Business and marketing relationship

Information on the processing of personal data

provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR")

The key concern and philosophy of the ALEF Group is the satisfaction of our customers and those with whom we build a mutual business relationship. To this end, we use the personal data provided to us, which we not only protect carefully, but also process in accordance with the applicable legislation.

Below you will find a detailed summary of how the ALEF Group, comprising

  • ALEF NULA, a. s., Pernerova 691/42, Praha 8, Czech republic, email: cz-recepce@alef.com;
  • ALEF Distribution CZ, s. r. o., Pernerova 691/42, Praha 8, Czech republic, email: cz-recepce@alef.com;
  • ALEF Distribution SK, s. r. o., Galvaniho Business Centrum IV, Galvaniho 17/C, Bratislava 2, Slovakia, email: sk-reception@alef.com;
  • ALEF Distribution HU Kft., Váci út 30. 3. emelet, 1132 Budapest, Hungary, email: hu-info@alef.com;
  • ALEF Distribucija SI d.o.o., Brnčičeva 15B, Ljubljana, Slovenia email: si-info@alef.com;
  • ALEF Distribucija d.o.o., Ul. Grada Vukovara 284, Zagreb, Croatia, email: hr-info@alef.com;
  • ALEF Distribucija Adria, d.o.o., Vladimira Popovica 6, 11070 Beograd, Serbia, email: rs-info@alef.com;
  • ALEF Distribution RO, S.A. B-dul. Dimitrie Pompeiu nr. 6E, Clădirea Pipera Business Tower, etaj 8, Sector 2, București 020337, Romania, email:  ro-backoffice@alef.com,
  • ALEF Distribution GR M.I.K.E., 44 Zalokosta & Kifisias Avenue, Chalandri 15233, Greece, email: gr-sales@alef.com
  • ALEF Distribution S.R.L., Calea Iesilor 8/1, et.3, of. 9a, Chisinau MD2069, Moldova, email: ro-sales@alef.com
  • ALEF Solution PL Sp. z o.o., Żelazna 40/101, 00-832 Warszawa, Poland, email: pl-sales@alef.com

obtains, processes and stores the personal data provided and what are the rights of data subjects under applicable legislation.

What personal data do we use and to whom do we disclose it?

The companies of the ALEF Group (the Controller) only process data necessary for the purposes of the business relationship (including orders via the B2B form) or the marketing relationship. The data includes name, surname, title, job title, name and address of the employer, telephone number, email. If the business or marketing relationship is directly with the data subject (FO), the data includes: name, surname, title, permanent/temporary residence or registered office address, telephone number, email, VAT number, bank account. In the case of training offers, we only process your name, surname and e-mail address.

In the case of personal collection of goods within a B2B relationship (portal), we also process personal data - the ID number of the data subject (FO).

The recipient of this personal data is the Controller and any person connected in any way, whether directly or indirectly, with the Controller, and persons who are members of the ALEF GROUP, even if such person is in a third country (i.e. outside the EU/European Economic Area), if the European Commission has decided that this third country ensures an adequate level of protection of personal data (see, for example, https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures and https://eur-lex.europa.eu/legal-content/CS/TXT/?uri=CELEX%3A32016D1250) and the employees of these persons. Recipients of personal data may also be business partners of the Controller or of persons linked to the Controller by property, processors of personal data or public authorities.

What do we need them for?

The data collected is used only for the purposes intended to ensure the performance of services and to provide information about service offers, products, marketing events, training, seminars and conferences through various communication channels, such as electronically (e-mail, websites, social networks, webinars and others that allow targeted outreach), by mail, by telephone call or by personal contact.

On what legal basis do we process them?

We process the collected data on the basis of the legitimate interest of the Controller, because without them we would not be able to properly fulfill the aforementioned purposes for which the personal data are processed. However, in the case of personal data provided for the purpose of establishing new business contacts, sending marketing and promotional communications intended for primary contacts or sending training offers, we need your consent.

How long do we keep them?

We store the collected data principally for the duration of the business relationship and subsequently for 4 years after its termination. If the business relationship is not established, we delete the personal data after 1 year from the date of its provision.

Jaká jsou Vaše práva?

You may request access to your personal data from the Controller.. You have the right to obtain information from us as to whether or not your personal data is processed by the Controller and, if it is processed, you also have the right to access it together with the following information about::

  • processing purposes;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • the intended period for which the personal data will be stored, if this cannot be determined, the criteria used to determine that period;
  • the existence of the right to request from the Controller the rectification or erasure of personal data, the restriction of their processing or the right to object to such processing;
  • the right to lodge a complaint with the supervisory authority;
  • all available information about the source of the personal data;
  • whether automated decision-making, including profiling, takes place, the procedure used, as well as the significance and foreseeable consequences of such processing for your person;
  • the right to be informed of the appropriate safeguards that apply to the transfer of personal data to a third country (i.e. outside the European Union) where personal data are transferred to such third country.

You may request the rectification of personal data,, that the Controller rectifies inaccurate personal data concerning you without undue delay, taking into account the purpose of the processing, you also have the right to complete incomplete personal data, including by providing an additional declaration.

You can request the erasure of your personal data ("right to be forgotten"), for the following reasons:

  • the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you have withdrawn the consent on the basis of which the personal data was processed and there is no other legal basis for the processing;
  • personal data have been unlawfully processed;
  • personal data must be erased to comply with a legal obligation;
  • personal data has been collected in connection with the offer of information society services.

The right to erasure cannot be exercised if there is a legal exception, in particular if the processing of personal data is necessary for:

  • the exercise of the right to freedom of expression and information;
  • to comply with a legal obligation requiring processing under European Union or Member State law to which the Controller is subject;
  • for the establishment, exercise or defence of legal claims.

It is possible to request restriction of the processing of personal data,, i.e. the right to restrict the processing of personal data, in any of the following cases:

  • you deny the accuracy of the personal data processed, the processing will be limited to the time necessary for the Controller to verify the accuracy of the personal data;
  • the processing is unlawful, you refuse the erasure of the personal data and instead request a restriction on its use;
  • The controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims.
  • You have raised an objection to the processing of personal data if the personal data are processed for the purposes of the legitimate interests of the Controller, including profiling, in which case the Controller shall not further process the personal data unless it demonstrates legitimate grounds for the processing which override the interests or rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims; if the processing has been restricted, the personal data, except for storage, may be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

The right to data portability,, i.e. the right to have us transfer your personal data processed by automated means on the basis of your consent to another controller in a structured, commonly used and machine-readable format; in exercising your right to data portability, you have the right to have personal data transferred directly from one controller to another controller, where technically feasible.

Right to object, if, your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for this marketing, which includes profiling if it relates to this direct marketing, in which case the personal data will no longer be processed for these purposes.

The right to lodge a complaint,, for example by sending an e-mail or a letter, against the Administrator's procedure with the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, Czech Republic.

You may exercise all of the above rights with the relevant Controller by sending an email to the addresses listed at the beginning of this information or by letter.