Privacy Policy
PRIVACY STATEMENT
We are committed to protecting your privacy and personal data. We process your personal data in accordance with international and European Data Protection Principles and applicable personal data legislation (including the European General Data Protection Regulation, as applicable).
Data controller and contact information
In all data protection related matters, data subjects may contact 3Key Company s.r.o. by using the following contact information:
3Key Company s.r.o.
ID No. 077 51 478
Ouvalova 333, 274 01 Slany, Czech Republic
1. Webpages and internet services
This section provides you with general information how we process your personal data by related to this website and the other internet services (the “Site”). We will process your personal data collected through the Site in accordance with this Privacy Statement and applicable laws. Please read this Privacy Statement carefully if you plan to brows or otherwise use the Site. If you do not agree with this Privacy Statement, you must leave the Site.
1.1. Collected personal data
Generally, you can visit the Site without entering any personal data. The Site is technically divided into separate sections some of which may require us to collect more personal data of you while some may be used without processing any personal data.
When visiting the Site, certain technical and other information is automatically sent by your computer to us (i.e. IP address, the type of your browser and the source of your visit). We also collect information about your website usage information by using cookies. Please see the Cookies section of this Privacy Statement for further information.
On certain parts of the Site, you may be asked to provide personal data and/or sign up for the service to access a service that you have requested. Once you register on the Site or have otherwise been assigned a specific identification code to access your accounts, we may request that you provide certain information.
1.2. The purposes and legal grounds of the processing
The purpose why we process your personal data collected through the Site is to:
- ensure an efficient and secure use of the Site;
- develop the Site for a better quality and broader scope of services and products;
- provide customized services and content recognizing your specific needs and interests;
- improve our services and other business purposes as provision information about our new products and services;
- conduct research and collect statistics (e.g. what sections of our Site the users visit and how much time they spend on the Site);
- setting up, controlling and managing user accounts;
- answering a question sent via the contact form;
- sending marketing communications (by e-mail), maintaining and deepening of commercial relationships with customers and suppliers;
- selection procedures and recruitment activities.
1.3. Sources of personal data and retention period
The personal data is received directly from the individuals, whose personal data is processed (“data subjects”) or obtained in connection with their use of the Site.
The personal data will be stored as long as needed for the purposes it has been collected for. After that, the personal data will be effectively deleted or made anonymous.
1.4. Cookies
We use cookies to make easier and friendly use of our Site for all users. Cookies help us to ensure the right functionality of our Site and to analyse traffic on our Site. In accordance with our Privacy Policy we also share cookies with our website operator and analytics, social media and advertising partners. You have choice to accept all cookies or modify your cookie choice in the settings.
1.5. Website analytics
We use website analytics as Google Analytics, to gather statistics about the users of the Site with the aim to improve the contents of the Site. Normally this data is anonymous, however, if you have identified yourself when downloading content from the website, logged into our online service or entered the website through a link in an e-mail, we may be able to identify the analytics data collected about your use of the Site. You may use the opt-out functions of cookie setting tool to disable us from tracking your visits to the Site. You need to repeat this action when you use different computers and/or browsers to visit our websites.
1.6. Transfer of personal data
We will not transfer any personal data outside our company or its partners, affiliates, subsidiaries and subcontractors. Due to the technical and practical requirements some of the personal data may be stored at the subcontractors’ servers outside the European Union or European Economic Area.
2. The customer database
We use database to manage and track our sales and marketing activities that include personal data of our customers’, potential customers’ and other companies’ representatives with whom we have a business relationship or wants to develop one. Our databases may also include personal data of our customers’ customers or end-users who contact us relating to our services or products under our maintenance as well as personal data related to external stakeholders we are interested to contact and provide with general information of us and its business (e.g. media representatives, economic influencers).
2.1. Collected personal data
Following information is collected and processed in connection with our customer database:
- name,
- title,
- e-mail,
- mobile phone number,
- address,
- language,
- other possible information relevant for the business relationship.
2.2. The purposes and legal grounds of the processing
The purpose why we process personal data is to facilitate our business, support sales activities, manage deliveries, maintenance services and invoicing, contacting customers for contract management and marketing purposes and otherwise maintaining the customer relationship. We may also use personal data to handle incidents and claims as well as provide support as requested by customer.
Processing of the personal data is necessary for the performance of all contracts to which the customer is a party. Further, processing of personal data is necessary for the legitimate interests pursued by us relating to our regular business purposes. When required by applicable laws, we will request data subject’s consent for personal data processing.
2.3. Sources of personal data and retention period
The personal data has been received from the customers or obtained in connection with their use of our products and services. Personal data may also originate from our representatives based on their business interactions with the data subjects. In certain cases we may collect personal data from public registers and other reliable external sources.
The personal data will be stored as long as needed for the above said purposes. After that, the personal data will be effectively deleted or made anonymous.
2.4. Transfer of personal data
In general, we use the personal data only for its internal business purposes and does not transfer the data to any external parties. Some of the personal data may be accessible and processed by our subsidiaries, subcontractors and other service providers, to the extent needed in connection with the above said purposes. We ensure that such third parties are always bound by contracts, which sufficiently address data protection and confidentiality requirements.
Due to technical and practical requirements, the personal data may also be stored outside the EU/EEA.
3. Supplier and subcontractor database
We and our employees, partners, subsidiaries and affiliates use solutions and database technology to manage the contact data of our suppliers and subcontractors’ representatives. This privacy statement provides more information about how we process personal data relating to such sourcing and purchasing activities.
3.1. Collected personal data
Following information is collected and processed in connection with supplier database:
- name,
- title,
- e-mail,
- phone number,
- address,
- invoicing Information,
- other possible information relevant for the business relationship,
- Subcontractors’ employees’ name, date of birth, contact information, employment information, qualifications and certifications.
3.2. The purposes and legal ground of the processing
The purpose why we process personal data is to facilitate our sourcing, purchasing, invoice handling and contract management activities. We may also use the information to resolve claims and perform supplier due diligence.
Further, in order for us to fulfil our obligations relating to quality and safety of provision of our services, we need to be able to reliably identify any external persons working for us. To enable the identification of external workforce, we need to store certain personal information about the external workforce in our supplier databases. The information of external workforce stored in our supplier databases will only be used for identification and management of the external workforce as needed in connection with their work performed for us.
We process personal data because it is necessary for the performance of a sourcing contract and/or because it is necessary for the purposes of the legitimate interests pursued by us relating to its regular business activities. We may also be obliged by applicable local laws to collect certain information about the supplier and its employees and representatives. Such obligations may relate e.g. to safety requirements, taxation, insurances and contractor’s other statutory obligations and liability when work is contracted out. When required by applicable laws, we will request data subject’s consent for personal data processing.
3.3. Sources of personal data and retention period
The personal data has been obtained from the suppliers or obtained in connection with their business relationship with us. Information about external workforce is generally obtained from the subcontractor companies who are the employers of such individuals. In certain cases we may collect personal data from public registers and other reliable external sources.
The personal data will be stored as long as needed for the above said purposes. After that, the personal data will be effectively deleted or made anonymous.
3.4. Transfer of personal data
In general, we use the personal data only for its internal business purposes and does not transfer the data to any external parties. Some of the personal data may be accessible and processed by our subsidiaries, subcontractors and other service providers, to the extent needed in connection with the above said purposes. We ensure that such third parties are always bound by contracts, which sufficiently address data protection and confidentiality requirements.
Due to technical and practical requirements, personal data may also be stored on servers outside the EU/EEA.
4. Data subjects’ rights
Data subjects may at any time contact us and request access to their personal data. We will at the data subjects’ request rectify or erase any incomplete, inaccurate or outdated personal data. Data subject requests can be sent to us by using the contact form available on our website.
If the personal data processing is based on consent, data subject is entitled to withdraw the consent at any time. If the personal data processing is based on our legitimate interest, data subject may object such processing based on a specific individual circumstance. Data subject must identify such circumstance in the request relating to objection.
Under certain circumstances data subjects may also object to the processing of their personal data as well request data portability. In the event the data subjects have concerns or remarks regarding our processing activities, they also have the right to lodge a complaint with the relevant supervisory authority.
We may refuse a request for fulfilling a request if the request is manifestly unfounded or excessive or we have another legitimate ground for refusing the request. Such legitimate grounds could e.g. prevent us from deleting personal data that needs to be retained due to legal requirements or to maintain an audit trail until the end of claim period. We may also need to retain the data to be able to fulfil contractual obligations.
Please also note, that if we block or delete your personal data as requested, we may not be able to perform the services you would like to use or have previously ordered or requested or provide you the content you would like to download or receive.
5. Updates to the Privacy Statement
We seek to develop the Site, its business as well as its data protection related processes and tools continuously and reserves the right to amend this Privacy Statement. We hope that you review this Privacy Statement from time to time for any amendments. To the extent required by applicable privacy laws, we may contact you also through other interfaces or by using the collected contact information to provide information about updates that have material effects to you as a data subject.