Who are we and what is our role in processing personal data?

ALUKOV a.s., registered at Orel No. 18, 538 21 Slatiňany, Company ID: 64257746, registered with the Regional Court in Hradec Králové, file no. B 3254, acts as the data controller (hereinafter referred to as the “Controller”) in relation to the personal data of customers.

ALUKOV a.s. processes personal data of all its customers who are contracting parties under a contract for the production/installation of ALUKOV a.s. products or those interested in entering into such a contract, and who are natural persons or listed as contact persons of legal entities (hereinafter referred to as “Customer”).

In accordance with which legal regulations do we process your personal data?

Your personal data is processed in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), (hereinafter the “Regulation”).

Personal data is always processed for specific purposes using appropriate methods and means corresponding to the legal basis under Article 6 of the Regulation.

This Information on the Processing of Customers' Personal Data includes transparent details pursuant to Articles 13 and 14 of the Regulation as well as data subject rights under Articles 15 to 22 of the Regulation.

The Controller is responsible for the processing of personal data and has adopted internal organizational, technical, and other measures to secure and protect such data, as described in the Personal Data Protection Policy of ALUKOV a.s. (hereinafter the “Policy”).

How can you contact us regarding your personal data?

Customers may contact ALUKOV a.s. with any questions regarding the processing and protection of their personal data or to exercise their rights:

• By mail to the Controller’s registered office: Alukov a.s., Orel 18, 538 21 Slatiňany
• Electronically for unsubscription: odhlasit@alukov.cz
• Electronically for updates: gdpr@alukov.cz
• By phone: +420 469 681 488
• In person at the Data Protection Contact Point located at the reception of Alukov a.s., Orel 18, 538 21 Slatiňany

You are or want to become a customer. What personal data do we need and how do we process it?

The Controller processes the following personal data of Customers:

• During pre-contract discussions: name, surname, email address, phone number, residence/contact address
• For contract execution: name, surname, company name (if applicable), address, Company ID, VAT number (if assigned), email address, phone number
• For contact persons of legal entities: name, surname, email address, phone number

This data is necessary to enter into a contract (identify parties, deliver and install products, handle complaints, etc.). Without it, a contract cannot be concluded.

• For marketing communication: email address (for electronic form), name, surname, contact address (for written form)

This data is essential to send marketing communications. Without it, we cannot deliver such messages.

Who else processes your personal data?

Data processors

The Controller has appointed the following data processors to assist with the processing of personal data:

• IT network administrators, website and app administrators, subsidiaries, contractual partners in the distribution network, IPC TEAM, and subcontractors solely for the purpose of contract fulfillment
• Lawyers for resolving potential legal disputes

Guarantees

• Contracts with processors ensure at least the same level of data protection as outlined in this policy.

What are the purposes and legal grounds for processing your data?

Purposes

• Contract execution and negotiation
• Property and personal security (CCTV)
• Compliance with tax and accounting laws
• With consent: marketing and promotional communications, event invitations, monthly newsletters
• With consent: use of photos or recordings for promotional purposes

Legal grounds

• Contract performance
• Legal obligations
• Legitimate interest
• Consent (for marketing and use of media)

We may send commercial offers of similar products to existing customers without consent, in accordance with Act No. 480/2004 Coll., with an option to opt out at any time.

How do we process your data?

Methods and means of processing

• Automated processing
  In systems like CRM CONTACT PRO, accounting software POHODA, order tracking, CMS, CCTV
• Manual processing
  In physical form – contracts, orders, delivery and acceptance records, complaint forms, price quotes, declarations, installation surveys, invoices

No profiling or automated individual decision-making is used.

How long do we store your personal data?

Retention period

• Until pre-contract negotiation ends if no contract is signed
• Throughout the contract term (including warranty period)
• Up to 10 years for tax/accounting purposes
• Until legal disputes are resolved
• Until consent is withdrawn (for marketing communications)

Do you subscribe or want to subscribe to marketing communication?

Marketing messages include: product offers, promotions, monthly newsletters, event invitations

We can send them if:

• You have given explicit consent (in writing, via email, or on https://www.alukov.com/catalogs ), and you can always opt out
• You are an existing customer, and we obtained your email during a purchase, in line with Act No. 480/2004 Coll., with an option to opt out

Required data:

• Email address, name, surname (for written/email consent)
• Email address (if requesting via website, with double opt-in confirmation)

You can revoke your consent at any time via the unsubscribe link or by any method listed above.

Did you fill in the inquiry form on our website?

Filling out the form means you are interested in our products/services and want more information. This is non-binding and does not create a contract. We will contact you to offer the best solution.

Required data:

• Name, surname, postal code, phone, email, and product interest
• Optional: street and city (to direct you to the nearest office)

Do we process “sensitive personal data”?

Sensitive data (special category under the Regulation) includes information on race, politics, religion, trade union membership, genetics, biometrics, health, sexual orientation, and criminal history.

We do not collect or process any such data.

If you visit us in person, you may be recorded by CCTV. Why?

CCTV system

CCTV is operated at our headquarters at Orel 18, 538 21 Slatiňany and branch Kočí 202, 538 61, and includes 22 cameras monitoring: entry/exits and handling areas.

Conditions:

• Purpose: property and personal security
• Legal basis: legitimate interest
• No consent required
• Affected individuals: employees, contractors, visitors
• Data type: visual footage (faces, figures)
• Storage: onsite at Orel 18 and Kočí 202
• Retention: 7–10 days
• Security: restricted access, dedicated storage room, technical safeguards

All monitored areas are visibly marked with signs and notices.

What are your rights as a data subject?

Under Articles 15–22 of the Regulation, you have the following rights:

• Withdraw consent at any time (e.g., marketing, use of media)
• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict data processing
• Data portability
• Object to data processing
• Not be subject to automated decisions including profiling

Cookies

• We may process your data via cookies. See below for more information

If needed, you may also lodge a complaint with the supervisory authority:

Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
Email: posta@uoou.cz