Principles of processing and protection of personal data

Business Partners

In the case of our business partners, whether they are sellers, buyers, service providers, gifted, contractors, customers, etc., we process such personal address and identification information as our business partners provide us with; potentially personal data originating from publicly available registers, such as the Commercial Register, the Trades Licensing Register, the Insolvency Register, the Cadastre of Real Estate, etc., in particular:

• Name and last name
• Permanent residence, mailing address
• Date of birth, possibly ID number
• Work e-mail address
• Work phone number
• Bank account
• Job title
• ID, Taxpayer ID
• Signature

Other Third Parties

For other third parties, such during e-mail or document communication, visiting our production facilities, visiting websites, etc., we process personal address and identification information provided by the third parties themselves, or potentially, are available from camera records, especially:

• Name and last name
• Work e-mail address and work phone number
• Job title
• Signature
• Image and visual information on behavior and actions of recorded persons (for video camera recordings)
• IP address (for website visitors)

The cookies used on our website are only so-called technical cookies that ensure the proper functioning of the website and do not leave any traces that could be used, especially when combined with the unique identifiers and other information that the servers obtain, for profiling individuals and their identification. For example, no user logins or personal data are entered (data in forms sent are not linked with cookies). You can find more information about cookies here.

C) For what purpose, on what legal basis, and for what durationdo we proces/store personal data?

Employment Applicants

We process the personal data of job applicants to assess the suitability of the job applicant and the possible conclusion of a job or other similar relationship and the related communication between the job applicant and us and further, for the purpose of potential future use and protection of the rights and obligations of the contracting parties.

Such processing of personal data is necessary for the performance of the contract and also for the purposes of our legitimate interests, without requiring the consent of the job applicant.

For unsuccessful job applicants, we process this personal data for the duration of the selection procedure for a specific position and for a period of 4 years after its termination or, potentially, to the extent necessary.

In case of signature of a consent form for the processing of personal data (available here), we will process the personal data of job applicants for 4 years from the date of delivery of the above mentioned, for the purposes of keeping records of job applicants, subsequent mutual communication and employment, or the conclusion of an employment or other similar relationship.

Every job applicant who has granted us the above consent is entitled to revoke this consent to the processing of personal data at any time in writing at the registered address of PFNonwovens Czech s.r.o.: Přímětická 3623/86, 669 02 Znojmo or by e-mail at: hr@pfnonwovens.cz. Revocation of consent is without prejudice to the lawfulness of the processing personal data on the basis of the consent granted prior to its revocation. Revocation of consent to the processing of personal data also does not affect the processing of personal data we process on a legal basis other than consent.

For successful job candidates, personal data will be processed together with other personal information of the employee under the conditions set out in the internal work procedures / directives of the Group.

Business Partners

We process the personal data of business partners for identification of the contracting parties, mutual communication, performance of the contract, verification of the ability to meet obligations and further, for potential future application and protection of the rights and obligations of the contracting parties.

Such processing of personal data is necessary for the performance of the contract, fulfillment of legal obligations and also for the purposes of our legitimate interests, without requiring consent to the processing of personal data.

We process this personal data for the period of our mutual cooperation and further for a period of 10 years from its termination, and potentially for an additionally necessary period.

Other Third Parties

Within the context of electronic or document communications, visits to our production facilities, or when visiting our website (separate from camera recordings and IP addresses – see below), the personal data of other third parties is processed for identification of the contracting parties, communication, familiarization with instructions, OSH obligations and rules of conduct in our premises and for the future, eventual application and defense of the rights and obligations of the parties.

Such processing of personal data is necessary for the performance of the contract, fulfillment of legal obligations and also for the purposes of our legitimate interests, without requiring consent to the processing of personal data.

We process this personal data for the period of our communication (or facility visit) and further for a period of 10 years from its termination, and potentially for an additionally necessary period.

Camera Recordings

We process the personal data captured on the basis of video camera recordings (especially likeness and visual information on the behavior and actions of recorded persons; audio recordings are not captured, stored or processed in any way by camera systems) to protect the assets of Group companies and protect the property of our employees and others against theft and vandalism, as well as prevention of theft and vandalism, protection of the health of the end users of our products, protection of work safety and controlling of the technological and manufacturing process.

Such processing of personal data is necessary for the purposes of our legitimate interests, without requiring the consent of third parties to the processing of personal data.

Due to non-stop operation of our manufacturing facilities, our production lines are continuously monitored by camera equipment, 24 hours per day / 7 days per week. Other cameras with motion sensors record only in the case of detection of motion.

Places that are monitored by camera systems with recording, are marked for the duration of operation of the camera systems with the appropriate, clearly visible sign bearing the relevant pictogram / image of a camera, and the words “CCTV monitored and recorded”.

Records from cameras are stored in time loops, i.e. after the specified recording retention time, the recording loops are automatically overwritten. The retention time depends on the amount of disk space, the number of scanning cameras, and the purpose of processing. If an incident is detected, the record is retained for the period of time necessary for discussion before bodies involved in criminal proceedings, or potentially, other interested entities for the fulfillment of the purpose of the processing.

IP addresses

We process IP addresses to ensure network security.

Such processing of personal data is necessary for the purposes of our legitimate interests, without requiring consent to the processing of personal data.

We process this personal data for a period of 2 years, or potentially for another, necessary period of time.

D) Who may have acces to personal data?

Access to personal data, if necessary, may be granted to all companies in the Group, with registered offices in the Czech Republic, only in a delimited circle of authorized employees.

The Group does not transfer the personal data of data subjects to third countries, even within the Group itself, unless this is necessary for the fulfillment of the purpose of processing, in particular for the performance of a contract or legal obligation.

Categories of third parties that may have access to personal data:

• The persons who provide us with the technical operation of the website (e.g. access to IP addresses of website visitors),
• Persons involved in the operation of camera systems (e.g. for camera recordings),
• Persons providing security services of production areas (e.g. personal data of facility visitors),
• Persons managing information systems (e.g. personal data of customers),
• Other persons, if necessary to fulfill a contract or other obligations (e.g. personal data of customers to carriers or other parties involved in the performance of the contract).

Based on applicable legislation and subject to certain conditions, we are required to transfer some of your personal data to, for example, law enforcement authorities (for example, in the case of commission of a crime / offense) or other interested parties (insurance companies, banks, and financial authorities and other public administration authorities).

All employees of the Group involved in the processing of personal data are under an obligation of confidentiality and treat personal data as confidential information. Also, other recipients of personal data (e.g., processors) are contractually bound by the confidentiality obligation and may not use the data provided for any purpose other than that we have provided to them.

E) What rights does a data subject have in relation to the protection of personal data?

Every data subject has, in particular the following rights in relation to personal data:

• The right to access the subject’s personal data;
• The right to correct or supplement personal data;
• The right to delete personal data (the right to be "forgotten") in certain cases;
• The right to request processing restrictions;
• The right to raise an objection or complaint against processing in certain cases;
• The right to request the transfer of data;
• The right to withdraw consent at any time (see above procedure under section C) for job applicants;
• The right to be informed of breaches of personal data in specific cases;
• Other rights set out in the relevant legislation, namely in the GDPR Regulation.

If, in the case of requests by data subjects applying the abovementioned rights, we have reasonable doubts as to the identity of the data subject who submits the application, we are unable to identify the data subject, we may request the data subject to provide the additional information necessary to confirm his / her identity and verification of identity.

Applications may be submitted by the data subjects in writing to the below address of the joint administrators. In the case of clearly unjustified or disproportionate requests (or in the case of provision of additional copies of personal data processed), a reasonable fee may be imposed on the data subject, taking into account the administrative costs involved.

F) How can a data subject contact us?

If you have any questions regarding the processing and protection of personal data, please contact us in writing at PFNonwovens Czech s.r.o.: Přímětická 3623/86, 669 02 Znojmo, or at our e-mail address: ou@pfnonwovens.cz, which will act as a central contact point for data subjects and will fulfill the obligations relating to the data subjects arising from the relevant legislation, in particular the GDPR Regulation.

To keep records of the fulfillment of our obligations arising under applicable legislation, especially the GDPR Regulation, and the future application and protection of the rights and obligations of the parties, all communication between us and the data subject is monitored.