Who is responsible
The controller of your personal data is GAFAS s.r.o., Rooseveltova 892/49, 160 00 Praha 6, Czech Republic, Company ID 27085155, entered in the commercial register kept by the Municipal Court in Prague, Czech Republic, Section C, File 95132.
For anything related to your data, write to info@gafas.cz. We do not have a designated data protection officer; this address reaches the people who are responsible.
What this notice covers
This notice covers the website gafasbrands.com, the forms on it, and the business e-mails we send to opticians, distributors and eyewear brands. Our B2B partner portal has its own terms for registered partners.
What data we process
- Business contact data — name, work e-mail address, company, role, country and city, and, if you give it, a phone number and website.
- What you write to us — the content of a form or e-mail, such as your message, the brands you are interested in or the number of stores.
- Outreach records — when we last wrote to a business address, and whether the message was delivered, answered or opted out.
- Technical data — IP address and browser information in server logs, kept for security and troubleshooting.
We do not ask for, and do not want, sensitive data of any kind.
Why we use it, and on what legal basis
- Answering your enquiry
- When you write to us or use a form, we use your details to reply and, where it leads there, to prepare a business relationship. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)).
- Business outreach (B2B)
- We write to businesses whose work is relevant to our own brands — opticians, eyewear distributors and eyewear brands — at business addresses they publish themselves. Legal basis: our legitimate interest in presenting our products to other businesses (Art. 6(1)(f) GDPR). You can object at any time, and we always honour it.
- Keeping your opt-out
- If you ask us to stop, we keep the address (and, on request, the company domain) on a suppression list so that we never write again. Legal basis: our legitimate interest and legal obligation to respect your objection (Art. 6(1)(c) and (f), Art. 21 GDPR).
- Running the website
- Delivering pages, remembering your language, protecting forms against abuse and keeping the site secure. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
Where we got your contact
If you did not contact us first, your business address comes from public business sources: your company's own website, exhibitor lists of eyewear trade fairs, and public business registers. We do not buy address lists and we do not contact private individuals.
More on this, in plain words: Why you heard from us.
Who receives it
We never sell, rent or share your data with anyone for their own purposes. Only these service providers process it on our behalf, under a data processing agreement:
- Amazon Web Services — delivery of our e-mail through Amazon Simple Email Service (SES), in an EU region.
- Our own infrastructure — the website, the forms and our campaign tool run on servers we control.
We keep data in the European Union. Should a transfer outside the European Economic Area ever become necessary, we would rely on appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep it
- Enquiries — 24 months after our last exchange, then anonymised, unless they became part of a business relationship (then for as long as the law requires us to keep business records).
- Outreach records — for as long as the outreach is relevant; deleted or anonymised once it ends.
- Suppression list — kept for as long as needed to honour your opt-out. It holds only the address or domain and the date.
- Server logs — a short period, for security only.
Your rights
You can ask us at any time to:
- see the data we hold about you (access);
- correct it (rectification);
- delete it (erasure);
- stop using it for outreach — an objection to direct marketing is always honoured, without conditions;
- object to other processing based on legitimate interest;
- restrict its use while a question is resolved;
- receive it in a portable format (portability).
Write to info@gafas.cz. We answer within one month, free of charge. To stop our e-mails, the quickest way is the unsubscribe link in any of our messages or the stop form.
Complaints
If you believe we handle your data wrongly, please tell us first — we would like to put it right. You also have the right to complain to a supervisory authority; in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), www.uoou.cz, or the authority in the country where you live or work.
Changes to this notice
When our practice changes, we update this page and the date at the top. We do not reduce your rights without telling you.