Personal data protection policy

Thank you for using our services and for visiting our site. We are the company PEPITO s.r.o., ID: 49822926, with its registered office at Lada 292, 289 13 Nymburk, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Entry 31775 (hereinafter referred to as the “Company”) and the protection of the personal data of all individuals is very important to us.

All our policies and basic information about the data we may receive and process are set out in this policy. We believe that you will take the time to read this information about the use and processing of your personal data carefully.

This policy was developed in particular so that we can inform you which data and personal data we collect, how we handle it and what rights you have. Our Company is mainly a manufacturing company, but it still shares some of its information on the internet, where we may also obtain some data about you. We have endeavored to write these terms and conditions in a way that is understandable to all, but if our efforts have not been successful and there is still something that is not clear, or if you have any questions about personal data, please contact us at: pepito@pepito.cz. We are ready to attend to you and answer your questions at any time.

Basic principles of personal data protection

Because the protection of personal data means a lot to us, we comply with all regulations regarding the protection of personal data. In addition, when processing personal data, we always ensure that we comply with the basic principles set out in the European GDPR.

All personal data handled in any way by our Company must always be processed in accordance with the basic principles, i.e.:

processed fairly in a lawful and transparent manner, in such a way as to ensure the security of personal data,
collected in such a way that the purposes of collection are definite, express and legitimate,
relevant, limited to what is necessary in relation to the purpose and adequate,
accurate and, if necessary, updated; inaccurate data must be erased or corrected,
stored in a form that allows identification of the data only for as long as it is necessary for the specified purpose, protected in an appropriate way that ensures that the personal data will not be processed in an unauthorized or unlawful manner, lost, stolen, damaged or destroyed.

What data do we collect about you?

Recruitment Procedures

If you decide to join our Company as an employee by sending us or providing us with your CV, we will retain it only for that application or until the position is filled. If you send it to us without specifying a position or selection process, we will retain your CV for 6 months. If you would like us to keep your CV longer, please inform us of this in your e-mail, letter or directly in your CV.

We will not pass on any information contained in your CV without your consent.

Contact form

A contact form is available on our website, which is primarily used to provide a method of contact in the context of future business cooperation. It is also not exclusive to communication between an established customer and the Company. However, for these purposes and to expedite the processing of your request, we recommend contacting our Company directly through the means of communication already provided and obtained (e-mail or telephone). By filling out this form, you give us your consent to process your personal data, on the basis of which we will be able to contact you to begin business negotiations or to answer any customer questions.

If you tick the box with consent to receive news or commercial communications within the form, we will include your contact information in the database until you withdraw your consent, or until we have another legal basis for using your data for sending news or commercial communications. More information on the processing of data for sending communications can be found under Events we organize.

Processing based on law or contract

If you are our business partner, client, customer or a person employed by or otherwise cooperating with one of these, we may process your personal data because we are required to do so by law, or because it is data that we absolutely need to have in order to be able to process, conclude or perform a contract you have entered into with us.

We process this data in particular for the purpose of fulfilling a concluded contract, fulfilling legal obligations, or ensuring the functioning of the Company. These activities include ensuring business communication and arranging business meetings of the Company, keeping accounting and utility bills, protecting our rights and asserting our claims, dealing with public authorities, keeping records of our business partners or customers, keeping records of business activities, keeping records of documentation for our products, etc. We only store this data for as long as we absolutely need it. Due to our extensive processing of data on the basis of law and contract, it is not realistically possible to summarize all the data retention periods in one document. However, the Company has archiving and shredding rules governing the handling of documents. Should you have a question about the retention period for a particular document, please do not hesitate to contact us with your question at pepito@pepito.cz.

In order to process your order through our website, we need the following data from you:

Invoicing information – for the correct completion of the tax document that will be sent to you after delivery of the goods electronically,
E-mail address – in view of the fact that our Company desires to protect the environment, a main principle of which is the conservation of natural resources, we send all our invoices electronically. For this reason, it is necessary for us to know your e-mail address. Among other things, the entire contact is arranged digitally, so it is essential for the conclusion of the contract that the order is also placed digitally. Therefore your e-mail is necessary for us to process your order,
Telephone – to facilitate communication and if necessary to communicate information about the status of your order, we also need your telephone number.

We do not pass on the data obtained during the performance of the contract to persons other than our processors. We may also use your data for direct marketing to the extent and in accordance with the law and GDPR, which means that if you are our customer and have purchased goods from us, we may offer you similar goods again.

E-mail newsletter

On our website you can subscribe to our e-mail newsletter Fill in the short form by entering your e-mail address to confirm your subscription to the newsletter.

If you give us your consent by entering your e-mail address, or if you are our customer and we should be interested in sending you an offer of similar products or services, we may send you messages or commercial communications. Such commercial communications may also include an advertising banner or a link to one of our business partners.

We will send you the newsletter until you unsubscribe yourself. You can unsubscribe within each e-mail you receive and also by re-entering your e-mail address in the form.

We will not disclose your data to any third parties, even abroad.

Events we organize

In the performance of our activities sometimes there is no other way. We are happy to present our activities, our progress, our products or our employees at our events. Please note that photographic and video recordings may be taken during such events. These recordings will mainly capture the course of the event. We will only capture individual participants if they agree to such recordings. At the same time, we inform you that we are currently users of the social networks Facebook, Twitter and LinkedIn, so photos from events may appear on these sites. Recordings will always be taken by a person who will be clearly marked and identified, so if you have a problem with such recordings, do not hesitate to ask them not to make further individual recordings of you. This person is also always able to provide you with all information about the personal data they collect about you.

Recordings that will not be considered as personal data or for which a legal basis for processing will be obtained may also be used for marketing purposes and promotion of our Company or facility.

However, we always ensure that we never violate the rights of individuals by publishing photos.

For this purpose, the contact details of a person and a portrait of a person may be processed.

CCTV and records of entry of persons

In our business activities, which are of a very specific nature, it is necessary that we pay increased attention to the health and safety of our employees and all persons who move about on our premises. In addition, we must ensure the protection of our property, which in the wrong hands could possibly be dangerous. In order to protect both people and property, we must provide particular types of security technology. These are mainly CCTV systems and records of entry of people onto our premises.

When using the camera system, however, we always adhere to the following basic principles:

camera surveillance does not unduly interfere with the privacy of persons;
the purpose of using the camera system is precisely defined and specified – it is to protect the life and health and property of the Company, as mentioned above;
the period for keeping the camera recordings is 14 days. After this time, the data is automatically deleted. In the event of an incident, the CCTV footage is stored so that it can be used in the future for the needs of law enforcement authorities, courts or other authorized entities,
the CCTV footage is kept in a safe place under appropriate protection,
you will be duly informed about the use of the CCTV system by the Company by a sign placed in the monitored premises.

Other information we may collect about you is information about you if you choose to visit us. In this case, we process basic data about you or your means of transport, the time spent with us, the purpose of your visit and the person you visited. We keep this data for as long as necessary, but no longer than 3 months, the time period in which we believe we would be able to detect any threat.

We do not transfer the above data abroad; we only provide it to our processors, who may be our safety agency, security agents, external accident investigators or other processors.

Other legitimate interests of the Company

As part of the operation of our Company, we may also process your data to fulfil the legitimate interests of our Company. By these interests we mean, for example, sending news, advertising messages and service offers to the e-mail addresses provided by our customers, various statistical records, asserting our claims, etc.

Technical data when visiting our website

Whenever you use websites or other internet services, there is certain information that is almost always created and recorded automatically. The same happens when you use our website. When you use our services, we obtain information which we collect, store and protect.

Log data - when you use our services, our servers may automatically record information ("log data"), including information that your browser sends when you visit our website. This log data may include your IP address, as well as the address of the websites visited, browser type and settings, the date and time of your presence, how you reused cookies, cookie data, etc.
Cookie data - depending on how you access our website and services, we may use "cookies" (small text files sent by your computer each time you visit our website, unique to your account or your browser) or similar data. When we use cookies, we may use so-called "session" cookies, which we process only until you close your browser or the so-called "persistent" cookies which we process until you or your browser deletes them. For example, we may use cookies to store your e-mail address or other settings so that you do not have to fill them in every time you visit our site, etc.
We or our business partners may use various technologies to collect and store information. Among other things, this information may include cookies or similar technologies to identify your browser or device. These technologies allow us to collect and store information even when you use services provided by others or Google features that may appear on other websites. Our Company may collect data capable of analyzing the collected data through Google Analytics software and possibly other third-party services such as Facebook pixels and others. We may also use similar third-party analytics services and display advertising from the Google AdSense or Sklik advertising network. The data collected through Google Analytics is not personal data as it is not possible to identify a specific individual.
Device Information - In addition to the above information, we may also collect information about the device you are using, including the type of device you are using, what operating system you are using, the settings of that device, or unique device identifiers. It all depends on what type of device you are using and how it is set up. For example, we have different types of information available depending on whether you are using a PC or a Mac, an Android phone or an iPhone. Please also check the policies of your software manufacturer or provider to learn more about what information your devices may make available.

To withdraw your consent, click here:

How can you manage the use of cookies within your browser?

The use of cookies is your personal choice and their processing can be restricted or set within your internet browser. You can find out exactly how to manage cookie settings in your browser on the pages of individual browsers, usually in the cookies tab. You can get more information about some browsers here:
Chrome
Firefox
Microsoft Edge

What rights do you have as a data subject?

As a data subject, you have rights regarding the protection and processing of your personal data by data controllers and processors. Any data subject may exercise these rights subject to legal requirements. These rights are regulated in particular in Chapter III of the GDPR, Articles 15 to 23.

In particular, you are entitled to exercise the following rights as a data subject:

Right to access personal data – you can obtain information from our Company and confirmation whether we process certain personal data about you. We will also provide you with any additional information that is not included in this text upon your inquiry.
The right to rectification – we always keep all the data we process up-to-date and accurate if you provide us with your cooperation – so do not hesitate to contact us if there is any change to your personal data.
Right to erasure – if you believe that the legal requirements for erasure are met, do not hesitate to contact us. However, we can never delete data that we process according to law or that is necessary for us.
Right to restriction of processing – if you believe that we should restrict the processing of your personal data and that you meet all legal requirements to exercise this right, please do not hesitate to contact us.
Right to object – where we process your personal data based on the fulfilment of our legitimate interests, you may object to such processing. You will be informed of the processing of the request and the evaluation of your objection.
Right to withdraw consent – where you have given your consent to our Company to process your personal data, you can withdraw your consent at any time.

We are ready to attend to all your rights, as well as all your questions, at our e-mail address - please direct them here - pepito@pepito.cz. We will process your requests as soon as our technical and administrative capabilities allow.

In the event that you are not satisfied with our activities, please first contact the authorized person at the above address. However, you still have the right to appeal directly to the Office for Personal Data Protection, to which you can file a complaint.