1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

1.1. The controller of your personal data is Focus agency s.r.o., with its registered office at Zubatého 295/5, Smíchov, 150 00 Prague 5, Company ID: 262 12 722, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 80183 (hereinafter the “Controller”).
1.2. The Controller’s contact details are as follows: correspondence address Focus agency s.r.o., Štefánikova 43a, Smíchov, 150 00 Prague 5; e-mail address: info@firmajakotym.cz; telephone: +420 602 119 126.
1.3. The Controller has not appointed a Data Protection Officer.

2. LEGAL BASIS FOR PROCESSING PERSONAL DATA

2.1. The legal basis for processing your personal data is the necessity of such processing for the performance of a service agreement concluded between you and the Controller, or for taking steps by the Controller prior to entering into such agreement, within the meaning of Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”).

3. PURPOSE OF PROCESSING PERSONAL DATA

3.1. The purpose of processing your personal data is the performance of the service agreement between you and the Controller, or taking steps by the Controller prior to entering into such agreement.
3.2. The Controller does not engage in automated individual decision-making within the meaning of Article 22 of the GDPR.

4. GROUNDS AND PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed only to the necessary extent and for clearly defined purposes in accordance with the GDPR. The grounds and purposes are as follows:

4.1. PROCESSING BASED ON CONSENT (Article 6(1)(a) GDPR)

  • 4.1.1. Sending marketing communications (newsletters), information about our products and services, special offers, and updates.
  • 4.1.2. Processing of your data (e-mail address) is based on your explicit consent given when subscribing to the newsletter.

4.2. PROCESSING FOR PERFORMANCE OF A CONTRACT OR PRE-CONTRACTUAL MEASURES (Article 6(1)(b) GDPR)

  • 4.2.1. Reason: Your personal data (name, e-mail, phone) is necessary for communication and for providing services based on your request (e.g., contact form).
  • 4.2.2. Data processed: Name, e-mail address, phone number, message content.

4.3. PROCESSING BASED ON LEGAL OBLIGATION (Article 6(1)(c) GDPR)

  • 4.3.1. Purpose: Compliance with accounting, tax, or other legal obligations.
  • 4.3.2. Reason: Storage of personal data on invoices, orders, or other documents in accordance with legal requirements.
  • 4.3.3. Data processed: Identification and contact details, invoicing data.

4.4. PROCESSING BASED ON LEGITIMATE INTEREST (Article 6(1)(f) GDPR)

  • 4.4.1. Purpose: Improving our services and securing our website.
  • 4.4.2. Reason: We may collect certain technical data (e.g., IP address or website visit data) to analyse and prevent misuse or technical errors.
  • 4.4.3. Data processed: Technical data (e.g., cookies, IP address).
  • 4.4.4. Purpose: Marketing activities and customer communication based on prior interactions.
  • 4.4.5. Reason: Contacting existing customers with offers of related services where this corresponds to our legitimate interest.
  • 4.4.6. Data processed: Name, e-mail address, communication history.

5. SCOPE OF PROCESSING

5.1. The Controller will process your personal data to the extent you have voluntarily provided when registering on the Controller’s website, i.e. https://www.firmajakotym.cz.
5.2. The Controller will mainly process the following data: name and surname, phone number, and e-mail address.

6. SHARING AND TRANSFER OF PERSONAL DATA

6.1. Recipients of personal data:

  • 6.1.1. Personal data collected as described above may be shared with third parties providing certain services related to the provision of our services. Such persons act as processors of personal data.

7. RETENTION PERIOD FOR PERSONAL DATA

7.1. Your personal data will be processed for the duration of the rights and obligations arising from the service agreement and for the necessary period for archiving in accordance with applicable laws, but no longer than permitted by applicable legal regulations.

8. OTHER RECIPIENTS OF PERSONAL DATA

8.1. Other recipients of your personal data will be persons providing technical services to the Controller related to the operation of the website in order to fulfil the Controller’s obligations under the service agreement.
8.2. The Controller does not intend to transfer your personal data to a third country (outside the EU) or an international organisation.

9. RIGHTS OF THE DATA SUBJECT

9.1. Under the GDPR, you have the right to request from the Controller access to your personal data, the right to rectification or erasure of your personal data, the right to restriction of processing, the right to object to processing, and the right to data portability.
9.2. If you believe that your personal data has been processed unlawfully, you also have the right to lodge a complaint with a supervisory authority.
9.3. You are not obliged to provide your personal data. However, providing your personal data is a necessary requirement for concluding and performing a service agreement, and without providing your personal data, it is not possible to conclude or fulfil the agreement by the Controller.