Privacy policy

The company FONERGY s.r.o., ID number: 293 08 607, with registered office at Stojanova 1334, 686 01 Uherské Hradiště, registered in the commercial register maintained by the Regional Court in Brno, section C, file 73013 (hereinafter referred to as "FONERGY"), acting in the position of Personal Data Administrator.



Preamble

We are aware of the importance of personal data protection and the privacy of our customers and those interested in services, therefore we process personal data in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Regulation on the Protection of Personal Data (hereinafter only "GDPR"), Act No. 110/2019 Coll., on the processing of personal data (hereinafter referred to as "ZoZOU"), and other valid legal regulations of the Czech Republic. This Declaration on the protection of personal data is also based on the aforementioned legal regulations, the aim of which is to inform you, our customers or those interested in our services, about the basic principles, procedures and conditions that we follow when processing your personal data, and about the rights that you have when processing of personal data belongs to.

This Declaration on the protection of personal data does not affect the conditions of personal data processing that we agree upon when concluding a contract for combined electricity and/or gas supply services, or another contract, and which are usually included in the contract, general terms and conditions, or other contractual documents. If you do not find an answer to your question in this Privacy Statement, please do not hesitate to contact us using the contact details below.

What is personal data?

Personal data means any information relating to you that you have provided to us or that we have obtained from you and through which you can be identified directly or indirectly, separately or in connection with other information. This information is, in particular, name, surname, date of birth, residential address, birth certificate number, contact details.

Legal basis and purpose of personal data processing

The provision of your personal data is necessary for concluding a contract and providing services. Your personal data is processed by FONERGY based on one or more of the following legal bases and for the following purposes:

A. The processing of your personal data is necessary for the fulfillment of the contract to which you are a party, or for the performance of all necessary actions prior to the conclusion of the contract at your request. Such processing of your personal data is the basis for the provision of services by FONERGY.

B. You have given consent to the processing of your personal data for one or more specific purposes, in particular consent to sending business communications (newsletter) and consent to contact for business purposes (consent to marketing), whereby your consent can be revoked at any time here .

C. The processing is necessary for the purposes of the legitimate interests of FONERGY, as the administrator, except when your interests or fundamental rights and freedoms requiring the protection of personal data take precedence over these interests. As a rule, such a legitimate interest is the sending of informational messages in connection with the services provided, and such processing of personal data can be terminated at your request at any time.

D. Processing is necessary to fulfill a legal obligation that applies to FONERGY, as the administrator. This type of processing and its purpose are required and defined by a specific provision of a legal regulation (e.g. Energy Act, VAT Act, Income Tax Act, etc.).

Principles of personal data processing

FONERGY processes personal data in the spirit of principles and principles arising from legal regulations and at the same time respects the moral and ethical rules applicable in the business sphere for the processing of personal data. The basic principles of personal data processing that we respect are:

a. The principle of legality, correctness and transparency of personal data processing

When processing personal data, we comply with the applicable legal regulations of the Czech Republic. At the same time, we inform you about all the personal data that we process about you, about the reasons for their processing, as well as about your rights and obligations that belong to you during the processing of personal data.

b. Limitation of data collection only for predetermined and legitimate purposes

The processing of personal data is limited only to the purposes for which these personal data are collected. We also inform you about the purposes of processing your data in this Statement. If we intend to process personal data for a purpose other than that for which they were collected, we will provide you with the necessary information about this intention even before its implementation.

When processing personal data, we comply with the applicable legal regulations of the Czech Republic. At the same time, we inform you about all the personal data that we process about you, about the reasons for their processing, as well as about your rights and obligations that belong to you during the processing of personal data.

c. Minimization of processed personal data only to the strictly necessary extent in relation to the purpose for which the data is processed

In order to protect your private life, we only process personal data to the extent necessary, taking into account the purpose for which they are processed.

d. Principle of accuracy of processed data

We have taken all reasonable steps to ensure that personal data that is inaccurate is promptly deleted or corrected. These measures include the development of internal procedures and processes for verifying the validity and correctness of personal data, regular training of employees, and informing contractual partners and continuous evaluation of the correctness, appropriateness and necessity of the set processes.

e. Limiting the storage of personal data in a form that enables the identification of data subjects for a period no longer than is necessary for the purposes of processing

In order to guarantee the greatest possible protection and respect for your rights, we use various forms of personal data security, including their pseudonymization. Pseudonymization means the processing of personal data in such a way that they can no longer be assigned to a specific data subject without the use of additional information. If we no longer need your personal data to fulfill the purpose of the processing, but we are still interested in the further use of some data originating from your personal data (for example for statistical and analytical purposes), we will use this data in such a way that it is no longer possible to associate it with you, i.e. anonymized.

f. The principle of integrity and confidentiality of personal data

We process personal data in a way that ensures its proper security, including protection by appropriate technical or organizational measures against unauthorized processing and accidental loss, destruction or damage.

g. The principle of FONERGY's responsibility for processing and for documenting the compliance of the processing with applicable legal regulations

We greatly appreciate that you have entrusted us with your personal data. We are responsible for their use, protection and processing as their administrator. Our responsibility results from the valid legal regulations of the Czech Republic, and in the cases stipulated by law, we must also prove that we process personal data in accordance with these legal regulations.

How we process your personal data

You usually provide us with personal data when registering and filling out contracts and contractual forms, contact forms when visiting our website, or by phone or in another way. We also obtain personal data if you order, for example, information materials, participate in a competition or survey, if you contact us with a question or request in which you provide your personal data, or if you visit our website. From the information provided, we only process information and personal data to the extent necessary for the purpose of their processing.

We may also collect your personal data from other sources (e.g. through third parties or from public sources). In such a case, we will inform you from which source the personal data was obtained.

We process personal data mainly automatically, through our systems, but also manually. We are aware of the importance of protecting your personal data and we do our best to ensure their adequate security. More information on security and personal data protection can be found in the section How we protect your personal data.

Why we process your personal data

The provision of personal data is voluntary, however, some data are necessary for the conclusion of a contract for the supply of electricity and/or gas and the fulfillment of contractual obligations. Therefore, your express consent is not required for their processing. Without your express consent, we process data mainly for the purpose of proper records, conclusion of a contract and fulfillment of contractual obligations, execution of payment transactions, provision of access and connection to the services provided, for tax and accounting purposes, execution of invoicing, evaluation of payment ethics, protection of our rights and application and debt collection. With your consent and to the extent permitted by the legal regulations of the Czech Republic, if you do not express your consent, we process your personal data for business purposes and marketing, conducting satisfaction surveys and improving the quality of services.

To what extent do we usually process your personal data

The scope of personal data processing depends on the nature of the products and services you purchase from us, the purpose of the processing, or on your consent.

A. For the purpose of concluding and fulfilling the contract, providing services, we process (depending on the service and purpose of processing) the following data:

Address and identification data:

  1. name, surname, title;
  2. birth certificate number, date of birth;
  3. identity document number;
  4. business company, registered office, place of business, identification number, tax identification number (in the case of a legal entity, natural person – entrepreneur)
  5. telephone number;
  6. e-mail address;
  7. ID data boxes;
  8. permanent address;
  9. address of collection point;
  10. address for delivery of documents;
  11. data about your representatives (name, surname, date of birth / registration number, identity document number, address of permanent residence, address for delivery, contact details).

Other data:

  1. contract number (contract account number);
  2. login;
  3. SIPO number, bank details, payment card details.

B. You have given consent to the processing of your personal data for one or more specific purposes, in particular consent to the sending of business communications (newsletter) and consent to contact for business purposes (consent to marketing, whereby your consent can be revoked at any time).

Address and identification data:

  1. name, surname, title;
  2. telephone number;
  3. e-mail address;
  4. permanent address;
  5. ID data boxes;

C. The processing is necessary for the purposes of the legitimate interests of FONERGY, as the controller, except when your interests or fundamental rights and freedoms requiring the protection of personal data take precedence over these interests. As a rule, this involves sending informational messages in connection with the services provided, and such processing of personal data can be terminated at your request at any time.

Address and identification data:

  1. name, surname, title;
  2. telephone number;
  3. e-mail address;
  4. permanent address;
  5. ID data boxes;

D. Processing is necessary to fulfill a legal obligation that applies to FONERGY, as the controller. This type of processing and its purpose are required and defined by a specific provision of a legal regulation (e.g. Energy Act, VAT Act, Income Tax Act, etc.).

How long do we process personal data for?

We keep personal data only for the period that is absolutely necessary, taking into account the purpose of their processing. We usually keep personal data for the duration of the contractual relationship and for the purpose of protecting our rights to the extent necessary after the termination of the contractual relationship until the expiration of the limitation period resulting from mutual obligations or until the full settlement of mutual obligations. If you have given your consent to the processing of your personal data for marketing and business purposes, the personal data is processed for this purpose for the duration of the contractual relationship with FONERGY and for a period of three years from the date of termination of the contractual relationship. This period may be shorter depending on the revocation of your consent.

Who has access to personal data

We provide some activities within the scope of service provision in cooperation with our partners in order to ensure the highest possible quality and efficiency of service provision. Access to your personal data is often a necessary condition for the performance of the activities that these partners provide for us. When processing personal data, partners act as processors, they process personal data only for our benefit and exclusively for the purpose of securing the activities for which we authorize them and which result from the purposes of mutual cooperation. We use partners in various areas, but mainly for the purpose of:

  1. administrative support;
  2. providing and managing information systems and software;
  3. debt collection;
  4. conducting marketing research;
  5. ensuring business events.

We also transfer personal data to our sales representatives and service partners, a list of which we will provide to all authorized applicants upon request here .

We only select partners who provide sufficient guarantees of personal data protection and contractually undertake to protect personal data to a sufficient extent.

Upon request, we also provide personal data to public administration and courts within the scope of their powers and jurisdiction.

To whom the data may be provided

The company FONERGY acts as an administrator in the processing of personal data. We are entitled to share your personal data with third parties in order to provide technical and administrative support in the provision of services and with other entities in a contractual relationship with FONERGY, in particular to ensure the fulfillment of rights and obligations arising from the contract. In the event of long-term or delayed fulfillment of contractual obligations on your part, we are entitled to transfer personal data to entities entrusted with the enforcement of these obligations.

We transfer personal data to processors only to the extent absolutely necessary and only if the third party contractually guarantees to process and protect personal data in accordance with the applicable legal regulations of the Czech Republic. For purposes other than those resulting from the law, we are not authorized to provide your personal data to third parties, unless you have given us express consent to such provision. We do not provide personal data outside the EU.

How we protect your personal data

We pay great attention to the security and protection of personal data. With current technological developments, it is necessary to constantly monitor new trends and threats and, if necessary, take the necessary measures to maintain an adequate level of personal data security. Taking into account the type and method of personal data processing, we place particular emphasis on organizational (selection and training of employees, compliance with FONERGY's internal guidelines and security policy) and technological (security and monitoring systems, data encryption, secure access to systems, etc.) measures. We require our contractual partners to guarantee the security and confidentiality of personal data before commencing cooperation.

Correctness of personal data provided

We trust that you provide us with the provided personal data truthfully and completely so that it is possible to ensure the proper fulfillment of contractual obligations. Keep in mind that you are also responsible for the accuracy of your personal data. In the event that we record incorrect information about you, e.g. an incorrect delivery or e-mail address, this may affect the delivery of various documents. Therefore, it is also in your interest to take care of the correctness of the data and their timely updating. In the case of inaccurate, incomplete or false personal data, we bear no responsibility for any damage caused by such personal data.

What are your rights when processing personal data

a. Right of access to personal data

You have the right to access your personal data. First of all, this means that you have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right of access to the personal data that we process, i.e. we have the obligation to make this data available to you.

b. The right to correct personal data

If we process inaccurate, incomplete or incorrect data, you are entitled to request their correction. If necessary or if we have doubts about the correctness of newly entered data, we are entitled to request confirmation.

c. Right to erasure

If you believe that we are processing your personal data in violation of legal regulations or in violation of your consent, you are entitled to demand that we delete your personal data without undue delay. You can proceed in a similar way if you revoke your consent to the processing of personal data and consider that we continue to process your personal data for the purpose for which you revoked your consent.

d. The right to object

If we process personal data for the purposes of the legitimate interests of FONERGY or third parties, you are entitled to object to this method of processing. If we do not prove that we have serious legitimate reasons for processing that outweigh your interests or fundamental rights and freedoms, or that this personal data needs to be processed for the determination, exercise or defense of legal claims, we will stop processing your personal data without undue delay. You have the right to object even if we process your personal data for direct marketing purposes. If you object to this method of processing, we will stop processing your personal data for marketing purposes without undue delay.

e. Right to restriction of processing

If (a) you object to the processing of personal data for the purposes of the legitimate interests of FONERGY and it is necessary to verify whether the legitimate interests of FONERGY prevail over your interests, or (b) you deny the accuracy of the personal data and the correctness of the data needs to be verified, or (c) it is- if the processing of personal data violates the law and you do not wish to have it deleted, or (d) we no longer need the personal data to fulfill the purpose of the processing, but you require it to be retained for the determination, exercise or defense of your legal claims, you have the right to request that we limit the processing your data. Restriction of processing means that after accepting your request, if all legal conditions are met, we are not authorized to process personal data for purposes other than for the purposes of determining and exercising your rights, otherwise only with your consent. The restriction of processing will only apply for the period that the reason for it lasts (e.g. until a decision is made on your objection or until the accuracy of your data is verified).

f. Right to Portability

The right to portability applies to your personal data that you have provided to us, which we process automatically for the purpose of fulfilling a contract or with your consent. For this personal data, you have the right to obtain it from us in a structured, commonly used and machine-readable format for the purpose of transferring it to another controller.

g. Right to withdraw consent

If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. After you withdraw your consent, we will stop processing personal data for this purpose. Withdrawal of consent does not affect the legality of personal data processing until the withdrawal was made. The revocation also does not affect the processing of personal data for other purposes that are not based on your express consent. If, for example, you revoke your consent to marketing as our customer, we are entitled to continue processing your personal data for the purpose of fulfilling the contract, or for other purposes that do not require your consent, and if it is necessary to fulfill these purposes. Please note that revocation of consent may not automatically establish the obligation to delete personal data immediately, but only the obligation to stop further processing personal data for the purpose for which consent was granted. To withdraw consent, you can use the contact information provided in the chapter "How to contact us".

If you change your mind, you can give your consent repeatedly at any time, especially for the purpose of participating in a marketing or business event. Consent can be given, for example, when changing the contract via a form or you can contact us via the contact details provided.

Communication with the customer service line

Calls made through the customer service line may be recorded, unless otherwise stated, for the purpose of fulfilling the contract or protecting the rights of FONERGY or third parties. Similarly, calls with our external partners (representatives) may be recorded.

The customer service line is primarily intended for handling calls with customers in contractual matters. We inform you about the recording of calls at the beginning of the call. Please note that the technological solution does not allow you to immediately stop the recording of a call if it turns out during the recording that there is no legal reason for the recording and consent has not been given or consent has been withdrawn. In these cases, we will note your request and enter it for processing. If the request is justified, the recording of the call will be permanently deleted from all storage no later than one month from the date of the call.

What if you are not our customer?

Even if you are not in a contractual relationship with us, we are entitled to process your personal data under certain circumstances. If you consent to the processing of personal data as part of a marketing campaign, the processing is governed by the terms of this campaign and your consent. If you show interest in our services and leave us your contact details, we will process these details for the purpose of contacting you back, when we will verify the details and agree on the next course of action.

Your data could also have been provided to us by another person, for example an acquaintance of yours who believes that you are interested in our services, or we have obtained them from a third party who has guaranteed us that they have obtained your consent to their transfer. We will inform you about the acquisition of your data by third parties within one month, when we will verify the data with you and agree on the next procedure.

Your personal data may also be kept in the customer contract, where you are listed as a contact person or representative of the person with whom we have a contractual relationship. This person is responsible for your information, i.e. that you know about and agree to such a procedure. We process the personal data of contact persons and representatives mainly in connection with the performance of the contract, but also for the purpose of protecting our rights and the rights of third parties, or as part of the fulfillment of legal obligations.

The fact that we are not in a contractual relationship with you does not deprive you of the authorization that the law imposes on us when processing your personal data. You can therefore use the same rights that our customers have in accordance with this Statement on the protection of personal data, if it is not a right arising from a contractual relationship.

When can we contact you with a business offer?

If you are our customer, due to the legitimate interests of FONERGY, we are entitled to contact you, even without your consent, with marketing for the purpose of informing you about offers and services in connection with the services you subscribe to. We can therefore offer you additional FONERGY services related to the service you subscribe to (e.g. a more favorable electricity or gas tariff) and possibly other services linked to your service (e.g. special discounts for combining several services). If you do not agree with this form of addressing, you have the right to object to this procedure at any time. By objecting, you express your disagreement with the targeted targeting of FONERGY's offers of additional services.

Cookies

a. What are cookies

Cookies are short text files created by a web server and stored on your computer via your browser. When you return to the same website later, your browser will send the stored cookies back and the server will thus obtain all the information it previously stored on you. The vast majority of websites use cookies for their activity. Thanks to the use of cookies, your next visit will be easier and faster, and cookies will allow us to offer you services and products that best match your requirements and interests.

b. Kinds and types of cookies

i. Division of cookies in terms of storage time

In terms of storage time, cookies are divided into temporary cookies and long-term cookies. Temporary cookies are cookies that are activated when you open the website and are automatically deleted when you leave the website. Long-term cookies are cookies that remain stored on the user's device for the period specified in the cookie files.

ii. Dividing cookies by origin

In terms of origin, a distinction is made between "first-party" cookies and "third-party" cookies.

"First-party" cookies are cookies that are created by the website you visit, and only this website can read (recognize) this type of cookie.

"Third-party" cookies, on the other hand, are cookies created by third parties (persons) that are stored on the user's device by websites (domain) other than the website the user is currently viewing. "Third-party" cookies are stored on many websites within the Internet, and the third parties (persons) who created these cookies are thus able to track users across all websites where these cookies are stored. Thanks to this, third parties (persons) can monitor, analyze and evaluate the behavior of users and provide various services to website operators (e.g. measurement of website traffic or placement of targeted advertising).

c. We use the following cookies on our website:

i. Technical – front pages, short term. They ensure the basic technical functionality of our website, such as logging in, using services and applications

ii. Google Analytics - first parties, long term. They are used to generate anonymous statistics about website usage.

We never place personal or sensitive data in cookies.

d. Management and deactivation of cookies

You can manage the use of cookies or deactivate the storage of cookies in the settings of your web browser. However, it is good to know that deactivating cookies may limit the functionality of our website or cause some of its parts to be completely non-functional.

On the following links, you can get more detailed information on how to manage cookie settings or disable cookies in the most commonly used web browsers:

Who supervises the processing of personal data

Úřad pro ochranu osobních údajů (The Office for the Protection of Personal Data) ( www.uoou.cz ) supervises compliance with obligations in the field of personal data processing. The moment you find out or believe that we are processing your personal data in violation of the protection of your private and personal life or in violation of the legal regulations of the Czech Republic, you can ask us for an explanation or demand that we eliminate the situation that has arisen in this way. If we do not comply with your request, you have the right to address your complaint to the Úřad pro ochranu osobních údajů (Office for the Protection of Personal Data) (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7).

How you can contact us

If you have a question about the processing of your personal data and you did not find an answer here, you can contact us as you choose - in writing, electronically or by phone via our customer service line. Contact details can be found here .

You can use the given contact details even if you make any request or objection regarding the processing of personal data or if you revoke your consent to the processing of personal data. The choice of means of communication is up to you, but in order to comply with some of your requests, we need to be sure of your identity. Therefore, we may ask you for additional information to verify your identity. If, as part of your request, you require personal data to be disclosed, we will only send it to you in a secure manner, depending on its type and scope.