Website User Data Protection Policy
This data protection policy document describes the procedures adopted by CRIF – Czech Credit Bureau, a.s., Company Registration Number: 262 12 242, with its registered office at Štětkova 1638/18, Nusle, 140 00 Prague 4, registered in the Commercial Register maintained by the Municipal Court in Prague, file number B 6853 (“CRIF CZ”), as the operator of the websites www.informaceofirmach.cz and (“websites”) regarding the processing of personal data of website users. This information is intended for visitors to these websites, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”). When using certain products and services offered and provided via this website, users will provide certain information about themselves, may make certain requests and, where applicable, give their consent to the processing of personal data, if required by the relevant legislation, in particular the General Data Protection Regulation.
Data processing
Access to this website may result in the processing of data relating to identified or identifiable natural persons (so-called ‘data subjects’). The data controller is CRIF CZ. Personal data may also be processed by the data processor, CRIF S.P.A., with its registered office at Via della Beverara 21, 40131 Bologna, Italy (“CRIF S.P.A.”), which shall ensure appropriate organisational and technical measures for data processing to safeguard the data against unauthorised access, loss, damage, theft, use or other disclosure.
Place of data processing
Personal data is processed on the premises of CRIF CZ and CRIF S.P.A. The data is handled exclusively by persons with the relevant technical skills and abilities, who have been assigned specific roles in the field of data processing and who have been made aware of the provisions of the General Data Protection Regulation.
Data processing procedures
Data is processed fairly and in full compliance with the General Data Protection Regulation to ensure the protection of data and its confidentiality. Data is processed by electronic or automated means and is stored in secure systems.
Types of data processed
Certain personal data is used in the information systems during the normal operation of this website. The transmission of this data is implicit in the use of ICP protocols. The data is not collected with the aim of linking it to specific individuals; however, by its very nature, it makes it possible to identify users through its processing and association with other data held by third parties. This category of data includes IP addresses and domain names of the computers used by users connecting to the network, as well as the URLs of the requested resources, the time of the requests, the method used to make the requests, and other parameters relating to the user’s operating system and IT environment. It also includes information provided by ‘cookies’ on the user’s hard drive – see https://informaceofirmach.cz/en/cookie-policy. Aggregate data on website usage is also collected, such as information on the number of visitors to the site, the number of daily visits and the average time users spend on each page.
Should a website visitor decide to register in order to obtain further useful information provided by the operator, the following data in particular is used: first name and surname, company name, company registration number, address, telephone number, email address and other information about the user necessary to identify that user and their needs, and thereby respond to their requests.
It is up to website users to decide whether to provide the personal data that CRIF CZ requires in order to provide the user with the requested value-added information or other services. Failure to provide this data may prevent CRIF CZ from delivering the requested information, products or services.
Use of collected data
The data collected may be used, amongst other things, to fulfil the user’s requests, provide useful advice and guidance, as well as to provide information on price quotations upon request or to process or fulfil the user’s enquiries. Furthermore, it may be used to provide information on the status of an order, information on services, news on the website, etc.
Certain operational data may also be processed for the purpose of ensuring the security and availability of the website and related services. Statistical data on website usage is processed with the aim of improving the website’s functionality and user-friendliness, and to produce aggregated, anonymous information used in marketing or similar activities.
Recipients of the data collected
CRIF CZ may provide the information collected via the website to other companies belonging to the CRIF Group, namely CRIF S.P.A., CRIF – Slovak Credit Bureau, s. r. o., Company Registration Number: 35886013, with its registered office at Mlynské nivy 14, 821 09 Bratislava, and CRIF – Registr platebních informací s. r. o., Company Registration Number: 057 75 809, with its registered office at Štětkova 1638/18 , Nusle, 140 00 Prague 4, registered in the Commercial Register maintained by the Municipal Court in Prague, file number C 268784, and also to third parties, such as suppliers or other entities that provide services (or products) requested by the user. We may also provide these companies with aggregated statistics on visitors, transactions or other activities on the website. Information about users may also be disclosed to other entities if required by applicable law or if necessary to protect the rights and legally protected interests of members of the CRIF Group or another entity.
Third-party companies that provide additional services on this website, advertise on it or have a link to it may use ‘cookies’ on their own websites or collect information about users in other ways. CRIF CZ has no control over the collection of information by these companies or over how they subsequently use it. If you have any queries regarding this data processing, please contact the operators of the relevant websites directly.
Privacy and user rights
All information transmitted via the website is encrypted. Nevertheless, CRIF CZ does not guarantee the secure transmission of information sent to it by the user, and use of the website is at the user’s own risk.
Further information on the processing of personal data, including the exercise of the user’s rights as a data subject under the General Data Protection Regulation, is set out in the Information on the Processing of Personal Data and Guidance on the Rights of Data Subjects.
Commercial communications
In accordance with the General Data Protection Regulation, Act No. 480/2004 Coll., on certain information society services and amending certain acts, as amended, and Act No. 127/2005 Coll., on electronic communications and amending certain related acts, as amended, CRIF CZ is authorised to use the telephone number or email address provided by the user upon registration for the purpose of sending commercial communications relating to CRIF CZ’s products and services, provided that the user is entitled at any time to withdraw their consent to the sending of commercial communications or to the provision of such information namely (i) electronically directly within the communication in question, (ii) by telephone, (iii) by written notice delivered to the registered office of CRIF CZ, or (iv) by sending an email MarketingCZ@crif.com. There is no charge for withdrawing consent to the distribution of commercial communications.