Privacy Policy
ACOND a.s. Personal Data Processing Policy ("Policy")
What is the purpose of this document?
In the Policy you will learn about the conditions under which we will process your personal data. You will learn about the manner, scope, purpose, legal basis, duration of processing, recipients of your personal data and your rights and protection under Articles 13 to 22 of the GDPR.
This information applies if you provide us with your personal data in the following cases:
- visiting the website www.acond.cz - cookies and rules on their use
- using the contact form to obtain an indicative offer
- entering a contract for the supply and installation of a heat pump and the provision of a remote heat pump management service, use of the remote heat pump management application "HeatingUp", provision of personalised assistance via chatbot
- sending commercial communications (newsletters).
When we refer to "us" or "our company" in the Policy, we mean ACOND a.s., the data controller ("Controller").
Controller identification and contact details:
ACOND a.s.
IN: 271 54 505,
with registered office at Štěrboholská 1434/102 a, Prague 10, Postal Code 102 00,
registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, Insert 9370.
Contact details: tel. +420 606 511 511, e-mail: info@acond.cz
Legislation:
We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") and Act No. 110/2019 Coll., on the processing of personal data, as amended. Cookies are processed in accordance with Act No. 127/2005 Coll., on electronic communications, as amended. Sending commercial communications by e-mail is governed by Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts, as amended.
You may refer to the Policy at any time at the following web address: https://acond.cz/privacy-policy/.
If the Controller processes your personal data, you will be notified of future changes to this document by e-mail.
How do we handle your personal data?
A) Visiting the www.acond.cz website - cookies and rules on their use
If you visit our website www.acond.cz we will process your personal data about you to the extent and in the ways set out in the cookie window, which you can call up at any time by clicking on the paperclip icon in the white circle at the bottom left of the www.acond.cz website.
Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognizes them on each subsequent visit. Cookies contain your unique identifier - personal information.
We use the following cookies on this website:
- Essential cookies: essential cookies help make the website usable by enabling basic functions such as navigating the site and accessing secure areas of the website. Without these cookies, the website cannot function properly.
- Statistical cookies: statistical cookies help us understand how you interact with the website by collecting and reporting information anonymously.
- Marketing cookies: marketing cookies are used to track visitors across sites. The intention is to serve ads that are relevant and engaging to individual users and therefore more valuable to publishers and third-party advertisers.
The legal basis for the processing of essential cookies is Article 6(1)(f) GDPR. The legitimate interest of ACOND a.s. is to ensure the error-free operation of the website for its visitors. Other cookies are processed on the basis of your consent pursuant to Article 6(1)(a) GDPR.
Of course, your consent to the use of cookies (other than essential cookies) can be narrowed, extended or withdrawn completely at any time.
Withdrawal of consent does not affect the lawfulness of the use of cookies until the withdrawal. You can also object to the use of cookies. You also have all the rights you are entitled to under the Policy.
You can consent to the processing of statistical and marketing cookies by clicking on the "Allow all" button in the "cookie window" that pops up when you first visit the website, or by clicking on the paper clip icon in the white circle in the bottom left of the www.acond.cz website.
By clicking on the "Deny" button in the cookie window, you refuse consent to the processing of statistical and marketing cookies. We may also process essential cookies without your consent.
Cookie storage period:
We store essential cookies for a maximum period of 1 year.
We keep consented cookies for a maximum of: permanently, until you delete the cookies or withdraw your consent to their storage.
You also have the option to specify your consent to the processing of cookies if you set the toggle switches for each cookie in the cookie window to the on position (the white switch will be on the right) and then click on the "Allow selection" button. This selects the type of cookies you agree to the processing of.
Clicking on the "Details" button in the top bar of the cookie window will take you to a menu where you can find out more about the different cookies you may encounter on the www.acond.cz website.
Please note that third parties may use cookies placed on the website and/or access data collected by cookies on the website. ACOND a.s. does not have access to read or write cookies from third parties that manage these cookies.
The third parties that place their cookies on our website are:
- Google Ireland Limited, based at Gordon House, Barrow Street, Dublin 4, Ireland; the privacy policy of this company is available here: https://policies.google.com/technologies/ads.
- Seznam.cz, a.s., with registered office at Radlická 3294/10, 150 00 Prague 5, Czech Republic, registration number: 26168685; the privacy policy of this company is available here: https://o.seznam.cz/ochrana-udaju/.
- Performio.cz, s.r.o., with registered office at Václavské nám. 813/57, 110 00 Prague 1, Czech Republic, ID No.: 283 13 585; more about this company here: https://www.performio.cz/#.
Further information about cookies and their current list can be found via individual web browsers, most often under Tools for developers. You can also delete all cookies via your browser, even if you have previously agreed to their use.
For more information on managing cookies in the most used browsers, please visit the following links:
- Google Chrome - https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=cs
- Firefox - https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies
- Safari - https://support.apple.com/cs-cz/guide/safari/sfri11471/mac
- Opera - https://help.opera.com/cs/latest/security-and-privacy/
- Microsoft Edge - https://docs.microsoft.com/cs-cz/sccm/compliance/deploy-use/browser-profiles
B) use the contact form to obtain an indicative offer
You are interested in our product range and want to find out which of our heat pumps would be best suited for your home. In this case, you have the option of leaving us a contact form on our website.
The legal basis for the processing of your personal data in this case is consent pursuant to Article 6(1)(a) GDPR.
The purpose of the processing is to process an indicative offer for the purchase of a heat pump. Since to select the right heat pump and process a relevant offer, we need to know the details of your property and your needs, you will provide us with the following personal data: name and surname, telephone number, e-mail address, district, type of house construction.
By ticking the consent to the processing of personal data below the web form, you give the Administrator your consent to process the above personal data for the purpose of preparing an offer to buy a heat pump.
The personal data obtained by filling in the contact form will be stored for the duration of your consent to processing, but no longer than 2 years, unless, for example, a contract is concluded in the meantime or another reason for processing your personal data arises.
You can withdraw your consent at any time by sending an email to gdpr@acond.cz. In this case, we will delete your personal data without delay, within a maximum of 30 days.
(C) concluding a contract for the supply and installation of a heat pump and the provision of a remote heat pump management service, the use of the remote heat pump management application "HeatingUp", the provision of personalised assistance via chatbot
If you enter into a contract with us to supply and install a heat pump and to provide you with a remote heat pump management and personalised assistance service, we will process the personal data listed below for the following purposes and on the basis of a legal basis:
- the performance of contractual obligations under Article 6(1)(b) GDPR: for the purpose of performing the work under the terms of the contract, exercising defect rights, providing remote management of the heat pump - optimising operation, maintenance and provision of services related to the heat pump, providing personalised assistance, etc. For this purpose, we store the following personal data: name and surname, title, home address or contact address, date of birth, telephone contact, e-mail address and MAC address of the heat pump, sensor data from the heat pump,
- compliance with legal obligations pursuant to Article 6(1)(c) GDPR: for the purpose of the procedure pursuant to Act No. 634/1992 Coll., on Consumer Protection, for the purpose of keeping accounting and tax records pursuant to Act No. 563/1991 Coll., on Accounting, Act No. 235/2004 Coll., on Value Added Tax and Act No. 586/1992 Coll., on Income Tax, we store the following personal data: name and surname, title, residential address or contact address, date of birth and bank account details,
- fulfilment of legitimate interests pursuant to Article 6(1)(f) GDPR: for the purpose of debt collection, we store the following personal data: name, surname, title, residential or contact address, date of birth, telephone contact, e-mail address,
- consent pursuant to Article 6(1)(a) GDPR for the purpose of improving ACOND a.s.'s customer service related to remote heat pump management and personalized assistance. For this purpose, we process the following personal data: name and surname, MAC address of the heat pump, sensor data from the heat pump. Consent can be revoked at any time by sending an e-mail to gdpr@acond.cz.
The personal data is stored for a maximum of 10 years from the handover of the work (installed heat pump) to the customer, when the longest warranty period expires, for 10 years from the granting of consent to improve the customer services of ACOND a.s. related to the remote management of the heat pump and personalized assistance, or for the period for which it is necessary to process personal data in order to meet the legal requirements imposed on ACOND a.s., if this period is longer. After this period, your personal data will be deleted.
The heat pump is supplied with the possibility of remote management via the HeatingUp app, if you connect your heat pump to the internet. For the remote management functionality of the heat pump, we work with the personal data MAC address of the heat pump as well as the data about the type of heat pump and the sensor data provided by the heat pump (data about the times and usage of the heat pump - water temperatures, heating and consumption times).
For the purpose of fulfilling contractual obligations, your personal data may be transferred to third parties, to recipients who ensure the IT operation of the services provided (remote management of the heat pump, personalised assistance - cloud storage, development, maintenance and operation of the application and website, etc.) and to selected subcontractors for the purpose of carrying out the installation or servicing of the heat pump according to the contract. We will transfer personal data to the recipients to the same extent as ACOND a.s. processes for the purpose.
Specifically, personal data will be transferred to the following third parties:
- Raynet s.r.o., ID No.: 26843820, located at Hlavní třída 6078/13, 708 00 Ostrava, Czech Republic - Operation of CRM system (customer records);
- Teco a.s., ID No.: 46357301, registered office Průmyslová zóna Šťáralka 984, 280 02 Kolín, Czech Republic - Operation of TecoRoute (remote heat pump management);
- DataLook BI s.r.o., ID No.: 11793007, registered office Krunertova 464/10, 500 04 Hradec Králové - Kukleny - Data warehouse development;
- Voitas Ventures s.r.o., registration number 14389100, registered office Jabloňová 2881/98, Záběhlice, 106 00 Prague 10 - Provision of marketing services;
- DataSentics, a.s., ID No.: 05355541, located at Washingtonova 1599/17, Nové Město, 110 00 Prague 1, Czech Republic - Development of a remote heat pump management application and chatbot for personalized assistance.
The remote management of the heat pump also works using the IT services of the recipients of the personal data (for more information on data protection in each service, see the link above):
- Azure Cloud (https://azure.microsoft.com/cs-cz/explore/trusted-cloud/privacy),
- Grafana (https://grafana.com/legal/privacy-policy/)
- PowerBi (https://learn.microsoft.com/en-us/power-bi/enterprise/service-security-data-protection-overview)
- InluxDB (https://www.influxdata.com/legal/data-processing-agreement-legacy-version/).
The data warehouse containing data from CRM (Raynet) and ERP (Pohoda) operates using the IT services of the recipients of personal data (for more information on data protection in each service, see the link above):
- PowerBi (https://learn.microsoft.com/en-us/power-bi/enterprise/service-security-data-protection-overview)
- Keboola (https://www.keboola.com/product/security)
- Snowflake (https://www.snowflake.com/trending/data-security-compliance/)
The application allows you to manage the heat pump in two modes. In NORMAL mode, it does not store sensor data and does not use it to optimize the operation of the heat pump. On the other hand, in ECO mode, it stores the sensor data and uses it to optimise the operation of the heat pump to match the use of the heat pump. The choice of the sensor data processing mode is up to you, the desired mode is selected in the HeatingUp interface.
In order to provide personalized assistance, we allow you to use the chatbot located in the HeatingUp app. The chatbot will answer your heat pump related questions as it knows each of our heat pumps. This is another form of customer support.
When using the chatbot we use the following personal data: name, MAC address of the heat pump and type of heat pump.
The chatbot works using third party services that will be the recipients of the personal data (for more information on the privacy policy of each service, see the link provided):
- Azure Cloud (https://azure.microsoft.com/cs-cz/explore/trusted-cloud/privacy),
- Azure OpenAI (https://learn.microsoft.com/en-us/legal/cognitive-services/openai/data-privacy)
- LangFuse (https://langfuse.com/docs/data-security-privacy).
In case of disconnection of the heat pump from the internet, remote management and personalised assistance services via chatbot are not provided and the heat pump MAC address and sensor data of the heat pump are not processed.
When using the heat pump remote management and personalised assistance services, personal data is processed for the entire duration of the use of these services. After the end of the use of these services, the personal data is deleted (unless there is another legal reason for processing) within 30 days. To disconnect these services, please send a communication to gdpr@acond.cz.
D) sending commercial communications (newsletters)
If you have purchased a heat pump from us, we may, in accordance with Section 7(3) of Act No. 480/2004 Coll., send you commercial communications about similar products, goods and related services, unless you have opted out of this when concluding the contract. In this case, we process your personal data: name, surname and e-mail address, based on the legal basis pursuant to Article 6(1)(f) GDPR for the purpose of fulfilling our legitimate interests. In this case, we will keep your personal data for 10 years, i.e. for the duration of the warranty period of our heat pump that you have purchased from us.
You have the option to opt-out of receiving commercial communications already at the conclusion of the contract and further in each newsletter by simply clicking on the "You can unsubscribe here" link in the footer of each newsletter. If you unsubscribe from a newsletter, we will not send you another newsletter after 30 days at the latest. You can also unsubscribe from the newsletter by sending an email to gdpr@acond.cz.
You can also subscribe to the newsletter by giving your consent by submitting the contact form on our website. In this case, we will send you commercial communications in accordance with Section 7 (2) of Act No. 480/2004 Coll. You can unsubscribe from such subscription using the procedure described above - either by clicking through the newsletter (see above) or by sending an e-mail to gdpr@acond.cz. We will keep your personal data: name, surname, telephone number, e-mail address, district and type of house construction obtained based on your consent to receive marketing communications for a maximum of 2 years, unless in the meantime, for example, a contract is concluded, consent is withdrawn or another reason for processing your personal data arises.
Where will my personal data be stored?
The personal data provided in the context of paper contracts is stored in both paper and electronic form. Other personal data is stored in electronic form only.
Documents in electronic form are stored on the local disks of employees' workstations. The data disks are secured by encryption and the data is stored in a user profile authenticated in our company's computer domain. Physical documents are stored in locked cabinets to which only authorised persons have access.
If the MS Azure Cloud service is used to provide the service, the encrypted data is also stored on the servers of this service.
Who will have access to my personal data?
Access to your personal data is only granted to employees of our company who have specific tasks related to the purpose of processing personal data.
We may also provide your personal data to other recipients (see above) for the purpose of operating our sales and service network (category of business partners) and to recipients in the field of IT services (website operation, provision of cloud storage, etc. - i.e. category of operational partners).
Will my personal data be transferred outside the Czech Republic?
No, your personal data will be processed in the Czech Republic, except for data stored in MS Azure and Snowflake, where the data will be stored in EU countries.
How long will my personal data be processed by your company?
The periods of processing of personal data are indicated above for each of the purposes of processing personal data.
Where we are required to do so by a generally binding legal regulation, we will archive the documents containing your personal data for the period prescribed by that regulation.
If you have given us consent to process your personal data, we will process it for a period of 2 years from the date of consent, unless you withdraw this consent earlier.
If in a particular case there are more than one legal title based on which we process your personal data, the termination of one of them does not mean that we will stop processing the personal data in question if we have another legal title for further processing.
What are my rights in relation to the processing of personal data?
You have the right to request access to your personal data - this means that we will provide you, upon your request, with information about which of your personal data we are processing, for what purpose, from what source the personal data was obtained, to whom your data was provided and the intended period for which it will be stored
You have the right to request the rectification of inaccurate personal data or to have it completed if it is incomplete.
You have the right to request the erasure of personal data that are no longer necessary for the purpose for which they were originally collected or that the controller is no longer entitled to use for other reasons (e.g. they were processed unlawfully, their erasure is required by law, etc.).
You have the right to request a restriction of the processing of your personal data - this means that you can ask us not to delete your data where we would otherwise be obliged to do so, and you can also ask us not to process your personal data any further until it is clear whether the data processed is accurate or whether your objection to the processing of your personal data has been raised on reasonable grounds (see right to object below).
You have the right to data portability - you can request that we provide you with personal data processed by us in electronic form so that it is easily portable to another controller. This right only applies to personal data that we have obtained in electronic form, based on your consent or based on a contract, and that we process by automated means.
You have the right to withdraw your consent to the processing of personal data. In this case, your personal data will no longer be processed unless there is another legal basis for processing it, which, for example, may have arisen later after you have given your consent.
You have the right to be informed of a personal data breach where a particular personal data breach is likely to result in a high risk to the rights and freedoms of natural persons.
You have the right to object to the processing of personal data that is carried out based on our legitimate interest or based on your consent for direct marketing purposes. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
How can I exercise my rights?
You exercise your rights with the data controller, which is our company. You can contact us in writing or by email at gdrp@acond.cz.
What should I do if I believe that the processing of my personal data has violated the law or GDPR?
In this case, you have the right to file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, phone +420 234 665 111, e-mail: posta@uoou.cz, website: https://www.uoou.cz.
Does the processing of my personal data involve automated decision-making, including profiling?
Automated decision-making means a decision that is made by a machine (computer) without human intervention and that has legal or other similarly serious consequences for you (e.g. refusal to enter a contract). Such processing of personal information does not occur in our company, the relevant steps are always decided by a specific employee of the company.
Published: 1. 10. 2024
.svg)
