Privacy Policy

As operators of an e-shop, we at PNM International s.r.o., Company ID: 05060192 (hereinafter “we”) pay great attention to the protection of personal data. On this page you will find all the necessary information about what personal data we process, especially about our customers and users of our websites, whether we process data on the basis of consent or on another legal basis, for what purposes we use it, to whom we may disclose it, and what rights you have in connection with the processing of your personal data.

Registered office:

PNM International s.r.o.
Nádražní 385/34
702 00 Ostrava
Czech Republic

Correspondence address, warehouses and personal contact:

PNM International s.r.o.
Areál PPK – Průmyslový park Karviná
Hala U1, Závodní 540/41
735 06 Karviná – Nové Město
Czech Republic

  • The complete and current version of the Privacy Policy can be found here
  • Information about the use of cookies can be found here

I. What are personal data?

The General Data Protection Regulation (GDPR – General Data Protection Regulation) considers personal data to be any information about an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, or network identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

What personal data do we process?

In order to provide our services, to correctly deliver orders, and to provide better personalised services and offers, we process the following personal data:

  • identification data, in particular surname and first name, username and password if you have registered, and email address;
  • contact data, such as delivery address, any correspondence or home address, email address, telephone number, or your contact on social networks;
  • data about your orders and goods you were interested in, bank account or other payment details, information about your shipments and their receipt;
  • review data, meaning comments or reviews of our services and goods;
  • data about your behaviour on our website, in particular browsing of goods and services you view, links you click, how you navigate our website and scroll the screen, as well as data about the device from which you browse our website, such as IP address and location derived from it, device identification, its technical parameters such as operating system and its version, screen resolution, browser used and its version, and data obtained from cookies and similar technologies for device identification;
  • data about your behaviour when reading messages we send you, such as times of opening messages and data about the device on which you read messages, such as IP address and location derived from it, device identification, its technical parameters such as operating system and its version, screen resolution, browser used and its version, and data obtained from cookies and similar technologies;
  • derived data, meaning personal data derived from your settings, data about services you order from us, data about your behaviour on our website, and data about your behaviour when reading messages we send you; in particular data about purchasing behaviour and attitude towards various services;
  • data related to the use of a call centre and visits to our branches, in particular recordings of telephone calls with the call centre, identification of messages you send us including identifiers such as IP addresses, and recordings from CCTV systems at our branches.

II. Why do we process this data?

In order to deliver our services within the scope of our activities, we process your personal data for various purposes and to varying extents, either without your consent on the basis of performance of a contract, our legitimate interest, or compliance with a legal obligation (such as the Accounting Act), or on the basis of your consent.

What processing we may carry out without your consent depends on the purpose of the relevant processing and your relationship with us – whether you are merely a visitor to our website, whether you register but do not make a purchase, whether you register and place an order, or whether you only place an order.

  1. If you visit our website
    1. Use of cookies and similar technologies

      When you visit our website, we store and subsequently read small files called cookies on your device. They have nothing to do with actual biscuits – you can buy plenty of great things from us, but one day the programmers started calling these files cookies. Apparently it is a reference to the fairy tale of Hansel and Gretel, who left a trail of breadcrumbs to find their way home – though who knows how that really went, since they ended up at the gingerbread house anyway. But back to the technical details and the European directive: these computer cookies are a small file of letters and numbers that we store in your internet browser or on the hard drive of your computer. Some cookies allow us to link your activities while browsing our pages from the moment you open the browser window until you close it. Once you close the browser window, these cookies are deleted. Others remain on the device for a set period of time and are activated every time you visit the website that created the particular cookie – this is how your browser can “remember” and log you in again, or keep the goods you carefully added to your cart in the afternoon still there. We also use pixel tags (also known as web bugs or tracking pixels), which are very small images with a similar function to cookies. Unlike cookies, which are stored on the hard drive of your computer, pixel tags are a permanent part of web pages. We will refer to all these technologies in this document simply as “cookies”. We not only store cookies on your device, but also read cookies that our website has stored on your device.

      Some cookies are stored directly by our website. These cookies help us to:

      • identify you when moving between pages on our website and on return visits, for example to remember your login from a specific device and not repeatedly ask for your email and password, or to save which version of our website to display if the site offers several variants at a given time;
      • record that you have given us consent under this document, or for example whether you have been offered participation in a particular survey;
      • ensure security, for example to investigate whether someone has misused your connection to our website and is acting on your behalf;
      • record, investigate, and resolve faults and non-functional parts of our website;
      • track the traffic on our website and individual pages, create statistics and overviews, and measure the effectiveness of advertising;
      • display various versions of our website if we are testing new functionality, or to offer you specially tailored content;

      Such cookies and other files are necessary for the functioning of our website. If you block these cookies in your browser, our website may not function correctly and we may not be able to provide our products and services to the full extent.

      We also:

      • store cookies from our website that allow us to:
        • customise the content of our website for you, for example to preferentially display products you have already viewed, or products that other people bought alongside a product you viewed or purchased, and to show you further tailored offers on our website;
      • allow third parties to store cookies, which they may use:
        • to collect data about your behaviour on our website and other websites;
        • to display personalised offers and targeted advertising within advertising and social networks on websites other than ours;
        • to link with social networks such as Facebook, including automatic login, enabling features such as the “Like” button or sending notifications related to your order via Messenger, and displaying personalised offers and targeted advertising on these social networks and other websites.

      For the purpose of displaying personalised offers and targeted advertising within advertising and social networks on websites other than ours, we also pass on data about your behaviour on our website to advertising and social networks. However, we do not pass on your identification data to such partners. A list of the social and advertising networks we use can be found in the section “Who processes your personal data and to whom do we disclose it?”.

      If you do not disable the use of third-party cookies and the passing of your data to advertising and social networks in your browser’s Privacy Settings, and after our notice you click anywhere on our website (outside the notice panel) or click the “I understand” button included in the notice, we will assume you consent to the use of these cookies and the passing of your data to advertising and social networks. You may withdraw your consent at any time by disabling this feature in your browser’s Privacy Settings. More information on cookies can be found on a separate page.

    2. Use of personal data of website visitors

      When you visit our website, we process data about your behaviour on our website on the basis of our legitimate interest (i.e. without your consent) for the purpose of:

      • obtaining information on the basis of which we will be able to improve the website for you in the future; our legitimate interest here is the improvement of our services for you;
      • creating statistics and overviews, in particular monitoring website traffic and individual pages and measuring the effectiveness of advertising; our legitimate interest here is measuring the effectiveness of our website and advertising expenditure; for this purpose we may derive additional derived data from your behaviour on the website and use it for this purpose;
      • testing new functions and applications before deployment, in particular to avoid problems with the functionality of these new features in real operation that could worsen your ordering experience; our legitimate interest here is the smooth functionality of our services for you;
      • preventing attacks on our website and threats to its functionality and the security of your data; our legitimate interest here is the smooth functionality of our services for you and the security of your data.

      We obtain data about your behaviour on our website not only from cookies, but also supplement it with:

      • the IP address of your device (the address of your device by which you communicate with other devices on the internet);
      • the operating system of your device, its version and language settings;
      • the browser you use on your device, its resolution, version, and language settings;
      • the URL of the web page from which you came to our website.

      For these purposes we use personal data for a maximum period of 60 months. You have the right to object to this processing.

      We also process data about your behaviour on our website on the basis of our legitimate interest (i.e. without your consent), for the purpose of creating personalised offers and targeted advertising that we will display to you on our website. Our legitimate interest here is to provide you with the most personalised and effective offer possible. We also enrich this data through analysis and derive derived data from it. We also segment our users into different groups based on this data, with each group receiving its own specific offer. If you subsequently order something from us, we additionally use your order data for these purposes.

      For these purposes we use personal data for a period of 60 months. You can disable this function at any time in Privacy Settings.

  2. If you register with us

    In order to register, you must visit our website, so the processing described in the section If you visit our website applies to you. If you register, we additionally carry out the following processing:

    1. Processing on the basis of contract performance

      If you create an account on one of our websites, we process your identification and contact data, your settings, and your order data (if you subsequently order from us), on the basis of contract performance (without your consent), in order to maintain your user account. The contract on which our processing is based comes into existence upon the creation of your account.

      For this purpose we use personal data for the duration of the existence of your account, which you may cancel at any time by sending an email to one of our contact addresses.

    2. Processing on the basis of legitimate interest

      If you create an account on our website, we also process your identification and contact data, your settings, your order data (if you subsequently order from us) and data about your behaviour on the website and behaviour when reading messages, on the basis of our legitimate interest (i.e. without your consent), for the purpose of:

      • obtaining information on the basis of which we will be able to improve our services for you in the future, in particular by finding out your satisfaction with our services; our legitimate interest here is the improvement of our services for you;
      • providing personalised offers and targeted advertising, which we may send you by email, text message, via social networks, communicate to you by telephone or other electronic means, send to you by post, or display on our website; these offers may relate both to our products and services and to the products and services of third parties; our legitimate interest here is the effective promotion of our products and services.

      In order to prepare personalised offers for you, we analyse the above-mentioned data and derive further derived data from it, which we use for this purpose. We may also use data about your behaviour on our website obtained before you registered (unless you previously disabled website personalisation in Privacy Settings), and we may collect data about your behaviour on the website even when you are not logged in (e.g. when we identify you via a cookie). We also segment our users into different groups based on this data, with each group receiving its own specific offer.

      If you have viewed a product on our website, or clicked on it in an email we sent you, we may display this product on your next visit to a page on our website, or send you an email offer for this product. Based on which product you viewed, we may also determine which group of customers you belong to, and accordingly offer you further services on our website or by email that we believe may interest you. This data may also be passed to operators of advertising systems so that they can display this product to you in advertising on other pages. However, we will not pass on to these operators any other personal data that would allow them to contact or identify you further (such as your email address, name, or address).

      For the purpose of creating personalised offers and targeted advertising displayed to you on the website, as described in the section If you visit our website, we will also use your order data (if you order).

      On the basis of our legitimate interest (i.e. without your consent), we will also use your settings for testing new functions and applications before deployment, as described in the section If you visit our website.

      For these purposes we use personal data for the duration of the existence of your account. You have the right to object to this processing.

    3. Processing on the basis of consent

      If you create a product review within your account on our website, we also process your identification data and review data about the products we offer, including uploaded photographs, on the basis of your consent to processing, for the purpose of sharing information about your satisfaction with the products we offer with other visitors to our website. For this purpose we use personal data until you withdraw your consent to processing.

  3. If you place an order with us

    If you place an order (or enquiry) with us on our website, the processing described in the section If you visit our website applies to you. If you place an order with us, we additionally carry out the following processing:

    1. Processing on the basis of contract performance

      If you place an order with us as a natural person, we process your personal data for the purpose of fulfilling your order, namely your identification and contact data and your order data. If you have a user account with us, we may also use your settings for this purpose.

      If you purchase from us as a representative of a legal entity, we process the same data for the same purpose on the basis of our legitimate interest in concluding and performing a contract with the entity you represent.

      Using these data for the purpose of fulfilling your order means in particular using them:

      • so that you can complete your order on the website, for example to prevent data from an incomplete order from being deleted;
      • so that we can communicate with you about the order, for example to send you its confirmation;
      • for payment for goods; in this context we may also pass your data to our partners operating payment systems, as described in the section Who processes your personal data and to whom do we disclose it?;
      • for the delivery of goods; in this context we may also pass your data to our partners providing courier and delivery services and operating pick-up points, as described in the section Who processes your personal data and to whom do we disclose it?;
      • in connection with the assurance and complaint handling of the ordered service; in this context we may also pass your data to the service provider, as described in the section Who processes your personal data and to whom do we disclose it?;
      • in connection with your further requests that you address to us, for example via the call centre, as described in the section If you communicate with us via various channels.

      For this purpose we use personal data for the period necessary to fulfil your order, or to handle a contractual request such as a complaint.

    2. Processing on the basis of legitimate interest

      If you place a binding order with us, we will retain your identification and contact data and order data on the basis of our legitimate interest (without your consent) for the purpose of protecting legal claims and our internal records and control. Our legitimate interests here are the protection of legal claims and monitoring the proper provision of our services.

      In the event of an order being placed, we further process on the basis of our legitimate interest (i.e. without your consent) your identification and contact data, your settings (if you have an account with us) and your order data for the purpose of:

      • obtaining information on the basis of which we will be able to improve our services for you in the future, in particular by finding out your satisfaction with our services; our legitimate interest here is the improvement of our services for you;
      • providing personalised offers and targeted advertising, which we may send you by email, text message, via social networks, communicate to you by telephone or other electronic means, or send to you by post; our legitimate interest here is the effective promotion of our services. In order to prepare personalised offers for you, we analyse the above-mentioned data (i.e. your identification and contact data and order data) and derive further derived data from it, which we use for this purpose. We also segment our users into different groups based on this data, with each group receiving its own specific offer. If you do not register with us, we do not use data about your behaviour on our website for preparing offers with which we contact you.

        If you have ordered a product from us, we may contact you with a targeted offer of further related products or services. From your order we may also determine which group of customers you belong to, and accordingly send you an offer of related services that may interest you. Offers may also be customised according to which goods you have viewed on our website, or which links in the offers we have sent you have been opened.

      For the purpose of protecting legal claims and our internal records and control, we process data for the duration of the limitation period (5 years) and one year after its expiry, taking into account claims asserted at the end of the limitation period. In the event of judicial, administrative, or other proceedings being initiated, we process your personal data to the necessary extent for the entire duration of such proceedings and for the remaining limitation period after their conclusion.

      For the other purposes stated, we use personal data for a period of 5 years from the date of the order.

      You have the right to object to this processing carried out on the basis of our legitimate interest.

    3. Processing on the basis of legal obligations

      By law we must fulfil certain prescribed obligations. If we process your personal data for this reason, it is not necessary to obtain your consent for such processing. On this legal basis we process your identification and contact data and order data, in compliance with in particular the following laws:

      • Act No. 89/2012 Coll., the Civil Code,
      • Act No. 634/1992 Coll., on Consumer Protection,
      • Act No. 235/2004 Coll., on Value Added Tax,
      • Act No. 563/1991 Coll., on Accounting.

      For these purposes we use personal data for a period of 10 years.

    4. Processing on the basis of consent

      If you give us your consent during the ordering process, we may also process your identification data and review data about the products we offer, including uploaded photographs, on the basis of your consent to processing, for the purpose of sharing information about your satisfaction with the products we offer with other visitors to our website. For this purpose we use personal data until you withdraw your consent to processing. We may also process your data for the purpose of providing a detailed personalised offer of products that may interest you, or, based on knowledge of the product lifecycle, to inform you about the possibility of purchasing additional products at an appropriate time. If you add goods to the basket but do not complete the order, it is also possible to notify you of this by email or telephone.

  4. If you communicate with us via various channels

    If you communicate with us via various channels, in particular via call centre, email, chat tools, and social networks, we will process your identification and contact data and records of the communication that has taken place, including call recordings, on the basis of our legitimate interest (i.e. without your consent) for the purpose of:

    • handling your requests; if you have placed an order with us and your request relates to the order, we may carry out this processing on the basis of contract performance;
    • keeping records of your requests, so that we can monitor whether we are fulfilling them properly and on time;
    • proving that we received and handled your request, for example when you order something this way or lodge a complaint;
    • analysing them in order to improve the quality of our services.

    For these purposes we retain personal data for a period of 1 year from the end of the provision of the services we mediate. You have the right to object to processing on the basis of our legitimate interest.

  5. If you subscribe to our newsletter

    If you subscribe to our newsletter, we will process your contact data and any settings on the basis of your consent to processing, for the purpose of sending you our offers. For this purpose we use personal data until you withdraw your consent to processing, i.e. until you unsubscribe from the newsletter.

  6. If you visit our branch

    If you visit our branch, we will process the recording from the CCTV system in which you may be captured, on the basis of our legitimate interest (i.e. without your consent), for the purpose of protecting our and your property and persons moving in the shop and its surroundings, which is also our legitimate interest.

    For this purpose we retain personal data for a maximum period of 1 month. You have the right to object to this processing.

III. Who processes your personal data for us and to whom do we disclose it?

In the cases described in the section What personal data do we process and why? we process your personal data ourselves as the controller. This means that we determine the above-defined purposes for which we collect your personal data, determine the means of processing, and are responsible for its proper performance.

However, we may also pass your personal data to other entities acting as controllers, in particular:

  • in connection with fulfilling your order to our partners who participate in this fulfilment, as stated in the section If you place an order with us, specifically:
    • to partners operating payment systems for payment processing purposes, primarily in connection with card payment, in particular to ComGate Payments, a.s. (Company ID: 279 24 505), Jankovcova 1596/14a, 170 00 Praha 7 – Holešovice, Czech Republic;
    • to partners who provide us with transport and courier services and operate pick-up points, in particular:
      • PPL CZ s.r.o. (Company ID: 25194798), K Borovému 99, Jažlovice, 251 01 Říčany, Czech Republic;
      • General Logistics Systems Czech Republic s.r.o. (Company ID: 26087961), Průmyslová 5619/1, 586 01 Jihlava, Czech Republic;
      • Zásilkovna s.r.o. (Company ID: 28408306), Drahobejlova 1019/27, 190 00 Praha – Libeň, Czech Republic;
      • Česká pošta, s.p. (Company ID: 47114983), Politických vězňů 909/4, 225 99 Praha 1, Czech Republic;
  • on the basis of your consent, to advertising and social networks, specifically:
    • Seznam.cz, a.s. (Company ID: 26168685), Radlická 3294/10, 150 00 Praha – Smíchov, Czech Republic;
    • Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland; the privacy policy of this company is available here: https://policies.google.com/technologies/ads
    • Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland; the privacy policy of this company is available here: https://cs-cz.facebook.com/about/privacy

For the processing of personal data we also use the services of other processors who process personal data only according to our instructions and for the purposes described in the section What personal data do we process and why?. Such processors are:

  1. providers of cloud services and other technology and support suppliers, such as Microsoft, Amazon, and Google;
  2. operators of marketing tools, such as Google Analytics and HotJar (HotJar Ltd, 3 Elia Zammit Street, St. Julians STJ 1000, Malta, privacy policy available at https://www.hotjar.com/privacy) and Samba (DiffSolutions s.r.o., Company ID: 24791288, Nad mlýnským potokem 640/10, 107 00 Praha 10 – Dubeč, terms and privacy policy available at http://doc.samba.ai/...), who help us with website optimisation and personalisation of content and email offers for you;
  3. providers of tools for managing and recording telephone calls, in particular miniTEL s.r.o. (Company ID: 27718808), Nové sady 39, 602 00 Brno, privacy policy available at http://www.odorik.cz/w/zasady_zpracovani_osobnich_udaju;
  4. providers of SMS communication and chat tools where they process personal data for the purpose of mediating our communication with you;
  5. providers of accounting services, in particular ABRA Flexi s.r.o. (Company ID: 28019920), Jeremiášova 1422/7b, Stodůlky, 155 00 Praha, Czech Republic;
  6. provider of the e-shop software solution, in particular Simplia s.r.o. (Company ID: 28486820), Drtinova 557/10, 150 00 Praha 5, Czech Republic, terms available at https://www.simplia.cz/files/vop.pdf;
  7. providers of chat tools where they process personal data for the purpose of mediating our communication with you, in particular Smartsupp.com, s.r.o. (Company ID: 03668681), Milady Horákové 13, 602 00 Brno, privacy policy available here: https://www.smartsupp.com/cs/help/privacy-policy/

In the context of the transfer of data to our processors mentioned in the section “Who processes your personal data for us and to whom do we disclose it?” we may also transfer your data to third countries outside the European Economic Area, which, however, ensure an adequate level of protection of personal data.

IV. Where do we get your personal data from?

We obtain your personal data in the vast majority of cases within the framework of your order, as a result of creating an account, or when using one of our free services, such as the provision of a tool for calculating the consumption of coating materials, a free ebook, or from communication with you via email, telephone, chat, social networks, and personal contact. We also obtain personal data directly from you by monitoring your behaviour on our website and when reading messages, by recording calls at the call centre, and by CCTV recordings at our branches. We may also obtain your personal data from a third party, for example when they order products from us on your behalf.

If you order something from us, we may, in connection with the performance of the concluded purchase contract, receive additional data about your orders from banks and our partners operating payment systems and providing instalment sales, for example data about your account number or the successful completion of a payment.

V. What are your rights regarding the processing of personal data?

Just as we have our rights and obligations when processing your personal data, you also have certain rights when your personal data is processed. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data from, to whom we disclose it, who else processes it alongside us, and what other rights you have in connection with the processing of your personal data. All of this can be found in this “Customer Privacy Policy” document. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not personal data relating to you is being processed by us, and if so, you have the right to obtain access to this personal data. As part of the right of access, you may ask us for a copy of the personal data being processed; we will provide the first copy free of charge and subsequent copies for a fee.

  1. Right to rectification – if you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it rectified or supplemented without undue delay.
  2. Right to erasure – in some cases you have the right to have your personal data erased. We will erase your personal data without undue delay if one of the following reasons applies: your personal data is no longer necessary for the purposes for which we processed it; you withdraw your consent to the processing of personal data, and this concerns data whose processing requires your consent and we have no other reason why we need to continue processing this data; you exercise your right to object to processing (see below the section Right to object to processing) in respect of personal data we process on the basis of our legitimate interests and we find that we no longer have any such legitimate interests justifying this processing; or you believe that the processing of personal data we carry out has ceased to comply with generally binding regulations. Please bear in mind that even if one of these reasons applies, this does not mean that we will immediately erase all your personal data. This right does not apply if the processing of your personal data remains necessary for compliance with our legal obligation or for the establishment, exercise, or defence of our legal claims (see the section Why do we process this data?).
  3. Right to restriction of processing – in some cases, in addition to the right to erasure, you may exercise the right to restriction of the processing of personal data. This right allows you to, in certain cases, require that your personal data be flagged and not subject to any further processing operations – in this case, however, not permanently (as with the right to erasure), but for a limited period. We must restrict the processing of personal data when you contest the accuracy of the personal data until we agree on what data is correct; we process your personal data without a sufficient legal basis (e.g. beyond what we must process) but you prefer restriction of such data rather than its erasure (e.g. if you expect you would provide us with the same data again in the future); your personal data is no longer needed for the aforementioned processing purposes but you require it for the establishment, exercise, or defence of your legal claims; or you raise an objection to processing. The right to object is described in more detail below in the chapter Right to object to processing). During the period in which we are investigating whether your objection is justified, we are obliged to restrict the processing of your personal data.
  4. Right to data portability – you have the right to obtain from us all your personal data that you have provided to us yourself and which we process on the basis of your consent and on the basis of contract performance. We will provide your personal data to you in a structured, commonly used, and machine-readable format. In order for us to easily transfer the data upon your request, this may only concern data that we process automatically in our electronic databases.
  5. Right to object to processing – you have the right to object to the processing of personal data that takes place on the basis of our legitimate interest (see the section Why do we process this data?). In the case of marketing activities, we will cease processing your personal data without further ado; in other cases, we will do so if we do not have compelling legitimate grounds for continuing such processing.
  6. Right to lodge a complaint – exercising the rights described above does not affect your right to lodge a complaint with the competent supervisory authority. You may exercise this right in particular if you believe that we process your personal data unlawfully or in breach of generally binding legal regulations. A complaint against processing of personal data carried out by us may be lodged with the Office for Personal Data Protection, with registered office at Pplk. Sochora 27, 170 00 Praha 7.

In all matters related to the processing of your personal data, whether it is a query, exercise of a right, lodging of a complaint, or anything else, you may contact us via our contact details. We will handle your request without undue delay, and within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will inform you of any such extension and its justification.