TOMATEX

Who processes your data

The controller of personal data is TOMATEX Otrokovice, a.s., Company ID (IČO) 25582232, with its registered office at Průmyslový areál TOMA, building 48, tř. Tomáše Bati 1678, 765 02 Otrokovice, Czech Republic.

In matters of personal data protection, you can contact us by phone at +420 577 662 277 or by e-mail at tomatex@tomatex.cz.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR), and we keep it only for as long as necessary for the purpose for which it was collected.

Why we process your data

  • provision of services and performance of contracts,
  • operational activities of the company,
  • bookkeeping and fulfilment of tax obligations,
  • debt collection,
  • compliance with legal obligations,
  • direct marketing,
  • protection of property and persons,
  • handling enquiries sent via the contact form on this website,
  • measuring website traffic.

The last two purposes relate exclusively to this website and are described below.

Contact form

When you send us an enquiry via the form on the Contact page, we process the data you enter yourself: name, company name, e-mail address, phone number, subject of the enquiry, requested technology, message text and any attachments.

The legal basis is taking steps at your request prior to entering into a contract, or our legitimate interest in handling your enquiry.

What happens to the data:

  • The enquiry is stored in the website database. The database is operated by MongoDB, Inc. in a data centre in Frankfurt am Main, i.e. in Europe.
  • Attachments are stored in storage provided by Vercel Inc., also in Europe.
  • An e-mail with the enquiry is sent to our sales department via the Resend service. At the same time, we send an automatic confirmation to your address that the enquiry has been received.
  • A record of the e-mail being sent is kept so that we can demonstrate that the enquiry was delivered.

We keep enquiries for two years from receipt. If a contractual relationship arises from the enquiry, the retention period is governed by the rules for archiving contractual and accounting documents.

Who we share your data with

Your data may be processed by our contractual processors — providers of accounting, legal and IT services. Data may also be disclosed to courts, law enforcement authorities and other public authorities to the extent required by law.

The following providers are involved in operating this website:

  • Vercel Inc. — website hosting and attachment storage, Europe
  • MongoDB, Inc. — content and enquiry database, Frankfurt am Main, Europe
  • Resend — sending e-mails from the contact form
  • Google Ireland Limited — traffic measurement, only if you give your consent
  • OpenFreeMap — map data on the Contact page

Transfers to countries outside the European Union are based on standard contractual clauses approved by the European Commission.

Map on the Contact page

The map on the Contact page is loaded from the OpenFreeMap project and uses data from OpenStreetMap. When the map is displayed, your IP address and information about the area shown are made available to the map data provider. The map does not use cookies and does not require any user account.

Traffic measurement

The website uses Google Analytics 4. Measurement starts only after you give your consent in the cookie banner — until then, the measurement script is not loaded at all and no data is sent. The website uses Consent Mode v2.

You can change or withdraw your consent at any time; a link to the consent settings is in the website footer.

The Google Analytics account is managed under a contract by our marketing agency, which has access to it as a processor.

For details about cookies, see the separate page Cookies.

What the website does not do

For completeness, we also list what does not take place on this website:

  • Fonts are stored directly on the website server. When a page is displayed, no requests are sent to third-party servers to load fonts.
  • The website does not use advertising or remarketing tools.
  • The website does not use social media buttons that would track visitors.

Your rights

With regard to your personal data, you have the right to:

  • obtain confirmation as to whether we process your data,
  • access your data,
  • request its rectification or completion,
  • request its erasure,
  • request restriction of processing,
  • object to processing,
  • data portability.

You can exercise your rights using the contact details given at the beginning of this policy. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

Security

We protect personal data by technical and organisational measures in line with applicable regulations. Data transfer between your browser and the server is encrypted. Access to the website administration is protected by login and is available only to authorised persons.

Effective date

This policy is effective from 1 October 2026.