Privacy policy

This Privacy Policy (hereinafter referred to as the "Policy") is an integral part of the terms and conditions of SUNNYCOLD s.r.o., with registered office at Komenského 264/5, 500 03 Hradec Králové, registered with the Regional Court in Hradec Králové (hereinafter referred to as "SUNNYCOLD"). SUNNYCOLD takes care to protect your personal data in accordance with the valid and effective legislation, which as of 25 May 2018 is in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation").

SUNNYCOLD operates the websites at http://www.onlinewatt.com and http://www.onlinewatt.cz (the "Website") through which it presents its products. SUNNYCOLD also operates a remote management website at http://www.onlinewatt.com (the "Portal") through which it monitors the operation of individual devices. This Policy applies to all personal data processed by SUNNYCOLD in performance of a contractual relationship, legal obligation, legitimate interest or consent. The Policy describes SUNNYCOLD's use and protection of personal data.

SUNNYCOLD may amend this Policy at any time by posting a revised version on the Site, and such amendment will be effective as of the date of such posting.

Controller and its contact information

SUNNYCOLD is the data controller within the meaning of Article 4(7) of the Regulation.

All communications concerning the protection of personal data or notifications of violations of rights should be sent via SUNNYCOLD's email address: rubes@onlinewatt.com or to the postal address: Myslíkova 14, Pacov, PSČ 395 01.

For all matters related to the processing of personal data, you can contact our data protection coordinator:

Name and surname of the coordinator: Ing. Petr Rubeš

e-mail address: rubes@onlinewatt.cz

Personal data and data processed by SUNNYCOLD

1. Basic personal identification data and address data

Such data is necessary for the conclusion and performance of the contract or the provision of the portal services. These include:

•     academic degree
•     name and surname
•     business name
•     REGISTRATION NUMBER, VAT NUMBER
•     Permanent residence
•     address at the place of installation
•     email address
•     telephone number
•     address of registered office or place of business
•     billing address
•     bank account
•     contract and signature

2. Dates of installed equipment

Such data is necessary for the performance of the portal services, i.e. remote monitoring and control of appliances, metering and power generation technologies.

•     Type of installed equipment
•     Serial number of the installed equipment
•     Error conditions and device warnings
•     Customer-technician communication, status and result of communication.
•     Data periodically sent by the equipment (Temperatures, powers, voltages, currents, statuses, etc.)

Purposes, legal grounds and periods of processing of personal data

The scope of the data processed depends on the purpose of the processing. For some purposes, data can be processed directly on the basis of a contract, SUNNYCOLD's legitimate interest or on the basis of law (without consent), for others only on the basis of consent.

1. Processing for the performance of a contract, for the fulfilment of legal obligations and for the legitimate interests of SUNNYCOLD

The provision of personal data necessary for the performance of the contract, the performance of SUNNYCOLD's legal obligations and the protection of SUNNYCOLD's legitimate interests is mandatory. Without providing personal data for these purposes, it would not be possible to provide the services. We do not need consent to process personal data for these purposes, however, it is possible to object to the processing of personal data for the purposes of SUNNYCOLD's legitimate interests. Processing for the performance of a contract and the fulfilment of legal obligations cannot be refused.

2. Giving consent

One of the legal grounds for processing personal data is your consent to the processing of personal data within the meaning of Article 6, paragraph 1, letter a) of the Regulation. SUNNYCOLD asks you for your consent to the processing of your personal data in particular when:

•     sending commercial communications and offers of services and products
•     the use of social media cookies and advertising cookies

You have the right to withdraw the consent given to SUNNYCOLD for the processing of your personal data at any time, by sending an email to the coordinator's email address with your name, surname and address for identification purposes. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

3. Operation of the Portal

The remote monitoring system contains a list of devices connected to it with basic personal identification data of the end customer. This information is filled in by the customer on the handover report to the installer or when registering for the portal. The installation company installs the equipment on the basis of a contract between it and the end customer. The installer has access to SUNNYCOLD's Portal, but can only view and manage the data of its customers. The portal works with data from the installed devices, to control the running and management of each device.

Transfer of personal data to other controllers

Pursuant to Sections 20z and 20za of Act No. 634/1992 Coll., on Consumer Protection, SUNNYCOLD is entitled, for the purpose of protecting the rights and legally protected interests of sellers and consumers, to transfer, without the consent of the data subject, identification data, data indicative of the creditworthiness, payment behaviour and trustworthiness of the data subject to registers used to inform sellers about the ability and willingness of consumers to fulfil their obligations. This transfer also applies to relationships arising in the course of the data subject's business or other self-employed activity. SUNNYCOLD participates in and transfers data on debtors to the Register of natural persons and the Register of natural persons doing business (ID number) of SOLUS ("the Register"). The Registers contain a database of data subjects who have breached a contractual obligation to pay properly for the service provided and SUNNYCOLD is entitled to consult them for the purpose of verifying and assessing the payment behaviour of the data subject, even without the data subject's consent, both at the inception of the contractual relationship and, if necessary, at any time during the contract.

SUNNYCOLD transmits personal data to the administrative authorities and bodies specified by the applicable legislation in the context of fulfilling its legal obligations.

SUNNYCOLD shares data with the installer or wholesaler with whom the customer has entered into a purchase contract.

Method of processing personal data

SUNNYCOLD processes personal data manually and automatically. SUNNYCOLD keeps records of all activities, both manual and automated, in which personal data is processed.

Duration of processing of personal data

The earliest period of processing of personal data that SUNNYCOLD applies to customers is 10 years from the date on which the legal relationship between the data subject and SUNNYCOLD was terminated, or 10 years from the end of the tax year in which the transaction took place. This processing period is based on Act No. 89/2012 Coll., Civil Code, as amended, or Act No. 235/2004 Coll., Value Added Tax Act, as amended. The reason for such processing is a legal obligation or legitimate interest of SUNNYCOLD. When you are not active on the SUNNYCOLD portal and after this period, all your personal data will be deleted.
Exercise of data subjects' rights

You may exercise the following rights in relation to your personal data:

•     Right to information
•     Right to erasure of personal data
•     The right to rectification
•     Right to restriction of processing
•     Withdrawal of consent to the processing of personal data and the right to be forgotten

To exercise, please contact the data controller of SUNNYCOLD with your request.

Valid from 01.06.2020