Privacy Policy & GDPR
This Privacy Policy explains how SUPPORT GROUP s.r.o. collects, uses and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech legislation. Last updated: March 2025.
1. Data Controller
SUPPORT GROUP s.r.o.
Registered office: Radlická 663/28, Praha 5 – Smíchov, 150 00, Czech Republic
Warehouse / postal address: Dluhonská 1391/41, Přerov 750 02, Czech Republic
Company ID (IČO): 02875951 · VAT: CZ02875951
E-mail: sales@supportgroup.cz
Phone: +420 776 093 235
2. What Personal Data We Collect
Contact & identification data — name, surname, company name, job title, e-mail address, phone number, delivery and billing address.
Communication data — content of messages sent via our contact form or by e-mail, including any attachments.
Transaction data — order history, invoices and payment records related to wholesale transactions.
Technical data — IP address, browser type, pages visited and timestamps collected automatically via server logs and cookies when you use our website.
3. Purposes and Legal Basis of Processing
Performing a contract (Art. 6(1)(b) GDPR) — processing is necessary to fulfil orders, issue invoices and manage the ongoing B2B trade relationship.
Legal obligation (Art. 6(1)(c) GDPR) — we are required to retain certain accounting and tax records under Czech law (Act No. 563/1991 Coll. and Act No. 235/2004 Coll.).
Legitimate interests (Art. 6(1)(f) GDPR) — we process contact data to respond to enquiries, maintain our customer database, and ensure the security of our systems.
Consent (Art. 6(1)(a) GDPR) — where we send marketing communications, we rely on your prior consent, which you may withdraw at any time.
4. Retention Periods
Contractual and accounting records — 10 years from the end of the accounting period (Czech Accounting Act).
Tax documents — 10 years following the relevant tax period.
Contact form messages — up to 3 years from the last interaction unless a contract arises.
Marketing consent records — until consent is withdrawn or 3 years from last engagement, whichever is sooner.
Website log files — up to 12 months.
5. Recipients of Personal Data
We do not sell or rent your personal data to third parties. Data may be shared only with:
Accounting and legal advisors bound by professional confidentiality obligations.
IT service providers (hosting, e-mail infrastructure) acting as data processors under a Data Processing Agreement pursuant to Art. 28 GDPR.
Public authorities when required by law (e.g. tax administration, courts).
All processors are located within the EU/EEA or provide adequate safeguards under Chapter V of the GDPR.
6. Your Rights Under GDPR
Right of access (Art. 15) — request a copy of the personal data we hold about you.
Right to rectification (Art. 16) — ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17) — request deletion of your data where there is no longer a legal basis to retain it.
Right to restriction (Art. 18) — ask us to limit how we use your data in certain circumstances.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
Right to object (Art. 21) — object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent — withdraw any consent given at any time without affecting prior processing.
To exercise any of these rights, contact us at sales@supportgroup.cz. We will respond within 30 days. You also have the right to lodge a complaint with the Czech supervisory authority:
Úřad pro ochranu osobních údajů (UOOU)
Pplk. Sochora 27, 170 00 Praha 7
www.uoou.cz
7. Cookies
Strictly necessary cookies — essential for the website to function (e.g. session management). These cannot be disabled.
Analytical cookies — used to understand how visitors interact with our site. These are set only with your consent and collect anonymised data. You can manage or delete cookies at any time through your browser settings.
8. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure — including encrypted connections (HTTPS), access controls and regular security reviews. In the event of a data breach likely to result in high risk to your rights, we will notify you without undue delay as required by Art. 34 GDPR.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in legislation or our data practices. The current version is always available on this page. Material changes will be communicated by e-mail or by a prominent notice on our website.
10. Contact
SUPPORT GROUP s.r.o.
E-mail: sales@supportgroup.cz
Phone: +420 776 093 235
Address: Radlická 663/28, Praha 5 – Smíchov, 150 00, Czech Republic