Privacy Policy

General Privacy Policy – of the PYRONOVA Group

Dear Reader,

The PYRONOVA group has prepared this document to familiarise you with the latest legislation concerning the protection of your personal data and to fulfill their disclosure obligation.

As in other areas, the PYRONOVA group aims for maximum security of your personal data and guarantees transparency in handling them in the area of personal data protection.

1. Why did we create this document?

New legislation regarding the protection of personal data has entered into force, which obliges us to inform you about what we do with your data and to provide you with other relevant information.

This new legislation is Regulation 2016/679 of the European Parliament and the Council of the EU on the Protection of natural persons with regard to the processing of personal data and on the free movement of such data, also known as GDPR. It is referred to as “GDPR” in this text.

2. Who are we?

We are the PYRONOVA group, whose main business is fire protection. The following companies belong to the PYRONOVA group:

PYRONOVA s. r. o., with its registered office at Landererova 8, 811 09 Bratislava, Slovakia
PYRONOVA IS SLOVAKIA s. r. o., with its registered office at Landererova 8, 811 09 Bratislava, Slovakia
PYRONOVA IS, s.r.o., with its registered office at Studniční 248/18, 617 00 Brno, Czech Republic
PYRONOVA IS SRL, with its registered office at Calea Turzii 192, 400495 Cluj-Napoca, Romania
PYRONOVA IS Hungária Kft., with its registered office at Építők útja 2 – 4, 2040 Budaörs, Hungary
PYRONOVA IS Deutschland GmbH., with its registered office at Würzburger Straβe 8, 30880 Laatzen, Germany
PYRONOVA IS D.O.O. VETERNIK, Novi Sad, with its registered office at Sofje Pasković 21, 21203 Novi Sad – Veternik, Serbia.

Under GDPR, any person who has decided to carry out an activity that involves, inter alia, the processing of personal data is classified as a controller, which has implications for determining the purposes and means of their processing

Therefore, if you have provided personal data (e.g. name, surname, etc.) to one of these companies for the purpose of, for example, concluding a purchase agreement, such company has the status of a controller vis-à-vis you, and you have the status of a data subject. Under GDPR, a natural person whose personal data is processed is classified as a data subject.

As a data subject, you can exercise all your rights against the company, which we will tell you about below, and have the ability to contact the company to obtain other information regarding the processing of your personal data.

3. What are our contact details?

Use the following contact details to contact a PYRONOVA group company functioning as a controller:

PYRONOVA s. r. o. via email: gdpr.sk@pyronova.com or by phone on
+421 33 5555 777
PYRONOVA IS SLOVAKIA s. r. o. via email: gdpr.sk@pyronova.com or by phone on
+421 33 5555 777
PYRONOVA IS, s.r.o. via email: gdpr.cz@pyronova.com or by phone on 2
+420 513 034 770
PYRONOVA IS SRL via email: gdpr.ro@pyronova.com or by phone on
+40 3644 087 44
PYRONOVA IS Hungária Kft. via email: gdpr.hu@pyronova.com or by phone on
+36 23 782 392
PYRONOVA IS Deutschland GmbH via email: gdpr.de@pyronova.com or by phone
on +49 511 2030 0754
PYRONOVA IS D.O.O. VETERNIK via email: gdpr.rs@pyronova.com or by phone on
+381 69 262 0073

You can, of course, contact each of these companies in writing at the address of their registered office as listed above.

4. What personal data do we process?

First of all, we will familiarise you with what is designated as personal data. Personal data is any information related to a natural person which can be used to identify them directly or indirectly. Personal data are, for example, name, surname, type and address of residence, date of birth, birth number, email address, phone number, signature, as well as location data, or online identifier, photo, voice recording, and others. Any data that is specific to the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person is considered personal data.

Every PYRONOVA group company processes personal data as necessary for the performance of its business activity and related activities, the fulfilment of legal and contractual obligations, and the pursuit of legitimate interests.

In particular, the following categories of personal data are processed:

Basic identification data: title, first name, surname, maiden name, date of birth, birth number, address of permanent or temporary residence, photograph, audio-visual recording, nationality, nationality, signature, employer/company identification details, job position or function, place of work, place of business and identification number if you are self-employed.

Contact details: phone number, email address, fax number, mailing address.
Transaction data: name of bank, account number at the bank.
Socio-demographic data: indirectly age, gender.

Your other personal data may also be processed, for example, if you apply for a job at a PYRONOVA group company, your other personal data may also be processed within the scope of a provided CV or cover letter, or if you are a former employee of a PYRONOVA group company, we process other personal data where required by local legislation.

When processing personal data, every PYRONOVA group company follows the principle of data minimisation – whereby the scope of data is restricted based on the purpose of processing.

You can request a copy of the personal data that a PYRONOVA group company processes about you at any time using the contact details provided above.

5. Where do we get your personal data?

PYRONOVA group companies obtain personal data:

directly from you when concluding a contract and when fulfilling a contract or when obtaining your consent to the processing of personal data;
from other persons, as long as you give your consent (e.g. from a family member);
from proceedings involving public authorities;
from publicly available registers, lists and records.

6. For what purpose do we process your personal data?

In this part of the document, you will learn for what purpose the PYRONOVA group processes your personal data. For easier orientation and better understanding, we have divided this section according to the entities with which the data comes into contact. Please note that you may fall under multiple categories at the same time (e.g. a client who sends us a letter is classified as both a “client” and a “sender”). PYRONOVA group companies maintain the same procedures when processing your personal data, governed by internal policies valid for the entire PYRONOVA group. For this reason, the following purposes of processing your personal data classified by subject are identical for all PYRONOVA group companies.

Among other information, personal data retention periods are listed below. These periods represent the maximum time during which personal data is processed for the purposes defined by us. In reality, however, we delete or anonymise personal data before these periods expire if we consider the given personal data to be unnecessary from the point of view of the processing purposes defined by us.

Given that the company takes the protection of your personal data very seriously, we assure you that your personal data will not be made available to other entities unless it is necessary or for good reason.

Please note that the processing of your personal data may be based on several legitimate and legal reasons as described below. The termination of one legal basis (e.g. your consent to the processing of personal data) may not lead to the termination of the processing of your personal data by us, as long as they are being processed under another legal basis that endures.

For more information, you can contact any PYRONOVA group company at any time using the contact details listed above in this document.

Client / Former Client at the time GDPR entered into force

If you are a client to whom a PYRONOVA group company provides services, it processes your personal data to the extent necessary for some or all of the following purposes, depending on the stage of the contractual relationship: (1) to prepare, negotiate, conclude, amend and maintain records of the contractual relationship with you; (2) to fulfil this contractual relationship concluded with you; (3) to archive all documents, including communications related to the contractual relationship concluded with you in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; and (4) to fulfil the company’s legal obligations in accordance with local accounting legislation.

If you were a client of a PYRONOVA group company who received services but were no longer at the time GDPR entered into force, it processes your personal data to the extent necessary in order to: (1) archive all documents, including communications related to the contractual relationship concluded with you in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations.

Legal basis for processing your personal data: performance of a contract by the company to which you are a contracting party, including the performance of the pre-contractual relationship with you (Article 6 (1)(b) GDPR), the company’s fulfilment of legal obligations in accordance with local legislation (Article 6 (1)(c) GDPR) and the legitimate interests of the company that it pursues and for which the processing of your personal data is necessary (Article 6 (1)(f) GDPR).

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of your personal data: Tax authorities, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers, Other Suppliers.

Personal data retention period (maximum): Personal data in the documentation falling under this purpose is retained for 10 years, unless a longer retention period results from another purpose.

Person acting on behalf of a client / Person who acted on behalf of a client

If you are a person acting on behalf of a client or a person who acted on behalf of a client (e.g. as an employee, member of a body, subcontractor or other person), your personal data is processed by a PYRONOVA group company to the extent necessary for any or all of the following purposes, depending on the stage of the contractual relationship with the client: (1) to prepare, negotiate, conclude, amend and maintain records of the contractual relationship with the client; (2) to fulfil this contractual relationship concluded with the client; (3) to archive all documents, including communications related to the contractual relationship concluded with the client in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; and (4) to fulfil the company’s legal obligations in accordance with local accounting legislation.

Legal basis for processing your personal data: the company’s fulfilment of legal obligations in accordance with local legislation (Article 6 (1)(c) GDPR) and the legitimate interests of the company that it pursues and for which the processing of your personal data is necessary (Article 6 (1)(f) GDPR).

Legitimate interests: conclusion and fulfilment of a contractual relationship with a client / protection of the company’s rights and assertion of its claims.

Categories of potential recipients of your personal data: Client, Tax authorities, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers, Other Suppliers.

Personal data retention period (maximum): Personal data in the documentation falling under this purpose is retained for 10 years, unless a longer retention period results from another purpose.

Supplier / Former supplier at the time GDPR entered into force

If you are a supplier of a PYRONOVA group company to which you provide goods or services, it processes your personal data to the extent necessary for any or all of the following purposes, depending on the stage of the contractual relationship: (1) to prepare, negotiate, conclude, amend and maintain records of the contractual relationship with you; (2) to fulfil this contractual relationship concluded with you; (3) to archive all documents, including communications related to the contractual relationship concluded with you in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; (4) to fulfil the company’s legal obligations in accordance with local accounting legislation; and (5) to fulfil the company’s legal obligations in accordance with local legislation in the area of occupational health and safety and illegal employment during compliance checks related to applicable legislation on construction sites.

If you were a supplier of a PYRONOVA group company to which you provided goods or services and you were no longer at the time GDPR entered into force, it processes your personal data to the extent necessary in order to: (1) archive all documents, including communications related to the contractual relationship concluded with you in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations.

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of your personal data: Tax authorities, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Providers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers, Clients.

Personal data retention period (maximum): Personal data in the documentation falling under this purpose is retained for 10 years, unless a longer retention period results from another purpose.

Person acting on behalf of a supplier / Person who acted on behalf of a supplier

If you are a person acting on behalf of or who acted on behalf of a supplier (e.g. as an employee, member of a body, subcontractor, or other person), the PYRONOVA group company to which it provides goods or services processes your personal data to the extent necessary for any or all of the following purposes, depending on the stage of the contractual relationship with the supplier: (1) to prepare, negotiate, conclude, amend and maintain records of the contractual relationship with the supplier; (2) to fulfil this contractual relationship concluded with the supplier; (3) to archive all documents, including communications related to the contractual relationship concluded with the supplier in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; (4) to fulfil the company’s legal obligations in accordance with local accounting legislation; and (5) to fulfil the company’s legal obligations in accordance with local legislation in the area of occupational health and safety and illegal employment during compliance checks related to applicable legislation on construction sites.

Legitimate interests: conclusion and fulfilment of a contractual relationship with a client / protection of the company’s rights and assertion of its claims.

Categories of potential recipients of your personal data: Supplier, Tax authorities, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers, Clients.

Personal data retention period (maximum): Personal data in the documentation falling under this purpose is retained for 10 years, unless a longer retention period results from another purpose.

Applicants for employment

If you are an applicant for employment in a PYRONOVA group company, your personal data is processed for the purpose of assessing your prerequisites for the performance of an open position and possibly inviting you to an interview for such open position.

If you are not hired by the PYRONOVA group company to which you applied, but this company would like to contact you with a job offer in the future, the purpose of the processing of your personal data by this company is to register suitable potential applicants for employment.

Legal basis for processing your personal data: your free and unambiguous consent to the processing of personal data (Article 6 (1)(a) GDPR). If you are an applicant for employment in the company whose personal data was provided to the company by another natural person (e.g. your acquaintance, family member, friend), the legal basis for the processing of your personal data is also written consent to the processing of personal data (Article 6 (1)(a) GDPR). In this case, if your consent is not granted, the company will not receive your personal data from the third party and will not process it further.

Categories of potential recipients of your personal data: None.

Personal data retention period (maximum): Personal data are retained for the period for which you, as an applicant for employment, have given your consent to the processing of personal data, or for a shorter period until you revoke this consent.

Former employee at the time GDPR entered into force

If you are a former employee of a PYRONOVA group company, your personal data is processed for the purpose of archiving only in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations.

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of your personal data: State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Couriers, Mail carriers.

Personal data retention period (maximum): Personal data in the personal file are retained for 70 years from the date of birth. Personal data in payslips are retained for 50 years. Personal data in documents on attendance and leave are retained for 3 years. Personal data in other documents are retained for 3 to 10 years, unless a longer retention period results from another purpose.

Spouses of employees, dependent children of employees, parents of dependent children of employees, close relatives of employees / Spouses or wives of former employees at the time GDPR entered into force, dependent children of former employees at the time GDPR entered into force, parents of dependent children of former employees at the time GDPR entered into force, relatives of former employees at the time GDPR entered into force.

If you are the spouse of an employee, dependent child of an employee, parent of dependent children of an employee, and/or close person of an employee of a PYRONOVA group company, your personal data is processed for the purpose of maintaining a personnel and salary agenda in relation to this employee and subsequent archiving in accordance with local legislation.

If you are the spouse of a former employee, dependent child of a former employee, parent of dependent children of a former employee, close person of a former employee of a PYRONOVA group company, your personal data was processed for the purpose of maintaining a personnel and salary agenda in relation to this employee and they are archived in accordance with local legislation.

Legal basis for processing your personal data: the company’s fulfilment of legal obligations in accordance with local legislation (Article 6 (1)(c) GDPR).

Categories of potential recipients of your personal data: Health insurers, Social Insurance Administration, Tax authorities, Supplemental pension savings institutions, Pension administration companies, the Office of Labour, Social Affairs and Family, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Couriers, Mail carriers, Banks.

Personal data retention period (maximum): Personal data are retained for 3 to 10 years.

Partner / Former partner at the time GDPR entered into force

If you are a partner of a PYRONOVA group company, it processes your personal data for the purpose of: (1) your registration in the list of partners maintained by the company and changes therein; (2) the entry and changes to the entry of your personal data in the public register and their deletion from it; (3) preparation, use and storage of corporate documents and documents and communications related to them, while storage is carried out in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; (4) fulfilling the company’s rights and obligations resulting from the relationship to you as a partner; and (5) to fulfil the company’s legal obligations in accordance with local accounting legislation.

If you were a partner in a PYRONOVA group company at the time GDPR entered into force but are no longer, it processes your personal data to the extent necessary: (1) to use and archive all corporate documents and related documents and communication in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations.

Legal basis for processing your personal data: fulfilment of the relationship by the company, of which you are a participant as a partner (Article 6 (1)(b) GDPR), the company’s fulfilment of legal obligations in accordance with local legislation (Article 6 (1)(c) GDPR) and the legitimate interests of the company that it pursues and for which the processing of your personal data is necessary (Article 6 (1)(f) GDPR).

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of your personal data: Trade license body, Commercial register, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers.

Personal data retention period (maximum): Personal data in the records of meetings of the company’s partners, in other corporate documents and documents and communications related to them are retained for a period of 5 years after the dissolution of the company. Personal data in documents belonging to the accounting agenda are retained for 10 years, unless a longer storage period results from another purpose. Personal data in the list of partners maintained by the company is retained for as long as you are a partner of the company. Personal data in other documents are retained for 10 years from the termination of the partner’s relationship with the company.

Statutory body / Former statutory body at the time GDPR entered into force

If you are a statutory body of a PYRONOVA group company, it processes your personal data: (1) to prepare, negotiate, conclude, amend and maintain records of the contractual relationship with you; (2) to fulfil this contractual relationship concluded with you; (3) to record and modify your personal data recorded in a public register, or to ensure their deletion from it; (4) to create, use and retain corporate documents and related documents and communication, whereby such retention is carried out in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; (5) to fulfil the company’s legal obligations in accordance with local accounting legislation; (6) to present the PYRONOVA group and company you, to present the corporate culture of the PYRONOVA group company and supporting marketing activities, including photos and videos of you; and (7) for the purpose of a company bank card.

If you were a statutory body of a PYRONOVA group company and you are no longer a statutory body at the time GDPR entered into force, it processes your personal data for the purpose of: (1) using and archiving corporate documents and other documents and communications, while the storage is carried out in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations.

Legitimate interests: protection of the company’s rights and assertion of its claims.

Personal data retention period (maximum): Personal data in documents on the authorisation to carry out business activities or other activities, in records of meetings of the company’s statutory body, in other corporate documents and documents and communications related to them are retained for a period of 5 years from the dissolution of the company. Personal data in documents belonging to the accounting agenda are retained for 10 years, unless a longer retention period results from another purpose. Personal data in other documents (e.g. a contract) are retained for 10 years from the termination of the statutory body’s relationship with the company. Photos and videos are processed for the period for which you have given consent, or for a shorter period after withdrawing consent. Company payment cards are retained for the time necessary to process the request, or for the period until consent is revoked.

Debtor / Former debtor at the time GDPR entered into force

If you are in debt to a company from the PYRONOVA group, it processes your personal data for the purpose of out-of-court enforcement of its claims, including the subsequent archiving of documentation in the interest of protecting the company’s rights and asserting its claims.

If you were in debt to a company from the PYRONOVA group at the time GDPR entered into force and you are no longer in debt to such, your personal data is processed for the purpose of archiving documentation in the interest of protecting the company’s rights and asserting its claims.

Legal basis for processing your personal data: legitimate interests of the company that it pursues and for which the processing of your personal data is necessary (Article 6 (1)(f) GDPR).

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients: Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Legal advisers, Banks, Mail carriers, Couriers.

Personal data retention period (maximum): Personal data are retained for 10 years from the end of enforcement.

Person acting on behalf of a debtor / Person who acted on behalf of a debtor

If you are a person acting on behalf of one of our debtors (e.g. their employee, a member of a body, subcontractor, or other person), the company from the PYRONOVA group will process your personal data for the purpose of out-of-court enforcement of its claims, including the subsequent archiving of documentation in the interest of protecting the company’s rights and asserting its claims.

If you are a person who acted on behalf of one of our debtors (e.g. their employee, a member of a body, subcontractor, or other person), the PYRONOVA group company will process your personal data for the purpose of out-of-court enforcement of its claims, and if already recovered, for the subsequent archiving of documentation, all in the interest of protecting the company’s rights and asserting its claims.

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of personal data: Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Legal advisers, Banks, Mail carriers, Couriers.

Personal data retention period (maximum): Personal data are retained for 10 years from the end of enforcement.

Party to proceedings / Former party to proceedings at the time GDPR entered into force

If you are a party in court or other proceedings in any capacity in a legal matter initiated or conducted against a PYRONOVA group company or, on the contrary, conducted or initiated by a PYRONOVA group company against you or another party to the proceedings, your personal data is processed for the purpose of conducting this proceeding and subsequent archiving of documentation in the interest of protecting the company’s rights and asserting its claims.

If you were a party in court or other proceedings in any capacity in a legal matter initiated or conducted against a PYRONOVA group company or, on the contrary, conducted or initiated by a PYRONOVA group company against you or another party to the proceedings, and you are no longer such party at the time GDPR entered into force, your personal data is processed for the purpose of archiving documentation in the interest of protecting the company’s rights and asserting its claims.

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of personal data: Courts, Arbitration courts, Executors, Authorities active in criminal or misdemeanour proceedings, State and public administration bodies and public authorities, Parties to proceedings, including witnesses, experts, interpreters and others, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers.

Personal data retention period (maximum): Personal data are retained for 10 years from the end of enforcement.

Addressee and sender of mail /Former addressee or sender of mail at the time GDPR entered into force

If you are the addressee to whom a company from the PYRONOVA group sends or has sent correspondence or, conversely, the sender from whom it receives or has received correspondence, either in paper form or in electronic form via an electronic mailbox, the company processes your personal data for the purposes of keeping postal records in accordance with local legislation.

If you are the addressee to whom a PYRONOVA group company sends a Christmas/New Year’s greeting, the company processes your personal data for the purposes of the legitimate interests of the company it is following.

Legitimate interests: maintaining good relations in business circles and building the good name and reputation of the company

Categories of potential recipients of personal data: State and public administration bodies and public authorities, Suppliers of standard software equipment and technical support, Suppliers of web hosting or cloud services, Couriers, Mail carriers.

Personal data retention period (maximum): Personal data in the personal file is retained for 10 years in postal records. When the company is acting in its legitimate interest, the retention period is for the duration of this interest in relation to the addressee (it may end, e.g., when cooperation is interrupted completely or for a longer period of time).

Person acting on behalf of an addressee or sender of mail / Person who acted on behalf of an addressee or sender

If you are a person acting or who acted on behalf of an addressee to whom a PYRONOVA group company sends or has sent correspondence or, conversely, a person acting or who acted on behalf of the sender from whom you receive or have received correspondence, either in paper form or in electronic form via an electronic mailbox ( e.g. employee, member of a body, subcontractor or other person), your personal data is processed for the purposes of keeping postal records in accordance with local legislation.

If a PYRONOVA group company sends you a Christmas/New Year’s greeting, the company processes your personal data for the purposes of the legitimate interests of the company it is following.

Legitimate interests: maintaining good relations in business circles and building the good name and reputation of the company

Personal data retention period (maximum): Personal data in the personal file is retained for 10 years in postal records. When the company is acting in its legitimate interests, the retention period is for the duration of this interest in relation to the addressee (it may end, e.g. when cooperation is halted completely or for an extended period of time).

Data subject

If you are a data subject exercising your rights under GDPR against a PYRONOVA group company, it processes your personal data for the purpose of handling such requests.

Legal basis for processing your personal data: the company’s fulfilment of legal obligations in accordance with EU and local legislation (Article 6 (1)(c) GDPR).

Categories of potential recipients of personal data: State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Couriers, Mail carriers.

Personal data retention period (maximum): Personal data are retained for a period of 1 year from the date on which a request is resolved.

Social event participant

If you were invited to and registered for a social event organised by a PYRONOVA group company to which you provided your personal data, it processes them for the purpose of organising and ensuring your participation in the organised social event. At social events, photographs may be taken for the purpose of marketing promotion of a PYRONOVA group company, and by moving in a clearly marked area photographed by a marked photographer, you express your consent to such processing of personal data. In case of disagreement, you have the option to avoid the monitored or recorded area. You have the right to effectively object to the taking of a photo of you at any time. With your consent, your photos can also be published on the company’s profile on a social network.

Legal basis for processing your personal data: your free and unambiguous consent to the processing of personal data (Article 6 (1)(a) GDPR). Consent can be granted in writing or by active action in the form of a voluntary photograph. In the case of inviting and ensuring your participation in a social event, the legal basis is the pursuit of the legitimate interests of the company (Article 6 (1)(f) GDPR).

Legitimate interests: maintaining good relations in business circles and building the good name and reputation of the company

Categories of potential recipients of personal data: Companies providing photography services, Social network operators, Registered users of social networks.

Personal data retention period (maximum): When the company is acting in its legitimate interest, the retention period is for the duration of this interest in relation to you (it may end, e.g., when cooperation is interrupted completely or for a longer period of time). In case of consent, personal data is retained for the period for which you have given consent and, if no period is specified, until consent is revoked.

Social network user

Profiles of the PYRONOVA group and PYRONOVA group companies are created on social networks (Facebook, Instragram, Youtube, LinkedIn, and others), where personal data of registered users who also use profiles professionally administered by us are processed. This processing is governed by separate terms for the protection of your privacy, which are transparently published within our profiles set up on social networks.

Legal basis for processing your personal data: your free and unambiguous consent to the processing of personal data (Article 6 (1)(a) GDPR) – confirmed by a clear action – interaction within our profile (e.g. “Like” or “Share”, etc.) or other active actions connected with the use of our profile set up on the social network (e.g. commenting on posts).

Categories of potential recipients of personal data: Operators of social networks, Registered users of social networks.

Personal data retention period (maximum): For the period until your consent is revoked, except in case of earlier termination of personal data processing.

Applicant for sponsorship

If you are an applicant for sponsorship, the purpose of the processing of your personal data by a PYRONOVA group company is: (1) to assess the sponsorship application; (2) potentially to conclude the sponsorship contract; (3) its fulfilment; (4) to archive all documents, including communications related to the contractual relationship concluded with you in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; and (5) to fulfil the company’s legal obligations in accordance with local accounting legislation.

Legitimate interests: protection of the company’s rights and assertion of its claims.

Categories of potential recipients of personal data: Tax authorities, State and public administration bodies and public authorities, Suppliers of standard software equipment or technical support, Suppliers of web hosting or cloud services, Suppliers of professional services (Legal advisers, Accountants, Tax advisers, Auditors), Banks, Mail carriers, Couriers, Other Suppliers.

Personal data retention period (maximum): Personal data in the documentation falling under this purpose is retained for 10 years, unless a longer retention period results from another purpose.

Person acting on behalf of an applicant for sponsorship / Person who acted on behalf of an applicant for sponsorship

If you a person acting on behalf of an applicant for sponsorship or who acted on their behalf (e.g. an employee or member of the body of an applicant for sponsorship), the purpose of the processing of your personal data by a PYRONOVA group company may be any of the following: (1) to assess the sponsorship application; (2) potentially to conclude the sponsorship contract; (3) its fulfilment; (4) to archive all documents, including communications related to the contractual relationship concluded with you in the interest of protecting the company’s rights and asserting its claims and to fulfil the company’s legal record-keeping obligations; and (5) to fulfil the company’s legal obligations in accordance with local accounting legislation.

Legitimate interests: conclusion and fulfilment of a contractual relationship with an applicant for sponsorship / protection of the company’s rights and assertion of its claims.

Personal data retention period (maximum): Personal data in the documentation falling under this purpose is retained for 10 years, unless a longer retention period results from another purpose.

Other person who contacts us

If you do not fall under any of the above-mentioned categories and you contact us using your personal data, we process your personal data for the purpose of processing your inquiry and contacting you back from our side.

Legal basis for processing your personal data: your free and unambiguous consent to the processing of personal data (Article 6 (1)(a) GDPR), which you express in a deliberate manner (by contacting us).

Personal data retention period (maximum): For the time necessary to complete your report, or for the period until your consent is revoked.

7. Are you obliged to provide your personal data?

In the event that the legal basis for the processing of your personal data is the fulfilment of a legal obligation by a PYRONOVA group company and you refuse to provide it with your personal data, this may lead to, for example, damage for which compensation may be claimed against you (e.g. if a sanction was imposed in connection with non-fulfilment of such obligation). In that case, the provision of your personal data is a legal requirement and you are obliged to provide them. In another case, failure to provide your personal data as required by law may result in not concluding a contractual relationship with you, in which case the provision of personal data is voluntary.

In the event that the legal basis for the processing of your personal data is the conclusion or performance of a contractual relationship with a PYRONOVA group company and you refuse to provide it with your personal data, it will not be possible to enter into a contractual relationship with a PYRONOVA group company. However, the provision of personal data on your part is voluntary.

If the legal basis for the processing of your personal data is the legitimate interest of a PYRONOVA group company in accordance with Article 6 (1)(f) of GDPR, you are obliged to tolerate this processing, but you have the right to object to it.

If the legal basis for the processing of your personal data is your consent to the processing of personal data and you refuse to grant consent to a PYRONOVA group company, it will not be possible to process your personal data for the intended purpose and act appropriately (for example, if you are a job seeker looking for work with a PYRONOVA group company and you do not give it your consent to process personal data, we will not be able to assess your qualifications and invite you to an interview). However, the provision of personal data on your part is voluntary.

8. How can you revoke consent when the processing of your personal data is based on it?

If the processing of your personal data is based on the consent granted to a PYRONOVA group company, you can revoke this consent at any time by delivering notification to this company using its contact details listed above. The content of the notification must be the revocation of the granted consent.

The revocation of consent to the processing of personal data does not affect the legality of the processing of personal data carried out before its revocation.

However, revoking consent to the processing of your personal data does not end the processing of your personal data that is being processed by a PYRONOVA group company on another legal basis, which you can inquire about.

9. What are your other rights in relation to personal data?

First of all, you have the right to receive clear, transparent and understandable information about how we use your personal data and your rights.

You have the following rights:

Right to access personal data – you have the right to a copy of the personal data that a PYRONOVA group company has available about you, as well as to information about how your personal data is used. In most cases, your personal data will be provided to you in the form of a written document, unless you request another way of providing them. If you have requested the provision of this information by electronic means, it will be provided to you electronically if it is technically possible.
Right to correct personal data – we take reasonable measures to ensure the accuracy, completeness and currency of the personal data that the company from the PYRONOVA group has at its disposal. If you think that the personal data you have is inaccurate, incomplete or out of date, please do not hesitate to ask the PYRONOVA group company to modify, update or supplement this information.
Right to deletion (right to be forgotten) – you have the right to ask a PYRONOVA group company to delete your personal data, for example, if the personal data it has obtained about you is no longer necessary to fulfil the original purpose of processing. However, your right must be assessed in light of all the relevant circumstances. For example, the company may have certain legal and regulatory obligations or legitimate interests, which means that it will not be able to comply with your request.
Right to restrict the processing of personal data – under certain circumstances, you are entitled to ask a PYRONOVA group company to stop using your personal data. These are, for example, cases when you think that the personal data the company has about you may be inaccurate or when you think that it no longer needs to use your personal data.
Right to portability of personal data – under certain circumstances, you have the right to request a PYRONOVA group company to transfer the personal data you have provided to another third party of your choice. However, the right to portability only applies to personal data obtained from you on the basis of consent or on the basis of a contract to which you are a party.
Right to object – you have the right to object to the processing of data, which is based on the legitimate interests of a PYRONOVA group company. If the company does not have a convincing, legitimate and eligible reason for processing and you file an objection, it will not process your personal data further.
Right to request initiation of personal data protection proceedings – if you believe that a PYRONOVA group company is processing your personal data unfairly or illegally, you can file a complaint with the competent data protection authority in the member state of the European Economic Area (EEA) in which you live or you work, or in which a possible violation of legal regulations regarding the protection of personal data supposedly occurred.
Right to refuse automated and individual decision-making and profiling – you have the right not to be subject to a decision that is based solely on automated processing, including profiling, and which has legal effects that concern you or similarly significantly affect you.

These rights are specified in more detail in Articles 15 to 22 of GDPR. You can contact us at any time to learn more about them. GDPR sets the general conditions for the exercise of your individual rights. However, their existence does not automatically mean that when exercising individual rights they will be granted by the company from the PYRONOVA group, as exceptions or some rights are linked to specific conditions that may not be met in every case. Your request regarding a specific right will always be dealt with and examined by a PYRONOVA group company from the point of view of legislation and applicable exceptions.

You can exercise any of these rights at any time against a PYRONOVA group company by delivering a notice to its contact details listed above. The procedure for dealing with notifications is modified by the internal guidelines of the PYRONOVA group.

10. Where do we transfer your personal data?

We do not intend to transfer your personal data across borders to third countries outside the European Economic Area (EU, Iceland, Norway, and Liechtenstein).

11. How do we process your personal data?

We process your personal data in electronic form on a server, in a database stored on a PC and possibly on another device or in paper form.

No PYRONOVA group company carries out such processing operations, on the basis of which a decision with legal effect or other significant impact on your person would be made, which would be based on the automated processing of your personal data. PYRONOVA group companies also do not use profiling when processing personal data.

12. How do we protect your personal data?

The security of your personal data is of primary importance to us. In order to ensure the protection of your personal data, we have taken the necessary technical and organisational measures.

13. Not satisfied?

If you are not satisfied with the way a PYRONOVA group company processes your personal data, you can contact it at any time using the contact details listed above in this policy.

14. How long has this policy been in effect and how can it be changed?

These General Principles of Personal Data Protection of the PYRONOVA group enter into force on 1 January 2024. We reserve the right to change this policy if there is a change in the processing of personal data. You will be informed of every change via our website www.pyronova.com.