Dear guests, on this page, in accordance with the GDPR, you will find the most important information about your personal data processed by the company Toman Motors s.r.o., ID number: 050 89 875, registered office no. 482, 271 01 Rynholec, registered in the commercial register maintained by the Municipal Court in Prague, section C, insert 258173 (hereinafter referred to as "Administrator" or "Company").

The aim of this communication is to inform you about the processing of personal data that takes place in connection with visiting the website www.tomanmotors.com, as well as in some other cases of processing of personal data, when the personal data of other persons is processed during the Company's activities (hereinafter referred to as "Data subject").

I. Processing of personal data from contact forms, in connection with processing requests, questions related to the provision of services by the Company on the website

In the event of a request to purchase a vehicle and/or a request for services on the Company's website www.tomanmotors.com via the request form or by sending an inquiry to the relevant email listed on the website, the Company will process the potential customer's personal data, including name, surname, e -e-mail address, telephone contact, or company, only on the basis of your consent, or on the basis of a request before the conclusion of the contract. You can revoke your consent at any time by sending an explicit message to zdenka.toman@tomanmotors.com.

After processing the relevant request, the Company may further use the above-mentioned data based on your consent for its marketing purposes regarding the offer of its services. In this case, the Data Subject has the right to withdraw the given consent at any time by sending an explicit message to the e-mail zdenka.toman@tomanmotors.com.

The processing of the provided personal data will be carried out by the Company itself, possibly through the processor listed in Article VIII below.

By sending an inquiry through the contact form, personal data is also collected, which is located in the encrypted interface and is the following data:

• date and time of sending the contact form;
• data from the submitted contact form;
• visitor's question.

Personal data about visitors to the Company's website processed in connection with the management of the Company's website and / or the implementation of Internet marketing will therefore only be processed on the condition that the relevant Data Subject has given consent to the processing in question in the sense of Article 6 paragraph 1 letter a) GDPR, for the period during which the subject consent will be valid. In the absence of the Data Subject's consent in the sense of Article 6 paragraph 1 letter a) GDPR personal data of Data Subjects is/will be processed at the request of the Data Subject in the sense of Article 6 paragraph 1 letter b) GDPR.

II. Processing of personal data for sending the newsletter

If the website visitor is interested in sending a newsletter and other advertising messages, the Company will process for these purposes, based on consent, the personal data provided by such a user, always at least in the scope of e-mail address, name and surname. The content of the newsletter and other advertising messages can be personalized on the basis of the data provided and other data for the personalization of the content that the Company finds out from the behavior of the visitor on the website or the newsletter.

The Company will only start processing the visitor's personal data after the visitor fills in their data in the relevant form for ordering the newsletter and other advertising communications and confirms this via the "subscribe to the newsletter" button and/or via the contact form. If the entry is not confirmed and/or the contact form is not sent, the filled-in data will not be stored anywhere.

The personal data provided are processed until the consent is revoked. 

Consent to this processing of personal data is completely voluntary, and the user can withdraw it at any time by sending a notice of withdrawal of consent in writing to the address of the Company's registered office (see below).

The user can also revoke the given consent by clicking on the link "You can unsubscribe" in a sent newsletter or advertising message.

III. Processing of personal data in connection with photo documentation of organized events

At the events organized by us, we take a reasonable amount of photo documentation (situational shots from the events) in order to subsequently publish selected photos on our website for the Company's promotional purposes. In this way, the visitors of a specific event are not primarily displayed, but the overall atmosphere of the event, the shots are not published in detailed resolution, we do not even attach captions of specific people attending the event to them. According to the expert opinion of the Office for the Protection of Personal Data, in such cases it is not primarily an issue of personal data protection, but of privacy protection according to the Civil Code; consent to the processing of personal data for "illustrative" images does not therefore need to be required.

Visitors are warned in advance about the taking of photo documentation in the form of a camera pictogram, our photographers are visibly marked and photo documentation is taken only in the main area of the event, so visitors always have the opportunity to stay in areas where photo documentation is not taken. In case of any doubts or questions about taking photo documentation, you can contact us at the contacts listed below.

IV. Data processing based on the reservation or purchase of a vehicle

Based on the reservation or purchase of a vehicle, we process personal data of clients in the following scope:

• identification and contact data (name and surname, address of place of permanent residence, birth number, if applicable, ID number or similar document and, if applicable, e-mail address and telephone number and bank account number);
• in the case of natural persons doing business, also the name of the natural person doing business, registered office, ID number, tax identification number, information on the VAT payer.

A) Processing for the purposes of fulfilling legal obligations

The provision and processing of the above personal data, with the exception of the e-mail address and telephone number, is necessary for the purpose of fulfilling the Company's legal obligations, in particular obligations arising from accounting and tax regulations.

B) Processing necessary for the fulfillment of the contractual relationship

The processing of your identification data is also necessary for the purpose of fulfilling the contractual relationship regarding the purchase of vehicles and related services provided by the Company, i.e. ensuring orders and reservations, concluding and fulfilling contracts and other services provided by the Company.

C) Processing necessary for the purposes of legitimate interest

We process your personal data in the scope of name, surname and e-mail address on the basis of the legitimate interest of the Company for the purposes of direct marketing, the purpose of processing here is exclusively the possibility of sending you marketing and business messages, i.e. information about interesting news, discounts, services of the Company, etc.

Should there be a case of judicial and/or criminal proceedings (notification of crimes or threats to public safety), the Company would be forced to process data to the extent necessary for conducting such a dispute, exclusively for the purpose of protecting the Company's rights in such a dispute. Similarly, the Company would be forced to process the necessary data also in case of non-payment of services and/or the purchase price of the vehicle, or in case of damage caused to the Company.

D) Automated processing of your data

In no case do we carry out automated decision-making or other automated processing of your personal data that would have legal effects for you or would significantly affect you in a similar way.

V. Google Analytics and Google Adwords

To analyze the website using cookies, the Company uses the Google Analytics service, developed and operated by Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA (“Google").

No data will be transferred to Google, incl. IP-addresses, combine with other data. Google's privacy statement is available for viewing here.

The website visitor can prevent the collection of cookie files and their analysis through the Google Analytics service either by changing the browser settings as mentioned above, or by:

• by clicking on the following link, whereby a so-called opt-out cookie will be placed on the computer, which will prevent the future storage of data about the visit to the website;
• by installing a browser plugin available here. This plugin only works in the respective browser on the respective computer and must not be deactivated or deleted after installation to preserve the deactivation of Google Analytics.

As part of the Google Analytics service, the Company also uses related advertising functions provided by Google, such as overviews of impressions in the Google advertising network, extended reporting of anonymous demographic data (e.g. age, gender, interests) or display of advertisements in the content network based on viewed products (so-called remarketing), incl. Google AdWords services used to personalize advertising and improve advertising targeting and so-called remarketing.

VI. Informational text about the camera system in the Company's premises and its showroom

The purpose of processing is to protect property and increase personal safety. The scope of processing includes only video recording of the camera system, without audio recording. The administrator of these records is the Company. The recording of the camera system is stored on the HDD device/hard disk operated by the Company. No other processor is used for this camera system. The place of processing is the Company's headquarters, with a total of 12 cameras.

The recipient of data from the camera system can only be law enforcement authorities or administrative authorities for the purposes of misdemeanor proceedings.

The cameras cover the entrance area and the reception area, the showroom area, the service area, the detailing studio area, the exterior, and the driveway.

The record retention period is a maximum of 14 days, after which the data is automatically deleted by overwriting with a new record, as the camera system is based on the loop mode.

The operation of the cameras is continuous (or based on an automatic motion sensor).

Contact details for receiving requests for information are listed below.

VII. Time of personal data processing

Personal data of visitors to the Company's website will only be processed for the necessary period of time. Personal data about visitors to the Company's website processed in connection with the management of the website and/or the implementation of internet marketing will be processed for a maximum period of time for which the consent in question is valid.

In relation to the processing of personal data of recipients of electronic communications conducted by the Company, personal data will only be processed for as long as necessary. If the Data Subject does not specify otherwise, personal data will be processed for a maximum of 2 years from the moment of their first processing by the Administrator. In the event of the Data Subject's consent in the sense of Article 6 paragraph 1 letter a) GDPR, the Personal Data of the relevant Data Subject will be processed for the period of validity and effectiveness of this consent. In the case of processing of Personal Data at the request of the Data Subject in the sense of Article 6 paragraph 1 letter b) GDPR, the Personal Data of the relevant Data Subject will be processed for the time necessary to implement the measures taken before the conclusion of the contract.

The Company processes personal data for which the obligation to process them results from the relevant legal regulations only for the period necessary according to these legal regulations. (For example, the accounting and tax documents issued by the Company also contain some of your personal data (name and surname, type of service provided, date of issue of the document). We keep these documents only for the purpose of fulfilling the obligations stipulated by the relevant accounting and tax legislation, for a period imposed by these regulations.)

The Company processes the name, surname, e-mail address and possibly telephone of the Data Subject for the purposes of the Company's direct marketing (sending information about interesting news, offers, services or discounts, etc.) until the Data Subject communicates his possible disagreement with further such processing.

The Company processes data necessary for the purposes of existing or realistically imminent disputes only until the final decision of the dispute and the fulfillment of the obligations arising from the decision, or until the time during which disputes about the services provided may arise according to the applicable legal regulations.

After the expiration of the above-mentioned periods, the Company regularly disposes of personal data, both in paper and electronic form.

VIII. Further information on the processing of personal data 

Personal data represent the basic contact data of the Data Subjects obtained from the Data Subjects and / or from publicly available sources (in particular the websites of the recipients), whereby the Personal Data was / are in each case the Data Subject and / or a third party with the presumed consent of the Data Subject kept as contact data, the purpose of which is to serve third parties to establish the first contact and / or conduct communication with the Data Subject and / or a third person represented by the Data Subject. Personal data could also be obtained from the visits of Data Subjects and/or third parties represented by the Data Subject and/or within the framework of previous communication with the Data Subject and/or a third person represented by the Data Subject.

Personal data about Data Subjects will be obtained from and/or may be provided to the following persons and/or entities involved in:

1. marketing services;
2. detailing services;
3. ensuring registration of vehicles;
4. comprehensive management of the Company's IT systems;
5. accepting orders;
6. website creation and content; and
7. security and the Company's camera system.

The aforementioned entities (processors) may process personal data in accordance with the Company's instructions.

The Company does not intend to transfer the personal data of the Data Subjects to a third country and/or an international organization.

IX Other rights associated with the protection of personal data

Data subjects whose personal data are processed by the Company have the following rights associated with the processing of their personal data, subject to the fulfillment of the prerequisites established by legal regulations:

• the right of access to personal data consisting of the right to receive free of charge upon request information about which of their personal data the Company processes;
• the right to correct their processed personal data;
• the right to erasure of their processed personal data;
• the right to restrict the processing of their personal data;
• the right to portability of personal data;
• the right to revoke the granted consent to the processing of personal data at any time, if the consent is the legal basis for the respective processing of personal data (i.e. for sending the newsletter and other advertising communications).

Data subjects whose personal data are processed by the Company also have the right to object to the processing of their personal data if the legal basis for the processing is the legitimate interests of the Company, subject to the fulfillment of the requirements established by law. If personal data is processed for direct marketing purposes, the Data Subject has the right to object to this processing at any time.

The aforementioned rights can be exercised by Data Subjects whose personal data is processed by the Company in writing or by e-mail to the Company as a personal data administrator, via the contacts listed below.

The company can be contacted:

1. in writing at the address no. 482, 271 01 Rynholec;
2. by phone via phone number 777 821 841;
3. electronically via e-mail: zdenka.toman@tomanmotors.com.

The above rights of the data subject are not absolute rights. The Company will assess the rights applied individually and with regard to its own rights or the rights of third parties.

If the Data Subject believes that there has been a violation of legal regulations in connection with the protection of his personal data, he has the right to file a complaint with a supervisory authority. The supervisory authority for the territory of the Czech Republic is the Office for the Protection of Personal Data. Sochora 27, 170 00 Prague 7 (www.uoou.cz).