Data Protection

1.Miroslavská strojírna spol. s r.o.

Last updated: September 2026

1. Controller Information

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

1.Miroslavská strojírna spol. s r.o.

Brněnská 523/28
671 72 Miroslav
Czech Republic
E-mail: sales2@flangepro.com

2. Introduction

The protection of your personal data is of utmost importance to us. We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Coll., on the Processing of Personal Data.

This Privacy Policy explains how we collect, process, use and protect personal data in connection with our website, business relationships and communications.

3. Contact with Us

If you contact us via a website form, e-mail, telephone or another communication channel, we process the personal data you provide for the purpose of handling your inquiry, communicating with you and, where applicable, initiating or managing a business relationship.

Processing is based on Article 6(1)(b) GDPR where it is necessary to take steps at your request prior to entering into a contract or to perform a contract, and on Article 6(1)(f) GDPR based on our legitimate interest in efficient business communication.

4. Collection and Processing of Personal Data

When you access our website, your browser automatically transmits certain technical information to our servers. This information may include:

  • Requested file (URL or file name)
  • Browser type and version
  • Operating system used
  • Referring URL
  • IP address
  • Date and time of access
  • Pages visited within our website
  • Form input data, if any

We process this information for technical administration, system security, troubleshooting and statistical analysis.

In addition, we collect personal data such as names, company names, addresses, telephone numbers, e-mail addresses, VAT identification numbers, communication content, quotation and order information, and other business-related information where you provide it voluntarily or where it is required for the purposes described in this Privacy Policy.

5. Use of Personal Data

We may process personal data for the following purposes:

  • Responding to inquiries
  • Preparing quotations and cost estimates
  • Processing orders and contracts
  • Providing requested catalogues or documentation
  • Customer service and support
  • Managing existing or prospective business relationships
  • Complying with legal obligations

Where processing is based on consent, we process personal data only for the purposes and to the extent covered by that consent. You may withdraw your consent at any time with effect for the future, including through an unsubscribe link where provided or by contacting us.

6. Business Partner Contacts

In connection with the establishment, performance and administration of business relationships, we process personal data of contact persons acting on behalf of our customers, suppliers, prospective customers and other business partners. Where necessary for our cooperation, this may also include other responsible employees within the same organisation, including employees working in procurement, engineering, logistics, warehousing, accounting, finance, quality management or comparable business functions.

Processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR in ensuring efficient business communications and the proper establishment, performance and administration of existing or prospective business relationships. Where the data subject is personally a party to a contract or processing is necessary to take steps at the data subject’s request prior to entering into a contract, processing is additionally based on Article 6(1)(b) GDPR.

Where we have not obtained personal data directly from the data subject, it generally originates from the data subject’s organisation, other business contacts, publicly available business and professional sources, corporate websites, public company registers and business directories, trade fairs or industry events.

7. Recipients of Personal Data

Where necessary for the purposes described in this Privacy Policy, personal data may be disclosed to:

  • Hosting providers
  • CRM providers
  • IT service providers
  • Communication service providers
  • Analytics providers
  • Financial institutions
  • Professional advisers, including lawyers, auditors and tax advisers
  • Affiliated companies within our corporate group
  • Public authorities where disclosure is required by law

Such recipients receive personal data only to the extent necessary for the relevant purpose and must process it in accordance with applicable data protection law. Service providers acting as processors are bound by appropriate contractual obligations.

8. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal grounds:

  • Article 6(1)(a) GDPR: consent
  • Article 6(1)(b) GDPR: performance of a contract or steps taken at the data subject’s request prior to entering into a contract
  • Article 6(1)(c) GDPR: compliance with a legal obligation
  • Article 6(1)(f) GDPR: our legitimate interests or those of a third party, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests

9. Your Rights

Subject to the applicable legal requirements, you have the right to:

  • Obtain access to your personal data
  • Request rectification of inaccurate or incomplete data
  • Request erasure of your data
  • Request restriction of processing
  • Object to processing
  • Receive your personal data in a structured, commonly used and machine-readable format and, where the legal requirements are met, transmit those data to another controller
  • Withdraw consent at any time with effect for the future

Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation. If personal data is processed for direct marketing, you may object to such processing at any time.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

Competent supervisory authority in the Czech Republic:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ)

Pplk. Sochora 27
170 00 Prague 7
Czech Republic

10. Logging of E-mail Communication

To ensure information security and protect our IT systems, we maintain technical logs relating to e-mail communications. These logs may include:

  • Sender and recipient e-mail addresses
  • IP addresses
  • Number of recipients
  • Subject lines
  • Date and time of transmission or receipt
  • Attachment file names
  • Message size
  • Spam and security classifications
  • Delivery information

E-mails may initially be processed automatically for security purposes. Individual messages are reviewed manually by authorised personnel only where a security risk is suspected or where access is otherwise required for legitimate business purposes. Processing is based on Article 6(1)(f) GDPR.

11. HubSpot

We use HubSpot for website hosting, contact forms, customer relationship management, contact and lead management, landing pages, e-mail marketing, marketing automation, downloadable content, customer and sales communication, and website analytics.

The service is provided by companies within the HubSpot group. Where HubSpot processes personal data on our behalf, HubSpot acts as a processor. The relevant HubSpot contracting entity is determined by the contractual terms applicable to our HubSpot account.

If you submit information through our website or communicate with us, your personal data may be stored and processed within HubSpot. Depending on the specific activity, processing is based on Article 6(1)(a), Article 6(1)(b) or Article 6(1)(f) GDPR.

Further information is available in the HubSpot Privacy Policy:

https://legal.hubspot.com/privacy-policy

12. Cookies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. We use strictly necessary cookies to operate the website and, subject to your consent where required, functional, analytics and marketing cookies to improve user experience, analyse website usage and support marketing activities.

Cookie preferences may be managed and consent may be withdrawn at any time through our cookie consent banner. You may also configure your browser to block or delete cookies. Disabling cookies may limit certain website functions.

13. SSL/TLS Encryption

For security reasons and to protect confidential information transmitted through our website, we use SSL/TLS encryption. Encrypted connections can generally be recognised by the “https://” prefix and the lock symbol displayed by your browser.

14. Google reCAPTCHA

We use Google reCAPTCHA to protect our website and forms from automated misuse, spam and attacks. reCAPTCHA is provided by Google as part of Google Cloud services.

reCAPTCHA processes technical and usage-related information required to distinguish human users from automated systems and to detect misuse. This may include the IP address, device and browser information, interaction data and security-related signals.

Processing of personal data is based on Article 6(1)(f) GDPR due to our legitimate interest in protecting our website, communication channels and online services against misuse, spam and automated attacks. Where Google processes data on our behalf in connection with reCAPTCHA, Google acts as a processor.

Further information on reCAPTCHA data processing is available in the Google Cloud reCAPTCHA documentation:

https://cloud.google.com/recaptcha/docs

15. Automated Decision-Making

We do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

16. Data Retention

We retain personal data only for as long as necessary for the respective processing purposes or as required by applicable legal retention obligations.

Personal data processed in connection with the establishment, performance and administration of business relationships will generally be retained for the duration of the relevant business relationship and thereafter only:

  • For the duration of applicable statutory retention periods
  • For accounting, tax, documentation and commercial-law compliance purposes
  • For as long as necessary for the establishment, exercise or defence of legal claims

After the applicable retention periods have expired, personal data will be deleted or anonymised unless further storage is legally required.

17. International Data Transfers

Some service providers may process personal data in countries outside the European Union or the European Economic Area. Where such transfers occur, we ensure that the requirements of Articles 44 et seq. GDPR are met, for example through an adequacy decision by the European Commission, Standard Contractual Clauses adopted by the European Commission or other appropriate safeguards.

Information on the applicable safeguards may be requested using the contact details stated in Section 1.

18. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration and misuse. These measures are reviewed and updated where necessary.

19. Changes to this Privacy Policy

We may amend this Privacy Policy where necessary due to legal, technical or business developments. The current version published on our website applies.

Download PDF