Personal Data Protection Privacy Policy

We are processing and managing some of your personal data while providing our services and selling our products.

Following the General Regulation on the Protection of Personal Data (Regulation (EU) 216/679 of the European Parliament and of the European Council, hereinafter referred to as "the Regulation"), we would like to inform you about:

• what personal data we collect,
• for what purposes we use them,
• whether and to whom we provide them,
• what rights you have in connection with the processing of your personal data,
• how you can exercise these rights with us.

1. Our contact details for personal data protection matters

The manager of personal data is the company INFRAM as, ID no: 25070282, with its registered office in Prague 9, Pelušková 1407, postal code 198 00, a company registered in the Commercial Register kept by the Municipal Court in Prague in section B, folder 4235, INFRAM a.s. has no data protection comissioner.

If you have any questions regarding the processing of personal data by our company or if you want to exercise your rights regarding the handling of personal data, contact us in writing, either via e-mail address: recepce@infram.cz, or address us by mail at: INFRAM a.s., Pelušková 1407, Prague 9, 198 00.

2. Processed personal data

Personal data of persons who have concluded or intend to conclude a Contract for work or order with us;

In case that you have concluded a contract for work, an order with us or you are in negotiations with our company leading to the conclusion of a Contract for Work (e.g. you request processing of a price quotation or specialization, and the discussion regarding the specialization or consultation took place directly at your place, etc.), we are processing the following types of personal data that you have provided to us, or you obtained from publicly accessible registers:

Identification data (name and surname, or ID number and VAT number) Contact details (address of place of residence, headquarters of business, e-mail address, telephone) Additional data (place of performance of the contract or order)

Other personal data

In case that you provide us with the personal data for a purpose other than the above (e.g.sending an inquiry that does not relate to our products or an already concluded contract, via e-mail on the website, etc.), personal data and their possible processing assessed individually and we will inform you about their processing. If we need your consent to process them, we will ask you for granting it.

We are processing personal data to the extent necessary for the given purpose of processing, but without the provision of the above personal data, it is not possible to conclude a Contract for Work.

3. Sources of personal data

We obtain personal data directly from you if you are a person who concludes a contract for work, an order, conducts negotiations, and aims to conclude a contract. Another source can also be publicly accessible registers (insolvency register, trade register, register of VAT payers). INFRAM a.s., further uses personal data obtained by third parties - Internet service providers. You can find more about these resources in point 5 of this Statement.

4. Legal basis of personal data processing, method and purpose of processingí

We are entitled to process your personal data also without your consent:

To the extent necessary for concluding a constract for work, orders incl. a Negotiation aiming at concluding this contract, order (demand, specialization, etc.) and performance resulting from it (assembly, complaint, service, etc.) To the extent necessary to fulfill the obligations imposed on us by law e.g. bookkeeping up to the Accounting Act (Act No. 563/1991 Coll.), the Income Tax Act (Act No. 586/1992 Coll.) and the Value Added Tax Act (Act No. 235/2004 Coll.,). In public interest and exercise of public power - to fulfill our obligation to provide information to the police, courts, authorities, etc.

In case that we process data on the basis of your consent, the purpose of processing will be cited in the requests for consent together with other conditions of processing.

5. Processing of personal data when visiting websites operated by INFRAM a.s.

Websites in a possession of the company INFRAM a.s. and the online services associated with them use so-called cookies in order to optimize services and save your time, which are small amounts of data that allow the recognition of the site visitor's equipment when visiting again. Cookies remember, for example, the preferred language, currency, login e-mail, completed forms or other small settings in the client administration. When you open our website for the first time, you will always be informed about the use of cookies and you have the opportunity to decide whether to give or not to give your consent. You can also directly adjust your web browser settings for individual websites, where you can restrict or block cookies. By default, all modern browsers have cookies automatically set as active, unless otherwise selected. If cookies are enabled in the browser, this is considered to be consent to the storage of cookies.

The protection of personal data obtained by this tool is addressed in the business conditions or contracts governing the provision of individual services. These are mainly the following publishers:

• • Google Adwords - these are long-term third-party cookies. It is used for marketing and advertising purposes on social networks. Helps create customized advertising offers. Processing time is max 180 days.
• • Google Analytics - this is an analytical tool that creates long-term third-party cookies. This tool is used on a large number of websites and is used to obtain statistics and optimize the operation of the website. Processing time is max. 26 months.

6. Time of storage of personal data

We are storing your personal data only during a necessary time and archive it according to the legal deadlines imposed on us by law.

Personal data processed as part of the provision of a price quotation, when the contract has not yet been concluded, are processed for a period of one year. When this period has ended, the price quotartions are anonymized (all personal data are deleted) and only the price quotation number is accessible due to its identification.

Personal data processed in connection with the conclusion of the contract for work, orders and other performance, processed for the duration of the contractual relationship which will allow us to process your personal data, i.e. For the duration of the warranty period for products and services delivered under this contract for work.

The processing period of personal data which we obtained during the visits of the website is stated in the paragraph 5 of this statement.

After the loss of a legal reason, we are procedding the deletion of personal data, unless we have no other legal reason to process them or if you do not give us your consent to the processing.

In case we process personal data on the basis of consent, the period of storage of personal data is stated directly in the text of the consent and we always introduce you the text of the consent in advance.

7. To whom we provide your personal data

We provide the obtained personal data to third parties, always only to the extent necessary and only in connection with the stated purpose of processing. They are primarily our suppliers in the supply of materials and products, as well as, for example, assembly workers, tax advisors, with whom we have a contract for processing of personal data.

Personal data obtained through the website is stored on the company's servers stated in paragraph 5 of this statement.

We store the processed personal data for the necessary period fo time on our own servers or in our archives. We do not use the services of third parties for any archiving.

8. Transfer of personal data to third countries

We process personal data only in the Czech Republic or in the EU member states. We do not transfer personal data to third countries outside the EU.

9.Your rights to access personal data

Please note that under the Personal Data Protection Act, you have the right to:

• the right of access to their personal data by the Article 15 of the GDPR,
• • the right to correct personal data following the Article 16 of the GDPR, or restrictions on processing up to the Article 18 of the GDPR.
• • the right to delete personal data contained in the Article 17 of the GDPR.
• the right to raise an objection to the processing following the Article 21 of the GDPR
• the right to data transmission stated in the Article 20 of the GDPR.
• the right to withdraw the consent to processing in writing or via e-mail to the address or to the contact email of the administrator specified in the Article III of these conditions.
• You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

In case of raising objections to the protection of personal data INFRAM a.s would inform the data entity, always without undue delay, in any case within one month of receiving the request, about the processing of his request.

The data entity has the right to address backwards with his / her complaint for the protection of personal data at any time.

The administrator is entitled to change these conditions. The new version of these terms and conditions will be published on the website and moreover at the same time the new version of these terms and conditions will be sent to you via e-mail address you provided to the administrator.

This Personal Data Privacy Policy is valid and effective from 25th May 2018.