Privacy Policy

Protecting your privacy and personal data is an important matter to us, and we place great emphasis on this in our business activities. In this document, we would like to explain what data eurostroj.cz collects when you visit our website and for what purposes it is used:

1. Scope of this Privacy Policy

The purpose of this Privacy Policy is to inform you how Wienerberger Eurostroj, spol. s r.o., registered office: České Budějovice, Plachého 388/28, 370 01 České Budějovice, Company ID No. 632 16 167, registered in the Commercial Register kept by the Regional Court in České Budějovice under file No. C 10903 (hereinafter the “Company” or “we”), uses personal data and which information about users of the Company’s websites, online applications, or mobile platforms (i.e. “online services”) is collected, evaluated, used, transferred to third parties, or processed in another way.

This Privacy Policy applies to the Company only. It does not apply to online services operated by other Wienerberger Group companies or online services operated by third parties.

2. Collection of information and data

We process accurate and up-to-date personal data only on the basis of a lawful reason, in a fair and transparent manner, for specific, clearly stated and legitimate purposes, and only to the minimum extent necessary. We keep personal data in a form that allows identification of data subjects only for the necessary period of time and ensure their integrity and confidentiality through appropriate technical and organisational measures, including protection against unauthorised or unlawful processing, accidental loss, destruction, or damage. We also ensure that inaccurate personal data is corrected or erased without delay.

We obtain your personal data from several sources. The primary source is you directly (e.g. when you contact us regarding our products or services, request technical support, or contact us with questions or requests).

Your personal data may also come from publicly available sources, such as the internet or social networks (e.g. Facebook, Twitter, LinkedIn). Another source includes cookies and web beacons related to your activity on our website. You can protect your privacy through your own browser settings.

If you would like to know the specific source from which we process your personal data, you may contact us using the details provided above.

2.1. Personal data you provide to us

As a rule, the use of our online services does not require you to provide any personal data. When personal data is collected within our online services, it is, as far as possible, based on voluntary submission. For example, if you wish to subscribe to our newsletter offered on our website, we will ask you to provide your email address and other information to verify that you are the legitimate owner of the email address used for the subscription.

• In our business activities and communication with you, we may process the following categories of personal data that you provide to us:
• Identification data: title, first name, surname, date of birth.
• Contact data: telephone number, fax number, email address, permanent address, delivery address.
• Contract data: information obtained when fulfilling contractual obligations or orders, such as details about products and services delivered to you, order history, complaints, requests, suggestions, and our communication with you.

2.2. Automatically collected data

For data security reasons and to optimise the user experience, we also collect certain information when you use our online services. These data are not usually personal data on their own. Examples include information about your browser, operating system, domain name of the website you visited before ours, number of visits, average time spent on our website, and pages you viewed.

These automatically collected data are not combined with data from other sources. However, we reserve the right to review such data retroactively if we are informed of a specific risk of misuse.

2.3. Cookies and web beacons

Our online services use cookies and web beacons. Cookies cannot damage your device. They are small configuration files that help make our online services more user-friendly, efficient, and secure. Cookies also enable certain user functions.

Our online services typically use “session cookies,” which are deleted automatically when the browser is closed. Occasionally, we also use “persistent cookies,” which remain stored on your device until they expire or are manually deleted. These files allow us to recognise your browser on your next visit. Details about “third-party cookies,” such as those used by Google Inc., can be found in the privacy policies of those providers.

You can configure your browser or mobile device settings to notify you whenever a cookie is being stored, allowing you to decide whether to accept or decline it. You may also block cookies entirely or only in specific cases and enable automatic cookie deletion when closing your browser. Please note that some features of our online services may not be fully available if cookies are disabled.

We also use web beacons, which help us analyse the effectiveness of our website and newsletters. For example, our newsletters and HTML emails may contain web beacons that show whether embedded links were clicked. This helps us improve our email services and tailor content to users’ needs. Deleting the email also removes the web beacon. Standard text-only emails do not contain web beacons.

2.4. Web analytics

To continuously optimise and improve the user experience, some of our services use online analytical tools and social plug-ins listed below. The data used for these purposes is strictly non-personal.

• Facebook Plugins ("Share button"): You can recognise plugins from Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, by the Facebook logo or the "Share" button. For an overview of Facebook plugins, please click here: http://developers.facebook.com/docs/plugins/. When you use our online services, the plugin creates a direct connection between your browser and the Facebook server. Facebook is thereby informed that you have visited our online services together with your IP address. If you click the Facebook "Share" button while logged into your Facebook account, you can link the content of our online services to your Facebook profile. This allows Facebook to associate your use of our online services with your user account. Please note that as the provider of these online services, we do not receive any information about the content of the data transmitted or its use by Facebook. For further information, please refer to Facebook's privacy policy at https://www.facebook.com/policy.php. If you do not want Facebook to associate your use of our online services with your user account, please log out of your Facebook account.
• Xing: Each time you access one of our online services that uses features of the Xing AG network, Dammtorstraße 29–32, 20354 Hamburg, Germany, a connection is established with Xing's servers. To our knowledge, no personal data is stored in this process; in particular, no IP addresses are stored and no user activity is evaluated. For further information, please refer to Xing's privacy policy at https://www.xing.com/app/share?op=data_protection. 
• YouTube: YouTube is operated by Google, specifically YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you use one of our online services equipped with a YouTube plugin, a connection is established with YouTube's servers, and information about the online services you use is communicated to the YouTube server. If you are logged into your YouTube account, you allow YouTube to associate your browsing activity directly with your personal profile. You can prevent this by logging out of your YouTube account. For further information on the use of user data by YouTube, please refer to YouTube's privacy policy at https://www.google.com/intl/en/policies/privacy/.
• Twitter: The Twitter service is provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and its "re-tweet" function, the online services you use are linked to your Twitter account and shared with other users. At the same time, data is transmitted to Twitter. Please note that as the provider of these online services, we have no information about the content of the data transmitted or its use by Twitter. For further information, please refer to Twitter's privacy policy at http://twitter.com/privacy. You can change your Twitter account's privacy settings at: http://twitter.com/account/settings.
• LinkedIn: The provider of the LinkedIn network is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access one of our online services containing LinkedIn features, a connection is established with LinkedIn's servers. LinkedIn is informed that you are using our online services in connection with your IP address. If you click the "Recommend" button on LinkedIn while logged into your LinkedIn account, your use of our online services may be linked to you and your user account. Please note that as the provider of these online services, we have no information about the content of the data transmitted or its use by LinkedIn. For further information, please refer to LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.
• Hotjar: For an improved user experience, some of our online services use the Hotjar software (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Hotjar allows us to measure and evaluate user activity, such as mouse movements, clicks, and scroll depth. For this purpose, Hotjar places cookies on the user's device and may store various user data, such as browser information, operating system, and time spent on the website. For detailed information on Hotjar's data processing, please visit www.hotjar.com/privacy.
• Siteimprove: The web analytics service provided by Siteimprove A/S (Sankt Annæ Plads 28, 1250 Copenhagen, Denmark) uses cookies — text files stored on your computer — to analyse the use of our online services. Information about the use of our online services (including the user's encrypted IP address) collected via cookies is transmitted to and stored on a Siteimprove server in Denmark. Siteimprove uses this information to evaluate the use of the online services and to compile reports. Siteimprove does not pass this information on to third parties. Siteimprove stores and processes the collected data in accordance with German data protection rules. Users can prevent the storage of cookies by selecting the appropriate settings in their web browser; please note, however, that in this case not all functions of the online services may be fully accessible to the user. For further information, please refer to Siteimprove's privacy policy at: https://siteimprove.com/legal/privacy-policy/.

3. Use of Personal Data

Your personal data is processed and used exclusively for predefined purposes. These purposes include in particular:

Provision, improvement, and support of our online services: This includes data analysis, identification of usage trends, and statistics on user behaviour.

• Marketing: Your personal data will be used for marketing purposes, such as surveys or other promotional campaigns, only if you have given your consent. In such cases, your personal data will be stored for a period of 5 years, unless applicable legal regulations allow the Company to retain personal data beyond this period. You may withdraw your consent to the use of your personal data for marketing purposes at any time. Details can be found in Section 5.3.
• Sending of Newsletters: If you fill in the online form to subscribe to our Newsletter or tick the consent box when using our web forms, we will use the personal data you provide only to verify that you are the legitimate owner of the email address and that you wish to receive our Newsletter. Your personal data will then be used to create the Newsletter mailing list and to analyse its usage. In this case, your data will be stored for 5 years from the date of consent, unless legal regulations allow the Company to store data for a longer period. We may use your data for other purposes only if you grant us explicit consent. If you have subscribed to our Newsletter, you have the right to cancel your subscription by clicking the “Unsubscribe” link included in the Newsletter. If you wish to withdraw your consent to the storage or use of your personal data, you may send us an email to the address provided in Section 6.
• Ordering reports or other informational materials: If you order reports or other informational materials about our products and services, we will use your personal data only to process this order. Your data will then be stored for no more than 5 years from the last provision of the requested materials. To fulfil your order, we may use the services of third parties, to whom we provide your personal data solely for this purpose. We may use your data for other purposes only if you grant us your explicit consent.
• Employment applications: Job applications contain personal data (e.g. CV, contact details, etc.). These personal data may be used within the Wienerberger Group (see Section 4 below) for administrative purposes to decide whether we can offer you a position within our Company or within the Group, or to respond to your application. Unless you explicitly object, we will store your personal data for up to 3 months after the last contact in order to consider your application in the future, or with your consent for a longer period specified in that consent (unless legal regulations allow longer retention).
• Protection of rights and property: If we have reason to believe that the rights or property of the Company, its suppliers, customers, or third parties have been or may be violated or threatened, we may use or disclose your personal data to protect such rights and/or property. We also reserve the right to disclose your personal data if required by law or by the competent authorities to ensure proper legal procedure and to protect the rights mentioned above.

Data cleaning and consolidation: Where necessary, your personal data may be checked or combined with (i) data from our existing records (online and offline), (ii) data obtained from our legal predecessors, or (iii) data from other sources.

4. Transfer and Disclosure of Your Personal Data

Depending on the type of interaction you request (e.g. call-back request, order fulfilment, service request, or information request), your personal data may be shared with third parties involved in fulfilling the order (e.g. parcel services, banks, etc.) or with other companies within the Wienerberger Group. You may also be required to disclose your personal data to comply with legal obligations or to enforce rights and contractual obligations.

• Disclosure of personal data to third parties: In order to fulfil certain orders and provide certain services, we work together with external providers (e.g. intermediaries). These providers may use or disclose personal data solely for the purpose of fulfilling the Company's order.
• Use of data within the Group: The Company is part of the Wienerberger Group, an international group of companies with cross-border internal operating processes, structures, and technical systems. We may use your personal data within the Wienerberger Group and, where necessary, transfer it to our sites in other countries for the purposes set out in Section 3 and in accordance with this Privacy Policy. Our group-wide policies and procedures on personal data protection are designed to ensure an equally high level of data protection in all countries in which we operate. A full list of the companies within our Group is available at https://www.wienerberger.com/contact or https://www.wienerberger.com/the-company/company-sites.
• Compliance with legal obligations: We will disclose your personal data for the purposes of (i) enforcing or complying with a law, regulation, order issued by a public authority, or mandatory measures, (ii) detecting and preventing security threats, fraud, or other harmful activity, (iii) protecting and/or enforcing the rights and property of the Company or third parties, and (iv) protecting the rights and personal safety of our employees and third parties.

5. Your Rights in Relation to the Processing of Personal Data

You have the following rights, which you may exercise by submitting a request in any of the ways described in Section 6 below. We will inform you of the measures taken on the basis of your request within one month of receiving it, or within three months if an extension is necessary due to complexity.

5.1. Right to Information

We will always provide you with clear, transparent, understandable and easily accessible information about the processing of your personal data at the moment we collect your data. If we do not obtain personal data directly from you, we will provide the relevant information within a reasonable time after obtaining the data, but no later than within one month.

Information may be provided:

• electronically on our website;
• electronically to your email address;
• by telephone;
• or by post to the contact address you provide.

5.2. Right of Access

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed.

If we process your personal data, we will provide you with all information required by law or requested by you.

If your personal data is being processed, we will provide you with a free copy of the processed data. For any additional copies, we may charge a reasonable fee to cover administrative costs. The right to obtain a copy must not adversely affect the rights and freedoms of others.

If you submit your request electronically, we will provide the information in a commonly used electronic format unless you request otherwise.

Right to Rectification

You have the right to have inaccurate personal data rectified and incomplete personal data completed, taking into account the purposes of processing.

We will inform all recipients to whom your personal data has been disclosed about any rectification, where feasible with reasonable effort.

Upon request, we will also inform you about these recipients.

5.3. Right to Erasure / Right to Be Forgotten

We will erase your personal data without undue delay if any of the following apply:

1. the data is no longer necessary for the purposes for which it was collected
2. you withdraw your consent and no other legal basis exists
3. you object to processing and no overriding legitimate grounds exist, or you object to processing for direct marketing
4. the data has been processed unlawfully
5. the data must be erased to comply with EU or Member State law
6. the data concerns a child collected in relation to information society services offered directly to the child.

The above does not apply where processing is necessary:

1. for exercising the right to freedom of expression and information
2. for compliance with a legal obligation under EU or Member State law or for a task in the public interest
3. for reasons of public interest in the area of public health
4. for archiving in the public interest, scientific or historical research, or statistical purposes where erasure would impair the objectives
5. for establishing, exercising or defending legal claims.

We will inform all recipients of your data about any erasure, where feasible with reasonable effort. Upon request, we will inform you which recipients were notified.

If we cannot erase your personal data due to an applicable exception, we will inform you within one month, explain the legal reason, and provide information about your further rights.

5.4. Right to Restrict Processing

You have the right to request the restriction of processing where:

1. you contest the accuracy of personal data; processing will be limited until accuracy is verified
2. processing is unlawful and you oppose erasure and request restriction instead
3. we no longer need the data for processing, but you require it for legal claims
4. you have objected to processing; processing will be restricted until it is verified whether our legitimate grounds override your interests

When processing is restricted, we may continue to store your personal data but may process it only:

1. with your consent
2. for legal claims
3. for the protection of rights of another person
4. for reasons of important public interest

You will be notified before any restriction is lifted.

5.5. Right to Data Portability

You have the right to obtain personal data that concerns you, that you have provided to us, and which is processed automatically, if one of the following applies:

1. processing is based on your consent
2. processing concerns special categories of data based on your explicit consent
3. processing is necessary for the performance of a contract or steps taken prior to contract conclusion

Personal data provided includes data you have actively submitted (e.g., via a form) and data generated through your use of our services (e.g., location data, login data). We will provide data in a structured, commonly used, machine-readable format. You may transmit this data to another controller. In your request, you may choose whether we provide the data to you or transfer it directly to another controller where technically feasible.

5.6. Right to Object

If your personal data is processed based on our legitimate interest, you have the right to object at any time based on your specific situation. You may submit an objection using the contact details in Section 6.

Upon receiving an objection, we will stop processing your personal data (other than storing it) and assess whether we have compelling legitimate grounds overriding your interests or necessary for legal claims. If such grounds exist, we will inform you and explain further options for defence. If not, we will stop processing your personal data and erase it.

You have the right to object at any time to processing for direct marketing.

5.7. Right Not to Be Subject to Automated Individual Decision-Making, Including Profiling

We process your personal data with respect for your right not to be subject to any decision based solely on automated processing of personal data which produces legal effects concerning you or similarly significantly affects you, including profiling (i.e. any form of automated processing of personal data consisting of their use to analyse, assess or evaluate certain aspects relating to you — for example, work performance, economic situation, interests, etc.).

We may subject you to an automated decision in the processing of personal data only if such a decision is necessary for entering into or performing a contract between you and us, or if the decision is authorised by European Union or Czech legislation which simultaneously provides appropriate safeguards for the rights, freedoms and legitimate interests of the data subject, or if you give explicit consent to such a decision.

5.8. Right to lodge a complaint

If you disagree with how we have handled your request, you may lodge a complaint regarding our conduct with the Office for Personal Data Protection:

1. electronically, at the email address posta@uoou.cz;
2. via data box, ID: qkbaa2n;
3. by telephone, at +420 234 665 111; or
4. in writing, at the address Pplk. Sochora 27, 170 00 Prague 7,

or with another competent supervisory authority in connection with the processing of personal data.

6. Where and how to exercise your rights — contact details

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Wienerberger s.r.o.,
Plachého 388/28, České Budějovice 1, 370 01, Czech Republic

e-mail: info@wienerberger.cz
phone: +420 383 826 111
or e-mail: gdpr_cz@wienerberger.com

Data Protection Officer: +420 735 729 214 | dpo.gdpr@cz.ey.com

7. Security of Personal Data

We have adopted a significant number of measures to secure personal data in order to ensure full confidentiality and integrity of your personal data. However, given the nature of the internet, we would like to draw your attention to the fact that certain security gaps may exist in the transmission of personal data over the internet (e.g. communication by email), and that complete protection of personal data against access by third parties is not possible.

These Privacy Policy provisions take effect on 25 May 2018. These provisions are reviewed and updated regularly after the lapse of 12 months from the date on which they took effect or from the date of the last review and update, or more frequently if the need for revision and update arises.

The current version of the policy is always available at the internet address: https://eurostroj.cz/en/privacy-policy.html.