Privacy Policy

These Privacy Policy terms explain how VVM – IPSO s.r.o. processes the personal data of website visitors, customers, business partners, prospective clients, and job applicants.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR”), Act No. 110/2019 Coll., on the Processing of Personal Data, and other applicable legal regulations.

1. Data Controller

The controller of personal data is:

VVM – IPSO s.r.o.
Opavská 569
742 45 Fulnek
Czech Republic

Company ID: 25394479
VAT ID: CZ25394479
Data box ID: bzbbfns

E-mail: vvm-ipso@vvm-ipso.cz
Phone: +420 556 787 500

Hereinafter referred to as the “Controller” or the “Company”.

The Controller determines the purposes and means of personal data processing and is responsible for processing such data in accordance with applicable legal regulations.

2. What Personal Data We Process

Depending on the way you communicate or cooperate with us, we may process in particular:

• first name and surname;
• company name and job position;
• e-mail address;
• telephone number;
• address and billing information;
• Company ID and VAT ID of self-employed persons;
• information provided in an enquiry or other communication;
• information related to an order, project, or contractual relationship;
• data required for invoicing and accounting;
• information contained in a CV or other documents submitted in connection with employment;
• IP address, information about your device, web browser, and use of the website;
• data obtained through cookies and similar technologies, where their use is subject to the visitor’s consent.

3. Sources of Personal Data

We obtain personal data mainly:

• directly from you through e-mail, telephone, or other communication;
• when you submit an enquiry;
• during the preparation and implementation of a project;
• when entering into and performing a contractual relationship;
• when responding to a job vacancy or other employment-related communication;
• during personal meetings;
• from publicly available registers and records;
• automatically when you visit the website through technical logs and permitted cookies.

4. Purposes and Legal Bases of Processing

4.1. Handling Enquiries and Requests

If you contact us by e-mail, telephone, or in another manner, we process the information you provide, in particular your identification and contact details and the content of your communication.

The purposes of processing include:

• responding to your enquiry;
• preparing a quotation;
• assessing the feasibility of a project;
• taking steps prior to entering into a contract;
• continuing related business communication.

The legal basis is primarily the performance of steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR or the legitimate interest of the Controller in handling enquiries and business communication pursuant to Article 6(1)(f) GDPR.

4.2. Project Implementation and Performance of Contracts

We may process the personal data of customers, suppliers, and business partners for the purposes of:

• entering into and performing a contract;
• preparing and implementing a project;
• communication related to implementation;
• coordinating production, transport, installation, and other activities;
• handling changes, complaints, and service requests;
• maintaining records of business relationships;
• protecting and enforcing legal claims.

The legal basis is the performance of a contract pursuant to Article 6(1)(b) GDPR, compliance with legal obligations pursuant to Article 6(1)(c) GDPR, and the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.

4.3. Compliance with Accounting, Tax, and Other Legal Obligations

We process certain personal data in order to comply with legal obligations, particularly in connection with contracts, orders, invoices, accounting documents, complaints, and tax records.

The legal basis is compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.

4.4. Protection of the Company’s Rights and Legitimate Interests

We may also process personal data for the purposes of:

• protecting the Company’s property and rights;
• keeping records and evidence of business communication;
• preventing fraudulent or unlawful conduct;
• recovering receivables;
• resolving legal disputes;
• defending legal claims;
• ensuring the security of information systems and websites.

The legal basis is the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.

4.5. Recruitment and Job Applicants

If you respond to a job vacancy or contact us regarding employment, we may process in particular:

• first name and surname;
• contact details;
• information about education;
• information about previous work experience;
• professional qualifications and authorisations;
• information included in your CV;
• information obtained during a job interview;
• other documents that you voluntarily provide to us.

The purpose of processing is to assess the suitability of the applicant, communicate with the applicant, and potentially enter into an employment relationship.

The legal basis is primarily taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR and the Controller’s legitimate interest in properly conducting and documenting the recruitment process pursuant to Article 6(1)(f) GDPR.

If we wish to retain an applicant’s personal data for future job opportunities beyond a specific recruitment process, we will do so only on the basis of an appropriate legal basis, or where applicable, separate consent.

5. Website Operation and Security

When visiting the website, technical data may be processed automatically, such as:

• IP address;
• date and time of visit;
• pages visited;
• type of device;
• operating system;
• type and version of web browser;
• information about technical errors.

This information may be recorded in server logs.

The purposes include:

• ensuring the functionality of the website;
• protecting the website against attacks and misuse;
• detecting technical issues;
• protecting information systems.

The legal basis is the Controller’s legitimate interest in the secure and reliable operation of the website pursuant to Article 6(1)(f) GDPR.

6. Cookies

The website may use cookies and similar technologies.

Cookies are small data files stored on a visitor’s device. They may be used, for example, to ensure the basic functionality of the website, remember settings, or enable the use of external services.

Essential Cookies

Technically essential cookies are used to ensure the proper and secure functioning of the website.

Prior consent is not required for the use of technically essential cookies.

Other Cookies and External Services

Analytics, marketing, preference, or other non-essential cookies and similar technologies are used only in accordance with applicable legal regulations and, where required, only after the visitor has given consent.

The website may also use external services, such as third-party map services. If such a service requires prior consent, it is loaded only after consent has been granted through the cookie settings.

Consent can be granted, refused, or subsequently changed through the cookie banner or via the cookie settings link available on the website.

An up-to-date list of cookies, external services, providers, purposes, and retention periods is available in the cookie settings.

7. External Links and Third-Party Services

The website may contain links to other websites or use external services, such as map services or links to social media platforms.

When using these services, personal data may be processed by their respective providers. Details about specific services and technologies used are provided in the cookie settings where the consent requirement applies.

The respective operators are responsible for the processing of personal data on external websites.

8. Recipients of Personal Data

Personal data may be made available, to the extent necessary, to persons and companies involved in the operation of the Company or the provision of its services.

These may include, in particular:

• web hosting providers;
• website administrators and suppliers;
• providers of IT, security, and technical services;
• providers of e-mail and communication services;
• accountants and tax advisers;
• legal advisers;
• suppliers involved in project implementation;
• providers of external web or analytics services, if such services are used on the website;
• public authorities where disclosure is required by law.

Where a recipient acts as a data processor, personal data is processed on the basis of the relevant contractual or other legal relationship.

9. Transfers of Personal Data Outside the European Economic Area

Personal data is primarily processed within the European Union or the European Economic Area.

When using certain external services provided by international companies, personal data may in some cases be processed or transferred outside the European Economic Area.

In such cases, appropriate legal mechanisms and safeguards required by data protection regulations are used.

Details about specific external services are provided in the cookie settings if such services are used through the website.

10. Retention Period

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or for the period required by applicable law.

The retention period may vary depending on the specific purpose of processing.

Data related to contractual relationships and accounting or tax obligations may be retained for the period required by applicable legal regulations and subsequently for the period necessary to protect legal claims.

Data obtained in connection with a recruitment process is retained for the duration of the recruitment process and subsequently for a reasonable period necessary to protect the Controller’s rights, or longer where an appropriate legal basis exists.

Technical and security logs relating to the website are retained only for the period necessary to ensure the operation and security of the website.

Cookies are retained for the period specified in the cookie settings.

11. Personal Data Security

We take appropriate technical and organisational measures to protect personal data, in particular against:

• unauthorised access;
• loss;
• destruction;
• alteration;
• misuse;
• unauthorised disclosure.

Access to personal data is limited to persons who require such access for the performance of their employment or contractual duties.

12. Rights of Data Subjects

In connection with the processing of personal data, and subject to the conditions set out in the GDPR, you have in particular:

• the right of access to personal data;
• the right to rectification of inaccurate data;
• the right to erasure of personal data;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• the right to withdraw consent at any time;
• the right to lodge a complaint with a supervisory authority.

The supervisory authority is:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

13. Exercising Your Rights and Contact Details

You may exercise your rights or submit questions regarding personal data processing through:

E-mail: vvm-ipso@vvm-ipso.cz
Postal address: VVM – IPSO s.r.o., Opavská 569, 742 45 Fulnek, Czech Republic
Data box: bzbbfns

Requests concerning the rights of data subjects are handled within the statutory time limits.

14. Automated Decision-Making

We do not carry out automated individual decision-making or profiling through this website that would have legal or similarly significant effects on visitors.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, in particular in response to changes in the technologies or services used or changes in applicable legislation.

The current version will always be published on this website.

Effective from 20 October 2026.