PRIVACY POLICY
We recognize that our customers, visitors, users and others who visit our website (collectively, “Users”) value their privacy. This document therefore contains important information regarding the rules we follow when processing personal data.
All processing of personal data by us always takes place in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 4. 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR“).
Notice: In the event of any discrepancies between the Czech and foreign language versions of this Privacy Policy, the Czech version shall prevail. These policies in different language versions are available here: https://greenery1060.cz/en/privacy-policy/.
BASIC INFORMATION
Identification and contact details of the Provider:
| name: | CONGRUENT Building s.r.o. |
|---|---|
| ID No.: | 17985315 |
| registered office: | Londýnské náměstí 881/6, Štýřice, 639 00 Brno |
| contact email: | nikola.miklik@salirione.com |
| contact phone: | 722960677 |
(hereinafter also referred to as the “Provider”)
Data Protection Officer:
The Provider has not appointed a data protection officer, as it is not an obligatory person pursuant to Art. 37 of the GDPR.
Transfer of personal data to a third country or an international organization:
The Provider does not transfer personal data to third countries or international organizations within the meaning of Art. 44 et seq. of the GDPR.
Automated individual decision-making and profiling:
The Provider does not perform profiling or automated individual decision-making.
Supervisory Authority:
The supervisory authority at the Provider’s registered office is the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, tel.: +420 234 665 125.
Status of the Provider:
The Provider acts both in the position of a personal data controller and in the position of a personal data processor.
THE PROVIDER AS A PERSONAL DATA CONTROLLER
The Provider acts in the position of a personal data controller in relation to the personal data of the following persons: customers.
What personal data does the Provider process, for what purpose, and on what legal basis?
Website visit. The Provider processes data obtained from individuals by visiting the Provider’s website. When visiting the website, the Provider collects and processes the following types of personal data that are stored: name, surname, Contact information: e-mail address, telephone number. The Provider also processes the following data: cookies, IP address, device type. This data is necessary to enable the website to be displayed correctly. In addition, it may be used as necessary to maintain the secure operation of the website and for other purposes described in this Privacy Policy. The Provider processes this personal data based on its legitimate interest or the User’s consent. Information about cookies is provided below.
If the User is a customer of the Provider, the Provider may, for reasons of legitimate interest, send commercial communications – newsletters to the User’s e-mail address. In other cases, sending newsletters is possible only upon consent. Sending newsletters can be canceled at any time.
In the event that the Provider intends to process personal data other than those specified in this article, or for other purposes, it may do so only on the basis of validly granted consent for the processing of personal data. Consent to the processing of personal data must be granted on a separate document.
Information on the processing of personal data of the Provider’s employees is provided in a separate internal company regulation.
Sensitive personal data
As a personal data controller, the Provider does not process personal data of Users that belong to special categories of personal data pursuant to Art. 9 of the GDPR.
For how long does the Provider process personal data?
Personal data are processed only for the period for which there is a legal reason for their storage; thereafter, the data are deleted without delay.
Personal data processed for the fulfillment of obligations arising from special legal regulations is processed by the Provider for the period specified in the relevant legal regulations. This includes, for example, statutory data retention or documentation obligations. This includes in particular data retention obligations arising from civil, commercial or tax regulations. If the data retention obligation expires, the personal data will be deleted without delay.
Other personal data are processed for: the duration of the contractual relationship with the user
THE PROVIDER AS A PERSONAL DATA PROCESSOR
The Provider acts as a personal data processor for other controllers.
The administrator of this personal data is obliged to comply with all personal data protection rules set out in the GDPR and other legal regulations governing this issue. The Provider bears no responsibility for any violation of personal data protection rules by the administrator of this personal data.
What personal data does the Provider process in the position of a personal data processor and what is the purpose of the processing?
The Provider processes the following personal data: Identification data: first name, surname; Contact details: email address, phone number; Technical data from the website: cookies, IP address, device type (in case of consent).
The purpose of processing is: to improve the quality of our services and communication, to send informational or marketing communications if the data subject has granted consent, and for website traffic analysis purposes.
In the event that the Provider becomes a processor of personal data belonging to special categories of data, the User is responsible for the lawfulness of obtaining such data and handling them in accordance with the GDPR and national legislation. The Provider reserves the right to remove such personal data from its servers if it detects non-compliance with the conditions for processing special categories of personal data. Before deleting personal data, the Provider contacts the User with a request for correction.
For how long does the Provider process personal data?
The Provider processes personal data for the duration of the contractual relationship with the User. After the termination of the contractual relationship, all data are deleted within 30 days of the termination of the contractual relationship. Users are entitled to request data erasure at any time during the contractual relationship. Upon receiving a User’s request for data erasure, the Provider shall delete all data without undue delay.
RECIPIENTS OF PERSONAL DATA
The Provider does not transfer personal data to any other controllers.
The Provider does not transfer personal data to any personal data processors.
DATA SECURITY METHODS
In order to secure User data against unauthorized or accidental access, the Provider uses reasonable and appropriate technical and organizational measures.
The Provider ensures that if servers are located in a data center operated by a third party, similar technical and organizational measures are also implemented by that third party.
All data are located only on servers situated in the European Union or in countries ensuring the protection of personal data in a manner equivalent to the protection provided by the legal regulations of the Czech Republic.
The provider uses the following data security procedures: Technical measures include the use of: secure connection (HTTPS), firewalls and regularly updated antivirus software, data encryption during transmission and storage of sensitive information, secure access data to internal systems. Organizational measures include: only authorized persons have access to personal data, employees are informed about data protection principles, access is logged and regularly checked. ..
USER RIGHTS
Every User has:
- right to access personal data: The User has the right to obtain from the Provider confirmation as to whether or not personal data concerning him or her are being processed, and if so, the right to access such personal data and the following information: a) the purpose of the processing; b) the categories of personal data concerned; c) the recipients to whom the personal data have been or will be disclosed; d) the planned period for which the personal data will be stored; e) the existence of the right to request the controller to correct or delete personal data or to restrict their processing, or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) all available information about the source of personal data, unless it is obtained from the Users; h) the fact that automated decision-making, including profiling, is taking place. The User also has the right to obtain a copy of the processed personal data.
- the right to rectification of personal data: The User has the right to have the Provider rectify inaccurate personal data concerning them without undue delay, or to supplement incomplete personal data.
- right to erasure of personal data: The User has the right to obtain from the Provider the erasure of personal data concerning him or her without undue delay if: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) the User withdraws the consent on the basis of which the data were processed and there is no other legal ground for the processing; c) the User objects to the processing and there are no overriding legitimate grounds for the processing; d) the personal data have been processed unlawfully; e) the personal data must be erased for compliance with a legal obligation laid down in Union or Member State law; f) the personal data have been collected in connection with the offer of information society services. However, the right to erasure shall not apply if the processing is necessary for compliance with legal obligations, for the establishment, exercise or defence of legal claims and in other cases provided for in the GDPR.
- right to restriction of processing: The User has the right to obtain from the Provider restriction of processing in any of the following cases: a) The User disputes the accuracy of the personal data, for a period of time necessary for the Provider to verify the accuracy of the personal data; b) the processing of the data is unlawful and the User refuses the erasure of the personal data and requests the restriction of their use instead; c) The Provider no longer needs the personal data for the purposes of the processing, but the User requires them for the establishment, exercise or defence of legal claims; d) The User has objected to the processing, until it is verified whether the legitimate grounds of the Provider override those of the data subject.
- the right to object to processing: The User has the right, on grounds relating to his or her particular situation, to object at any time to the processing of personal data concerning him or her which is processed on the basis of a legitimate interest. In such a case, the Provider shall not further process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights of the Users, or for the establishment, exercise or defence of legal claims.
- right to data portability: The User has the right to obtain personal data concerning him or her, which have been provided to the Provider, in a structured, commonly used and machine-readable format, and the right to transmit such data to another controller, where: a) the processing is based on consent and b) the processing is carried out by automated means. When exercising his or her right to data portability, the User has the right to have personal data transmitted directly from one controller to another, where technically feasible.
- the right to file a complaint with a supervisory authority: If the User believes that the Provider is not processing his personal data lawfully, he has the right to file a complaint with a supervisory authority. The contact details of the supervisory authority are listed above.
- the right to information regarding the rectification or erasure of personal data or restriction of processing: The Provider is obliged to notify each recipient to whom the personal data have been disclosed of any rectification or erasure of personal data or restriction of processing, except where this proves impossible or involves disproportionate effort. If the User requests it, the Provider shall inform them about these recipients.
- the right to be informed in the event of a personal data breach: If it is likely that a particular personal data breach will result in a high risk to the rights and freedoms of natural persons, the Provider is obliged to notify the User of this breach without undue delay.
- the right to withdraw consent to the processing of personal data: In the event that the processing of some personal data is based on consent, the User has the right to withdraw their consent to the processing of personal data in writing at any time by sending a notice of disagreement with the processing of personal data to the email address: nikola.miklik@salirione.com.
COOKIES
The Provider uses cookies, which are small text files that identify the user of the Provider’s website and record their user activities.
The text in a cookie file is often a series of numbers and letters that uniquely identify the User’s computer, but do not provide any specific personal information about the User. A cookie file usually contains the name of the domain from which it was sent, age information, and an alphanumeric identifier.
The Provider’s website automatically identifies the User’s IP address. All this information is recorded in an activity file by the server, which enables subsequent data processing. The Provider also records the request from the browser and the time of the request, the status and amount of data transferred within the framework of this request. It also collects information about the browser used and the computer’s operating system and their versions. It also records the websites from which you accessed the Provider’s website. The IP address of your computer is stored only for the period during which the website was used and then for the necessary period. After this period, the IP address is deleted or anonymized by shortening.
Types of cookies and similar technologies
Technical cookies and similar technologies: Due to its legitimate interest, the Provider uses technically necessary cookies that are necessary for the operation of the website and to ensure its functionality. These may be permanent or one-time cookies. A permanent cookie file remains on the hard drive even after the browser is closed. Permanent cookies can be used by the browser during subsequent visits to the Provider’s website. Permanent cookies can be deleted. Single-time cookies are temporary and are deleted as soon as the browser is closed. The Provider uses this data to operate the website, in particular to identify and resolve errors, to determine the use of the website and to make adjustments or improvements. These are purposes for which the Provider has a legitimate interest in processing data pursuant to Article 6(1)(f) of the GDPR.
The User can set their browser to block these cookies. The Provider points out that in such a case, some parts of the website will not function.
The Provider uses the WebStorage listed in the table below in the same way and for the same reasons.
With the User’s permission, the Provider uses additional cookies:
Analytical cookies and similar technologies: These cookies help the Provider analyze how Users use the website. They can be used, for example, to measure and improve the performance of the website. These cookies allow, for example, to determine how the User came to the website, whether directly, using a search engine or via a link on a social network. The Provider also learns how long Users stay on the page and what links they click on.
These cookies are set on the User’s device only if the User gives their consent during their first visit to the website (pursuant to Article 6(1)(a) GDPR). Analytical cookies can be rejected at any time by making a change in the Detailed Cookie Settings.
The Provider uses the WebStorage listed in the table below in the same way and for the same reasons.
Advertising cookies and similar technologies: Advertising cookies enable the display of advertising based on the User’s preferences. They can be used, for example, to allow the Operator to create a profile of the User’s interests and to display relevant advertisements to the User.
Tyto soubory cookies jsou nastaveny na zařízení Uživatele pouze v případě, že při své první návštěvě webových stránek k tomu udělí souhlas (dle čl. 6 odst. 1 písm. a) GDPR). Reklamní soubory cookies mohou být kdykoliv odmítnuty, stačí provést změnu v Podrobném nastavení souborů cookies. Pokud Uživatel nevyjádří souhlas, nebude příjemcem obsahů a reklam přizpůsobených jeho zájmům.
The Provider uses the WebStorage listed in the table below in the same way and for the same reasons.
or other cookies / similar technologies, if listed in the table below.
To obtain and manage User consent, the Provider uses the CookiesLišta.cz platform from Cookies lišta, s.r.o., ID: 17418640, Příčná 1892/4, Prague 1, 110 00 Prague. The platform collects device information, browser information, anonymized IP address, date and time of visit, URL requests, website path, and geographic location. This allows the User to be informed about the Provider’s web environment and to obtain, manage, and document their consent. The legal basis for data processing is Art. 6(1)(c) of the GDPR, as the Provider is legally obliged to provide proof of consent in accordance with Art. 7(1) of the GDPR. Data will be deleted as soon as they are no longer needed for logging and there are no legal retention requirements. Further information on the topic of personal data protection at the platform provider can be found at: https://www.cookieslista.cz.
Third-party cookies may also be placed on the Provider’s website. The Provider uses the following cookies:
| Processor | Cookie designation | Personal data | Purpose of processing | Legal basis | Processing period |
|---|---|---|---|---|---|
| Technical cookies / similar technologies | |||||
| CONGRUENT Building s.r.o. | dcb_dsv | no | Version of consent for cookie processing. | legitimate interest | local storage / 365 days |
| CONGRUENT Building s.r.o. | dcb_config | no | Configuration of consent for cookie processing. | legitimate interest | local storage / 365 days |
| Google LLC – 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | cookiePreferences | no | Registers the user’s cookie preferences. | user consent | 2 years |
| Analytical cookies / similar technologies | |||||
| Google LLC – 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _ga | no | Main cookie used to distinguish unique users. | user consent | 2 years |
| Google LLC – 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _ga_* | no | Used to maintain the state of the current session (instead of *, there is a unique container ID). | user consent | 2 years |
| Google LLC – 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _gid | no | Used to distinguish users for daily statistics purposes. | user consent | 24 hours |
| Google LLC – 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _gat | no | Used to limit the number of requests to Google servers. | user consent | 1 minute |
Cookie settings in the browser
Most web browsers accept cookies automatically. However, it is possible to use controls that allow them to be blocked or deleted.
Instructions for blocking or deleting cookies in browsers can generally be found in the privacy policy or help documentation of individual browsers.
FINAL PROVISIONS
The Provider will update this Privacy Policy in the event of any change. The current version of the Privacy Policy will always be available on the Provider’s website. If a substantial change occurs in these Privacy Policies regarding the methods of handling personal data, the Provider shall inform the User by visibly publishing a relevant notice before implementing these changes.
Last modified on 14. 07. 2026
