Privacy Policy – Suppliers

Actum X, s.r.o., Company ID No. 05908841, with its registered office at Plynární 1617/10, Holešovice, 170 00 Prague 7 (also referred to as “we/our”), as a data controller, informs you, as our business partner or potential business partner, about the processing of personal data and privacy protection described below.

In the following text you will find out:

Which of your personal data will be processed;
For what purpose and by what means we will process your personal data;
To whom your personal data may be transferred;
For how long we will process your personal data;
What your rights are in relation to the protection of your personal data.

Please feel free to contact us at our e-mail address legal@actumdigital.com at any time if you need any explanation or advice regarding any part of the text or if you want to discuss further processing of your data.

1. Scope of personal data processing

1.1. If you are our business partner, we process your personal data that we need for the proper performance of our contractual obligations. These data may include in particular:

contact person’s name and surname;
address;
business name;
company’s registered office;
identification number and tax identification number;
telephone number;
e-mail address.

Personal data are processed for the purpose of performing a contract. We use the data you provide to us to keep in touch with you and some of these data are also necessary to enable us to perform our statutory obligations.

1.2. If you wish to become our business partner and you provide us with your personal data for this purpose, for example via an electronic form located on our website, we process all your data that you voluntarily provide us with in this manner based on your request for the purpose of concluding a contract in the future. Typically, this will include data to the extent of:

contact person’s name and surname;
address;
business name;
company’s registered office;
identification number and tax identification number;
telephone number;
e-mail address;
comments and messages, if any.

2. Who has access to your personal data

We, as the data controller, will process your personal data. We will only disclose your personal data to authorised employees and cooperating persons or individual data processors contracted by us or to other data controllers, but only to the extent necessary to fulfil the individual purposes and on the corresponding legal ground for the processing of personal data. These include, for example:

external accounting firms;
external law firms;
processors who provide us with server, web, cloud, marketing or IT services.

3. Period of personal data processing

We will process your personal data for the period of time determined by the purpose of the processing.

3.1. For the purposes of performing a contract, we will process your data for the term of the contract and for the period of time stipulated by the relevant legislation from the termination of the contract.

3.2. For the purposes of complying with statutory obligations to which we are subject, we will process your data for the period of time stipulated by the relevant legislation.

3.3. For the purposes of protecting our legitimate interests, we will process your data for a maximum period of four (4) years from the time the data processing commenced, unless specific legislation provides otherwise or unless the need to retain the data for a more extended period arises in relation to a specific case on reasonable grounds.

3.4. For the purpose of negotiating a contract, we will process your data for a period of four (4) years from the time the data processing commenced.

4. Personal data of third parties

Personal data of third parties, which includes the personal data of employees and customers of our suppliers, as well as other individuals involved in cooperation with us, or any other data we receive in connection with the conclusion or performance of a contract, will be processed in accordance with applicable personal data protection legislation. We will use this personal data for the purpose of performing contracts. We will process the personal data of third parties for the duration of the contractual relationship and for the period stipulated by special legislation, if applicable. They will then be retained for an extended period of time if there is a justified need to maintain the data in connection with a specific case.

5. Cookies

Cookies are small text files containing short data that can be stored on the user’s device when visiting a website. We use cookies on our website for the following purposes:

remembering the logged-in user;
convenient web features;
anonymised evaluation of users’ movements on the website;
obtaining voluntary feedback from users; and
ads serving personalisation.

All personal data is processed lawfully and transparently, and only adequate, relevant and necessary data are requested in relation to the purposes of the processing.

You can reject cookies in the settings of your internet browser, or you can set the browser to use only some of them. You can find how to set cookies in the most frequently used browsers at the following links:

6. Your rights arising from the processing of personal data

As a data subject, you have certain rights in connection with the processing of personal data, which result from applicable laws and which you may exercise at any time. These rights include

the right of access to personal data,
the right to rectification of inaccurate personal data and to completion of incomplete personal data,
the right to erasure of personal data if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, or if it is established that the personal data have been unlawfully processed,
the right to restriction of processing,
the right to data portability,
the right to object to processing of personal data whereupon the processing will be discontinued, unless compelling legitimate grounds for the processing demonstrably exist which override the interests, rights and freedoms of the data subject, in particular where such grounds include the exercise of legal claims, and
the right to turn to the data protection authority.

Right of access to personal data: If you wish to know whether we are processing your personal data, you have the right to obtain information as to whether or not your personal data are being processed and, where that is the case, you also have the right to obtain access to your personal data.

Right to rectification of inaccurate personal data and to completion of incomplete personal data: If you think that we are processing personal data about you which are incorrect or incomplete, you have the right to request its rectification and/or completion. We will rectify or complete the data without undue delay, taking into account technological capacities.

Right to erasure: If you request erasure, we will erase your personal data if (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) the personal data have been unlawfully processed, (iii) you object to the processing and there are no overriding legitimate grounds for the processing of your personal data, or (iv) the legal obligation in EU or national law to process personal data no longer applies.

Right to restriction of processing: If you request restriction of processing, we will make your personal data unavailable, or will temporarily remove or store it, or will perform any other processing activities as may be necessary for the proper exercise of that right;

Right to data portability: If you wish us to transfer the personal data we are processing about you electronically, based on a contract or your consent, to a third party, you may exercise your right to data portability. If exercising this right adversely affects the rights and freedoms of others, we will be unable to act on your request.

Right to object: The right to object to the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority, or for the protection of legitimate interests. Unless we can demonstrate that compelling legitimate grounds for processing exist that override the interests, rights, and freedoms of the data subject, the processing will be discontinued without undue delay.

Where requests to exercise the above rights are repetitive or manifestly unfounded, we may either charge a reasonable fee for the exercise of the relevant right or refuse to act on the request. If this is the case, you will be informed accordingly.

You can exercise all your rights by contacting us at the e-mail address legal@actumdigital.com.

You can complain to the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

This Privacy Policy is effective as of May 25, 2018, and is updated regularly. Last update November 2025.