Personal data protection - Auringo

Access to the Operator's pages may be conditional upon the provision of certain personal data under Act No. 101/2000 Coll., on the protection of personal data and possibly related legislation, as amended. In such a case, the Operator will handle this data in accordance with the applicable legal regulations. The Operator is duly registered with the Office for Personal Data Protection, reg. number of the entity: 00052296. By providing their personal data, the user consents to their processing.

In accordance with the General Data Protection Regulation GDPR, Regulation of the European Parliament and the EU Council 2016/679 (hereinafter referred to as the "Regulation"), we would like to inform you about,

what personal data we collect,
for what purposes we use personal data,
whether and to whom we provide them,
what rights you have in connection with the processing of your personal data,
how you can exercise these rights with us.

The company auringo s.r.o., ID: 10941665, acts as the so-called personal data administrator. Therefore, we are obliged to inform you of a number of details about how we handle your personal data. However, if you still have questions or want to exercise your rights regarding the handling of personal data, please contact one of the following contacts:

Phone contact:
+420 605 012 333

Email contact:
info@auringo.com

Written contact:
auringo s.r.o.
Na Strži 2102/61a, Krč
140 00 Prague 4
Czech Republic

If you have purchased goods from us, we process the following categories of personal data that you provided to us when concluding a contract or registering in the system:

identification data (name and surname, possibly company, ID number, tax ID number, the ID we create for you),
address data (especially the address of permanent residence and delivery addresses, your email address, phone),
descriptive data (especially academic degree with a name),
possible records in the insolvency register and in the VAT payers register
data on completed orders (ordered goods, prices, processing and delivery dates)

If you use one of our long-term products (savings), we process the following categories of personal data that you provided to us:

identification data (name and surname, possibly company, ID number, tax ID number, the ID we create for you),
address data (especially the address of permanent residence and delivery addresses, your email address, phone),
descriptive data (especially academic degree with a name),
possible records in the insolvency register and in the VAT payers register
data on completed transactions (balances and savings movements, transaction prices and dates)

If you have agreed to receive a newsletter or other marketing information:

identification data (name and surname, possibly company, ID number, tax ID number, the ID we create for you),
your email address, phone,
descriptive data (especially academic degree with a name).

We obtain all personal data directly from you or from publicly available sources (Trade Register, VAT payers register).

Legal basis for processing personal data, method and purpose of processing

We are also entitled to process your personal data without your consent:

to the extent necessary to fulfill a contract concluded with you,
to the extent necessary to fulfill a legal obligation imposed on us by law, e.g. law,
to the extent necessary to communicate with our users,
to the extent necessary to protect our legitimate interests - direct marketing,
to the extent necessary to protect our legitimate interests - verification of the existence and changes of the entity.

We also provide more detailed information on the individual legal bases for the processing of personal data:

Processing to fulfill a contract you have entered into with us

We also process personal data for the purpose of concluding and fulfilling a contract you have entered into with us.

Processing to fulfill a legal obligation imposed by law

We issue accounting and tax documents that we are obliged to keep and archive for a period prescribed by legal regulations, especially the Accounting Act (Act No. 563/1991 Coll.), Income Tax Act (586/1992 Coll.) and the Value Added Tax Act (Act No. 235/2004 Coll.).

We process the personal data described above for the purpose of fulfilling our legal obligations, in the sense of Art. 6 para. 1 letter c) of the Regulation.

To your email address, which you provided us in connection with the registration, we may send commercial communications, but only with an offer of our related products and services. You can revoke this consent at any time. We consider this necessary for the purposes of our legitimate interests. You also have the option to refuse to receive commercial communications during your initial registration.

Based on your given consent, we are entitled to process personal data to the extent that you have provided them to us through the form located on the websites of the company auringo s.r.o.

The purpose of processing is the possibility to inform you about news and our new events or services electronically or by phone.

Duration of personal data storage

We only keep your personal data for the necessary period and archive according to legal deadlines imposed by legal regulations.

We process personal data for the duration of the contractual relationship or another legal title that allows us to process your personal data. This means that we have strict internal rules in place that verify the legality of holding personal data, and we do not keep personal data longer than we are entitled to. After losing the legal reason, we delete the relevant personal data unless we have another legal reason for their processing or consent to processing.

Who we provide your personal data to

Unless otherwise stated below, we do not provide or disclose your personal data to anyone, nor do we use the services of external processors of your personal data that we keep for the necessary period on our own servers.

Personal data entered by you through registration forms on our websites are stored in the hosting center of CoolHosting, with whom we have a processing agreement.

We process personal data only in EU member states. We do not transfer personal data to third countries outside the EU, except for the list in the following paragraph. Our employees and collaborators, who are bound by confidentiality and trained in the field of personal data processing security, have access to your personal data.

To ensure some specific processing operations that we cannot ensure with our own resources, we use the services and applications of processors who specialize in this processing and comply with GDPR. These are providers of the following platforms and services:

Altaxo Accounting – accounting
Altaxo accounting s.r.o., Sokolovska 131/86, 186 00, Prague

Google – Analytics, Disc
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Hetzner – server hosting
Hetzner Online GmbH, Industriestr. 25, 91770 Gunzenhausen, Germany

INSURANCE TRADE – logistics
INSURANCE TRADE s.r.o., Vacínova 859/13, Prague 8, IČ: 06249906

iPodnik – SQL server
iPodnik cloud s.r.o., Jiráskova 306, 252 25 Jinočany, IČ: 29004349

Stormware – Pohoda accounting system
STORMWARE s.r.o., Za Prachárnou 4962/45, 586 01 Jihlava, IČ: 25313142

Tawk.to - live chat
tawk.to (SMS SIA), #6 - 8 Tirgoņu iela, Rīga, LV-1050, Latvia, EU

In the interest of combating spam or misuse of our website, we use the Google Recaptcha v3 service to verify whether our website is used by a human or a robot. In this case, Google is sent data on how you interact with the website. Google's privacy policy can be found here: https://policies.google.com/privacy?hl=cs, Google's terms and conditions here: https://policies.google.com/terms?hl=cs.

These companies may use cookies for the purposes of providing their services (see above).

In the future, we may decide to use other applications or processors to facilitate and improve processing. In such a case, we commit to placing at least the same requirements on the processor in terms of security and processing quality as on ourselves.

Other conditions

We process your personal data in a correct and transparent manner, in accordance with legal regulations. Below we list your rights that have arisen in connection with the processing of your personal data.

You have the right to access personal data concerning you as the so-called data subject. Furthermore, you have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, and if so, you have the right to request a copy of this personal data.

Copies of personal data can be provided electronically in a commonly used format. In order to verify the identity of the person requesting access to personal data, we must insist on the measures specified below in this document.

If you believe that the personal data we process about you is inaccurate or incomplete, you have the right to request their correction or completion.

You have the right to request that we delete personal data concerning you without undue delay, but only if one of the following reasons applies:

personal data are no longer needed for the purposes for which they were collected or
you have revoked the consent you gave for the processing of personal data and there is no other legal reason for processing (e.g., our obligation to process these personal data in the manner imposed on us by law),
you have raised objections to processing and it has been found that there are no overriding legitimate interests on our part that would entitle us to process these personal data,
personal data have been processed unlawfully,
personal data must be deleted to fulfill a legal obligation that applies to us,
personal data were collected in connection with the offer of information society services under Art. 8 para. 1 of the Regulation.

You have the right to restriction of processing in any of the following cases:

if you dispute the accuracy of personal data (however, in such a case we recommend rather exercising the right to their correction),
the processing of personal data is unlawful, but you refuse to delete such personal data,
if you request, we can process your selected personal data even after they are no longer needed for the purpose for which you provided them to us (e.g., in connection with a court claim for which you need personal data processed by us),
you have raised objections to processing, while it is not clear whether our legitimate interest prevails over your legitimate interests.

You have the right to object to the processing of personal data concerning you, if we process personal data on the basis of Art. 6 para. 1 letter f) of the Regulation, i.e., because of our legitimate interests. In practice, objecting to processing for direct marketing purposes means that you can object to receiving commercial communications and we will no longer send them to you. However, you can achieve this more easily by simply logging out of receiving commercial communications through your user account or through the button in the received commercial communication.

You have the right to obtain personal data concerning you in a structured, commonly used, and machine-readable format and possibly the right to transmit this data to another entity without us hindering you.

You also have the right to ask us to transfer your personal data to another entity that acts as a so-called personal data controller, if technically feasible.

If you have given us consent to process personal data for purposes that require such consent, you have the right to revoke this consent at any time.

You have the right to lodge a complaint with the supervisory authority if you believe that the processing of personal data is in violation of legal regulations. You can file a complaint with the supervisory authority, which is:

Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27
170 00 Prague

You can exercise your rights to personal data protection in writing or electronically.

We note that for the purpose of verifying your identity, we will only consider requests sent:

by registered mail or
sent from an email address that is registered directly to your person with us, while at the same time you will be asked to provide us with another piece of information to verify your identity.

If there are reasonable doubts about the identity of the requester, according to Art. 12 para. 6 of the Regulation, we are entitled to request the provision of additional information necessary to confirm the identity of the requester. We have introduced measures to verify the identity of the requester to increase the security of all our customers in order to prevent the risk of disclosing personal data to an unauthorized person. This also protects your personal data.

Please note that given the amount of incoming mail and electronic communication, we may not be able to respond promptly to submissions, requests, or objections sent in other ways (especially to other email addresses).

In your request, objection, or other submission concerning your personal data protection rights, please specify the following:

your identity,
specify the right you are asserting.

We will respond to your requests, submissions, and objections as soon as possible, no later than one month from receiving your request or objection, and we will inform you of the measures taken or why we did not comply with your request or objection. If the processing is particularly complex or if we receive a large number of requests, we may extend this period by up to two months, of which we must inform you already during the first month and state the reasons for the delay.

If we do not meet your request or objection, we must state the reason. If you still disagree with us, you have the right to lodge a complaint with the supervisory authority and how we processed your request or objection. The supervisory authority is the Office for Personal Data Protection.

We are obliged to provide you with information about how your personal data is processed free of charge. We are also obliged to process your requests, submissions, and objections free of charge.

According to Art. 12 para. 5 of the Regulation, however, we are entitled to charge a reasonable fee taking into account the administrative costs associated with providing the requested information or communication or performing the requested actions, but only if the request is manifestly unfounded or excessive, especially in the case of repeated requests. In these cases, we are entitled to refuse to comply with the request.