Privacy Policy

Dear business partners and visitors,

we are fully aware of the importance of personal data protection and the privacy of our customers. When collecting and processing personal data, we proceed in accordance with EU Regulation 2016/679 (General Data Protection Regulation, hereinafter referred to as "GDPR") and the applicable laws of the Czech Republic.

These policies aim to inform you how EOLA s.r.o. collects, processes, uses, and transfers your personal data.

1. DATA CONTROLLER

The personal data controller is:

EOLA s.r.o.
Company ID (IČO): 47670100
VAT ID (DIČ): CZ47670100

With its registered office at:

Technologická 1020/7
779 00 Olomouc
Czech Republic

Registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 5053.

E-mail: info@eola.cz

2. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?

A. Business partners (customers and suppliers)

  • Processed data: Identification and contact details (especially name, surname, job title, company name, telephone, e-mail) and payment or delivery details (e.g., bank account number, delivery address).
  • Purpose of processing: Negotiation and performance of the respective contract, related business communication, processing of orders and inquiries, sending commercial communications to our business partners, and addressing existing customers with direct marketing.
  • Legal basis: Entry into and performance of a contract, legitimate interest of the Company in ensuring communication with business partners, legitimate interest in addressing existing customers with direct marketing, or voluntary consent of the data subject.
  • Retention period: For the duration of the contractual relationship and subsequently for the period required by archiving and tax regulations. If we process data based on your consent, we do so for 20 years from its granting or until its revocation.

B. Physical visits to the company headquarters and suppliers' staff

  • Processed data: Name, surname, job title, name of the sending company, purpose of the visit, and time data of entry.
  • Purpose of processing: Visitor records, protection of the Company's property, ensuring safety, and access control to the premises.
  • Legal basis: Legitimate interest of the Company in protecting property, personal safety, and controlling entry.
  • Retention period: Information about physical visits is retained for 3 years from the date of the visit.

C. Visitors of the eola.cz website (Cookies, local storage, and online tracking)

  • Processed data: Anonymized behavior on the website, browser type, source of visit, state of granted consent in the cookie banner, and a randomly generated anonymous user identifier. The IP address is fully anonymized for measurement purposes.
  • Purpose of processing: Measuring website traffic (Google Analytics, Matomo), correct frequency and display of subscription pop-up windows and newsletters (Ecomail), ad targeting and evaluation of marketing campaigns (Google Ads, Seznam Sklik, Meta Ads, TikTok Ads), and maintaining demonstrable records of granted consents (consent audit log).
  • Legal basis: Your voluntary consent granted through the cookie banner. The website operates in advanced Google Consent Mode v2. If you do not grant consent, cookies are not stored and the system only sends anonymous technical signals (pings) without any personal identifiers.
  • Retention period: Detailed analytical data from Google Analytics 4 is retained for 14 months. Data in the Matomo Analytics tool is retained for 13 months. Marketing data and cookies for ad targeting are retained for 3 to 13 months according to the specifications of individual services. Technical data for storing the consent state and anonymous ID (in the local storage of the browser) is stored permanently until you manually delete it in your browser.

3. WHO HAS ACCESS TO THE DATA? (RECIPIENTS AND PROCESSORS)

We do not sell or provide your personal data to third parties for their independent marketing purposes. To ensure operations, we use these proven subcontractors (processors):

  • Operational service providers: External entities providing accounting, receivables management, security of the premises, and IT infrastructure.
  • Providers of analytical, marketing, and email tools:
    •   Google Ireland Limited (Google Analytics, Google Ads, Google Tag Manager)
    •   Seznam.cz, a.s. (Sklik)
    •   Meta Platforms Ireland Limited (Meta Pixel)
    •   TikTok Technology Limited (TikTok Pixel)
    •   Ecomail.cz s.r.o. (Email marketing and contact management)
    •   Matomo Analytics (Web analytics)

Under certain legal circumstances, we are obliged to share personal data with public authorities (e.g., tax offices, police, courts) in accordance with applicable laws.

4. HOW IS YOUR PERSONAL DATA SECURED?

We use modern IT security systems to ensure the confidentiality, integrity, and availability of personal data. The Company maintains appropriate technical and organizational measures against unauthorized processing, accidental loss, or damage to data. Access to personal data is granted exclusively to authorized persons bound by a contractual or legal obligation of confidentiality.

5. PROOF OF CONSENT (AUDIT LOGGING)

In accordance with the GDPR regulation (specifically Art. 7 para. 1 – the controller's obligation to demonstrate that the data subject has consented), our website automatically logs each interaction with the cookie banner (clicking on "Accept all", "Reject all", or "Save selected").

Upon clicking the button, the following information is recorded in our internal, secured Google Sheet:

  • Your anonymous ID (stored under the name cookie_user_id), which does not contain an IP address, name, or any other direct personal data.
  • The date and exact time of your decision.
  • The specific consent state (whether analytical and marketing cookies were allowed or denied).

This data is stored solely for the purpose of demonstrating compliance with legislation in the event of an inspection by the Office for Personal Data Protection (ÚOOÚ).

6. YOUR RIGHTS UNDER GDPR

As a data subject, you have full control over your data. You have the right to:

  • Access your personal data and obtain information about its processing.
  • Rectification of incorrect or incomplete personal data.
  • Erasure of personal data (the right to be forgotten) if it is no longer needed for the specified purposes.
  • Restriction of processing in legally prescribed cases.
  • Data portability to another controller.
  • Revocation of the granted consent (at any time by clicking on the floating "Cookie settings" button with the 🍪 icon in the bottom-left corner of our website).
  • File a complaint with the Office for Personal Data Protection (www.uoou.cz) if you believe that the processing of your data violates the law.

We will respond to your requests to exercise your rights within the legal deadline, usually no later than 1 month from receipt of the request.

7. INQUIRIES AND CONTACTS

If you wish to exercise any of your rights or have a question regarding the processing of personal data, contact us at:

EOLA s.r.o.
Technologická 1020/7
779 00 Olomouc
Czech Republic

E-mail: info@eola.cz

These policies are valid and effective from July 16, 2026.