GDPR EN – WINDENERGIE

Principles of personal data protection in WINDENERGIE

Within the WINDENERGIE group we make sure that due attention is paid to the protection of the personal data. In this overview you will find information about what personal data we process and store in order to perform our business activity, i.e. especially about our customers and web users, whether we process the data on the basis of a consent or on the basis of another legal reason, for what purposes we use them, on whom we may pass them and what rights you have in connection with the processing of your personal data.

Basic provisions - who processes the personal data?

The Controller of the personal data under article 4 point 7 of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the „GDPR”) is the company WINDENERGIE, s. r.o., with registered office Krymská 1598/47, 360 01 Karlovy Vary, comp. reg. No.: 263 40 381 (hereinafter referred to as the „Controller“).

Personal data mean any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The Controller did not appoint a data protection officer, the compliance with the fulfilment of requirements for the personal data protection is supervised by a competent person and internal processes and procedures are also adjusted to this.

What personal data do we process?

In particular we process the personal data we obtained on the basis of fulfilment of your order. Most often it regards data, which you give us when registering in our web pages or when placing an individual order and which are necessary for fulfilment of the contract: • E-mail • Contact and/or delivery address • Phone number • Other data you fill in voluntarily (e.g. in a contact form, questions regarding products, ) • Comp. reg. No., VAT No • Cookies files (in case of online services) • Video recording (camera system in operated wind power plants)

Why do we process your personal data?

The main reason why we process your personal data is to be able to provide you with the services and products you are interested in. Your personal data are processed manually. WINDENERGIE is authorised to collect, store and use certain information by automated means, e.g. statistical information whenever you visit our internet pages.

What entitles us to the processing of the personal data and what is the purpose of the processing?

We process the personal data only on the basis of following statutory reasons:

• fulfilment of the contract between you and the Controller (see article 6 section 1 letter b) GDPR),

• The purpose of the personal data processing is: • the fulfilment of the contractual relationship: execution of your order and exercise of rights and obligations resulting from the contractual relationship between you and the Controller; in case of an order, personal data are required that are necessary for successful execution of the order (name and address, contact), the provision of personal data is a necessary requirement for entering into and fulfilment of a contract, without provision of the personal data it is not possible to enter into a contract or to fulfil it on the part of the Controller.

What are cookies and what cookies do we use?

Similarly as every internet page, also WINDENERGIE uses cookies. The cookie files are small text files, which are stored locally in the computer through a browser, by means of which the web page is shown. The cookie files do not serve as personal identification of the web page users and they do not enable it either.

The person of the user is not identifiable on the basis of such information. Information may include for example the type of the device used and the browser or pages that were visited. They can also ensure that you learn more about products that match your interests and preferences. Cookies do not pose a threat, they do not serve for acquisition of any sensitive personal data, however they are important for protection of privacy. We use the cookie files to recognise repeated visits in our web pages in order to facilitate the navigation in the web. The cookie file stores the preference settings of the user and the randomly assigned identifier of your visit.

Another group is represented by the cookies of third parties (e.g. Google Analytics for analysis of the access to a particular web page or to a particular service or cookies of operators of advertising systems). These cookies are controlled by third parties and we do not have access for reading or writing these data. A declaration of Google about personal data protection can be viewed HERE.

In case that you do not agree to the collecting of cookie files, you can prevent them from being collected by changing your browser settings. Instructions for deactivation and removing of cookies can be found HERE, or in the help of the relevant browser or you can contact the producer of the browser. If you block all cookies, some of the features of these pages may work in limited extent.

How long do we keep the personal data?

We keep the personal data for the period of time necessary for exercising of rights and obligations resulting from the contractual relationship between you and the Controller and for asserting of claims from these contractual relationships, further for the period required by law (for accounting and tax purposes).

Who has access to your personal data?

Your data are safe. We carefully select our partners (e.g. cooperating design company), to whom we entrust your data and who are able to ensure the technical and organisational security of your data so that no unauthorised access to your data or any other misuse of them occur. In particular we minimise the number of partners and all of our partners are bound by a contract on processing and by confidentiality obligation and they are not allowed to use the data provided for any other purposes than for which we made them available to them. Under certain precisely defined conditions we are obliged to hand over some of your personal data on the basis of valid legislation for example to the Police or other bodies of public administration. We do not pass the personal data to countries outside of the European Union.

What rights do you have in connection with the personal data protection and how can you withdraw your consent?

As data subject you have following rights, which result for you from the legislation and which you can assert any time:

right to access your personal data under article 15 GDPR,
right to rectification of the personal data under article 16 GDPR or right to restriction of processing under article 18 GDPR,
right to erasure of the personal data under article 17 GDPR,
right to raise an objection against the processing under article 21 GDPR,
right to data portability under article 20 GDPR,

right to file a complaint with the Office for Personal Data Protection in case that you assume that your right for personal data protection was violated.

Your personal data are secure and why do we use a camera system

We declare that we have adopted all appropriate technical and organisation measures in order to secure the personal data. The personal data can be accessed only by persons authorised by internal means. The adopted safety measures are then updated on a regular basis. However we also need your help when securing the safety of your data, in particular in such way that you will keep your unique passwords and other access data for our services confidential and you will maintain basic safety principles. In the wind parks a camera system is installed for the purpose of justified interest of the Controller (protection of property from loss or destruction, protection of life and health of employees and third persons) and the recording may be passed only on investigative, prosecuting and adjudicating bodies or on other authorised bodies of public authorities.

Final provisions and how can you contact us?

Having submitted a contact form from our web pages you confirm that you are familiar with the terms of the personal data protection and that you accept them in full extent. In case of any question regarding the protection of your personal data please use the available contact information for electronic communication under or in writing at our address: WINDENERGIE, s.r.o. with registered office Krymská 1598/47, 360 01 Karlovy Vary, for the attention of a person competent for personal data protection.