Information about using cookies

 

Terms and information about the processing of personal data – Cookies

 

BLOCK a.s., U Kasáren 727, 757 01 Valašské Meziříčí, Czech republic, incorporated in accordance with the laws of the Czech Republic, the Company is recorded in the Commercial Register kept by the Regional Court in Ostrava, section B, Insert No. 196, day 7. 6. 1991 (hereinafter referred to as "XX"), as controller, obtains and processes personal data of the persons concerned, to whom it hereby provides information within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27t April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") and with regard to Act No. 110/2019 Sb., on the processing of personal data ("ZOOÚ" – Personal Data Protection Act).

 

  

WHAT ARE COOKIES

 

Cookies are small text files that your internet browser stores or retrieves on the hard drive of your end device (e.g. computer, laptop or smartphone) through the websites you visit for the purpose of storing certain information or image files, such as pixels. When you visit our website on the same device next time, your cookie information has already been stored. Cookies are passed either to our website ("own cookies") or to another website to which the cookies belong ("external cookies" or "third party cookies"). If you visit our website from a device other than the device on which you have already set cookies or if there is a change in the cookie processing (e.g. adjustment of the time limit, etc.) you will be asked to set your cookies on our website again i.e. for example to provide your consent and/or to set your preferences. XX currently only has its own cookies.

We process cookies for a variety of purposes, but primarily we use them to ensure that we are able to display our website in an optimal way for you, to ensure the proper functionality of our website in accordance with your preferences.

For purposes other than those listed above, your cookies will only be stored with your consent or as required by law.

You can also block or delete cookies via your internet browser.

From the point of view of the protection of personal data, it is important to assess what data is contained in a particular cookie file. If the data contained in the cookie includes any identifier which, alone or in conjunction with other data, is capable of directly or indirectly identifying a natural person – the user of the web browser, such a cookie will have to be considered to be personal data within the meaning of Article 1 of the GDPR.

 

 

HOW TO MANAGE COOKIES

We ask for your consent to the use of cookies through our cookie bar "Manage cookie preferences", whereby accepting ALL means allowing all cookies, the management and clarity of which we have tried to adapt to the users of our website. On the front page of the cookie bar (first layer) we provide you with brief and basic information on the processing of cookies on our website. You are offered options for managing the collection of cookies.

However, if you do not want all cookies to be used on our website, you have the option to click on Manage cookie preferences and here on Manage cookies. Within the second layer, you can become familiar with the types of purposes and choose only those purposes for which you give us consent, or by one button Accept All to give consent to all cookies found on our website, or by one button Refuse All to process only the necessary cookies. You also have the right, in the case of partners/third parties, to decide which third parties you agree or disagree with. We believe that such preference management is convenient for every user of our website.

 

You can delete all cookies that already are on your computer. Most browsers also offer the option of blocking the placement of cookies on your computer, in which case though you will not be able to use all our online services. Detailed information on the settings for storing cookies in your browser can be found on the website of the provider of the specific browser. For the most common browsers:

• Chrome
• Firefox
• Internet Explorer
• Android

You can find other information about cookies and their use on the AboutCookies.org website. 

 

 

PURPOSES OF PROCESSING PERSONAL DATA

 

According to the type of relationship with the controller, the table below lists the purposes of processing personal data ("PII"), which shows the category of data subjects, the legal basis for personal data processing, the category of PII processed and the period of time for which the controller will process the PII.

 

 

 

 

 

For example, we use the following necessary/required/functional cookies:

 

 

 

 

For example, we use the following analytical cookies:

 

 

 

division of COOKIES

Depending on who creates and processes them, cookies can be divided into two categories:

• First party cookie – their validity is limited to the website domain that created the cookie file. They are most often used to ensure the basic functionality of the website.
• Third party cookie – they are placed by using a script from a different domain. This way it is possible to follow the user across various websites. These are mostly cookies of advertising systems, social media widgets or input videos cookies.

Depending on the durability, cookies can be divided into two categories:

• Session cookie – they will be deleted from your computer after closing the website.
• Persistent cookie –they remain after closing the browser, they will be deleted only after a very long time (depending on your browser settings and cookie settings). You can also delete these cookies manually.

 

 

What are cookies used for on this website?

On this website we use these cookies:

• Technical – first party, session cookies. They ensure the basic technical functionality of the website such as login, use of services, etc.
• Technical – first party, persistent cookies. They ensure remembering of user preferences, eg remembering the user name, specific settings of web pages, etc.
• Google Analytics – first party, persistent cookies. They are used to measure anonymous statistics on the user’s behaviour.
• Social networks – (third party, persistent cookies) – used to share site content through social networks.
• YouTube (session and persistent cookies) – used by the YouTube video player. These are placed on your computer when you start the video.
• AdWords, Adsense (persistent) – generated by the advertisement system. Using these cookies, we can evaluate the effectiveness of sales channels.
• Sklik (persistent) – generated by the advertisement system. Using these cookies, we can evaluate the effectiveness of sales channels.

We never put sensitive or personal data into cookies.

 

 

WHICH COUNTRIES DO WE TRANSFER YOUR PERSONAL DATA TO?

By default, we restrict any cross-border transfers of personal data to third countries outside the EU and/or the European Economic Area unless necessary. However, some of our sub-suppliers or recipients of personal data listed above may be based or have servers located in the United States of America (USA). The USA is generally considered a third country that does not provide an adequate level of protection, however, any transfer of personal data outside the EU and/or the European Economic Area is only done in strict compliance with the data protection requirements of the GDPR. As the decision of the Court of Justice of the European Union in the Schrems II case of 16 July 2020 invalidated data transfers under the so-called EU-US Privacy Shield in most cases, our subcontractors use standard contractual clauses approved by the European Commission as a special legal guarantee for data transfers. In special cases, where data transfers occur only exceptionally, we carry out international transfers on the basis of the special situation exemption within the meaning of Article 49 GDPR, subject to compliance with all legal conditions. Specifically, in XX's conditions, there are cross-border transfers of personal data to third countries not guaranteeing an adequate level of protection of personal data in the context of the use of the services of various personal data recipients, in particular from the category of: i) social network operators (Facebook, Instagram, Google (Youtube), Linkedln, etc.) , ii) OTT services (WhatsApp/Facebook), iii) security services, iv) web analytics and SDK implementation on XX's websites (Add this, Facebook, Google), v) statistical analysis providers (Google), vi) others. In most of these cases, the cross-border transfer of personal data to the US takes place on the basis of standard contractual clauses approved by the European Commission, while in other cases the cross-border transfer takes place under the special situations exception within the meaning of Article 49 GDPR. In general, if we need to carry out a cross-border transfer of personal data to the USA, we will always use standard contractual clauses approved by the (EU) Commission or require other reasonable safeguards.

 

In the table below, you can find a link to reasonable or appropriate safeguards and means of exercising your rights under the GDPR:

 

    

 

 

FACEBOOK

The social media add-ons ("Add-ons") of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") are integrated on our website. Specifically, the Facebook Pixel. The Facebook Pixel is code that we have placed on our website. If you give us your consent, we are able to track your behaviour on our website using cookies that are automatically placed in your browser. Facebook Pixel then offers us information about conversions from our Facebook ads, offering the possibility of remarketing to those of you who have given us consent and who have already visited our website.

 

You have the right to revoke your consent at any time by clicking on the Manage cookie preferences link in the bottom bar of the website, clicking on it again  you recall it, and you will be able to modify your cookie settings, including revoking your consent to the processing of personal data. For more information on the purpose and scope of data collection and processing by Facebook, please refer to the Facebook Privacy Statement at the following link: https://www.facebook.com/policy.php. When managing our user profiles set up on Facebook, your personal data may also be processed for statistical purposes. When you visit our Facebook profiles, Facebook records, among others, your Internet IP address as well as other information that is stored on your computer in the form of "cookies". This information is used to provide us, as operators of the Facebook page, with statistical information about the use of the Facebook page. For more information about this statistical information ("insights"), please visit: https://www.facebook.com/help/pages/insights. In this processing, XX acts as a joint operator with Facebook, and the basic elements of the joint operator agreement for this case are available here: https://www.facebook.com/legal/terms/page_controller_addendum. We also inform you that we may use services provided by Facebook Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which are referred to as "data file custom audiences" – an audience report for the implementation of advertising campaigns, whereby the data processed by us may be combined with personal data processed in Facebook's databases and "measurement and analytics", whereby Facebook processes personal data on our behalf to measure the performance and reach of our advertising campaigns and to provide us with reports of users who have seen and responded to our advertising content. Therefore, this processing of your personal data may occur if you interact with our advertising content or our websites when using your Facebook user profile. In such cases, we use Facebook as an intermediary and the following legal safeguards apply to the processing of your personal data: https://www.facebook.com/legal/terms/businesstools, https://www.facebook.com/legal/terms /dataprocessing. If the processing of your personal data as explained above hinders you, you can object to it or you can also use the available self-regulatory tools developed for the online marketing sector, which are available here: http://www.aboutads.info/choices and http://www .youronlinechoices.eu/). These online tools allow you to automatically identify third-party digital identifiers (including those from Facebook) in your browser and delete them, thereby also preventing the possible processing of your personal data.

 

  

OTHER SOCIAL NETWORKS

In raising awareness of its activities, XX also uses other profiles set up on social networks, namely

Facebook https://www.facebook.com/BLOCKcrs/

Youtube https://www.youtube.com/channel/UCb5St8fUIworuKe_ahFvTvQ

Linkedin https://www.linkedin.com/company/block-a.s./?viewAsMember=true

We do not manage other social media profiles, even if they are tagged or otherwise associated with XX.

 

 

SOCIAL PLUGINS

Social Plugins referring to social networks Facebook, Youtube, Linkedin are internal solutions of the company, and they are HTML and XHTML elements of iFrame. Integrated Social Plugins are pure web links to third-party sites, and do not provide data about customers to social network operators.

 

 

 

IN PARTICULAR, FOR THIRD-PARTY SERVICES THAT WE USE FOR ANALYTICAL PURPOSES

 

Google Analytics from Google

 

The controllerr's website uses Google Analytics, a web analytics service provided by Google, for analytical and statistical purposes. Google Analytics uses cookies to help us analyse how our website is used.

 

The information generated by the cookie about your use of the website (including your IP address) will be transmitted and stored by Google. Google uses this information for the purposes of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also provide this information to third parties where required to do so by law or where such third parties process the information on Google's behalf.

 

The Google Analytics service is enhanced with related advertising features provided by Google, namely:

• Google Display Network Impression Reports,
• remarketing (the display of ads on the content network based on products viewed),
• advanced demographic reports (reporting anonymous demographic data).

 

Google Analytics is provided by Google Dublin, Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

 

The Google Analytics Terms of Service are available here: https://www.google.com/analytics/terms/gb.html

 

A general overview of the Google Analytics security and privacy policy is available here:

https://support.google.com/analytics/answer/6004245?hl=en 

and the Google's privacy policy is available here: https://policies.google.com/privacy?hl=en 

 

More information on data processing and use can be found in Google terms of service.

Please note that Google may also process your personal data in a third country. Transfers to third countries are therefore not excluded under this service. For transfers to third countries, standard contractual clauses in accordance with Article 46 of the Regulation are accepted as appropriate safeguards.

 

How to disable google analytics monitoring

If you do not want to provide anonymous data about your use of the website to Google Analytics, you may use the plugin provided by Google. After installation in your browser and activation, the data will no longer be sent.

 

 

Google Ad manager and other Google tools

 

The XX website uses, among others, the Ad manager service as an advertising management tool provided by Google for the purpose of marketing cookies. In order to provide you with ads and marketing content tailored to your preferences, the XX website also uses the DoubleClick for Publishers (DFP) technology provided by Google.

 

As a user, you can manage your preferences regarding marketing or targeted cookies at any time through your browser settings. Google Ad manager is provided by Google Dublin, Ireland Google, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

 

A general overview of the Google Analytics security and privacy policy is available here:

https://support.google.com/analytics/answer/6004245?hl=en 

and the Google's privacy policy is available here: https://policies.google.com/privacy?hl=en 

 

Please note that Google may also process your personal data in a third country. Transfers to third countries are therefore not excluded under this service. For transfers to third countries, standard contractual clauses in accordance with Article 46 of the Regulation are accepted as appropriate safeguards.

 

 

—  —  —  — 

 

 

XX does not disclose personal data to any third parties other than those required by law or these terms and conditions for processing personal data. XX does not personally transfer personal data to third countries (outside the European Union / the European Economic Area). XX does not process personal data for the purpose of carrying out automated decision-making, including profiling.

 

If a contract is the legal basis for the processing of personal data for any of the processing purposes, the provision of such data constitutes a contractual requirement for performance within the meaning of the contract in question. In the event of failure to provide such data, neither the conclusion of the contractual relationship nor the subsequent performance of the contract is possible. If the law is the legal basis for the processing of personal data, the provision of this data is a legal requirement. In case of failure to give such data, the proper performance of XX's obligations under the relevant general legislation cannot be ensured.

 

 

 

IN PARTICULAR, THE PERSON CONCERNED HAS THE FOLLOWING RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA:

1) upon request, require XX to confirm whether or not its personal data are processed (access to personal data), under what conditions, including the scope, purpose and duration of the processing, and information about the source of the personal data concerned;

2) upon request, require XX to correct incorrect or outdated personal data or to complete incomplete personal data;

3) upon request, require XX to delete/destroy personal data if:

(a) the personal data are no longer necessary for the purpose for which they were obtained or otherwise processed,

b) in cases where personal data were processed on the basis of consent and this consent to the processing of personal data has been withdrawn, where there is no other legal basis for the processing of personal data or other legal exception;

(c) where the person concerned objects to the processing of personal data on the basis of legitimate interest and no legitimate grounds for processing prevail or the person objects to direct marketing;

(d) the personal data are processed unlawfully;

(e) in order to comply with the legal obligation, the personal data must be erased;

4) upon request, require XX to restrict the processing of personal data if:

(a) the data subject objects to the accuracy of the personal data within a period which allows XX to verify the accuracy of the personal data;

(b) the processing of the personal data is unlawful and the person concerned objects to the erasure of the personal data and requests instead a restriction on its use;

(c) XX no longer needs the personal data for the purposes of processing the personal data, but the person concerned needs it to assert a legal claim;

5) if the processing of personal data is based on a legal basis, which is consent, he/she has the right to withdraw this consent;

6) to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out either (A) on the grounds of necessity for the performance of a task carried out in the public interest or (B) on the basis of the legitimate interest of XX as controller in the processing of personal data, including objecting to profiling based on those legal bases (in cases where XX would carry out profiling on the basis of automated decision-making);

7) file a petition to initiate proceedings with the Office for Personal Data Protection of the Czech Republic.

 

Requests in connection with the above-mentioned rights may be made by the person concerned to Zdeňka Pokorná, email: pokorna@blockcrs.cz, or in person or by post to the address of the controller. In the subject line of the e-mail and the letter it is necessary to indicate the Privacy Policy "Cookies".

 

Replies to those requests from the data subject or action taken on those requests shall be provided free of charge. If a request from a data subject is manifestly unfounded or unreasonable, in particular because of its repetitive nature (repeated request), XX shall be entitled to charge a fee taking into account its administrative costs for providing the information or a reasonable fee taking into account its administrative costs for communicating or taking the requested action, or to refuse to act on such a request.

 

If you have any doubts about compliance with your data processing obligations, you can contact XX directly. You may also contact the Office for Personal Data Protection of the Czech Republic, based in Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, e-mail: posta@uoou.cz, www: https://www.uoou.cz/en/

 

The current version of this document can be found on the controllers's website and in person at the Company's registered office.