These terms and conditions of processing personal, identification and operational data (hereinafter referred to as "Terms") provide basic information on the processing of personal, identification and operational data of customers ( hereinafter referred to as "Data") of TOPSTONE s.r.o. For the purposes of these Terms and Conditions, a customer is any natural or legal person who is in any contractual or similar relationship with TOPSTONE.

Statement

Data protection and security of customer data are a high priority for TOPSTONE s.r.o. and its subsidiaries. We are aware of the importance of protecting the personal data and privacy of our customers and therefore:

• When storing and processing personal data, we act in accordance with applicable law;
• We only use the data in a way that we have informed you about in advance;
• If the processing is based on consent, you always have the right to choose whether or not to give us consent; you can withdraw your consent at any time;
• We have appropriate technical and organisational measures in place to ensure an adequate level of security for customer data;
• Our company has taken all necessary measures to protect sensitive information from unauthorised access, aligning internal procedures and requirements to comply with applicable legislation;
• You always have the possibility to contact us by simple means and exercise your rights.

On what basis and for what purposes we process the Data

TOPSTONE processes personal data on the basis of the following authorisations and for the following purposes:

• Consent - marketing and business purposes (except for direct marketing);
• Legitimate interests of the controller - protection of our rights and peacock-protected interests such as prevention of fraudulent behaviour, debt recovery and legal claims, provision and optimisation of services;
• Compliance with legal obligations - processing of Data is imposed on us by applicable law (e.g. retention of tax and financial documents);
• Performing a contract or taking pre-contractual action - providing services/products, billing, dealing with claims, complaints or pursuing contractual claims.

Consent

If the processing is based on consent, you are always given the right to choose whether or not to consent. You also have the option to choose whether you give us your consent to send you information about new products in our range.

Managing permissions (consents)

If you have given us your consent to the processing of Data or wish to object to processing for direct marketing purposes, you can contact us by telephone or by email designated for this purpose. If you withdraw your consent to certain processing of the Data, we will terminate the processing within a reasonable period of time that is consistent with our technical and administrative capabilities.

Who can access the Data

Only persons who have been properly trained in data protection, employees of the Company, may have access to the Personal Data. If we use a third party for some of our activities, we always ensure that the Data is only provided to the extent necessary, and to trusted entities that have committed to properly and securely protect the Data provided. Furthermore, we are obliged to provide the Data in cases provided for by law, for example to government authorities, courts, law enforcement authorities, etc.

Processing time

We always process the Data for as long as is strictly necessary or for the period of the legal guarantee for goods and services. In the case of processing for marketing purposes, the data is processed for as long as is strictly necessary or until the consent is withdrawn or an objection is raised.

Quality and security

To keep your Data up to date, you must notify us of any changes to it. We place great emphasis on a company-wide security policy, deliberate and standard Data protection, employee confidentiality, compliance with internal guidelines and selection of contractors. We maintain the confidentiality of communications, messages.

Business messages

We have set up a policy of sending commercial communications to suit our customers. We carefully monitor the number of communications we send. If you do not want us to send you commercial communications, you can simply cancel by sending information to the relevant email.

Contact

You can contact us regarding changes or cancellation of rights by phone or email. You may contact the Data Protection Officer, for questions regarding data protection, electronically at office@topstone.cz or in writing at the registered office.

Efficiency

These Terms and Conditions shall come into force and effect on 25 May 2018.

[pdf] Regulation on the protection of natural persons with regard to the processing of personal data and its implementation

[pdf] Privacy Statement

[pdf] Processed data