The controller of personal data according to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR") is the business corporation FRAMUN s.r.o., Company ID: 25841203, registered office: Hošťálková 606, Hošťálková, 756 22 Hošťálková, registered in the Commercial Register at the Regional Court in Ostrava, Section C, Insert 20930 (hereinafter also referred to as the "controller").

The contact details of the controller are: Hošťálková 606, Hošťálková, 756 22 Hošťálková,

e-mail: framun@framun.cz, and phone: +420 571 442 429. Website: www.framun.cz

What personal data do we process?

When you use our services, we collect various types of data such as your username and password and your contact details. If you make a purchase or create an account, we also process your first and last name (e.g. company contact person), your orders, and the data you set up in your account. Data relating solely to a legal entity is not considered personal data.

We process the following personal data:

• Identification data, which primarily includes the name and surname of a sole trader, username and password (as a representative of a company or proxy of a sole trader), Company ID and VAT ID, if assigned;
• Contact details, which means personal data that enables us to contact you, particularly e-mail address, phone number, delivery address, and billing address;
• Order data, which includes especially information about goods and services ordered, method of delivery and payment including account number, and information about complaints;

Why do we process personal data and what authorizes us to do so?

We process your personal data in different situations for various purposes. If you register with us, we use your data to manage your account and provide related features. If you make a purchase, we use your data to process your order, protect our legal claims, and fulfill legal obligations. Using your contact and other data, we may also display and send personalized offers. The basis for processing your personal data may be contract performance, legal obligation, our legitimate interest, or your consent.

In the course of our activities, we process personal data for various purposes and to varying extents either:

• without your consent, based on contract performance, our legitimate interest, or due to legal obligations, or
• based on your consent.

What processing we may perform without your consent depends on the purpose of the respective processing and your relationship to us – whether you're merely a website visitor, or if you register or make a purchase. We may also process your data if you are the recipient of goods or services ordered from us, or if you communicate with us.

If you register with us

If you register, we carry out the following processing:

 

Processing based on contract performance

If you submit an inquiry on the website www.framun.cz, we process your identification and contact data (if you later make a purchase) based on the performance of the contract with you (without your consent) in order to maintain your user account. We use personal data for this purpose for the duration of your account, which you can delete at any time.

If you make a purchase with us

If you make a purchase, we carry out the following processing:

Processing based on contract performance

If you purchase as a sole trader, we process your personal data for the purpose of fulfilling your order – your identification and contact details and order data. If you have a user account with us, we may also use your settings for this purpose.

If you purchase on behalf of a legal entity, we process the same data for the same purpose based on our legitimate interest in concluding and fulfilling a contract with the entity you represent.

This means we use the data especially to:

• allow you to complete your order on the website, for example so that items in your cart or details of a draft order are not lost;
• communicate with you regarding your order, for example to send you a confirmation or notify you of shipment;
• for delivery purposes; in this context, we may provide your data to our shipping partners, exclusively for the purpose of delivering the goods;
• We use personal data for this purpose for as long as necessary to fulfill your order or any contractual requests such as complaints.

Processing based on legitimate interest

If you make a purchase, we retain your identification and contact details and order data based on our legitimate interest (without your consent) for the purpose of protecting legal claims and our internal records and controls. Our legitimate interests in this case are to protect legal rights and ensure proper service provision.

For the purpose of legal claim protection and internal record-keeping and control, we process the data for the duration of the limitation period (3 years) and for one additional year after its expiration due to potential claims submitted at the end of the limitation period. In the event of legal, administrative, or other proceedings, we process your personal data to the necessary extent for the entire duration of such proceedings and for the remainder of the limitation period after their conclusion.

For other stated purposes, we use personal data for a maximum of 6 months.

You have the right to object to this processing carried out based on our legitimate interest.

Processing based on legal obligations

We also have to fulfill certain legal obligations. If we process your personal data for this reason, we do not need your consent. Based on this legal ground, we process your identification and contact details, and order data for compliance with the following laws in particular:

• Act No. 89/2012 Coll., Civil Code,
• Act No. 235/2004 Coll., on Value Added Tax,
• Act No. 563/1991 Coll., on Accounting.

For these purposes, we use personal data for no more than 10 years from the issuance of the last document related to your order.

 

If you are the recipient of goods or services ordered from us

If you are the recipient of goods or services ordered from us, we process your identification and contact details:

• based on our legitimate interest for the purpose of preparing, concluding, and fulfilling the contract with our customer. Fulfillment of this contract is also our legitimate interest;

• based on our legitimate interest to obtain information that will allow us to improve our services in the future, or for creating internal statistics and reports; our legitimate interest here is to improve our services for our customers;

• for the purpose of fulfilling legal obligations, especially under Act No. 235/2004 Coll., on Value Added Tax and Act No. 563/1991 Coll., on Accounting;
• for the purpose of protecting legal claims and our internal records and control; our legitimate interests here are the protection of legal claims and the proper provision of our services.

For the preparation, conclusion, and performance of a contract with our customer, we use personal data for the time necessary to process the order. After this period, we retain the data based on our legitimate interest for the purpose of legal claim protection and internal records and control, for the duration of the 3-year limitation period and one year after its expiration with respect to claims asserted at the end of the limitation period. In the event of initiation of judicial, administrative, or other proceedings, we process your personal data to the necessary extent for the entire duration of such proceedings and the remaining part of the limitation period after its conclusion. Our legitimate interests here are the protection of legal claims and the proper provision of our services. For legal obligations, we use personal data for no more than 10 years from the relevant order.

You have the right to object to this processing based on legitimate interest.

Who processes your personal data and to whom do we disclose it?

In most cases, we process your data for our own purposes as the controller. In such cases, we disclose your data to our partners to ensure payment, delivery, and other aspects of your order.

All mentioned personal data are processed by us as the controller. This means we define the purposes for which your personal data are collected, determine how they are processed, and are responsible for their proper handling.

We may also disclose your personal data to other entities acting as controllers, namely:

• in connection with processing your order to our partners involved in fulfilling it, specifically:
  • delivery partners, especially General Logistics Systems Czech Republic s.r.o., ID: 26087961, DACHSER Czech Republic a.s., ID: 27090833, PPL s.r.o., ID: 25194798, Česká pošta, s. p., ID: 47114983, UNITED PARCEL SERVICE CZECH REPUBLIC, s.r.o., ID: 25684094, Direct Parcel Distribution CZ s.r.o., ID: 61329266, TOPTRANS EU, a.s., ID: 28202376, WE|DO CZ s.r.o., ID: 08313628, Geis CZ s.r.o., ID: 44567359 if they deliver your order;
  • product suppliers or service centers of the respective manufacturer in relation to a complaint about ordered goods or services;

• authorized persons conducting the mandatory audit of the controller – access to personal data;
• authorized persons of the e-shop service support provider – access to personal data.
  • We usually obtain personal data directly from you via our website or through communication with you. Some additional data may be obtained from our partners, e.g., banks or shipping companies.
    • In most cases, we process personal data that you provide when ordering goods or services, creating and using your account, or communicating with us.
    • If you make a purchase from us, we may receive additional data about your orders from banks, our partners operating payment systems, and shipping partners, such as your account number, confirmation of payment, or delivery and acceptance of goods.

 

What are the sources of personal data?

Transfer of data outside the EU

The controller does not intend to transfer personal data to a third country (outside the EU) or to an international organization.

 

What rights do you have regarding personal data processing?

Just as we have our rights and obligations when processing your personal data, you also have certain rights. These include:

 

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we get your personal data from, to whom we transfer them, who else processes them, and what your other rights are. You can find all of this in this document. If you are unsure which personal data we process about you, you can ask us to confirm whether or not we process personal data concerning you, and if we do, you have the right to access those data. As part of the right of access, you can request a copy of the processed personal data; we will provide the first copy free of charge and charge a fee for additional copies.

 

Right to rectification

To err is human. If you find that the personal data we process about you are inaccurate or incomplete, you have the right to have them corrected or completed without undue delay.

 

Right to erasure

In some cases, you have the right to have your personal data erased. We will delete your personal data without undue delay if any of the following reasons apply:

• we no longer need your personal data for the purposes for which we processed them;
• you withdraw your consent to the processing of personal data where consent is required and there is no other reason to continue processing;
• you exercise your right to object to processing (see below) and we find no overriding legitimate grounds to continue processing, or
• you believe that the processing of your personal data is no longer in accordance with generally binding regulations.

However, please note that even if one of these reasons applies, it does not mean we will immediately delete all your personal data. This right does not apply if processing is still necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.

 

Right to restriction of processing

In certain cases, you may exercise your right to restrict the processing of personal data instead of requesting their erasure. This right allows you to request that your personal data only be marked and not be subject to further processing operations – not permanently (as in the case of erasure), but for a limited time. We must restrict processing when:

• you contest the accuracy of personal data, until we verify the accuracy of the data;
• we process your personal data without a sufficient legal basis (e.g., beyond what is necessary), but you prefer to restrict them before deletion (e.g., if you expect to provide them to us again in the future);
• we no longer need your personal data for the specified purposes, but you require them for the establishment, exercise, or defense of legal claims; or
• you object to processing. The right to object is described in more detail below. During the period of assessing whether your objection is justified, we must restrict the processing of your personal data.

 

Right to data portability

You have the right to receive all your personal data that you provided to us and that we process based on your consent or to fulfill a contract. We will provide the data in a structured, commonly used, and machine-readable format. This right only applies to data processed automatically in our electronic databases.

 

Right to object to processing

You have the right to object to the processing of personal data based on our legitimate interest. If it concerns marketing activities, we will stop processing your data immediately; in other cases, we will do so unless we have compelling legitimate grounds to continue processing.

 

Right to lodge a complaint

Exercising your rights as described above does not affect your right to file a complaint with the supervisory authority. You may exercise this right, especially if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations. You may file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7.

 

How to exercise your rights?

You can exercise your rights via the above email, via the company’s data box, or by email used during registration (or another email with a valid recognized electronic signature), or in paper form sent to the company’s registered address. In such a case, your request must bear an officially certified signature.

We will handle your request without undue delay, but no later than one month. In exceptional cases, especially due to the complexity of your request, we may extend the deadline by two additional months. We will inform you of any such extension and its justification.

 

Data Protection Officer

The company FRAMUN s.r.o. has not appointed a Data Protection Officer.

 

So-called cookies

See Cookie Policy

 

Automated individual decision-making

The controller does not engage in automated individual decision-making within the meaning of Article 22 of the GDPR.

 

Controller’s declaration

The controller declares that it has taken all appropriate technical and organizational measures to secure personal data. This includes securing data storage and personal data in paper form, especially using passwords, antivirus software, encryption, etc.

The controller declares that only authorized persons, including those performing mandatory audits and e-shop service support, have access to personal data.

 

Final provisions

By submitting your order through the online order form, you confirm that you have read and fully accept the terms of personal data protection.

You agree to these terms by ticking the consent checkbox in the online form. By doing so, you confirm that you have read and agree to the terms of personal data protection.

The administrator is entitled to change these terms. The new version of the privacy policy will be published on its website.

 

These terms shall become effective on January 1, 2025.