Privacy Policy - Suppliers

The company VELKÁ PECKA s.r.o., ID No.: 030 24 130, VAT No: CZ03024130, with its registered office at Karolinská 654/2, Karlín, 186 00 Prague 8, registered in the Commercial Register kept by the Municipal Court in Prague, File No. C 226550 (“We”), as a data controller, informs you as our contractual partner or potential contractual partner about the processing of personal data and privacy protection described below.

In this document you will namely find out:

Which of your personal data will be processed, for what purpose and by what means we will process your personal data;
To whom your personal data may be transferred;
For how long we will process your personal data;
How we process personal data of third parties;
What is our policy for use of online services; and
What your rights are in relation to the protection of your personal data.

Please feel free to contact us at our e-mail address privacy@rohlikgroup.com at any time if you need any explanation or advice regarding any part of the text or if you want to discuss further processing of your data.

1. Scope of personal data processing, purposes and legal basis

1.1 If you are our business partner (natural person), we process your personal data that we need for the proper performance of our contractual obligations. These data may include in particular:

your name and surname;
address;
business name;
company’s registered office;
identification number and tax identification number;
telephone number; or
e-mail address.

1.2 Personal data are processed for the purpose of performing a contract. We use the data you provide to us to keep in touch with you and some of these data are also necessary to enable us to perform our legal obligations. Without the provision of this data, it is not possible to conclude a contract.

1.3 If you are our business partner (legal entity), we process personal data of your contact persons that you voluntarily provide to us and which we need for the proper performance of our contractual obligations. These data may include in particular:

name and surname
telephone number,
e-mail address.

1.4 We process this data on the basis of our legitimate interest which lays in being able to fulfil our mutual contract (by keeping in contact with the contact person).

1.5 If you wish to become our business partner and you provide us with your personal data for this purpose, for example via an electronic form located on the website, we process all your data that you voluntarily provide us with in this manner based on your request for the purpose of concluding a contract in the future. Typically, this will include data to the extent of:

contact person’s name and surname;
business name;
company’s registered office;
identification number and tax identification number;
website;
telephone number;
e-mail address;
comments and messages, if any.

2. Who has access to your personal data

We, as the data controller, will process your personal data. We will only disclose your personal data to authorised employees and cooperating persons or individual data processors contracted by us or to other data controllers, but only to the extent necessary to fulfil the individual purposes and on the corresponding legal ground for the processing of personal data. These include, for example:

external accounting firms;
law firms;
processors who provide us with server, web, cloud, marketing or IT services.

3. Period of personal data processing

3.1 We will process your personal data for the period of time determined by the purpose of the processing.

3.2 For the purposes of performing a contract, we will process your data for the term of the contract and for the period of time stipulated by the relevant legislation from the termination of the contract.

3.3 For the purposes of complying with statutory obligations to which we are subject, we will process your data for the period of time stipulated by the relevant legislation.

3.4 If the contract is concluded with a legal entity, we process the relevant data of the contact person for a period of 12 months after the termination of the contract or 12 months from the date on which the contact person ceased to be a contact person.

3.5 For the purposes of protecting our legitimate interests, we will process your data for a maximum period of four (4) years from the time the data processing commenced, unless specific legislation provides otherwise or unless the need to retain the data for a longer period arises in relation to a specific case on reasonable grounds.

3.6 For the purpose of negotiating a contract, we will process your data for a period of twelve (12) months from the start of contract negotiations.

4. Personal data of third parties

Personal data of third parties, which means the personal data of employees and customers of our suppliers and other individuals involved in cooperation with us, or other data that we receive in connection with the conclusion or performance of a contract, will be processed in accordance with applicable personal data protection legislation. We will use these personal data for the purpose of performing contracts. We will process the personal data of third parties for the duration of the contractual relationship and for the period of time stipulated by special legislation, if any. They will be retained for a longer period of time if there is a justified need to retain the data in connection with a specific case.

5. Cookies

5.1 Cookies are small text files containing short data that can be stored on the user’s device when visiting a website. We use cookies on our website for the following purposes:

remembering the logged-in user;
convenient web features;
anonymised evaluation of users’ movements on the website;
obtaining voluntary feedback from users; and
personalization of displayed ads.

5.2 All personal data are processed in a lawful and transparent manner and only adequate, relevant and necessary data are requested in relation to the purposes of the processing.

5.3 Cookie settings can be managed through our cookie banner, which is divided into categories – essential, functional, analytical, and marketing – where you can also find detailed information about these services. A link to reopen the cookie banner is permanently available at the bottom of the Website. Cookies can also generally be refused, or you can choose to allow only certain types, using your browser settings (Chrome; Firefox; Opera; Microsoft Edge).

6. Your rights arising from the processing of personal data

6.1 In relation to our processing of your personal data, you have the following rights:

the right of access to personal data,
the right to rectification,
the right to erasure (“the right to be forgotten”),
the right to restriction of processing,
the right to object to processing of personal data
the right to turn to the data protection authority.

6.2 Your rights are explained below to provide you a clearer idea of their content.

6.3 You can exercise all your rights by contacting us privacy@rohlikgroup.com.

6.4 You can file a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

The right of access to personal data means that you have the right to obtain information as to whether or not your personal data are being processed and, where that is the case, you also have the right to ask us for what purposes, to what extent, to whom they are accessible, for how long we will process them, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data from and whether the processing of your personal data results in automated decision-making, including possible profiling. You also have the right to obtain a copy of your personal data. The first copy is free of charge, but we may charge reasonable administrative costs for further copies.

The right to rectification means that you have the right to request rectification and/or completion of your personal data if they are inaccurate or incomplete.

The right to erasure means that we must erase your personal data if (i) the personal data are no longer necessary in relation to the purposes for which they were collected or processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing of your personal data, or (iv) we are required to do so by law.

The right to restriction of processing means that until we have resolved any disputed issues regarding the processing of your personal data, we must limit the processing of your personal data so it can only be stored and, where appropriate, used for the purpose of establishing, exercising or defending legal claims.

The right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or on the grounds of legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In case of any questions regarding the processing of personal data, you can contact our data protection officer, which is FairData Professionals a.s. (Mgr. Jaroslav Šuchman, LL.M., Mgr. Ing. Jana Duchková), e-mail: privacy@rohlikgroup.com.

This Data Processing Policy is in effect as of 25 May 2018 and is updated on a regular basis.

Last update: October 2025.