How we handle your data.

The controller of personal data is INAPA s.r.o., company ID (IČO) 25518755, with its registered office at Průmyslová 223, 674 01 Třebíč, registered in the Commercial Register kept by the Krajský soud v Brně, oddíl C, vložka 27110.

Contact for personal-data questions: info@inapa.cz · +420 530 513 230.

We process only the data you voluntarily provide when sending an enquiry, ordering samples, concluding a contract or during ordinary business communication:

• the contact person's first and last name
• company name, company ID (IČO) and VAT number (DIČ)
• delivery and billing address
• phone number and e-mail
• the content of your message, attached drawings, 3D models or photos
• the history of enquiries, orders and complaints
• data from the devices you browse the site with — IP address, browser type, time of visit (details in the cookie policy)

Every processing of personal data has its specific purpose and a corresponding lawful basis under Article 6 of the GDPR:

• Handling an enquiry and preparing a quote — so we can reply to you, calculate a price and, where relevant, make a sample. Lawful basis: legitimate interest and steps taken prior to entering into a contract.
• Concluding and performing a contract — production, delivery, invoicing, complaints. Lawful basis: performance of a contract.
• Keeping accounts and archiving documents — we retain tax documents for the period required by law. Lawful basis: compliance with a legal obligation (Act No. 563/1991 Coll., the VAT Act, etc.).
• Communication with clients and business correspondence — e-mails, calls and meeting notes kept for an active project. Lawful basis: legitimate interest.
• Sending commercial communications — only if you have given your explicit consent. You can withdraw that consent at any time with a single e-mail.

We don't sell your data. We only pass it on, to the extent necessary, to these categories of processors:

• transport companies (delivery of samples and finished packaging)
• external accountant and tax advisor
• hosting and e-mail service provider
• CRM system provider (management of enquiries and orders)
• public authorities, if they request it within their statutory powers (the tax office, courts, the police)

We have data-processing agreements in place with all processors, obliging them to keep the data appropriately secured. We do not transfer data outside the European Economic Area.

• Enquiries with no resulting order — 3 years from the last contact.
• Contracts and business documents — for the duration of the contractual relationship and 10 years after it ends.
• Accounting documents — for the period set by law (usually 10 years).
• Records of consent to receive commercial communications — for the duration of the consent and 3 years after it is withdrawn.

In relation to your personal data you have the following rights:

• Right of access — you can request information on what data we process about you.
• Right to rectification — if the data is inaccurate, we will correct it.
• Right to erasure — under the conditions set by the GDPR.
• Right to restriction of processing.
• Right to data portability — a machine-readable export of your data.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent — at any time, without giving a reason.
• Right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ) — www.uoou.cz.

You can exercise your right by e-mail at info@inapa.cz or in writing at our registered office. We will respond within 30 days at the latest.

We protect the data with technical and organisational measures appropriate to the nature and scope of the processing. Only authorised staff bound by confidentiality have access to it. We regularly update and back up our systems.

We may amend this policy if the way we process data or the legal requirements change. The current version is always on this page, and you can find the date of the last update at the top.