Information memorandum on the processing of data

Basic information about how we process your personal data. We appreciate you sharing your personal data with us and are committed to protecting it as much as possible. We also strive to be as transparent as possible with you, particularly about how we process your personal data.

In view of the new European Union legislation, this information memorandum has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

In this memorandum, we are trying to present the information as clearly as possible, so we have chosen a question and answer format to provide you with answers. You will find the information in the following order:

  1. Who is the data controller?
  2. For what purpose do we need the personal data?
  3. What are our legitimate interests?
  4. How was the personal data obtained?
  5. What categories of personal data are processed?
  6. What is the legal basis for the processing of personal data?
  7. Will we be transferring personal data to anyone else?
  8. Will we transfer personal data to a third country or international organisation?
  9. How long will we store the personal data?
  10. What are your rights in relation to the processing of personal data and how can you exercise them?
  11. Is personal data automatically evaluated?

This Information Memorandum sets out the basic information that we are required to provide as a data controller.

If you have any questions regarding the processing of your personal data, please do not hesitate to contact us by e-mail at podpora@scorpion-elektro.com or by phone at +420 722 942 940. In all cases, we can be contacted at our delivery address: scorpion-elektro.com, Václavská 8, Cologne 3.

1. Who is the data controller?

The controller is the person who, alone or jointly with others, determines the purposes and decides how personal data will be processed.

The controller of personal data is the company Scorpion Elektro s.r.o., Kamhajek 23 - Křečhoř, 280 02 Kolín, ID No.: 289 16 298, VAT No.: CZ28916298, registered in the Commercial Register at the Commercial Register Office in Prague, Section C, Insert 152954.

2. For what purpose do we need personal data?

The controller processes personal data to:

  1. to ensure the conclusion and subsequent performance of a contractual obligation between the controller and you (Article 6(1)(b) GDPR). Such a relationship gives rise to other legal obligations and the controller must therefore also process personal data for this purpose (Article 6(1)(c) GDPR).
  2. marketing purposes, in order for the controller to best tailor the offer of its products and services and commercial communications about them to your needs, for which purpose the controller obtains your unambiguous consent (Art. 6(1)(a) GDPR.
  3. the protection of its legitimate interests (Article 6(1)(f) GDPR).

3. What are our legitimate interests?

Fulfillment of all contractual obligations of the Trustee, proper performance of all legal obligations of the Trustee, direct marketing, protection of the Trustee's business and assets.

Providing personal data to the controller is generally a legal and contractual requirement. Your consent is required in respect of the provision of personal data for marketing purposes, which does not constitute the performance of a contractual and legal obligation of the controller. If you do not give consent to the controller to process your personal data for marketing purposes, this does not mean that the controller refuses to provide you with its product or service under the contract as a result.

In order to ensure that your privacy is protected as much as possible, you have the right to object to your personal data being processed solely for the most necessary lawful reasons or to have your personal data blocked. You can read more about your rights related to the processing of personal data in Article 10 of this information memorandum.

4. How was the personal data obtained?

The controller has obtained personal data directly from you, in particular from completed forms, mutual communication or concluded contracts. In addition, personal data may also come from publicly available sources, registers and records, such as the commercial register, debtors' register, professional registers or the Land Registry. In addition, the controller may have obtained personal data from third parties who are authorised to access and process your personal data and with whom it cooperates, as well as from information from social networks and the internet that you yourself have posted.

5. What categories of personal data are processed?

In order to ensure your satisfaction with the proper performance of the obligation, to ensure compliance with legal obligations, to provide a personalized offer of goods and services of the controller and for other purposes listed above, the controller processes the following categories of personal data:

  1. basic identification data - name, surname, home address and identification number
  2. contact details - telephone number and e-mail address
  3. information about your use of the controller's products and services - this is information about what products you have arranged with the controller and what you are using now, including product settings, etc.
  4. information from your communications with each other - information from emails, telephone records or other contact forms
  5. billing and transaction data - this includes information appearing on invoices, billing terms agreed and payments received

6. What is the legal basis for processing personal data?

The lawfulness of the processing is determined by Article 6(1) of the GDPR, according to which the processing is lawful if it is necessary for the performance of a contract, for the fulfilment of a legal obligation of the controller, for the protection of the legitimate interests of the controller or the processing is based on the consent you have given us. 

The lawfulness of the processing is also based, for example, on Act No. 563/1991 Coll., on accounting, according to which billing data is processed and stored, Act No. 89/2012 Coll., Civil Code, according to which the controller defends its legitimate interests, or Act No. 235/2004 Coll., on value added tax.

7. Will we be passing on personal data to anyone else?

We must, within the limits of the law, disclose personal data to public authorities, such as tax authorities, courts, law enforcement authorities or capital market supervisory authorities. We will also only pass on personal data to your chosen carrier, to your chosen credit company in the case of hire purchase and to data processors for marketing purposes.

These are the following entities and processors:

  1. the contractual carrier chosen by the buyer in the order form for the purpose of delivery of the goods, whereby the data will be provided in the following scope: name, surname, delivery address, order note, e-mail and telephone number. Our contractual partners: PPL CZ s.r.o. (ID: 25194798), Direct Parcel Distribution CZ s.r.o. (ID: 61329266), TOPTRANS EU, a.s. (ID: 28202376), Geis CZ s.r.o. (ID: 44567359) and Zásilkovna s.r.o. (ID: 28408306). 
  2. For better targeting of advertising and promotion, we process data on website visits and products viewed using cookies. Based on this data, it is then possible to better target advertising to make it more relevant to you or to adapt the content of the website to include the products you have expressed interest in. Processing is only possible on the basis of your consent to the use of the relevant cookies. You give this consent by using our site and the bottom bar on our site informs you of this. This consent is also completely voluntary. You can withdraw your consent to the use of cookies at any time. To do so, you must disable the storage of cookies for scorpion-elektro.com in your browser settings or switch your browser to anonymous mode and delete any cookies already stored. We provide the data obtained through cookies to the following processors: Facebook, Inc., Google LLC, Seznam.cz, a.s. We do not provide any of the processors with your identification data, so it is not possible to identify you as a specific natural person on their side. 
  3. The operator of the Heureka.cz portal, Heureka Shopping s.r.o., and the operator of the Zbozi.cz portal, Seznam.cz, a.sza, for the purpose of generating and sending purchase satisfaction questionnaires. The legal basis for processing in this case is the legitimate interest of the controller in accordance with Article 6(1)(f) GDPR, which consists in determining the buyer's satisfaction with the purchase with the controller. The sending of questionnaires concerns all buyers who have not refused the sending of commercial communications within the meaning of Section 7(3) of the Act on Certain Information Society Services (No. 480/2004 Coll.) and is carried out after each purchase on the online shop. The portal operator is entitled to use the provided e-mail address and the list of purchased products solely for the purpose of generating and sending a satisfaction questionnaire within the meaning of the Terms and Conditions of the Verified by Customers program or the Satisfaction Questionnaire. The Buyer may object to the sending of email questionnaires under the Customer Verified Programme or the Satisfaction Questionnaire at any time by rejecting further questionnaires using the link in the email containing the questionnaire. In the event of an objection, the questionnaire will no longer be sent to the buyer.

8. Will we transfer personal data to a third country or international organisation?

We will not transfer personal data to countries outside the European Union or the European Economic Area or to any international organisation.

9. How long will we store personal data?

Personal data will be processed and stored for at least the duration of the contract. Certain personal data required for tax and billing obligations, for example, will be kept for longer, generally 10 years starting from the year following the occurrence of the stored fact.

Personal data that are important for the exercise of the legitimate interests of the controller will be kept for a maximum of 3 years from the end of the contractual relationship with the controller.

Personal data processed for marketing purposes will be retained for a maximum of 3 years from the date of acquisition.

Personal data will never be kept longer than the statutory maximum. After the expiry of the archiving period, the personal data will be securely and irretrievably destroyed so that it cannot be misused.

10. What are your rights in relation to the processing of personal data and how can you exercise them?

The controller does everything possible to ensure that the processing of your data is carried out properly and, above all, securely. You are guaranteed the rights described in this article, which you can exercise with the controller.

How can you exercise your rights? You can exercise your individual rights by sending an email to podpora@scorpion-elektro.com or by calling +420 722 942 940. You can also exercise your rights by sending a written request to our correspondence address Scorpion-Elektro.com, Václavská 8, Cologne 3.

The administrator will provide you with a statement and, if necessary, information about the measures taken as soon as possible, but within one month at the latest. The administrator is entitled to extend the deadline by two months if necessary and in view of the complexity and number of requests. The administrator will inform you of the extension, including the reasons for it.

Right to information about the processing of your personal data

You are entitled to request information from the controller as to whether or not personal data is processed. If personal data are processed, you have the right to request information from the controller, in particular, about the identity and contact details of the controller, its representative, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of the personal data, the authorised controllers, a list of your rights, the possibility of contacting the Data Protection Authority, the source of the personal data processed and automated decision-making and profiling.

If the controller intends to further process your personal data for a purpose other than that for which it was collected, it will provide you with information about that other purpose and other relevant information prior to that further processing. The information provided to you in exercising this right is already contained in this memorandum, but this does not prevent you from requesting it again.

Right of access to personal data

You are entitled to request information from the controller as to whether or not your personal data is processed and, if so, you have access to information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the period of storage of personal data, information about your rights (rights to request the controller to correct or delete, restrict processing, object to such processing), the right to lodge a complaint with the Data Protection Authority, information on the source of the personal data, information on whether automated decision-making and profiling takes place and information concerning the procedure used as well as the significance and foreseeable consequences of such processing for you, information and safeguards in the event of transfer of personal data to a third country or an international organisation. You have the right to be provided with copies of the personal data processed. However, the right to obtain this copy must not adversely affect the rights and freedoms of other persons.

Right to repair

If there has been a change on your part, for example, of your residence, telephone number or other fact that can be considered personal data, you have the right to request the controller to correct the personal data processed. In addition, you have the right to have incomplete personal data completed, including by providing an additional declaration.

Right to erasure (right to be forgotten)

In certain specified cases, you have the right to request that the controller erase your personal data. These cases include, for example, that the data processed is no longer necessary for the purposes mentioned above. The controller deletes personal data automatically after the period of necessity has expired, but you can contact the controller at any time with your request. Your request will then be subject to an individual assessment (despite your right to erasure, the controller may have an obligation or legitimate interest to retain your personal data) and you will be informed in detail about the processing.

Right to restriction of processing

The controller processes your personal data only to the extent necessary. However, if you feel that the controller, for example, exceeds the purposes for which it processes personal data as set out above, you can request that your personal data be processed solely for the strictly necessary legitimate purposes or that the personal data be blocked. Your request will then be subject to an individual assessment and you will be informed in detail about the processing.

Right to data portability

If you wish the controller to provide your personal data to another controller or another company, the controller will transfer your personal data in the appropriate format to the entity you have designated, unless prevented by any legal or other significant obstacles.

Right to object and automated individual decision-making

If you become aware or believe that the controller is processing your personal data in breach of the protection of your private and personal life or in breach of the law (provided that the personal data are processed by the controller on the basis of public or legitimate interest, or are processed for direct marketing purposes, including profiling, or for statistical purposes or for purposes of scientific or historical interest), you may contact the controller and request an explanation or rectification of the deficiency.

You can also object directly to automated decision-making and profiling.

Right to lodge a complaint with the Office for Personal Data Protection

You may at any time contact the supervisory authority with your complaint or complaint regarding the processing of personal data, namely the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, website www.uoou.cz.

Right to withdraw consent

You have the right to revoke your consent to the processing of personal data at any time, either by filling in the form/checking the box/sending the revocation to the address of the controller's registered office or by using the link in the e-mail communication.

11. Is personal data automatically evaluated?

Personal data is not automatically evaluated by the controller.

This website uses cookies to ensure you get the best experience on our website