Privacy policy — NOT NULL Makers

01Who processes your personal data:

The controller of your personal data is NOT NULL Makers s.r.o., ID: 19990049, VAT ID: CZ19990049, with its registered office at Renoirova 624/1, Hlubočepy, 152 00 Prague 5, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 394544.

02Contact details of the controller:

For delivery, please use the registered office address: Renoirova 624/1, Hlubočepy, 152 00 Prague 5, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 394544, email address: privacy@notnullmakers.com

03Lawful basis for the processing of personal data:

We process your data for the purpose of fulfilling a contract – i.e., securing and delivering the goods, consultations, and advice you ordered. The personal data we require is necessary for the fulfillment of the contract/business between you and the Controller.

We may use your personal data within the legitimate interest of the Controller when we address a marketing offer. However, such an offer will correspond to what you could expect as a customer. The Company will therefore offer you, based on a legitimate interest, only products and services that it believes you might be interested in.
In other cases, the processing of your personal data is only possible with your consent. We do not use automated individual decision-making or profiling.

04Types of personal data we process:

We process personal data only to the extent necessary to meet legal requirements, protect our legitimate interests, and at the same time provide you with high-quality business and comfortable service. We also process personal data about data subjects who have been interested in our services, although no contract was concluded. Furthermore, we process the personal data of the following persons: members of statutory bodies of legal entities, employees, representatives, and beneficial owners of such legal entities.

Basic identification data. Basic identification data is a part of every contract (order) you conclude with us. This includes, for example, your first and last name, and if you are a natural person acting as an entrepreneur, then also your identification number and registered office address.
Contact data. Contact data includes, for example, email, phone number, and contact address.
Information about the provided services. This information includes details about the services we provide you, based on which we can offer you current market information, alternatives to the offered and provided services.
Transaction data. Primarily, this refers to payment information.
IP address (network interface identifier in a computer network).

05Retention / processing period of personal data:

We process personal data only for the necessary period. We do not archive your personal data longer than is strictly necessary to fulfill legal obligations. Your personal data will be processed for the duration of the effects of rights and obligations from the contract, and further for the period necessary for archiving purposes according to relevant generally binding legal regulations, but no longer than the period set by generally binding legal regulations, up to a maximum of 10 years.

06Other recipients of personal data:

Your personal data may also be processed by third parties. That is, companies that mediate services for us that are necessary for fulfilling the contract/business and complying with the legal obligations of the company or for protecting the legitimate interests of the company.

We transfer some of your personal data to providers of these services:

transport companies
IT service providers
lawyers, other legal professions, accountants, and tax advisors,
postal service providers
financial institutions.

NOT NULL Makers s.r.o. has a personal data processing agreement concluded with the processors, based on which a high level of personal data protection is ensured.

Your personal data is not and will not be transferred to a third country (to a country outside the EU) or any other international organization.

07Rights of the data subject – your rights:

Proper processing of your personal data is important to us, and its protection is a matter of course. When processing personal data, you can exercise the following rights:

Right of access to personal data

The Controller is obliged to correct inaccurate personal data without undue delay, and you have the right to have incomplete personal data completed. You have the right to request the erasure of personal data if one of the following reasons applies:

the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
the data subject withdraws consent on which the processing is based, and there is no other legal ground for the processing;
the data subject objects to the processing of personal data for direct marketing purposes;
the personal data has been unlawfully processed;
the personal data has to be erased for compliance with a legal obligation in Union or Czech Republic law;
the personal data has been collected in relation to the offer of information society services based on consent given by a child.

Right to restriction of processing

You have the right to request the Controller to restrict processing in these cases:

the accuracy of the personal data is contested by the data subject, for a period enabling the Controller to verify the accuracy of the personal data;
the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.

Right to object

This right applies to your personal data processed for the purposes of direct marketing. In this case, you have the right to cancel the use of your personal data.

Right to data portability

You have the right to receive your personal data, which you have provided to the Controller, and transmit this data to another Controller, in case:

the processing is based on consent to the processing of personal data or is the processing of personal data for the purpose of concluding and fulfilling a contract with the data subject; and concurrently
the processing is carried out by automated means.

Right to file a motion or complaint with the Office for Personal Data Protection

If you believe that the processing of your personal data violates or has violated your rights, you have the right, among other things, to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection.

08Public authorities

The Company, including its employees and staff, is obliged to observe confidentiality. An exception to this obligation is the provision of information and personal data to selected public administration bodies and other entities authorized to do so by law. These include in particular: the Police of the Czech Republic, supervisory authorities, the Ministry of Finance in tax administration, etc.

09Exercising your rights

You can exercise your individual rights directly with the Company by sending your request or comment by email to: privacy@notnullmakers.com or in writing to the Company's registered office: NOT NULL Makers s.r.o., ID: 19990049, VAT ID: CZ19990049, with its registered office at Renoirova 624/1, Hlubočepy, 152 00 Prague 5, or via data box using the identifier: guutrun. All communications and statements regarding the rights you have exercised are provided free of charge. However, if the request is manifestly unfounded or excessive, particularly because of its repetitive character, we are entitled to charge a reasonable fee taking into account the administrative costs associated with providing the requested information.

The Company does not have a data protection officer. If you wish to contact us regarding personal data, you can use the attached template.

10You are not obliged to provide us with your personal data.

However, providing this data is a necessary requirement for concluding and fulfilling a contract, and without providing it, it is not possible to conclude the contract and fulfill it on our part.

11Template: Request of the data subject for the exercise of rights (GDPR)

Dear Company,

I hereby exercise my rights as a data subject within the meaning of the GDPR regulation. Below I submit my identification data and the specification of my request.

1. Identification of the data subject:

First and last name: [Enter first and last name]
Date of birth: [Enter date of birth]
Residential address: [Enter address, especially if you are contacting the company by mail, not by email.]
Contact email / phone: [Enter email or phone number]

2. Subject of the request: (Note for sender: Leave only the part that relates to your request, delete the rest of the text.)

Right of access. I request: [Choose one of the options and delete the rest: 1. information on the types of data processed / 2. detailed information on processing without a copy of the data / 3. sending a detailed copy of all my personal data to this email].
Right to rectification. I request the correction/completion of the following personal data: [Describe which data you have incorrectly recorded]. The current and correct value of this data is: [Enter the correct data]
Right to erasure. I wish that you no longer process and erase from your systems the following personal data: [Describe the data, or write "all my personal data"]
Right to restriction of processing. I wish that you restrict the following processing of my personal data: [Describe what processing you want to restrict and exactly which data it concerns]
Right to data portability. I request the transfer of the following personal data: [Specify the data]. Please send me the data in the format: [e.g., CSV, PDF, XML] to the email address: [Enter email] OR: Transfer the personal data directly to a new controller: [Enter the name, address, email, and phone of the new controller]
Right to object to processing. I object to the following processing of my personal data: [Describe what processing you are objecting to]

3. Additional information and justification:

Reason for the request: [Provide a justification – mandatory if you request erasure, restriction of processing, or object.]
Information about recipients: [I am / I am not] interested in information about the recipients to whom my data was disclosed (applies to requests for erasure or restriction of processing).

Thank you in advance for processing my request within the statutory time limit.

Sincerely,

[Your first and last name]

[Your phone contact]

This Privacy policy become valid and effective on January 1, 2025, when it was also published on the NNM website.