GDPR | ZKL Group




  1. This document contains information concerning the protection of personal data provided by visitors to the website (portal), in particular registered users.
  2. The purpose of this document is to inform you (data subjects) of your rights and to provide understandable information on how your personal data will be treated.
  3. When processing personal data, the Data Controller acts strictly in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), which entered into force on 25 May 2018 and is commonly known by the acronym GDPR.


ZKL, a.s.
ID NO.: 25568353
with its registered office in Brno - Líšeň, Jedovnická 2346/8, postcode 62800
registered in the Commercial Register maintained by the Regional Court in Brno under file no. B 3006
contact e-mail:
(hereinafter referred to as "personal data controller" or "ZKL")


  1. The data that is processed is the data that you provide yourself, we do not actively seek and process any data about you ourselves. This includes in particular the provision of data by filling in registration forms on
  2. If we need your consent to process certain personal data for specific processing purposes, then we will only process such data for that purpose with your consent.
  3. The data you provide to us is in principle voluntary, in some cases we would not be able to provide you with the service without the data you provide, this is mandatory data within the registration form.
  4. The personal data may fall into the category of "ordinary personal data“, or it may be special categories of data, i.e. sensitive data, where the legislation provides for stricter conditions for processing.
    1. Ordinary personal data we process:
        a user of the portal who has registered in the partner section for the purpose of purchasing goods:
        Company name, first name, last name, address of the company's registered office, registration number, VAT number, e-mail address, telephone number, or delivery address if provided by the customer.
        In the contacts and suppliers section, visitors to the website can enter their name, surname and e-mail address in order to answer a specific query or if they wish to become our supplier, without a contractual relationship with the data controller.
    2. The data controller does not process any special categories of data.



  1. Processing of personal data for the purpose of concluding a contract and fulfilling contractual obligations.
    1. In order to provide you with information on the status of your orders within our portal and to conduct related communication with you, we process the following common personal data:
        name, surname, e-mail address, telephone number, customer address, or delivery address if provided by the customer. If the customer is a natural person running a business, then we also process the customer's VAT number and VAT number..
        The legal basis for the processing of this personal data is:
        1. the performance of contractual obligations under the contract concluded when ordering our goods using the partner section. For this purpose, we process personal data for the duration of the contractual relationship between us and for a period of 4 years after the end of the contractual relationship. After the end of the contractual relationship, some data is then retained for the purposes of fulfilling legal obligations or for legitimate interest purposes, see below.
        2. performance of contractual obligations in the pre-contractual negotiation phase. For this purpose, personal data is processed for at least 6 months from your registration or from the last mutual contact..
        name, surname, email address. This is a mere registration with the relevant form, on the basis of which the data controller contacts the provider in order to answer the provider's query or to arrange cooperation. The legal basis for the processing of this personal data is the fulfilment of contractual obligations in the pre-contractual negotiation phase. For this purpose, the personal data are processed for the duration of the pre-contractual negotiations. If these are unsuccessful and no contract is concluded, the personal data is processed for a period of 6 months after the last mutual contact.
  2. Processing of personal data for compliance with accounting, tax and other obligations legal regulations
    1. In order to comply with the obligations arising from the applicable legislation, in particular in the field of accounting, tax law and archiving, the data controller processes data on payments received for goods and services as well as data contained in tax invoices issued to providers.
    2. The period of time for which the data is processed is determined directly by the applicable legal regulations that impose the obligation to process the data.
  3. Processing of personal data for the purposes of our or a third party's legitimate interest
    1. Legitimate interests may cover a range of situations. We therefore inform you of the legitimate interests for which personal data is processed:
      1. protecting and proving our rights and legal claimsin
        particular from contracts entered into or harm caused. For these purposes, we process personal data for a period of 4 years after the end of the contractual cooperation or our last contact. This period is set in relation to the limitation periods for claims, taking into account that we may not become aware of any claim brought before the courts immediately at the time it is brought by the other party. For these purposes, data from the concluded contract, our mutual communications, payment records are kept.
      2. direct marketing. For the purpose of sending commercial communications, we will process the following personal data of our users: name, surname, email address. For these purposes, we process personal data until the customer notifies us that they are not interested in marketing communications. You can always simply stop receiving marketing communications to your e-mail by clicking on the link provided in the e-mail.
      3. customer satisfaction verification - we also process feedback email addresses of customers who have made a purchase of goods or services on the basis of legitimate interest for the purpose of verifying customer satisfaction with the goods or services. In this way, we strive to improve the range of goods and services offered by providers.


  1. Other persons assist the data controller with certain contractual or legal obligations. These persons are in the capacity of processors.

These are the following categories of processors:

  • external IT administrators,
  • an anti-spam email administrator,
  • information system supplier,
  • a lawyer,
  • tax advisor.
  1. Personal data will also be disclosed to the relevant administrative authorities if such an obligation is imposed by law (i.e. in particular in the case of an inspection in which the authority in question is entitled to require the submission of personal data).



  1. the controller has put in place all appropriate organisational, security and technical measures to comply with applicable law and to ensure an adequate level of protection of the personal data processed. These include measures to prevent unauthorised or accidental access to, alteration, destruction or loss of personal data, as well as other misuse of the processed data.
  2. The controller declares that he has taken technical measures to secure data storage and storage of personal data in paper form, such as password protection, improved anti-virus software, encryption, etc.
  3. the controller declares that only persons authorised by the controller have access to the personal data.


  1. Right of access to personal data
    This is the right to confirm whether we are processing your personal data and, if so, to have access to that data and information about its processing.
  2. The right to rectification of personal data
    This is the right to have inaccurate personal data relating to you corrected without undue delay. Considering the purposes of the processing, you have the right to have incomplete personal data completed.
  3. Right to erasure of personal data (right to be forgotten)
    In the cases provided for by law or the GDPR, you have the right to request that, without erasure of your personal data without undue delay (the GDPR lists the grounds in Article 17, including exceptions where erasure will not be carried out).
  4. Right to restriction of processing
    In the cases set out in Article 18 of the GDPR, you have the right to request that we restrict the processing of your personal data.
  5. Right to data portability
    Under the conditions set out in Article 20 of the GDPR, you have the right to obtain your personal data and transfer it to another controller. If technically feasible, you have the right to request the transfer directly to another controller.
  6. Right to object
    Where we process personal data for legitimate interest purposes, you have the right to object to such processing and we will then no longer process the data unless our legitimate interest overrides your interests or rights and freedoms. If the legitimate interest is direct marketing, then objecting will always result in the cessation of further processing for direct marketing purposes.
  7. Right to lodge a complaint with a supervisory authority
    If you believe that your data protection rights are being infringed, you have the right to lodge a complaint with the Data Protection Authority. Further information about the Authority and data protection can be found directly on the Authority's website



  1. If you have further questions about the processing of your personal data, you can contact the data controller by email: You can also directly exercise your rights as described in Article VII. Please note that in order to verify that the request is indeed made directly by you, you may still be contacted afterwards, and your identity and request may be reasonably verified.
  2. This document will be updated periodically, the current version of this document can always be found at .


What can you find here?

This website uses cookies and similar cookie technologies.

In this document you will learn what cookies are and how we, ZKL, a.s., based in Brno - Líšeň, Jedovnická 2346/8, PSČ 628 00, IČO: 25568353, we use.

What are cookies?

Cookies are short text files that a visited website sends to your browser. Thanks to cookies, the administrator can differentiate you from other users of the Website and more efficiently record information about your visit and behavior on the website. Cookies are not harmful to your device or its software. As a user, you can disable or limit the use of cookies in your browser.

Cookies can be used for many purposes, such as:

  • Make the basic functions of the site work
  • Save preferred language
  • Traffic analysis to improve your site and
  • Marketing purposes, especially displaying ads on the site

What types of cookies do we use?

Here you will find out what types of cookies we can use on the website. You can find the specific cookies we currently use in your browser settings.

Basic (required) cookies

Basic cookies, which are necessary for the Website to fulfill its basic functions and to enable us to operate this Website. These cookies are automatically placed on your computer or other device when you access the Website or perform any of the possible activities on the Website. You cannot disable basic cookies. Without them, the Web would not work properly.

Preferential cookies

Preferential cookies allow the Site to remember information that affects the appearance and behavior of the Site. For example, the region you are in or your preferred language.

We will only store these cookies on your device if you allow us to do so either using the cookie bar or on your browser.

Analytical cookies

Analytics cookies are used primarily by Google Analytics to find out how you use the Website.

Google Analytics uses cookies to analyze how the website is used in order to improve the operation of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google, Inc. All data obtained in this way will be processed anonymously. This data is intended solely to evaluate the use of the website. Anonymity is guaranteed that Google, Inc. will not associate your IP address with any other data held by Google. Google, Inc. no other personal information (such as email, name or phone number) will be sent.

Learn more about how Google, Inc. uses analytical cookies, you can find them here:

We will only store these cookies on your device if you allow us to do so either using the cookie bar or on your browser.

Marketing cookies

Marketing cookies are used to map visitors across websites. These cookies are used to display advertisements relevant to individual users and to pass them on to the operators of the advertisement. It is therefore especially valuable to third-party advertisers. We mainly use Facebook and Google services for this purpose.

We will only store these cookies on your device if you allow us to do so either using the cookie bar or on your browser.

Do you want to change your cookie settings?

If you do not want us to store preference, analytics or marketing cookies in your browser, you can adjust these preferences in your browser. This will prevent you from collecting data about you. For information on setting up a specific browser, visit:

If you want to change your cookie settings and don't know how, you can also contact us at .