Privacy Policy and Cookie Policy

Effective from: 5 June 2026
Data Controller: Abadia a. s.

This Privacy Policy explains how Abadia a. s. processes personal data of website visitors, business partners, persons interested in technical documentation, newsletter subscribers and job applicants. It also explains how we use cookies and similar technologies on our websites.

This Policy applies mainly to the following websites:

www.abadia.cz
www.balkonyalodzie.cz

including their Czech, English and German language versions.

1. Who is the data controller

The data controller is:

Abadia a. s.
Slapy u Tábora 144
391 76 Slapy
Czech Republic

Company ID: 26092719
VAT ID: CZ26092719

E-mail: info@abadia.cz
Phone: 383 835 197
Website: www.abadia.cz

Abadia a. s. has not appointed a Data Protection Officer. Requests and questions concerning personal data protection are handled by the company’s management. You can contact us at info@abadia.cz.

2. What personal data we process

We process only the data we need for a specific purpose. Depending on the situation, this may include in particular the following categories of personal data:

Identification and contact details
First name, surname, e-mail address, phone number, company name, and, where applicable, job title or other information provided in communication.

Enquiry and business communication data
Message content, requested solution, project information, parts of project documentation, communication history, and information necessary for preparing an offer or business cooperation.

Data for sending technical CAD files
First name, company, phone number, e-mail address and information about the technical data requested.

Newsletter and commercial communication data
E-mail address, name, company, information about consent, unsubscribe information, records of sent communications, e-mail opens and link clicks.

Job applicant data
First name, surname, e-mail, phone number, CV, information included in the CV, and, where relevant, information from a publicly available professional profile, such as LinkedIn, if it is relevant to assessing suitability for the position.

Technical and operational website data
IP address, device and browser information, date and time of visit, pages visited, traffic source, cookie consent information and other technical data necessary for the operation and security of the website.

Analytics and marketing tool data
Website behaviour data, conversion measurement, PDF downloads, form submissions, phone or e-mail clicks, product page views, reference views, career interest and newsletter sign-ups.

3. Where we obtain personal data from

We obtain personal data primarily directly from you, for example when you:

• submit an enquiry form,

• request technical or CAD data,

• subscribe to the newsletter,

• contact us by e-mail or phone,

• send us your CV,

• communicate with us as a representative of a customer, supplier or business partner.

Some data is generated automatically when you visit the website, especially technical data, cookies and analytics information. In the case of job applicants, we may also process publicly available professional information to a reasonable extent, for example a public LinkedIn profile, if it is relevant to the recruitment process.

4. Why we process personal data and on what legal basis

4.1 Website operation and security

We process personal and technical data to operate the website, ensure its security, display it correctly, prevent misuse and resolve technical incidents.

Legal basis: legitimate interest in operating, securing and administering the website.

4.2 Handling enquiries and business communication

If you send us an enquiry, we process the data provided in the form and any follow-up communication. We use this data mainly to handle the enquiry, prepare an offer, communicate with you, keep records of the business case and, where necessary, protect legal claims.

In enquiry forms, we may process in particular first name, surname, phone number, e-mail address, company name, message and, where applicable, project documentation or parts of it.

Legal basis: taking steps prior to entering into a contract, performance of a contract, and, where applicable, legitimate interest in B2B communication and keeping records of business cases.

4.3 Sending technical CAD data

If you request technical CAD data through a form, we use the data provided to send you the requested files and, where relevant, to follow up with technical or business communication related to your request.

We use Ecomail to send CAD data automatically. Requesting CAD data is not conditional on subscribing to the newsletter. Newsletter subscription is always a separate and voluntary choice.

Legal basis: taking steps prior to entering into a contract or legitimate interest in handling your request and related B2B communication.

4.4 Newsletter and commercial communications

We send newsletters mainly to existing customers, business partners and persons who have voluntarily subscribed.

The newsletter usually contains project news, product and technical materials, expert articles, information about system solutions, export updates, and, where relevant, company culture and HR-related content. We send the newsletter approximately four times a year.

If you subscribe to the newsletter yourself, we process your data on the basis of consent. If you are an existing customer or business partner, we may also send you commercial communications concerning similar products and services based on the existing customer exception under Czech Act No. 480/2004 Coll., on Certain Information Society Services, always with a simple option to unsubscribe.

Every newsletter contains an unsubscribe link. You can also unsubscribe at any time by e-mailing info@abadia.cz.

In Ecomail, we may evaluate newsletter opens and link clicks to understand whether the content is relevant to recipients.

Legal basis: consent, or legitimate interest and the statutory existing customer exception for commercial communications sent to existing customers and business partners.

4.5 Recruitment and selection procedures

If you send us your CV or respond to a job offer, we process your personal data for the purpose of managing the recruitment process and assessing your suitability for the relevant position.

We process mainly your first name, surname, e-mail address, phone number, CV and information you provide to us. To a reasonable extent, we may also consider publicly available professional information, such as a public LinkedIn profile, if it is relevant to the position.

If we wish to keep your data for future job opportunities, we will ask you for separate consent. This consent is voluntary and does not affect the current selection procedure.

Legal basis: taking steps prior to entering into an employment contract, legitimate interest in assessing publicly available professional information, and, where applicable, consent to retaining data for future job opportunities.

4.6 Website analytics

We use Google Analytics 4 and Google Tag Manager. These tools help us understand how visitors use the website, which pages are useful and whether the website fulfils its business and information function.

We measure mainly traffic, traffic sources, form submissions, PDF downloads, phone or e-mail clicks, product page views, reference views, career interest and newsletter sign-ups.

We use analytics cookies only on the basis of your consent in the cookie banner.

We use Google Search Console for technical SEO and evaluating website performance in search results. We do not use this tool to identify individual website visitors.

Legal basis: consent to analytics cookies, and, where applicable, legitimate interest in basic aggregated website performance analysis, provided this does not involve storing or reading non-essential cookies.

4.7 B2B website monitoring using Leadinfo

We use Leadinfo on our website to help us identify companies that have visited our website and evaluate their interest in our products and services. The purpose is B2B communication and better handling of business opportunities.

Leadinfo may process, in particular, IP address, information about visited pages, visit time, website behaviour, technical visit data and data used to identify a company. We also use features such as session recording or heatmaps, which help us evaluate website behaviour.

Leadinfo does not provide us with the name of a specific individual unless that person provides it to us, for example by submitting a form. We provide the sales team with information at company level, not the identity of a specific visitor.

We activate Leadinfo only for visitors who have given consent to marketing cookies. The subsequent evaluation of company-level website visits and possible business contact at company level are carried out on the basis of our legitimate interest in B2B business development.

Legal basis: consent to marketing cookies for activating tracking technologies and legitimate interest in B2B business development.

4.8 Protection of legal claims and compliance with legal obligations

We may also retain certain data to protect our legal claims, handle complaints, disputes or inspections by public authorities. If a contractual relationship is established, we also process selected data to comply with accounting, tax and other statutory obligations.

Legal basis: compliance with legal obligations and legitimate interest in protecting legal claims.

5. How long we keep personal data

We keep personal data only for as long as necessary for the relevant purpose.

Enquiries and business communication
We keep the data for the time necessary to handle the enquiry, conduct follow-up business communication and for the period during which further business follow-up or protection of legal claims may be relevant. If the enquiry leads to a contractual relationship, we keep the data for the duration of the contractual relationship and subsequently for the periods required by law and for the protection of legal claims.

Orders, contracts, accounting and tax documents
Data related to orders and contractual documentation is generally kept for the duration of the contractual relationship and subsequently for the period required by law, typically up to 10 years for accounting and tax documents, or longer where necessary to protect legal claims.

CAD data and technical documentation
Data from the CAD data request form is kept for the time necessary to send the requested materials and for related technical or business communication. If you also subscribe to the newsletter, newsletter-related data is kept according to the newsletter rules.

Newsletter
Data used for sending newsletters is kept until you unsubscribe, withdraw consent or object to receiving commercial communications. We may keep records of consent, unsubscribes and basic sending logs for a reasonable period afterwards to be able to demonstrate the lawfulness of sending.

Job applicants
We process job applicant data for the duration of the selection procedure. After it ends, we may keep the data for a reasonable period to protect legal claims. For future job opportunities, we keep the data only on the basis of separate consent, for no longer than 24 months.

Cookies and cookie consent
We store cookie consent for 12 months. We store cookie refusal for 6 months. After this period, we may ask you to make your choice again.

Leadinfo
We keep Leadinfo data for the time necessary for B2B traffic evaluation and business communication, no longer than for the duration of the service and in accordance with the supplier’s retention rules. According to the service settings, outdated IP addresses and pseudonymous metrics are deleted or securely overwritten.

Personal data requests
If you exercise any of your rights, we keep data related to handling your request for the time necessary to process it and to demonstrate that we handled it properly.

6. Who we share personal data with

We do not transfer personal data to third parties for their own marketing purposes. Personal data may be processed by our suppliers who help us operate the website, communicate, analyse traffic, send e-mails, manage IT and support business processes.

The main recipients and processors include in particular:

Solidpixels – technical operation, CMS and website hosting.
Google Ireland Limited / Google LLC – Google Analytics 4, Google Tag Manager and Google Search Console.
Ecomail.cz – e-mailing, newsletter and automated sending of CAD data.
Leadinfo B.V. – B2B website monitoring.
Microsoft 365 / Microsoft Ireland Operations Limited – e-mail communication, SharePoint and internal document storage, especially for HR purposes.
External IT provider – IT administration and security.
Legal, accounting or tax advisers – only where necessary to comply with legal obligations or protect legal claims.
Public authorities – only in cases required by law.

For suppliers who process personal data on our behalf, we ensure appropriate contractual and security safeguards.

7. Transfers of personal data outside the EU/EEA

We process personal data primarily within the European Union and the European Economic Area.

For some global suppliers, especially tools provided by Google or Microsoft group companies, data may in certain circumstances be transferred or remotely accessed from outside the EU/EEA. In such cases, we rely on appropriate legal mechanisms under the GDPR, in particular adequacy decisions, standard contractual clauses and additional technical and organisational measures.

8. How we protect personal data

We adopt appropriate technical and organisational measures to protect personal data. Access to personal data is limited to persons who need it for their work. We use access rights management, internal rules for working with data, restricted access to HR documents on SharePoint, a contractually bound external IT provider and security measures in the systems we use.

For key tools, we are also gradually implementing two-factor authentication and regularly reviewing access settings.

9. Automated decision-making and profiling

We do not carry out automated decision-making that would have legal or similarly significant effects on you.

We may evaluate website behaviour, newsletter opens, link clicks or company-level website visits to improve communication and B2B sales work. This evaluation does not itself lead to an automated decision concerning a specific individual.

10. Your rights

In connection with the processing of your personal data, you have in particular the following rights:

Right of access
You can ask us whether we process your personal data and request a copy of it.

Right to rectification
You can ask us to correct inaccurate or incomplete data.

Right to erasure
You can ask us to delete data if we no longer have a legal reason to process it.

Right to restriction of processing
You can ask us to temporarily restrict the processing of your data.

Right to data portability
For data processed automatically on the basis of consent or a contract, you can request that it be provided in a structured, commonly used and machine-readable format.

Right to object
You can object to processing based on legitimate interest, including B2B commercial communication.

Right to withdraw consent
If we process data on the basis of consent, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Right to lodge a complaint
If you believe that we process your personal data in violation of applicable law, you may lodge a complaint with the Czech supervisory authority.

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
www.uoou.gov.cz

You can exercise your rights by e-mailing info@abadia.cz. We usually respond to requests within one month. In justified cases, this period may be extended in accordance with the GDPR.

Cookie Policy

11. What cookies are

Cookies are small files that a website stores in your browser. They help ensure the correct functioning of the website, save your settings, measure traffic or evaluate the interest of company visitors in our products and services.

Other technologies may work in a similar way, such as local storage, session storage, tracking pixels or tracking scripts. For simplicity, this Policy refers to them collectively as cookies or similar technologies.

12. What types of cookies we use

Essential cookies

These cookies are necessary for the functioning of the website, its security, saving cookie settings or correct technical display. Without them, the website may not function properly. Essential cookies do not require your consent.

Functional cookies

These cookies help remember certain choices, such as the website language. If they are not strictly necessary, we use them according to your cookie banner settings.

Analytics cookies

These cookies help us measure traffic and improve the website. We mainly use Google Analytics 4. Analytics cookies are activated only after your consent.

Marketing and B2B monitoring cookies

These cookies help us evaluate the interest of company visitors in our products, services and technical documentation. This category mainly includes Leadinfo. These cookies and tracking technologies are activated only after your consent.

13. Cookie consent settings

When you first visit the website, a cookie banner is displayed. You can:

• accept all cookies,

• reject all non-essential cookies,

• set individual cookie categories.

You can change or withdraw your consent at any time through the Cookie Settings link available in the website footer.

We store cookie consent for 12 months. We store cookie refusal for 6 months. After this period, we may ask you to make your choice again.

14. Overview of cookies used

The current list of cookies may change depending on the technical configuration of the website and the active services. Below is an overview of cookies and similar technologies that we use or may use depending on your consent settings.

Essential and functional cookies

Analytics cookies

Marketing and B2B monitoring cookies

After every major website or measurement tool change, we recommend performing a new cookie scan and updating this overview accordingly.

15. Changes to this Policy

We may update this Policy from time to time, especially if we change the tools we use, the purposes of processing, cookie settings or legal requirements.

The current version is always available on our website.