AGROFERT, a.s., having its registered office at Prague 4, Pyšelská 2327/2, Postal Code 149 00, Company ID No. 26185610, a company registered in the Commercial Register administered by the Municipal Court in Prague under file ref. no. B 6626 (hereinafter referred to as “AGROFERT” or “our company”),is the controller of your personal data, which means that it determines the purpose and means of processing your personal data, carries out the processing of your personal data and bears responsibility for this processing.
In this document, you will find general information about the way our company processes personal data as well as information about some of the most common types of personal data processing that occurs in the activities of AGROFERT, a.s. and which the company processes in accordance with the regulations on personal data protection, in particular EU Regulation 2016/679 (hereinafter referred to as the “Regulation”).
Below you will find:
I/ GENERAL INFORMATION ON THE PROCESSING OF PERSONAL DATA BY AGROFERT
II/ INSTRUCTIONS ON THE PROCESSING OF PERSONAL DATA FOR THE CONTRACTING PARTNERS OF AGROFERT, a.s.
III/ INSTRUCTIONS ON THE PROCESSING OF PERSONAL DATA FOR CONTACT PERSONS OF THE CONTRACTING PARTNERS OF AGROFERT, a.s.
IV/ INFORMATION ON THE PROCESSING OF PERSONAL DATA OF JOB APPLICANTS AT AGROFERT GROUP
V/ INFORMATION ON THE PROCESSING OF PERSONAL DATA OF VISITORS TO THE AGROFERT WEBSITE
VI/ RISKS AND RECOMMENDED PRACTICES
Our company also carries out other processing of personal data, but the information about such processing is only provided to the persons concerned.
I/ GENERAL INFORMATION ON THE PROCESSING OF PERSONAL DATA BY AGROFERT
Personal data processing principles
When processing personal data, we respect all the rights of data subjects and our company complies in particular with the following principles:
- Personal data is processed in a fair, lawful and transparent manner;
- Personal data is collected solely for legitimate purposes and the processing is carried out in a manner compatible with those purposes;
- In the processing of personal data, we limit ourselves to the minimum necessary to fulfil the stated purposes;
- We take all reasonable and available measures to secure the processing of personal data;
- We only process accurate and up-to-date personal data; we correct or delete inaccurate or redundant data;
- Personal data is kept for the period necessary for the purposes for which the data is processed;
- Personal data is processed only in a manner that ensures appropriate security of personal data, including by means of appropriate technical and organisational measures against unauthorised or unlawful processing, accidental loss, destruction or damage.
What personal data do we process?
In particular, we process the following categories of personal data for the purposes set out by us:
- Identification and address data: first name, surname, degree, date of birth, address (residence, mailing or other contact address), in the case of a natural person who is an entrepreneur, the business name or any addition to the name, registered office and registration number;
- Electronic contact details: telephone, mobile phone, fax, e-mail address, data box ID;
- Other electronic data: IP address, location data, data transmitted from the customer’s browser, etc.;
- Other personal data required for the performance of the contract: bank account number, invoice amount, etc.,
- Creditworthiness and reliability information: payment records, including information from public registers.
How do we obtain your personal data?
We obtain your personal data from you, from third parties, from publicly available sources or from our own activities. If we obtain personal data from you, we will always inform you whether the provision of personal data is a legal or contractual requirement and whether you are obliged to provide personal data, and we also inform you of the possible consequences of not providing personal data.
From you, in particular:
- on the basis of your requests and as part of the contract negotiations;
- when communicating by telephone;
- when communicating with you in person or in writing, including by electronic means (e-mail).
From third parties, in particular:
- from public authorities or third parties in the performance of our legal obligations or on the basis of special legal regulations;
- from cooperating third parties.
From publicly available sources, in particular:
- from social networks and the internet if you publish the data on your own;
- from the commercial register;
- from the insolvency register.
From our own activities:
- in evaluating the information you provide to us in connection with the use of our products or services.
For what purposes do we process your personal data?
We process your personal data only to the extent necessary for the relevant purpose and for the period of time necessary to fulfil the purpose. After the purpose is fulfilled, we may process your personal data for purposes other than those for which it was collected. We will also always inform you about these other purposes.
We process your personal data in particular:
(a) For the purposes of entering into contracts, for the performance of the contract we have entered into with you and for the processing of your requests;
(b) For the purposes of complying with our legal obligations;
(c) For the purposes of our legitimate interests;
(d) For marketing purposes.
How do we process your personal data and how is your personal data secured?
When processing personal data, our company always acts in such a way as to secure your personal data and prevent the misuse thereof.
The processing of your personal data may be both manual and automated. Automated processing is carried out in AGROFERT information systems or in the information systems of our processors.
Your personal data is processed primarily by the relevant AGROFERT employees who need access to the personal data in order to perform their work duties and who are obliged to maintain confidentiality of all facts and data of which they become aware in the course of their work. In addition, employees of our processors also have access to your personal data, only to the extent necessary for the performance of their activities for our company. We always enter into a written data processing agreement with all of our processors, which includes safeguards for the security of your personal data.
What are your rights?
You may exercise the following rights at any time during the processing of your personal data:
- The right to access your personal data and to obtain a copy of the personal data we process about you;
- The right to rectification and completion of your personal data in case you find that we process incorrect or inaccurate personal data about you;
- The right to deletion of your personal data if the conditions set out by legal regulations have been met;
- The right to restrict the processing of your personal data, where we can restrict the processing of your personal data at your request under certain conditions set out by legal regulations;
- The right to the portability of your personal data to another controller if we process your personal data on the basis of your consent or for the purpose of performance of a contract and the processing is automated;
- The right to object to the processing of personal data if the personal data is processed for the purposes of our company’s legitimate interests. If you raise an objection, we will not process your personal data until we can demonstrate compelling reasons for the processing which override your interests or rights and freedoms or for the establishment, exercise or defence of legal claims. In the case of processing of personal data for the purpose of offering our products and services, we will immediately terminate the processing of your personal data for this purpose upon objection.
If we receive a request for exercising your above-mentioned right, we will inform the requesting party of the measures taken without undue delay and in any case within one month of receipt of the request. This time limit may be extended by another two months if necessary and with regard to the complexity and number of requests. In certain cases defined by the Regulation, our company is not bound to satisfy the request. This shall be in particular in situations when such request is apparently groundless particularly due to its repetition. In such cases we may (i) impose an adequate fee due to administrative costs associated with provision of the requested information or statements or with the required actions or (ii) refuse to satisfy such request.
If we receive the above request but have reasonable doubt as to the identity of the requesting party, we may ask the requesting party to provide us with additional information necessary to confirm their identity.
We will retain information about the data subject’s exercise of their rights with us and how we have dealt with their requests for a reasonable period of time (usually 3-4 years) to document this, for statistical purposes, to improve our services and to protect our rights.
If a data subject believes that AGROFERT processes their personal data unlawfully or otherwise violates their rights, they have the right to file a complaint with the supervisory authority (the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7) or to seek judicial protection.
We would also like to inform you that we do not make any decisions based solely on automated processing, including profiling, which would have legal effects for you.
II/ INSTRUCTIONS ON THE PROCESSING OF PERSONAL DATA FOR THE CONTRACTING PARTNERS OF AGROFERT, a.s.
This notice summarises the basic principles of processing personal data by AGROFERT, a.s. in relation to personal data of actual or potential contractual partners - natural persons.
Overview of the (types of) data processed and their sources
Personal data of contractual partners - natural persons (hereinafter referred to as “partner”) which AGROFERT will process includes in particular the data provided by such persons (typically name and surname, place of business, company ID no., VAT number, account number, contact details (e-mail address and telephone number), date of birth, data specified in the contract, invoiced and paid (due) amounts, data on ongoing performance and communication with partners (or their employees). In connection with the communication with the partner, AGROFERT may also store some technical data, i.e. the time of the communication with the partner and the IP address from which it is sent. For potential contractual partners - entrepreneurs, our company may process data obtained from open sources (e.g. their websites or advertisements placed by them) in order to contact them by telephone with an offer of services. Our company may store such basic data in its CRM system for further contact.
Purposes of processing
The primary purpose of processing the contractual partner’s personal data will be the conclusion and performance of the concluded contract. In this context, the data will also be used for the recording and proper performance of AGROFERT’s contractual relations, for the check of our employees’ activities, for statistical purposes, for the further development of AGROFERT’s services, either the service to which the contract relates or AGROFERT’s internal administrative procedures, for the recovery of debts and for the protection of AGROFERT’s and third parties’ (e.g. other contractual partners’) rights, in particular against unlawful activities. The data (in particular the data obtained from communication with the partner, such as IP address and time of communication) will also be used for the purpose of IT security of AGROFERT. Furthermore, the partner’s personal data will be used by AGROFERT for the purpose of fulfilling its legal obligations, in particular under accounting and tax regulations, data protection regulations (both for the partner and for persons acting on its behalf), advertising regulation directives, etc. and for direct marketing purposes (i.e. in particular to send offers for our other products and services, i.e. by contacting us by e-mail or telephone).
Legal basis of processing
The legal basis of the processing of the partners’ personal data is the necessity for the contract performance (incl. collection of receivables), the legitimate interests of AGROFERT (determined by the interest in recording contractual relations and the interest in protecting their rights against unlawful activities, including IT security, and the further development of AGROFERT products or services, processing for direct marketing) and third parties (in particular other contractual partners involved in the performance in which the partner will also participate) and the fulfilment of legal requirements (in particular the prevention of offences, the fulfilment of requirements under data protection regulations (in particular Act No. 101/2000 Coll. and the Regulation, bookkeeping and compliance with obligations under tax regulations.
Right to object
Insofar as the legal basis for the processing of a partner’s personal data is a legitimate interest of AGROFERT (in particular, the processing of data for IT security purposes, for statistical purposes and the further development of AGROFERT’s supplier-customer relationships and the protection of the rights of AGROFERT and third parties), the partner has the right to object to such processing of personal data at any time for reasons relating to their particular situation. In this case, AGROFERT will no longer process such personal data unless there are compelling legitimate grounds for the processing which override the interests of the partner or their rights and freedoms, or unless it is processed for the establishment, exercise or defence of legal claims. The partner may object to the processing by using the contact details below or preferably by e-mail osobni.udaje@agrofert.cz. In your e-mail, please indicate the specific situation that makes you conclude that AGROFERT should not process your data.
In the case of data processing for direct marketing purposes (sending marketing messages), it is always possible to object without further notice, in which case you do not have to give any reasons why you do not wish to continue receiving marketing messages. In these cases, the best way to object is to unsubscribe from further communications using the link that will usually be included in them for this purpose.
It notes that even in the above cases, however, there will sometimes be parallel processing of personal data for other purposes, too, that will justify AGROFERT continuing to process such data.
Data processing period
AGROFERT will process the partners’ contact data for the purpose of sending commercial communications until the partner expresses their disapproval of such sending. However, AGROFERT will still process the basic data on why it has sent commercial communications to the partner for a reasonable period of time to prove the legitimacy of such communications.
Personal data will be processed for a reasonable period of time in relation to the purpose of the processing (e.g. contracts will normally be recorded for 10 years after their termination). If the processing period is prescribed by law, the personal data will be processed for such a period, unless the following reasons justify a longer processing period. In determining the adequacy of the period of personal data processing, the following considerations will also be taken into account, in particular (i) the length of the limitation period, (ii) the likelihood of legal claims, (iii) the usual practices in the market, (iv) the likelihood and significance of the risks involved and (v) any recommendations of supervisory authorities.
Data update
For the purpose of updating the data, AGROFERT can be contacted at the contacts listed below, preferably by e-mail at osobni.udaje@agrofert.cz.
Commercial communications
We may also process data about our potential, current or past partners for the purpose of so-called direct marketing, which typically involves sending emails or telephone contacts with offers of similar products or services as you have received from us. The sending of offers is not limited in time, however, if you express your wish that we no longer send you such offers, we will not send them to you. However, we will continue to process basic mailing data for a reasonable period of time to be able to demonstrate why we have sent you these offers. We will not transfer your data to any third parties for the purpose of sending offers (except for our subcontractors - processors who will carry out the processing for us).
The partner understands and acknowledges that they will be sent commercial communications by AGROFERT to their address (including e-mail address) within the meaning of Section 7 of the Act No. 480/2004 Coll., and will be contacted by unsolicited direct mail containing commercial communications concerning AGROFERT products, trade and services. The partner may refuse this at any time by contacting AGROFERT at the AGROFERT registered office or via e-mail osobni.udaje@agrofert.cz. Such a refusal shall not - unless the partner expressly states otherwise - affect the sending of other types of commercial communications than those to which the partner responds.
How the processing is done and what are its consequences
Most of the processing is computerised, so we will usually process your data in a computer system (e.g. in our CRM system, in Outlook for emails, in our accounting system for invoicing data, etc.). Of course, this does not exclude the processing of documents in filing cabinets, such as the system for storing hard-copy contracts or the business card filing cabinets maintained by our individual employees.
AGROFERT will process personal data mainly in its own computer systems and in the computer systems of processors. AGROFERT will process documents in its filing cabinet. The provision of the processed data by the partner is voluntary (however, without the provision of certain data the contract will not be concluded and in some cases some data are subsequently required by law, in particular accounting regulations).
Birth ID number
We will only process your birth ID number if you voluntarily provide it in the contract or if required by law (unless specifically required by law, our company does not insist that you provide your birth ID number in contracts, so please do not indicate it therein).
If the partner - a natural person - provides AGROFERT with their birth ID number on the basis of or in connection with the concluded contract for work, the partner agrees, as the holder of this birth ID number within the meaning of Section 13c(1) of the Act No. 133/2000 Coll., that AGROFERT use this birth ID number for the purposes of recording contracts, the performance provided and the protection of AGROFERT’s rights, to archive, process and use it for this purpose. Any revocation of consent under this Article shall not affect AGROFERT’s authority to process information and data under applicable law or for other purposes, unless otherwise expressly provided for.
Transfer of personal data to other entities (recipients of personal data)
Not all processing of personal data is carried out by our company itself. We sometimes hire third parties, called data processors, to process personal data. We try to select only those processors who are sufficiently trustworthy.
AGROFERT may disclose personal data to third parties only if required or permitted by law or with the consent of the partner. AGROFERT discloses personal data only to the usual extent to processors or other recipients - suppliers of external services (typically programming or other technical support services, suppliers of computer systems, server services, e-mailing and archiving services), operators of (backup) servers or operators of technologies used by AGROFERT, who process them in order to ensure the functionality of the respective services. Furthermore, personal data may be disclosed to the extent necessary to legal, economic and tax advisers and auditors who process them for the purpose of providing consulting services or to persons forming a group with AGROFERT. Personal data relating to debtors may also be disclosed to debt insurance companies or other companies for the purpose of debt recovery. Personal data may also be transferred to public authorities upon request or in the event of suspected violations.
Transfer of personal data abroad
While the Regulation applies the principle of free movement of persons within the EU, the Regulation restricts the transfer of personal data abroad outside the EU. Our company does not normally transfer personal data abroad outside the EU. However, it is possible that your personal data may be processed on a computer system whose servers are located outside the EU, although we try to avoid such situations. With respect to systems typically used in the business, this would be at most systems using servers located in the United States. In this case, we would choose a company as a contractor that meets the conditions approved by the European Commission for secure data transfer between the EU and the US, the so-called Privacy Shield. If we transfer your personal data outside the EU, we will inform you in an appropriate manner if necessary.
III/ INSTRUCTIONS ON THE PROCESSING OF PERSONAL DATA FOR CONTACT PERSONS OF THE CONTRACTING PARTNERS OF AGROFERT, a.s.
In the context of processing the personal data of actual or potential contractual partners, AGROFERT also processes data on their contact persons (e.g. their statutory bodies or employees who deal with AGROFERT). Within this data, we usually process data on the name and surname of such persons, their e-mail address, work position, phone number, and, if appropriate, also minutes of meetings with them. This data is processed for the same purposes and to a similar extent and duration as the data of the contractual partners. Individual AGROFERT employees can maintain their own contact lists, e.g. in telephone directories or business card catalogues. In addition, telephone numbers communicated with from company devices are also stored for a reasonable period of time for the purpose of proper invoicing of telecommunications services, protection of AGROFERT’s rights and possible differentiation between private and business calls. However, apart from system administrators, only employees from whose devices the communication took place have access to such data.
IV/ INFORMATION ON THE PROCESSING OF PERSONAL DATA OF JOB APPLICANTS AT AGROFERT GROUP
This document summarises the principles of processing personal data of job applicants in the AGROFERT Group (a list of companies is available at https://www.agrofert.cz/en/our-companies). AGROFERT acts as a controller in relation to applicants for positions in AGROFERT, a.s., and as a processor in relation to its subsidiaries.
What data will we process about you?
We will process personal data about you that you provide or agree to provide to us, e.g. within applicant data sharing servers (typically data contained in your CV, i.e. in addition to your name and surname and contact details, e.g. data about your previous work experience, your language skills, etc. and data obtained in the course of correspondence with you), or data that we obtain in the course of a basic check of your personal data from public sources, e.g. LinkedIn (here too, however, this will be strictly necessary data intended, to the extent permitted by law, to check the applicant, in particular the data contained in the CV). In connection with meeting you in person or a having a phone call with you, we may also keep a record of how impressed we are with you or how your appearance matches the information on your CV.
If we contact you without your prior consent, we will only do so on the basis of the information you have disclosed for that purpose.
In connection with your response to a job advertisement on our website, we may also store some technical data, such as the time of your reply and the IP address from which it is sent.
If you give us consent to use your data, we will also keep details of how and when this consent was given and when it was withdrawn.
How will we collect data about you (what are the sources thereof) and how will we process it?
We will primarily collect data directly from you.
For specialised positions, we may also contact people whom we obtain from public sources, such as LinkedIn, without being contacted by them beforehand. In such cases, we will then contact you as a potential candidate with an offer to participate in the relevant selection procedure or to be included in our database of candidates. If you agree, we will include you in the selection for the position or our database. If you do not agree, we will no longer process your data for this purpose (however, we may store basic information about the fact that we have contacted you and why for a reasonable period of time).
If you provide us with data about your references (contact details of your former coworkers, etc.) and agree that we contact those persons, we will also process the data obtained from them to a reasonable extent.
We also use our website for job seekers https://www.agrofert.cz/kariera.
By submitting your personal data (e.g. by replying to an advertisement or filling in a form on the website) or agreeing to be included in a selection procedure, you allow our company to use your personal data to select a suitable candidate for a position within the current selection procedure or within another selection procedure for a comparable position that is currently under way. If we would like to use your personal data in the context of filling other positions or for future competitions, we will ask for your consent to such use.
Please note that you may withdraw your consent to participate in the selection procedure at any time, free of charge, by contacting the contact persons listed below. We recommend that you do so either by contacting the person in our HR division who is dealing with you directly or by using the e-mail address osobni.udaje@agrofert.cz.
In the event of withdrawal of your consent or your request to cancel your participation in the selection procedure, we will exclude you from the selection procedure. Your withdrawal of consent is without prejudice to the legality of processing based on your consent granted before the revocation.
We may also contact you in the context of making your CV available via the CV sharing service you have registered with (such as jobdnes.cz or jobs.cz). As part of such services, CVs are shared with your consent.
What will we use your data for (for what purpose)?
Your personal data will be used primarily to select a suitable candidate to fill the position in the context of ongoing selection procedures (including external cooperation). If you are selected for the position and a contract is signed, the information you provide (especially your CV) may become part of your personnel file.
We will also use your basic identification data collected about you in the context of your e-mail correspondence with us or in the context of your activities on our website (e.g. data collected in the context of your response to an advertisement) for the purpose of protecting the rights of our company or third parties against any unlawful acts that may be carried out within such activities and for the purpose of IT security of our website and network.
We will also use the data on how you have provided us with consent or basic data about you and how we obtained your data to fulfil our legal obligations, in particular obligations under data protection regulations (to prove your consent to data processing, etc.) and, where applicable, for purposes related to verifying the performance of contracts concluded with the operators of the above-mentioned CV sharing services.
How long will we process your data?
The processing of personal data for the basic purpose, i.e. for the selection of a suitable candidate to fill the position within the ongoing selection procedure, will be carried out until the position is filled and for a period of approximately 6 months after the position is filled (so that we can contact you with an offer of the position in the event that the initially selected candidate is not successful in the position; after this period, e-mails exchanged with you may be archived for a reasonable period of time in order to protect our rights or the rights of third parties). If you are hired, your CV and other similar data will become part of your personnel file and will be processed throughout the maintenance of the file.
If you give us your consent to use your data for future job offers, we will process your data for the above purpose until your consent is withdrawn.
To demonstrate compliance with our obligations under data protection regulations, we may continue to store information about how we obtained consent and what it related to for a reasonable period of time (usually no more than 4 years).
The above periods may also be exceeded in individual cases where circumstances give a reason for that, e.g. in the event of litigation.
For the other purposes mentioned above (protection of rights, IT security, compliance with legal obligations), we will process the necessary data about you (but not usually the CV you have provided) for a reasonable period of time, and in determining the reasonableness of the period of processing of personal data, we will base our decision on the following aspects, in particular (i) the length of the limitation period with a reserve for us to learn that a lawsuit has been filed or other proceedings have been initiated, (ii) the likelihood of legal claims against our company, (iii) the expected time frames for detecting attacks on our network or other breaches of security, (iv) common practices in the marketplace, (v) the likelihood and significance of the risks involved, and (vi) the recommended practices of supervisory authorities.
On what legal basis do we process your data?
The legal basis for the above processing is your consent (for the purpose of your inclusion in the selection procedure or in our CV database for the purpose of offering you a job in the future) and the legitimate interests of our company (in particular in the case of primary obtaining your contact details in a way other than with your consent, for the purposes of processing your data in order to protect the rights of our company or third parties against illegal action, and for the purposes of IT security).
Please note that the provision of personal data for processing with your consent is voluntary on your part, but without your consent we will not be able to include you in the relevant selection procedures.
Furthermore, the legal basis for the above processing is also the fulfilment of our company’s legal obligations, in particular in the area of data protection regulations (EU Regulation 2016/679).
Please note that if the processing of your data is based on your consent, you have the right to withdraw it at any time. Your withdrawal of consent is without prejudice to the legality of processing based on your consent granted before the revocation.
Right to object
If the legal basis for the processing of your personal data is the legitimate interest of our company (in particular, data collected about your activities on our website processed for the purposes of rights protection and IT security and data about your correspondence with us), you have the right to object to such processing of your personal data at any time for reasons relating to your particular circumstances. In such case, we will stops processing your personal data unless there are serious justified reasons for the processing exceeding your interests or the rights and freedoms, or unless they are processed for the determination, performance or defence of legal claims. You may object to the processing using the contact details below or preferably by emailing to osobni.udaje@agrofert.cz. In your email, please indicate your specific circumstances that lead you to conclude that we should not process your data.
Data update
If there is a change to the information you have provided in your CV or other information you have provided (e.g. you gain higher qualifications, learn another language, etc.), please let us know. This will allow us to better select the position to be offered to you.
To whom can we make your data available?
We may disclose your data to the usual extent to processors or other recipients - suppliers of external services for our company (typically programming or other technical support services, incl. the registration system for keeping a database of applicants, sending emails), to the operators of our servers or to the operators of the technologies used by us who process the data in order to ensure the functionality of the respective services. In addition, personal data may be disclosed to the extent necessary to our legal, economic and tax advisers and auditors who process it for the purpose of providing advisory services. Personal data may also be transferred to public authorities upon request or in the event of suspected violations. AGROFERT will have access to the data of the applicants for the subsidiaries for the above purposes.
V/ INFORMATION ON THE PROCESSING OF PERSONAL DATA OF VISITORS TO THE AGROFERT WEBSITE
This section summarises the basic principles of handling personal data of AGROFERT website users. In addition to the Regulation, AGROFERT processes personal data in accordance with the Act No. 110/2019 Coll., on the processing of personal data, Act No. 127/2005 Coll., on electronic communications, Act No. 480/2004 Coll., on certain information society services, as amended, and other legal regulations. Please pay due attention to the above regulations.
For what purposes do we process your data?
Our company does not process users’ personal data other than for the purposes permitted by law or for the purposes to which the user has consented, in particular for the purposes listed below:
- To protect our rights (e.g. in the event of litigation);
- For statistical purposes (but in this context your data is usually aggregated in such a way that your identity cannot be determined);
- To measure traffic to our site;
- To analyse your individual preferences and display content that matches them;
- To improve our website content and further its development;
- To secure our systems and network against external attacks or misuse by users, to the standard established in the market;
- For the purposes of fulfilling our legal obligations (e.g. to prove consent to the processing of personal data, to prevent offences, etc.);
- For marketing purposes.
We usually process your data in our own computer systems or we may use the systems of third parties (so-called processors).
Legal basis of processing
The legal basis for processing your personal data is compliance with legal requirements, in particular the prevention of offences and compliance with requirements under data protection regulations (in particular the Regulation, the Act No. 110/2019 Coll., on the processing of personal data, or the Act No. 127/2005 Coll., on electronic communications, the Act No. 480/2004 Coll., on certain information society services).
Processing for certain purposes may also be based on the legitimate interest of AGROFERT consisting in the interest in protecting our rights or third party rights, e.g. in ensuring security of our systems and network, in direct marketing, and on your consent (e.g. in the use of cookies for statistical purposes, for measuring traffic to our site, for analysing your preferences, etc., for improvement of the content of our site and the development thereof.
Please note that consents given may be withdrawn at any time. This shall be without prejudice to the legality of processing based on your consent given before the withdrawal.
What data do we process?
For the above purposes, we process data about your activity on our website, IP address, date and time of access, basic geographical location, etc.
We will also process data on how you have provided us with data or consent to the processing of your personal data, usually by storing information about how and when you gave your consent, including, for example, your IP address from which you clicked the relevant box and when you withdrew it.
Below you can find out what data we process in the context of cookies and other network identifiers and why we do so.
If we need your consent, we also process data on the fact that you have given us such consent and how it was given (by storing information on how and when consent was given, including your IP address from which you ticked the relevant box) and when you withdrew it.
For how long we will process your data
All data is only processed to the extent necessary for the fulfilment of the above purposes and generally only for a period of time necessary for the achievement of the purposes set by us, however no longer than for a period of time set by relevant legislation or in compliance therewith. Personal data processed with consent is processed until the consent is withdrawn, after which the data may be processed if there is another legal reason for doing so (e.g. to prove consent, to defend against legal claims, etc.).
To determine the length of the processing period, we use in particular (i) the length of the statute of limitations, (ii) the likelihood of legal claims against our Company, (iii) the expected time to detect attacks on our network or other security breaches, (iv) common market practices and recommendations of supervisory authorities, and (v) the likelihood and significance of the risks involved.
If we need information from you that will directly identify you or enable us to contact you, we will explicitly ask for it.
Source of personal data
The source of the personal data we process about you is mainly your activity on our website.
We will obtain the personal data we process either directly from you (by providing it to us, for example, by filling in a form on our website or from individual correspondence with you) or by tracking your activity on our website.
To whom can we make your data available?
AGROFERT can only disclose your personal data to third parties if required or permitted by law or with your consent, in particular:
- To external service providers (typically programming or other technical support services, server services, services related to measuring traffic to our site and adapting the content to user preferences);
- To the operators of backup servers or operators of technologies used by AGROFERT, who process the data to ensure the functionality of the website;
- To the extent strictly necessary to AGROFERT's legal, financial and tax advisors and AGROFERT's auditors, who process the data for the purpose of providing AGROFERT with advisory services;
- Personal data may also be transferred to public authorities upon request or in the event of suspected violations.
COOKIES
In accordance with the provisions of Section 89 of the Act No. 127/2005 Coll., on electronic communications, we hereby inform you that our servers use cookies for their operation, in particular for the differentiation of individual computers - small amounts of data that our servers send to your computer and which enable better use of our servers and adaptation of their content to your needs and preferences.
Cookies can be thought of as the memory of a website, which recognises the user of the same computer upon the next visit. Almost every website in the world uses cookies. Cookies are generally useful because they increase the user-friendliness of a repeatedly visited website. As long as you use the same computer and the same Internet browser for visiting our Internet websites, cookies will help your computer remember the visited website and your preferred page settings.
Cookies take up almost no space on your computer’s hard drive and are usually a few kilobytes in size.
Standard web browsers support cookies administration. For more detailed information, please use your browser help.
However, none of the cookies used on our site collect information that would contain your direct identification data.
Under the law, we may store some cookies on your device if they are strictly necessary for the operation of our website (so-called “essential cookies”), without your consent.
For all other types of cookies we need your consent. You can change or withdraw your consent at any time by clicking on the Cookies settings button at the footer of our website.
Types of cookies
We divide cookies into temporary (called session) and permanent cookies according to the time they are stored on your device. Temporary cookies are deleted after your visit. They are used to make our offer more clear, understandable and secure for users. Permanent cookies help to determine the specific needs of the individual user groups and serve to ensure that we can always respond as quickly as possible to the needs of individual users, and they remain stored on your device after you have finished visiting the website for the period of time indicated for each cookie. However, these files are not used to personally identify website users.
Depending on the function and purpose for which cookies are used, they are usually divided into the following types:
- Necessary cookies allow you to move on a website and use its basic functions. These cookies are essential for the use of the website and we do not need your consent to use them.
- Marketing cookies record your visit to another website you have visited and the links you have used. We use this information to display ads that are tailored to your preferences. Some of our partners place their own cookies on the website to customise the advertising displayed. These include social media cookies, which allow social media websites such as Facebook and Twitter to share your activities.
- Performance cookies allow us to recognise and count the number of users and collect information about how the website is used. We use this information to better understand how the website works and to improve it.
What we use cookies for
To save your personal settings
On your first visit, we will test the parameters of your computer and internet connection. This is then used for optimal settings, e.g. for the video player.
To improve our site
From time to time, we may use functionality on our site that tracks how users behave on the site, in particular which links they click on most and where they hover over first. This helps us to optimise our site to make it more user-friendly.
For statistical recording, traffic measurement and network security
Each time you visit our website, the analytic software stores its own cookies. These help us determine how many users come to our site repeatedly. This gives us a better understanding of how readers behave on our site, what they prefer and what they are interested in. We use Google Analytics for this purpose. If you want to reject having your traffic measured by Google Analytics, install the Google Analytics Opt-out Browser in your browser. This information is not linked to any other information.
We also use tools on our site to analyse your preferences when using the site and viewing content. Such tools allow us to see what part of our site is most visited and to determine how to lay out our site based on that.
The data we record may also be used to secure our network and prevent attacks on it.
To deliver relevant content to our site
We also use some cookies to show you content that may be of interest to you. To this end, we also use tools that track users’ movement around our site so that we can organise our site to better suit users.
For advertising purposes
Some cookies are used to better target advertising based on user behaviour. This is data that is not linked to other types of cookies. We use the data collected in this way solely to segment visitors in order to deliver more relevant advertising communications. Segments are created based on several general patterns of visitor behaviour and content
| Type | Name | Purpose | Expiration: |
| Necessary | has_js | Enabling JavaScript Ensures the proper functioning of the website. | by session |
| Marketing | _ga | Google Analytics Registers a unique identification number that is used to generate statistical data about how the user uses the website. | 2 years |
| Marketing | _gid | Google Analytics Registers a unique ID that is used to generate statistical data about how the user uses the website. | 1 day |
| Marketing | _gat_UA-59749402-2 | Google Analytics An analytics cookie that measures traffic anonymously. | 1 minute |
| performance | _gat | Google Analytics Used with Google Analytics to control the speed of requests. | 1 minute |
of the pages visited by them. Our company certainly does not create any detailed profiles of our visitors.
Some of the above systems also use retargeting techniques where you may be shown content on third party sites.
Overview of cookies used on our website
An overview of all the cookies we use, including their source, purpose, storage period and provider for third-party cookies.
Browser settings, cookie settings and the ability to delete cookies
When you visit the website, a cookie banner is displayed with the option to set optional cookies and accept or reject them. Select your preferences using the cookie banner and confirm your selection. You can change your selection at any time by using the cookie button in the footer of the website.
You can also disable cookies by changing the settings in your browser that allow you to refuse the use of all or selected cookies. However, if you use your browser settings to disable all cookies (including strictly necessary cookies), you may not be able to access the website and the functionality of the offer may be limited. Disabling cookies does not remove them from the browser and they must be removed independently in the browser.
In the Help tab of the bar of most commonly used browsers there are instructions on how to prevent your browser from accepting new cookies, how to receive notifications when cookies are accepted and how to deactivate all of them. You can also deactivate or completely delete similar data used by your browser as add-on modules, such as flash cookies, by changing the settings of the add-on module or by visiting the website of its producer.
Most web browsers accept cookies by default. However, the user can change the settings of their browser and refuse and remove cookies. The specific procedure varies from browser to browser, so please refer to your browser's help for more information. For the most common browsers they are as follows:
Chrome – https://support.google.com/accounts/answer/61416?hl=cs
Firefox – https://support.mozilla.org/cs/kb/vymazani-cookies
MS Internet Explorer / Edge – https://windows.microsoft.com
Safari – https:// support.apple.com
Opera – https://help.opera.com
VI/ RISKS AND RECOMMENDED PRACTICES
Any processing of personal data carries certain risks. These may vary depending on the scope of the data processed and the way it is processed. Below are some recommended practices that can help you protect your data:
If you provide us with your data, always consider whether it is necessary to provide the data. In particular, you should carefully consider providing data relating to your personal life and aspects of it unrelated to the purposes for which you are providing it or data intended for publication (e.g. your comments on articles, etc.). If you feel that we are asking you for too much information, please contact us and we will check the reasonableness of our request.
If you provide us with the personal data of third parties (your family members or other employees of your company, etc.), think about whether this transfer is necessary and required. If necessary, seek the consent of such third parties.
If one of our colleagues asks you to provide data, do not be afraid to ask whether it is necessary and whether the purpose of the processing cannot be achieved without the data.
Persons under 18 years of age are particularly vulnerable. If the transfer of data involves these persons, all circumstances must be considered particularly carefully. At the same time, it is necessary to consider whether the consent of such persons or their legal guardians (e.g. parents) is required to provide such data. If you are under 18 years of age and in any doubt as to whether you are able to make the right decision, please discuss the matter with your parent or contact us specifically for this purpose.
If you log in with a password, always use a unique strong password that you will not use for any other devices and accesses. Do not share or disclose your password with anyone, including our staff. We will never require you to provide your password, so please beware of various e-mail invitations to provide passwords, even if they are signed on behalf of AGROFERT, a.s. These are likely to be hoaxes for the purpose of eliciting and then misusing the password.
If you send us confidential information, please try to use a secure method of communication, such as encrypting the file and passing the password through another communication channel.
If you feel that our company is not fulfilling all of its obligations, that there has been an unauthorised data leak, or that someone is passing themselves off as a coworker of ours, please notify us as soon as possible, either electronically to our email address osobni.udaje@agrofert.cz, or by mail to our address AGROFERT, a.s. with its registered office at Pyšelská 2327/2, Chodov, 149 00 Prague 4.
We always try to keep these instructions up to date. We will therefore make adjustments to these rules from time to time. We will inform you of more substantial changes separately, but it is still worth reading these rules again from time to time.
HOW CAN YOU CONTACT US?
For any comments and questions regarding personal data protection and to exercise your legal rights, you may use the following contact details:
AGROFERT, a.s., Pyšelská 2327/2, 149 00 Praha 4 – Chodov
e-mail: osobni.udaje@agrofert.cz
Phone No.: 272192111
Data Box ID: xftccth
This information on the processing of personal data comes into force and takes effect on 25 May 2018. The current version of this document is published on www.agrofert.cz.