Privacy Policy
Version 2.0 — effective 12 August 2026 · supersedes the previous Privacy Policy
Who is the controller of your personal data?
The controller of your personal data is HDT Magnetic s.r.o., ID: 09912444, VAT No.: CZ09912444, Prague, Czech Republic (hereinafter “we” or “us”). You can contact us regarding personal data at info@hdtmagnetic.com.
What personal data do we process about you, why, and on what legal basis?
As part of our business activity we may process personal data obtained from you or from public sources. This includes in particular your or your staff's full name, position, address, date of birth, e-mail, phone number, bank account number, business registration number, VAT number, and communications records related to our services.
We process this data on the following legal bases under Article 6 of the GDPR:
(a) Performance of a contract (Art. 6(1)(b)) — to prepare quotations, accept and fulfil your Orders, deliver the Products, provide support and handle complaints.
(b) Compliance with a legal obligation (Art. 6(1)(c)) — to meet our obligations under applicable law, in particular the Act on Accounting and the VAT Act (issuing and retaining invoices and accounting records).
(c) Our legitimate interests (Art. 6(1)(f)) — to inform existing customers about news relating to our own products, to secure our systems and premises, and to establish, exercise or defend legal claims. You may object to processing based on our legitimate interest at any time, and you can unsubscribe from our news at any time via the link in every e-mail we send you.
(d) Your consent (Art. 6(1)(a)) — where we wish to pass your data to our partners, or to send you news that is not directly related to our own products, or to set non-essential cookies. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.
Who do we transfer your data to?
Your data may be made available to our processors, with whom we have always entered into a personal-data processing agreement (for example providers of IT, hosting, file-transfer, accounting and shipping services). Please contact us for an up-to-date list of our processors.
[We do not transfer your personal data to any third country outside the EU/EEA or to any international organisation. If we do so — for example where a processor is located outside the EU/EEA — such transfer is carried out only on the basis of an adequacy decision or appropriate safeguards under Chapter V of the GDPR (such as the Standard Contractual Clauses), a copy of which can be requested from us.]
Cookies and similar technologies
To ensure the proper functioning of our website we use cookies and similar technologies. We distinguish the following categories:
• Strictly necessary cookies, which are required for the website and its basic functions (such as the shopping cart and log-in) to work. These are used on the basis of our legitimate interest and cannot be switched off.
• [Analytics/performance cookies], which help us understand how the website is used so we can improve it. For system-administration purposes we may collect information about your device, including your IP address, operating system and browser type.
• [Marketing cookies], which may be set by us or third parties for advertising purposes.
[Analytics and marketing cookies are set only with your consent, which you give through our cookie banner and can change or withdraw at any time via “Privacy and cookies settings” at the bottom of every page. You can also manage cookies in your browser settings.] Please confirm which categories and tools (e.g. Google Analytics, Meta Pixel) are actually in use and align this section with your cookie banner.
How long do we keep your data?
We keep your data for the period necessary for the purpose of its processing, i.e. for the duration of the contract and for the period required by applicable law (in particular the Act on Accounting and the VAT Act — typically up to 10 years for tax and accounting documents), or for the period of our legitimate interest in protecting our rights in the event of claims or possible disputes (i.e. during the relevant limitation periods). For more information please contact us.
Security of your personal data
Personal-data security and privacy is our top priority. All of our staff are bound by confidentiality and are regularly trained on information- and personal-data security. We control access privileges at both the physical and logical level, and we regularly conduct a security risk analysis in order to design and take the necessary remedial measures.
What are your rights?
Under the GDPR you have the following rights:
• where we carry out processing based on your consent, to withdraw that consent at any time using the contact details above;
• to access your personal data and find out what personal data we process about you;
• to rectification of inaccurate data;
• to erasure of your personal data where this is possible;
• to restriction of processing in the cases foreseen by the GDPR;
• to data portability where the processing is based on consent or contract and is carried out by automated means;
• to object where the processing is based on our legitimate interest — in such cases we shall restrict the processing unless we have compelling legitimate grounds, or the processing is for the establishment, exercise or defence of legal claims;
• to lodge a complaint with the supervisory authority (see below) if you believe your personal data are being misused.
Right to lodge a complaint
If you believe that your personal data are being processed unlawfully, you have the right to lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních úDajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.
Contacting us and exercising your rights
To exercise any of your rights, or if you have questions about this Privacy Policy, please contact us at info@hdtmagnetic.com. We will respond within the time limits set by the GDPR.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version is always available on our website, with its effective date stated above.