1. Data Controller
The data controller is Sigma Nexus s.r.o., with registered office at Plzeňská 3352/156, Smíchov, 150 00 Prague 5, Company ID: 21804311 (hereinafter "Controller").
Contact for data protection matters: info@sigmanexus.cz
2. What Data We Process
In our business activities, we process the following categories of personal data:
- Identification data: name, surname, company name, Company ID, VAT ID
- Contact data: e-mail address, phone number, registered office/establishment address
- Business cooperation data: order contents, billing information, transaction history
- Contact form data: name, e-mail and message content sent via the web form
3. Purposes of Processing
We process personal data for the following purposes:
- Contract performance — order processing, goods delivery, invoicing (Art. 6(1)(b) GDPR)
- Legal obligations — accounting, tax obligations, archiving (Art. 6(1)(c) GDPR)
- Legitimate interest — protection of Controller's rights, complaint handling, communication with business partners (Art. 6(1)(f) GDPR)
- Consent — in cases where you provide explicit consent (Art. 6(1)(a) GDPR)
4. Retention Period
We retain personal data for the period necessary to fulfill the processing purpose:
- Contract performance data: for the duration of the contractual relationship + 3 years after termination
- Accounting and tax documents: 10 years under the Accounting Act
- Contact form data: 1 year from sending the message
- Data processed based on consent: until consent is withdrawn
5. Recipients of Personal Data
Personal data may be shared with the following categories of recipients:
- Accountants and tax advisors
- Shipping companies (to the extent necessary for goods delivery)
- IT service and hosting providers
- Public authorities in cases required by law
We do not transfer personal data to third countries outside the European Economic Area.
6. Your Rights
As a data subject, you have the following rights:
- Right of access — obtain information about whether and what data we process about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of data when the processing purpose has expired
- Right to restriction — request temporary restriction of processing
- Right to data portability — obtain your data in a structured format
- Right to object — against processing based on legitimate interest
- Right to lodge a complaint — with the supervisory authority (Office for Personal Data Protection, www.uoou.cz)
7. Data Security
We have adopted appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or damage. Only authorized persons have access to personal data.
8. Cookies
Our website uses only technically necessary cookies for proper website functionality (language settings). We do not use analytical or marketing cookies.
9. Policy Changes
We reserve the right to update this privacy policy. The current version is always available on this website.
Last updated: January 1, 2024
Sigma Nexus s.r.o.
Plzeňská 3352/156, Smíchov, 150 00 Prague 5
Company ID: 21804311 | E-mail: info@sigmanexus.cz