Privacy Policy

In Omnivery s.r.o., business ID: 25734105, residing at: Oranžová 225, 252 19 Chrášťany, registered in Commercial Register with the Municipal Court in Prague in section C, insert 65378 (hereinafter referred to as the „Omnivery“) we, as a data controller, pay great attention to protecting your personal data.

You will also learn for what purposes we process your personal data, from which sources we obtain this data, who processes your personal data, to whom we transfer it, and how we ensure the security of your data. In the last section, we outline what rights you have when we process your personal data and how you can exercise them.

This Privacy Policy may be amended from time to time. The latest version of this Privacy Policy shall always apply.

Categories of Processed Personal Data

Below are the categories of personal data, including examples, that we process for the purposes set out in the following section. We also refer to these categories in other parts of this Privacy Policy:

1. Identification data - We process in particular the name and surname to be able to identify you while fulfilling the contract we have with you or the entity you are representing, or to identify you while you are using our service. Also, we process identification data of the communication recipients for purposes down below.
2. Contact details - We process in particular the e-mail address and telephone number so we can make our platform available to you and be able to communicate with you.
3. Payment and billing details - We process in particular the data about banking accounts and data from invoices to properly process your payments, where applicable.
4. Records of our mutual communication - We process any personal data contained in this communication as we record and further work with this communication.
5. Information about service performance - We are also processing data on performance of services provided by you under the contract to us.
6. Information about usage of web presentation - By using the internet environment and visiting our website, you automatically send the IP address of your device. We can therefore detect the network number and subnet in which your device is located.
7. From the logs, where information about your activity on the website is also recorded for security reasons, we can read the length of a single login, the actions you have performed on the website and information about the data filled in the forms.
8. Information from cookies and other tracking technologies - If you have enabled the storage of so-called cookies in your browser, they send us additional information, for example about the pages you visit and the user preferences on your computer.

For the optimal display of our website and services, we use information about your operating system (for example, Windows or macOS), its version and technical data about the devices from which you log in (for example, the type of your smartphone). This helps us to continuously improve our services and adapt them to your technical capabilities. For more information on the use of cookies and similar technologies, please see section D “Use of cookies and digital identifiers”.

Purposes of Processing - For Subcontractors

If you are our subcontractor, your personal data, including personal data of your employees or other subcontractors, will be processed for the following purposes:

1. Fulfilment of contracts with our subcontractors - Our processing of your personal data is necessary to successfully concluding supplying contracts with you and measuring your performance according to contract. For this purpose, we process Identification data, Contact details, Payment and billing details, Records of our mutual communication and Information about service performance. The legal basis for processing here is our legitimate interest. We generally retain your personal data for the duration of the contracting process and for the time we are fulfilling our mutual obligations from the contract.
2. Internal evidence and protection of our rights and claims - Our processing of your personal data is also necessary to properly protect our rights and claims and keep internal evidence of our subcontractors, including personal data needed for debt collection and/or effective defence in any dispute (defence of the legal claims of the controller in judicial, extrajudicial, enforcement or other similar proceedings where, without the use of the processed data, the protection of the Omnivery’s rights could be jeopardised or prevented). For this purpose, we process Identification data, Contact details, Payment and billing details, Records of our mutual communication and Information about service performance. The legal basis for processing here is our legitimate interest. Personal data are generally retained for the duration of statutory limitation period, including any possible suspension or interruption of this period, but typically no longer than 16 years after the termination of contract with us (i.e. for as long as necessary to keep data about rights and claims arising mostly from contractual relationships).
3. Fulfilment of legal duties - We must comply with certain legal obligations imposed on us a data controller and business legal entity. Therefore, we need to process your personal data to properly address these legal obligations. For this purpose, we may process various categories of personal data, especially Identification data, Payment and billing details, Contact details and Records of our mutual communication. The legal basis for processing is compliance with legal obligation. Personal data are retained for the period set in the applicable legal regulation.

Purposes of Processing - For web visitors

If you visited our web presentation, your personal data will be processed for the following purposes:

1. Operation of web presentation and its security - Our processing of your personal data is necessary for our website operation, including presentation and functionality of the website and ensuring your safety on our website. Within this purpose, we identify you as a visitor during the web browsing or during repeated logins on our website. For this reason, we process Information about usage of web presentation and Information from cookies and other tracking technologies, which is necessary for operation of web presentation. The legal basis for processing here is our legitimate interest. We generally retain your personal data for up to 2 years after yours visit to our web presentation.
2. Customization of web presentation (preferences) - Our processing of your personal data is necessary for keeping your preferences and customize web presentation following these preferences as well as simplify browsing our website for you. Within this purpose, we customize web presentation to your preferences, such as location, language choices and your device. The legal basis for processing Information about usage of web presentation for this purpose is our legitimate interest on customization of web presentation to preferences of customers and we generally retain your personal data for up to 2 years after yours visit to our web presentation. With your consent, we also process Information from cookies and other tracking technologies, which is necessary for customization of web presentation (preferential cookies), while your data may also be transferred to third parties. The legal basis for processing here is therefore your consent, given through the Cookies Sidebar. We retain your data for the duration of your consent but in any case no longer than 2 year from receiving your consent.
3. Analysis of visits of web presentation (statistics) - Our processing of your personal data is necessary for understanding the way in which visitors use our web presentation. Within this purpose, we monitor traffic on our website, optimize our website, ensure the security both of the website and your data and make the web presentation more seamless and user-friendly. The legal basis for processing Information about usage of web presentation for this purpose is our legitimate interest on gathering information about usage of our web presentation for its further improvement and we generally retain your personal data for up to 2 years after yours visit to our web presentation. With your consent, we also process Information from cookies and other tracking technologies, which is necessary for customization of web presentation (statistical cookies), while your data may also be transferred to third parties. The legal basis for processing here is therefore your consent, given through the Cookies Sidebar. We retain your data for the duration of your consent but in any case no longer than 2 year from receiving your consent. Promotion and marketing on our web presentation (marketing) Our processing of your personal data is necessary for gathering information about personal preferences of each user for presentation of advertisement and subsequent presentation of this advertisement. Within this purpose, we promote and market services and products on the website, and show you marketing communication related to services and products you expressed your interest and promote our brand through online promotion. The legal basis for processing Information about usage of web presentation for this purpose is our legitimate interest on promotion of the sale of our products and services and we generally retain your personal data for up to 2 years after yours visit to our web presentation. With your consent, we also process Information from cookies and other tracking technologies, which is necessary for customization of web presentation (marketing cookies), while your data may also be transferred to third parties. The legal basis for processing here is therefore your consent, given through the Cookies Sidebar. We retain your data for the duration of your consent but in any case no longer than 2 year from receiving your consent.

Sources of Personal Data

We process the data that you provide to us when we are concluding contract and when you are registering on and/or visiting our website.

We may also collect some of the data when you use our services and visit our website (including data about your behaviour on the platform) or when you communicate with us. We obtain other data by deriving it from the data set out above.

We may then receive additional personal data from our partners who are controllers of your personal data and who transfer it to us according to their own instructions and purposes: we are therefore data processors in relation to them. However, there may also be partners towards whom we will be in joint control. We also can receive technical data about the devices from which you log in (for example, the type of your smartphone). This helps us to continuously improve our services and adapt them to your technical capabilities.

Cookies and other Digital Identifiers

Each time you visit our website, we store cookies, which are small files containing information about your visit, on your device and read them on subsequent visits. We use both cookies that are deleted after your visit on our website and cookies that remain on your device for a set period, but no longer than 2 years. In addition to cookies, we also use other similar technologies, such as web beacons, or small images contained in our platform that are loaded by your device and have a similar function to cookies.

Some of the cookies we use are necessary for the proper operation of or web presentation of our website, for example, to secure your access to the website. Some cookies use your preferences to personalize the content of the website and mark content that you have already viewed. If you block these cookies in your browser, the website may not function properly, and it may not be technically possible to provide you with some of our services.

List of cookies we use on our website is in Annex 1 to this Privacy Policy.

Processors and other Personal Data Recipients

The processing of your personal data involves processors who always process personal data for the purposes set out above and in accordance with our instructions. The current list of processors participating on provision of the Omnivery Service is available at the Sub-processors page. This list includes cloud service providers such as Google LLC and other companies in its group.

As part of the transfer of data to our processors, we may also transfer your data to third countries outside the European Union that do not ensure an adequate level of protection of personal data. We will only make any such transfers if the processor in question commits to comply with the standard contractual clauses issued by the European Commission and available at the EC website.

We also using processors for processing of data from our cookies and digital identifiers on our website. You can see what cookies are transferred to which processor here:

Measures for Data Protection

Protecting your data is our priority. For this reason, we have adopted, maintain and continuously improve our technical and organizational measures to protect against the leakage, loss, deletion or misuse of personal data.

Customer and subcontractor information are stored in a database that is replicated to a separate location. All sensitive information and security-related information are either encrypted or in case of logs completely obfuscated.

We operate on a dedicated network infrastructure in multiple locations. Connections between individual locations is using dedicated fibre links or encrypted tunnelled connections over internet. The network is protected using load-balancers and firewalls.

Access to the network is limited to authorized personnel only via encrypted VPN. Physical access to the servers is protected by multiple security measures. Each data centre must meet ISO27000 security criteria, have at least RFID card identification with a 30-day access log record history.

Your Rights Related to Processed Personal Data

Just as we have rights and obligations when processing your personal data, you have certain rights when we are processing your personal data. You can exercise all these rights, as well as make enquiries or complaints, by contacting us by email at support@omnivery.com. We will always deal with your request as soon as possible, but at the latest within one month. In exceptional cases, we may extend this period by a further two months, in particular due to the complexity of your request. We will inform you of this extension.

Specifically, you have the following rights in relation to the processing of your personal data:

1. Right to withdraw consent - You have the right to withdraw your consent to the processing of your personal data at any time where applicable. You can do this on our website or by sending an email with the following text: ‘I do not consent to the further processing of personal data for the purpose of promotion and marketing on your website’ or any similar text to e-mail address mentioned above. However, withdrawal of consent does not affect the lawfulness of processing prior to such consent. Please note that in this case, your personal data will be deleted and some features of the services or website may not be accessible.
2. Right to access - You have the right to obtain confirmation from us as to whether we are processing your personal data. If we are processing your personal data, you also have the right to request access to information about the purpose and scope of the processing, the recipients of the data, the duration of the processing, the right to rectification, erasure, restriction of processing and to object to processing, the right to lodge a complaint with a supervisory authority and the sources of the personal data (this information is already provided in this document). You can also ask us for a copy of the personal data we process. We provide the first copy free of charge, others may already be subject to a fee. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.
3. Right to rectification - You have the right to request us to correct inaccurate personal data concerning you. Depending on the purpose of the processing, you may also have the right to have incomplete personal data completed, including by providing an additional declaration.
4. Right to erasure (“right to be forgotten”) - You have the right to request the erasure of your personal data where: However, you cannot exercise this right if the processing is necessary for compliance with our legal obligations or for the performance of tasks in the public interest or for protection of our rights and claims.
   • we no longer need your personal data for the purposes for which it was collected or processed;
   • you withdraw the consent on the basis of which the personal data was processed and there is no further reason for processing it:
   • you object to processing and there are no other purposes for processing, or you object to processing for direct marketing purposes;
   • the personal data are processed against the law.
5. Right to restrict the processing - You have the right to request restriction of the processing of your personal data where:
   • you contest the accuracy of your personal data; in this case, you may request restriction of processing until the accuracy of the personal data is verified;
   • the processing is against the law and you request restriction of the processing of your personal data instead of erasure;
   • we no longer need your personal data for the purposes for which it was collected or processed, but you require it for the establishment, exercise or defence of your legal claims;
   • you have objected to the processing of your personal data; in this case, you may request a restriction of processing pending verification that our legitimate interests prevail.
6. Right to portability - You have the right to obtain a copy of your personal data that we process by automated means on the basis of your consent or for the performance of a contract. We will transmit this data in a commonly used and machine-readable format to you or to a controller designated by you, if technically feasible. The scope of the data provided may be limited to avoid interference with the rights and freedoms of others.
7. Right to object to processing - You have the right to object to the processing of your personal data that we process on the basis of our legitimate interest. We will stop processing your data if there are no other reasons for processing or if the processing is not necessary for the protection of our rights and claims or if you object to processing for direct marketing purposes.

Right to Lodge a Complaint

In addition to the possibility of exercising your rights with our company or our data protection officer, you may also lodge a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.