the website, YouTube receives the information that you have activated the corresponding subpage of our website. In addition, the following data is transmitted:
(1) The user’s IP address
(2) Date and time of access
(3) Login information
(4) Amount of data transferred
(5) Enquiring domain
(6) Equipment type, model, brand, screen resolution
(7) Operating system, versions, families
(8) Browser, version, configuration, engines, plugins, language, language code
(9) Location data
(10) Provider details
This happens regardless of whether or not YouTube has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account.
- Legal basis for data processing
The legal basis for processing is Art. 6 para. 1 p. 1 point f of the GDPR.
- Purpose of data processing
YouTube stores your data as usage profiles, which it then uses for advertising or market research purposes, and/or the needs-based design of its website. An analysis of this type is carried out (even for users who have not logged on) in particular to provide needs-based advertising, and to inform other people using the social network of your activities on our website.
- Storage duration, right to object and right of elimination
If you do not wish the data to be assigned to your profile with YouTube, you must log out before activating the button. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.
Further information concerning the purpose and scope of data acquisition and its processing by YouTube can be found in the data privacy statement. where you will also find additional information on your rights and setting options to protect your private sphere: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA, and for this reason, the conclusion of standard contractual clauses have been agreed with Google.
XII. CONSENT TO RECEIVE PROMOTIONAL COMMUNICATIONS
You hereby consent to EDAG Engineering, spol. s r.o., with its registered office at tř. V. Klementa 1459, 293 01 Mladá Boleslav II, 293 01 Mladá Boleslav, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Entry 49805 (hereinafter referred to as "EDAG") processing your personal data for the purpose of sending you promotional communications subject to the terms and conditions set out below.
The scope of personal data to be processed by EDAG:
EDAG will process the personal data you provide to us in connection with your subscription to our promotional communications.
In particular, EDAG will process your email address, your telephone number, the date you subscribed to the newsletter, the date you confirmed your subscription to the newsletter and, where relevant, your confirmation IP address. If you unsubscribe from our promotional communications, we will also keep the date of such unsubscription on file.
Purposes for which your personal data will be processed:
EDAG will process your personal data for direct marketing purposes by sending you promotional communications relating to the services operated or managed by EDAG.
Legal basis of processing:
Your consent constitutes the legal basis of this processing.
For how long will the data be retained:
Your consent is granted until revoked.
How and when can the consent to the processing of personal data be withdrawn:
The consent may be withdrawn at any time, in particular using a link provided in each promotional email message.
Information on the processing of personal data
Further information on the processing of personal data can be found HERE.
PRINCIPLES RELATING TO THE PROCESSING OF PERSONAL DATA
EDAG EngineeringCZ spol. s r.o., with its registered office at tř. Václava Klementa 1459, Mladá Boleslav II, 293 01 Mladá Boleslav, ID No. 146 15 011, , registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Entry 49805 (hereinafter referred to as “EDAG”) as the controller processes the personal data of customers, suppliers, website visitors or parties interested in mutual cooperation.
The personal data is processed in accordance with generally binding laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR") and in accordance with Act No. 110/209 Coll., on the processing of personal data, as amended.
Protection of your personal data is very important to EDAG. We treat the personal information we collect, process and store responsibly. This document contains information on the processing of your personal data and describes your rights.
What is personal data?
Personal data is any information about an identified or identifiable natural person such as their name, residence, email address, telephone number or IP address.
Purpose of processing personal data:
- Website visits – the controller processes the data it receives from individuals visiting its website (IP address or other online identifiers), type and language
- performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR
- controller’s legitimate interest in providing direct marketing (especially sending promotional messages and newsletters) pursuant to Article 6(1)(f) of the GDPR
- Your consent to the processing for the purpose of direct marketing (in particular for sending promotional communications and newsletters) pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services, in the absence of an order for goods or services.
- Information obtained via the contact form
Retention period:
- The personal data is retained by the controller
- for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims under those contractual relationships
- until the consent to the processing of personal data for marketing purposes is withdrawn where the personal data is processed on the basis of consent.
- After the expiry of the retention period, the controller shall delete the personal data.
Recipients of personal data (controller’s subcontractors):
The controller does not transmit the collected personal data to third parties or to third countries.
Data security terms:
The controller declares that it has taken all appropriate technical and organisational measures to safeguard the personal data.
The controller declares that only persons authorised and trained by it have access to the personal data.
Sending newsletters:
By subscribing to the newsletter offered on the controller’s website, the data provided at the time of subscription will only be used to send the newsletter. The customer can terminate the subscription at any time using the unsubscribe option in the newsletter.
Final provisions:
- By submitting the contact form from the controller's website, you confirm that you are aware of the privacy policy and that you accept it in its entirety.
- You agree to these terms and conditions by checking the consent box via the online form. By checking the consent box you confirm that you are aware of the privacy policy and that you accept it in its entirety.
Customer rights notice:
- Access to personal data
- Right to rectification or erasure of personal data
- Right to request clarification
- Right to contact the Data Protection Authority
- Right to object to the processing of personal data
- Right to withdraw consent to the processing of personal data at any time
XIII. Electronic Cards (eCard)
- Description and extent of data processing
We use electronic means to send invitations or greetings cards.
The following data is stored in our customer/supplier system, and used:
(1) Gender
(2) Surname
(3) E-mail address
In addition, the following data may be used (if available):
(4) Title.
(5) First name
(6) Company
(7) Grouping
(8) Ticket/code
Reference is made to this data privacy statement when a message is being sent.
Alternatively, an e-mail address is provided if you prefer to contact us this way. In this case, the personal data of the user transmitted with the e-mail is stored.
Personal data is disclosed only to our affiliated companies, national and international, within the EDAG Group. Such data is used solely to process the communication.
- Legal basis for data processing
Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation are the legal basis for the temporary storage of the data and the log files.
Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation are the legal basis for the processing of data collected when an e-mail is being sent.
If the point of the e-mail contact is to enter into a contract, then Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as an additional legal basis for processing.
- Purpose of data processing
The sole reason for processing personal data is to enable us to handle communication with you. If contact is established by e-mail, this also establishes a legitimate interest in processing the data.
- Storage duration
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. For personal data transmitted by e-mail, this is the case when a particular communication with the user is finished. Communication is finished when circumstances indicate that the matter concerned has been fully resolved.
The additional personal data collected while the message is being sent will be deleted after a period of no more than seven days has elapsed.
- Right to object and right of elimination
The user has the right to withdraw his or her consent to the processing of the personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. If this is the case, then the communication cannot be continued.
In this case, all personal data collected as a result of contact being made will then be erased.
XIV. Rights of Data Subject
If personal data concerning you is processed, you are the data subject as defined in the GDPR, and the analogous provisions pursuant to applicable data protection legislation and have the following rights against the data controller:
- Right to information
You can ask the controller to provide you with confirmation as to whether or not personal data concerning you is processed by us.
If such processing is being undertaken, you can ask the controller to provide you with information concerning the following:
(1) The purposes for which the personal data is processed;
(2) The personal data categories which are processed;
(3) The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) The planned storage duration of the personal data concerning you or, if it is not possible to provide concrete information on this point, criteria for defining the storage duration;
(5) The existence of a right to correct or delete the personal data concerning you, a right to limit processing by the controller, or a right to object to such processing;
(6) The existence of a right to lodge a complaint with a supervisory authority;
(7) All available information concerning the origin of the data, if the personal data was not acquired from the data subject him or herself;
(8) The existence of automated decision-making and profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved and the implications and intended impact of such processing for the data subject.
You have the right to request information on whether or not the personal data concerning you is transmitted to a third country or international organisation. In this context, you may ask for information on appropriate guarantees in accordance with Art. 46 of the GDPR and the analogous provisions pursuant to applicable data protection legislation relating to the transmission of data.
- Right to rectification
You have a right to have the controller correct or complete any personal data concerning you which, having been processed, is either incorrect or incomplete. The data controller must carry out any corrections without undue delay.
- Right to restrict processing
Subject to the following conditions, you can request that processing of the personal data concerning you be restricted:
(1) If you dispute the accuracy of the personal data concerning you for a period which allows the controller to check the accuracy of the personal data;
(2) the processing is unlawful and you refuse deletion of the personal data, instead requesting that use of the personal data be restricted;
(3) the controller no longer needs the personal data for processing purposes, but you need it in order to establish, exercise or defend legal claims, or
(4) if you have filed an objection to the processing of the data in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the processing of the personal data concerning you has been restricted, then, storage aside, this data may only be processed with your consent (insofar as legally required), or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest on the basis of Union or Member State law.
If restriction of the processing has been restricted under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.
- Right to deletion
a) Obligation to delete
You can ask the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, which served as the basis for processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 point a of the GDPR, and there is no other legal basis for the processing.
(3) You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
(4) The personal data concerning you has been unlawfully processed.
(5) Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(6) The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
b) Information to third parties
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR, then, taking into account the technologies available and implementation costs, he - the controller - applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as a data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.
c) Exceptions
The data subject does not have the right to have his or her data deleted if processing is necessary
(1) to exercise the rights to freedom of expression and freedom of information;
(2) to comply with a legal obligation calling for processing on the basis of Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 points h and i and Art. 9 para. 3 of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 of the GDPR, and the analogous provisions pursuant to applicable data protection legislation insofar as the right set out in section a) is likely to render impossible or seriously impair the achievement of the purposes of this processing, or
(5) to establish, exercise or defend legal claims.
- Right to information
If you have exercised your right to have the controller correct, delete or restrict the processing of your data, then the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of such correction or deletion of the data or restriction of the processing, unless it proves impossible to do so or would involve unreasonable expense and effort.
You are entitled to have the controller inform you of these recipients.
- Right to data portability
You have the right to receive the personal data concerning you with which you have provided the controller in a structured, commonly used and machine-readable format. Further, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, providing that
(1) the processing is based on consent in accordance with Art. 6 para. 1 p. 1 point a of the GDPR or Art. 9 para. 2 point a of GDPR or on a contract in accordance with Art. 6 para. 1 p. 1 point b of the GDPR, and the analogous provisions pursuant to applicable data protection legislation, or on a contract in accordance with Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 point e or f of the GDPR and the analogous provisions pursuant to applicable data protection legislation; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.
Should you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG and the analogous provisions pursuant to applicable data protection legislation – you are entitled to exercise your right to object by automated means using technical specifications.
- Right to withdraw declaration of consent under data protection law
You have the right to withdraw your declaration of consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
- Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects that concern you or significantly affects in a similar way.
This does not apply if the decision
(1) is necessary for entering into or the performance of a contract between you and the data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is made with your explicit consent.
These decisions must not, however, be based on special categories of personal data referred to in Art. 9 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, unless Art. 9 para. 2 point a or g and the analogous provisions pursuant to applicable data protection legislation apply, and suitable measures have been undertaken to safeguard your rights and freedoms and your legitimate interests.
With regard to the cases described in points (1) and (3), data controller will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
- Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR and the analogous provisions pursuant to applicable data protection legislation.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
Version: August 2023
