Policy on the processing of personal data

Who processes the data

The controller of personal data is the company ASTOS Machinery, a.s., with registered office at Selbská 2746/18, 352 01 Aš, Czech Republic, company ID 25058851, registered in the Commercial Register maintained by the Regional Court in Plzeň, Section B, Insert 601.

For personal data protection matters, contact us at info.nospam@astos.cz or by phone at +420 354 401 011.

What data we process

We process the data you give us yourself:

• first and last name
• e-mail address
• phone number (if you provide it)
• company name (if you provide it)
• content of the message or inquiry
• files you attach to the form (for example drawings, specifications or a resume)

For career forms, also the data contained in the resume you send us.

If you give your consent, we also process data about your visit to the website (details in the section Cookies and other technologies).

Why we process the data

We process the data from the contact and inquiry form for the purpose of handling your question or inquiry and of possibly concluding and performing a contract. The legal basis is our legitimate interest in answering your question, or negotiations on a contract before it is concluded.

We process the data from career forms for the purpose of the selection procedure, on the basis of your consent.

We process data about your visit to the website to measure website traffic and the effectiveness of our advertising, only on the basis of your consent.

How long we keep the data

We keep the data only for as long as is necessary for the stated purposes.

Data from the forms on the website, including attached files, is deleted automatically: inquiries after 365 days, data from career forms including resumes after 180 days. Copies that the form delivers to us by e-mail are securely destroyed once the necessary period has passed.

We keep the data in Google Analytics for 14 months. Recordings in Microsoft Clarity are deleted after 30 days.

Who we share the data with

Personal data is processed only by ASTOS Machinery, a.s. We do not pass it to any other company, we do not use it for marketing purposes and we do not sell it. Only our employees have access to it.

Technically, the data is stored on the server of WEDOS, a.s., Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic, company ID 28115694, which provides our web hosting, and with our e-mail provider. As processors, they only run the website and e-mail for us and do not use the data for their own purposes.

If you consent to analytics or marketing cookies, we share data about your visit to the website with Google Ireland Limited and Microsoft Ireland Operations Limited (details in the section Cookies and other technologies).

Your rights

In relation to your personal data, you have the right:

• of access to the data we hold about you
• to rectification of inaccurate or incomplete data
• to erasure of the data once there is no longer a reason to process it
• to restriction of processing
• to data portability
• to object to processing based on legitimate interest
• to withdraw consent, where the processing is based on consent (you can withdraw your cookie consent via the “Cookie settings” link in the website footer)

You can exercise your rights at info.nospam@astos.cz. You also have the right to lodge a complaint with a supervisory authority, in particular the Czech Office for Personal Data Protection (www.uoou.cz) or the authority in your country of residence.

Cookies and other technologies

On your first visit to the website, a bar appears in which you choose which cookies you allow. Without your consent, we only use strictly necessary cookies. You can change your choice or withdraw your consent at any time via the “Cookie settings” link in the website footer.

Necessary cookies (no consent required)

• pll_language: stores the language version you selected so that the website appears in the same language on your next visit. Valid for 1 year.
• astos_consent: stores your choice in the cookie bar. Valid for 6 months.

Analytics cookies (Google Analytics)

We use them only with your consent. With Google Analytics 4 we find out which pages visitors view, where they come from and how they use the website, so that we can improve it. This involves in particular data about the device and browser, pages visited, a shortened IP address and approximate location (city or country). Cookie names: _ga and _ga_*, valid for up to 14 months.

Marketing cookies (Google Ads)

We use them only with your consent. With Google Ads we measure whether a visitor who came to the website from our ad sent an inquiry. This tells us which ads work and allows us to show our ads to people who have already visited our website. Cookie names: _gcl_au, _gcl_aw and other Google Ads cookies, valid for up to 90 days.

Both services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information is available at policies.google.com/privacy.

Analytics cookies (Microsoft Clarity)

We use them only with your consent to analytics cookies. Microsoft Clarity shows us how visitors use the pages: where they click, how far they scroll and where they run into difficulties. From this it creates aggregated click maps (heatmaps) and recordings of movement on the page. What you type into forms is not recorded (it is masked). This involves data about the device and browser, pages visited, mouse movements, clicks, scrolling and approximate location. Cookie names: _clck (valid for 1 year) and _clsk (valid for 1 day). Recordings are deleted after 30 days.

The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Data may also be transferred to Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework. More information is available at privacy.microsoft.com.

If you do not consent, Google Analytics, Google Ads and Microsoft Clarity are not loaded at all and no data is passed to Google or Microsoft. Fonts and all other files are loaded from our own server.

The map on the Contact page is an image from our own server. The links to Google Maps, Mapy.com and Apple Maps open the respective service only after you click them; until then, nothing is sent to it.

We protect our contact forms against automated spam. The protection only uses an invisible field and a measurement of the time taken to fill in the form in your browser, and stores no additional personal data.