This draft for France has not yet been reviewed by a lawyer and is not in force. Passages marked TO CONFIRM: … are to be clarified by the operator or by the lawyer.
The controller within the meaning of the General Data Protection Regulation (GDPR) is Martin Adamec, a sole trader established in the Czech Republic. Address and email are given at the bottom of the page.
This policy concerns website visitors, prospects, customers and their business contacts. For people whose data are contained in the company database (for example sole traders), the information under Article 14 GDPR applies in addition.
The website runs on a virtual private server rented from a hosting provider. TO CONFIRM: identity of the hosting provider and server location. To deliver the pages and keep them secure, we process the IP address, date and time of access, requested URL and method, status code, data volume, transmitted referrer and browser identifier. The legal basis is Article 6(1)(f) GDPR: our interest in a secure and functioning website. Technical logs are kept for no more than 30 days. TO CONFIRM: actual log retention period on the server. The connection is encrypted (TLS).
TO CONFIRM: whether the hosting provider makes backups, how often and for how long; deletion in the live service does not necessarily mean immediate removal from those backups.
When you use a contact or quotation form, we process the data you enter: name, company, company identifier (for example SIREN or VAT number, optional), email address, phone number (optional), type of request, requested country and industry, and message, together with the time of sending, IP address, browser identifier and form language. A hidden check field and a timing check are used to limit automated submissions. The legal basis is Article 6(1)(b) GDPR (pre-contractual steps at your request) and, for company representatives and to prevent abuse, Article 6(1)(f). The checkbox confirms that you have read this policy and are making a request; it is not consent to marketing. The server passes the message to the local email software for forwarding to the publisher; a backup copy outside the public web directory is only created if that handover fails. No automatic confirmation email is sent. Requests that do not lead to a contract are deleted 12 months after the last contact. TO CONFIRM: retention period for contact requests and backup copies. Contract documents are covered by the section “Contracts and accounting”.
To handle a request for access, objection or erasure, we process the company name or name, any identifiers (SIREN, SIRET, VAT number), the data concerned, the reply address, the message and the form metadata mentioned above, on the basis of Article 6(1)(c) GDPR. A minimal identifier may be kept on an objection list to prevent your data from being added again (Article 6(1)(f)). Correspondence is kept for as long as needed to handle and evidence the request, to meet legal obligations or to defend legal claims. TO CONFIRM: retention period for requests and for the objection list.
Customer identity, contact details of its representatives, order, invoice and payment data are used to perform the contract (Article 6(1)(b) GDPR), to meet our legal obligations (point (c)) and to communicate with the customer’s representatives or defend our rights (point (f)). Contract and accounting records are kept for the statutory periods. TO CONFIRM: statutory retention periods applicable to the publisher’s accounting records.
This website currently sets no audience measurement or advertising cookies and loads no Google services or content from other providers. Fonts are served from our own server. Only the storage technically required to deliver the pages and submit the form is used.
If audience measurement is introduced, it will only be with your consent where consent is required (Article 6(1)(a) GDPR; see the Entreprendre Service Public page “Gérer les cookies et autres traceurs sur le site internet d’une entreprise”, in French), and this policy will be updated first.
Where necessary, data may be received by the hosting provider and email and IT providers under the applicable safeguards, banks, accountants and professional advisers, and the competent authorities. Data from contact requests are never supplied to customers as a database product.
Any access or transfer outside the European Economic Area requires a legal basis and a mechanism under Chapter V GDPR, such as an adequacy decision or appropriate safeguards. You can request information about this using our contact details.
Sending a request is voluntary. Fields marked with an asterisk are required to process the form; alternatively, you can email us. No decision producing legal effects or similarly significant effects is taken solely on the basis of automated processing.
Subject to the conditions of the GDPR, you have the right of access, rectification, erasure, restriction and data portability. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. You can object, on grounds relating to your particular situation, to processing based on legitimate interests, and at any time, without giving reasons, to direct marketing (Article 21 GDPR, in French). We generally reply within one month.
You can lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Article 77 GDPR, in French). In France, this is the Commission nationale de l’informatique et des libertés (CNIL), which offers an online complaints service. The Czech data protection authority (uoou.gov.cz) is competent for the controller’s place of establishment. TO CONFIRM: allocation of competence between the CNIL and the Czech authority (lead supervisory authority) for a controller established only in the Czech Republic.
You can send privacy questions and data subject requests directly to the controller using the contact details below. No representative and no particular wording are required. TO CONFIRM: whether a data protection officer must be designated (Article 37 GDPR).
This policy describes the current service and will be updated when processing changes significantly. The version date is shown at the top of the page.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
IČO: 19552319
info@firmdata.fr
Legal notice · Terms of sale · Information under Article 14 GDPR · Objection · Sources and methodology
