1. Who processes your data
The controller of personal data is NATURCHEM, s.r.o., with registered office at Ledečská 3015, 580 01 Havlíčkův Brod, Company ID 27504379, VAT ID CZ27504379, registered in the Commercial Register maintained by C 22910/KSHK vedená u Krajského soudu v Hradci Králové (hereinafter the "controller" or "NATURCHEM").
Provozní kontakt a každodenní činnost firmy probíhají zejména z provozovny v Českých Budějovicích.
Statutory body: Ing. František Hezina.
Contact for privacy-related enquiries: naturchem@naturchem.cz.
2. What is personal data and what does processing mean
Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data — collection, storage, use, disclosure, erasure, etc.
This policy applies to processing carried out through the website www.naturchem.cz and related online services. Internal matters outside the website (e.g. contractual relationships with customers outside this channel) are governed by separate internal rules.
3. What data we process and where we obtain it
3.1 Contact form and online inquiries
If you write to us via the website form, we process in particular:
- first and last name or company name,
- email address and/or telephone number,
- message content, inquiry type and optionally the location of the facility or project,
- attachments you upload to the form (e.g. PDF, DOC, images).
We obtain the data directly from you when you submit the form.
3.2 Email and telephone
If you contact us directly at naturchem@naturchem.cz or by telephone, we process the data you provide to us (name, contact details, content of communication).
3.3 Website visits, cookies and analytics
When you visit the website, technical data about your device and behaviour on the site may be processed, in particular:
- IP address (may be truncated for analytics),
- cookie identifiers and online identifiers,
- information about the browser, operating system and pages visited,
- data on interaction with the website (e.g. clicking contact, downloading a file).
A detailed list of cookies and how to manage them is provided in the Cookie Policy.
3.4 Online marketing
If you give consent to marketing cookies, we may process data about your website visit for the purpose of measuring and optimising advertising campaigns (e.g. Google Ads, Meta, LinkedIn), including remarketing. We do not activate these technologies without your consent.
4. Purposes of processing and legal bases
| Purpose | Legal basis (GDPR) | Note |
|---|---|---|
| Handling inquiries from the website, email or telephone | Art. 6(1)(b) — steps prior to entering into a contract / performance of a contract | Contact details are necessary for us to be able to respond to you. |
| Technical operation of the website and security | Art. 6(1)(f) — legitimate interest of the controller | Server logs, protection against misuse of the form. |
| Traffic statistics (Google Analytics) | Art. 6(1)(a) — consent | Activated only after consent in the cookie banner. |
| Online advertising and remarketing | Art. 6(1)(a) — consent | Google Ads, Meta, LinkedIn — only after consent. |
| Direct marketing (email with service offers) | Art. 6(1)(a) — consent | We do not currently send newsletters; if we were to launch marketing, we would request separate consent. |
Providing data in the contact form is voluntary; however, without a name and contact details (email or telephone) we cannot handle your inquiry.
5. How long we retain data
- Inquiries and communication without a concluded contract: 12 months from the last contact, unless a contractual relationship arises or a longer archiving obligation applies.
- Cookie data: according to the expiry of individual cookies — see Cookie Policy.
- Hosting server logs: for the period necessary for operation and security of the website, usually ranging from days to months depending on the provider's settings.
6. Who we disclose data to (recipients and processors)
Personal data may be disclosed to the following categories of recipients:
- Vercel Inc. — website hosting and technical operation (USA)
- Resend Inc. — sending emails from the contact form (USA)
- Google Ireland Limited / Google LLC — Google Analytics, Google Ads, Google Search Console (EU/USA)
- Meta Platforms Ireland Limited — Meta advertising and remarketing tools (EU/USA)
- LinkedIn Ireland Unlimited Company — LinkedIn advertising and remarketing tools (EU/USA)
- GitHub Inc. — website content management system (Decap CMS, access for authorised editors only)
- IT support providers and other technical service providers — necessary for website operation
We have concluded data processing agreements with processors or use their standard terms and conditions to the extent required by the GDPR. For recipients based outside the European Economic Area (in particular the USA), transfers rely on appropriate safeguards, in particular the European Commission's standard contractual clauses.
The controller does not sell personal data to third parties.
7. Security of personal data
We have implemented appropriate technical and organisational measures to protect personal data, in particular encrypted HTTPS connection, access control to email accounts and the content management system, and minimisation of the scope of processed data.
Only authorised persons who need the data to handle inquiries or operate the website have access to personal data.
8. Automated decision-making and profiling
In connection with this website we do not carry out automated decision-making within the meaning of Art. 22 GDPR. Remarketing tools may create audiences based on behaviour on the website; we do not make decisions with legal or similarly significant effects on you in this way.
9. Your rights
Subject to the conditions set out in the GDPR, you have the following rights:
- right of access to personal data (Art. 15),
- right to rectification (Art. 16),
- right to erasure (Art. 17),
- right to restriction of processing (Art. 18),
- right to data portability (Art. 20),
- right to object to processing (Art. 21),
- right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal,
- right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
To exercise your rights, contact us at naturchem@naturchem.cz or by post to the company's registered office address. We will handle your request without undue delay, no later than within 1 month.
10. Cookies and consent management
The website uses cookies and similar technologies. We store essential cookies without consent; statistical and marketing cookies only based on your selection in the cookie banner. Details including a list of cookies can be found in the Cookie Policy. You can change your settings at any time using the "„Manage cookies"" button in the website footer.
11. Changes to this policy
We may update this policy if the scope of processing or the services used change. The current version is always published on this page with the effective date indicated.