Privacy Policy

Date: April 2022

1. General information

1.1 This Privacy Policy applies to data concerning you that we collect when you:

• Access or visit our website
• Use the services listed under Item 3
• Participate in competitions, surveys and prize draws
• Enter into, modify and conduct contractual relationships.

1.2 Controller:

1.2.1 This website is a service provided by Narex s.r.o., located in Česká Lípa, Czech Republic (referred to below as Narex). The controller for data processing in connection with the applications set out under Item 3 of this Privacy Policy is Narex s.r.o., Chelčického 1932, 470 01 Česká Lípa, Czech Republic.

1.2.2 The controller for data processing in the case of the other applications is your respective Narex contractual partner. You can find more details on this subject in the supplementary information on your rights as a data subject.

1.3 This data is collected and processed by Narex and its affiliated companies [in particular, TTS Tooltechnic Systems AG & Co. KG and the companies specified at http://subsidiaries.Festool.com], and is used solely for the respective business purpose. You can find more details on the individual purposes in the supplementary information.

1.4 You can contact our Data Protection Officer at narex@narex.cz or our postal address, FAO "Data Protection Officer".

2. How is your personal data processed?

2.1. General information on the purposes of the processing

We primarily collect, store and process your personal data for the sole purpose of fulfilling our contractual obligations to you or where you have given your consent for us to do so. However, we also use your data for the purpose of complying with procedures or legal provisions that affect us, provided that this is necessary to safeguard our own legitimate interests or the legitimate interests of others, in order to enforce, protect or exercise our rights or to defend ourselves against claims.

2.2 Data you disclose to us

2.2.1 As a general rule, you can use our website without disclosing personal information to us directly. For some services, such as our newsletter service, we will request personal information from you. This includes data such as your name or email address, which lets us make the service in question quick and user-friendly, or lets us provide the service in general. Below, in Section 3 of this Privacy Policy, you can find more details about all of the services offered on our website.

2.2.2 In particular, the collection and processing of personal data is necessary for entering into, modifying and conducting contractual relationships, so that we can fulfil our contractual obligations. You can find more details on this subject in the supplementary information.

2.3. Data we automatically obtain when you use our online services

Some data is obtained whenever you visit our website.

2.3.1 Log data
Data obtained automatically includes web server log data. We activate this logging solely in exceptional cases in order to investigate support cases and safeguard the stability and security of our service (Article 6(1f) GDPR). Each record consists of:

• Date and time of the request
• Client and server IP address, port and protocol status
• The name of the file or page requested and the length of the request
• Login information for the relevant web service, if you sign on with a user account
• Browser type and referrer (last page requested by the client)
• This data is analysed for technical purposes solely on an anonymous basis. No statistical analysis is performed.

2.3.2 Cookies
Cookies are small files containing a string of characters which store certain information in plain text or encrypted form. Cookies are sent by the server to your computer, where they are stored. Their primary purpose is to identify the computer from which a website has been accessed. If you sign on to a website, cookies are used to notify the server of the sign-on and check the permissions for accessing the page. Every cookie has an expiry date, after which it is no longer valid. The user’s path through various pages of the website and even across various websites can be tracked using cookies. By using cookies, we can improve communication between our server and your computer, thus making it easier to use a website. Cookies can be generated by both the website operator and third-party providers. Your browser gives you the option of displaying the cookies which exist on your computer, deleting existing cookies, or configuring the settings so that not all, or no further, cookies are stored. Please be aware that some functions will not work, or will not work properly, if you block cookies.

2.3.3 Social media plugins
Our website also uses the following social network plugins:

• Facebook
• Twitter
• Instagram
• Google+
• YouTube

These are services provided by the US companies:

• Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
• 
Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
• 
Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

On our website the plugins are recognisable by the respective companies’ logos or the "Like" or "Recommend" add-ons, for example. When you visit one of our websites which contains this type of plugin, your browser establishes a direct connection with the relevant company’s servers, and the content of the plugin is, in turn, transmitted to your browser, which incorporates it into the website being displayed. This is how the fact that you have visited our website is passed on to these companies. We are neither able to influence the data collected and processing operations, nor are the full extent of the data collection, the purposes of processing and the retention periods known to us. Neither is there any information available to us concerning the erasure of the collected data by the provider of the plugin. The provider of the plugin stores the data collected about you as a usage profile and uses this profile for the purposes of advertising, market research and/or tailoring the design of their website to demand. Analysis of this kind is primarily carried out (including for users who are not logged in) in order to display appropriate advertising and to inform other users on the social network about your activity on our website. You have the right to object to the creation of this user profile, and if you wish to exercise this right you must contact the provider of the respective plugin. We use these plugins to enable you to interact with social networks and other users, and to enable us to improve our service and design it so that it is more interesting to you as a user. The first sentence of Article 6(1f) GDPR provides the legal basis for the use of these plugins.

Provided that you are logged in to these companies’ sites via your personal user account when you visit our website, they can associate the website visit with that account. By interacting with plugins, e.g. by clicking on the "Like" button or leaving a comment, this related information is sent directly to these companies and stored on their systems. If you would like to prevent this sort of data being sent, you need to log out of your account at the company in question before visiting our website. Please refer to the following companies’ data protection notices for information about the purpose and scope of data collection, further processing and use of your data by them, as well as your associated rights and the settings options for protecting your privacy:

Facebook
Twitter

Instagram

Google Privacy Policy

YouTube Terms of Service

3. Individual online services

3.1 Contact form

Our website gives you the option of using a contact form to get in touch with us so that we can provide answers to your individual questions as well. In each case, we need your surname, first name, email address and message so that we can contact you. If you give us your phone number or postal address, we will also be happy to call you back with an answer to your question or contact you in writing. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.

3.2 Newsletters

We can send you our newsletter as a way of staying in touch with us. The legal basis for this, in accordance with the first sentence of Article 6(1a) GDPR, is your consent. For this, we use your title and name, so that we can address you personally in the newsletter, as well as your email address and the topics that interest you. To ensure that no one else has registered you for the newsletter subscription and that you do not receive unwanted emails, you will receive a confirmation email sent to the email address you provided. You will need to click on the link in the email to activate the subscription. User behaviour related to the newsletter service is analysed in anonymised form with no link being established to a specific person.

This includes:

• Mailings sent and delivered
• Opens (measured/invisible/total)
• Clicks and opens by end devices
• Clicks, opens and delivery over time
• Bounces (email is undeliverable)
• Subscription cancellations
• Activity rate

The only required information for sending you our newsletter is your email address. Supplying additional data, identified separately, is voluntary and is used to address you personally. After you have given confirmation, we will store the data you provide in order to send you the newsletter (the first sentence of Article 6(1a) GDPR provides the legal basis for this).

You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal of consent by clicking the link provided in each newsletter email. "

3.3 Information request via the web

Our free information service can notify you about attractive offers, new products and tips for optimising the use of machinery. We need the name, address and business sector of your company,plus a contact name for this service.

4. Social media

Via our presence on social media (Facebook, Twitter, YouTube), we also offer you comprehensive personal support and the option of staying in touch with us. These social media services collect personal data independently, e.g. via the profile of you created on these services or via social plugins implemented on the websites of third parties. Article 6(1b) or Article 6(1f) GDPR provide the legal basis for this. If you send us a query via one of these social media, we will forward the query to the relevant department. The data is used solely for the purposes of responding to your query and is not passed on to third parties. If you wish to get in touch with us via social media, you have to register with these services. The companies behind the service in question may collect, store and use personal data. The nature, scope and processing of this data is beyond our control. These are services provided by the US companies:

• Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
• Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
• Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

5. What rights can you exercise?

5.1 Right to object:

• You have the right to object to the processing of your personal data for direct marketing purposes at any time, without giving any reason. Please direct your written objection to Narex s.r.o., Chelčického 1932, 47001 Česká Lípa, Czech Republiuc or send an email to: narex@narex.cz. Consent can be withdrawn at any time, either by using the link in the newsletter or by sending written notification.
When cancelling the newsletter, you can also just remove individual newsletter topics at any time under the "Newsletter" tab, which is equivalent to unsubscribing from the newsletter. Information on cancelling a subscription can be found within every newsletter.

• Where we process your data for the purpose of safeguarding legitimate interests, you can object to the processing on grounds relating to your particular situation. We will then stop processing your personal data, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or where the processing is used for the establishment, exercise or defence of legal claims.
We wish to inform you that, in order to enter into and conduct contractual relationships, you must provide the personal data and company data necessary for establishing, fulfilling and terminating the contractual relationship and the performance of the associated contractual obligations, or that we are required to collect by law. If you exercise your right to object in this regard or do not provide us with this data, we will not be in a position to fulfil the contract with you.

5.2 Further rights:

5.2.1 Right of access:
You can obtain information on the data stored about you personally from the respective controller.

5.2.2 Right to rectification, erasure
Furthermore, you can have your data rectified or erased if certain criteria are met.

5.2.3 Other rights:
You also have the right to restrict the processing of your personal data, as well as the right to obtain the data you have provided in a structured, commonly used and machine-readable format.
You can lodge a complaint with the aforementioned Data Protection Officer or the competent supervisory data protection authority.

6. Safeguarding your data:

6.1 We take technical and organisational measures to protect your data against unauthorised access, unintentional modification, accidental loss or unlawful destruction. Nevertheless, electronic or physical transfers and storage of data can never be completely secure. Every transfer is therefore made at your own risk.

6.2 As part of this Privacy Policy, we wish to provide you with an as quick and as comprehensive explanation of the relevant topics as possible. Additional information on the respective purposes for which your data is processed and clarifications of the terminology we use can be found on our website. Still have questions? Please get in touch using the contact address set out in the supplementary information.

7. Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time, taking into consideration the applicable data protection regulations.