Privacy Policy
Last updated: 18 August 2026
WC-BDT s.r.o. respects your privacy and is committed to protecting your personal data. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Czech data protection legislation, and other applicable legal requirements.
This Privacy Policy explains how WC-BDT s.r.o. collects, uses, stores, protects, and otherwise processes personal data when you visit our website, contact us, use our services, or otherwise interact with us.
1. Data Controller
The data controller responsible for your personal data is:
WC-BDT s.r.o.
Company ID (IČO): 08718059
Registered address: Petra Křičky 2696/21, Moravská Ostrava, 702 00 Ostrava, Czech Republic
Email: info@wc-bdt.com
Website: https://wc-bdt.com/
For the purposes of the GDPR, WC-BDT s.r.o. acts as the data controller where it determines the purposes and means of processing personal data.
If you have any questions regarding the processing of your personal data or wish to exercise your rights, please contact us at info@wc-bdt.com.
2. What Is Personal Data?
Personal data means any information relating to an identified or identifiable natural person.
Depending on how you interact with WC-BDT s.r.o., we may process the following categories of personal data:
- name and surname;
- company name and professional position;
- email address;
- telephone number;
- billing or delivery address, where applicable;
- information provided through contact forms;
- information contained in correspondence with us;
- information necessary for the performance of a contract;
- invoicing and payment information;
- IP address;
- browser and device information;
- information concerning the use of our website;
- any other information you voluntarily provide to us.
We only collect personal data that is adequate, relevant, and necessary for the purposes for which it is processed.
3. How We Collect Personal Data
We may collect personal data:
- directly from you when you contact us;
- when you submit a contact or enquiry form;
- when you request information, a quotation, or our services;
- when you enter into or perform a contract with us;
- when you communicate with us by email or telephone;
- when you use our website;
- automatically through technical technologies such as server logs and cookies;
- from business partners or other legitimate sources where permitted by applicable law.
4. Purposes of Processing
WC-BDT s.r.o. may process personal data for the following purposes:
4.1. Responding to enquiries
We process contact information to respond to enquiries, requests for quotations, questions, complaints, and other communications.
4.2. Contractual purposes
We process personal data where necessary to prepare, enter into, and perform contracts, including providing requested products or services.
4.3. Accounting and invoicing
Personal data may be processed for invoicing, payment processing, accounting, tax reporting, and other financial or legal obligations.
4.4. Compliance with legal obligations
We may process personal data where processing is necessary to comply with a legal obligation applicable to WC-BDT s.r.o.
4.5. Legitimate business interests
We may process personal data where necessary for our legitimate interests, including:
- maintaining and improving our website and services;
- ensuring IT and information security;
- preventing fraud, abuse, and unauthorised activities;
- managing business relationships;
- protecting our legal rights;
- establishing, exercising, or defending legal claims;
- maintaining business and administrative records.
When relying on legitimate interests, we consider whether our interests are overridden by the interests, rights, or freedoms of the affected individual.
4.6. Marketing
Where permitted by applicable law, we may use contact information to send information about our services, products, offers, or other business communications.
Where consent is legally required, marketing communications will only be sent after obtaining the appropriate consent.
You may withdraw your consent or object to direct marketing at any time.
5. Legal Bases for Processing
WC-BDT s.r.o. processes personal data only where there is a valid legal basis under the GDPR.
Depending on the circumstances, processing may be based on:
- Article 6(1)(a) GDPR – Consent: where you have given your consent to the processing;
- Article 6(1)(b) GDPR – Contract: where processing is necessary to enter into or perform a contract with you;
- Article 6(1)(c) GDPR – Legal obligation: where processing is necessary to comply with a legal obligation;
- Article 6(1)(f) GDPR – Legitimate interests: where processing is necessary for our legitimate interests, provided that these interests are not overridden by your fundamental rights and freedoms.
Where processing is based on consent, you have the right to withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Website Data
When you visit wc-bdt.com, certain technical information may be collected automatically, depending on the configuration of our website and hosting infrastructure.
This information may include:
- IP address;
- browser type and version;
- operating system;
- device information;
- date and time of access;
- pages visited;
- technical information relating to website security and performance.
Such information may be used to operate, maintain, secure, and improve our website and to detect and prevent malicious or unauthorised activity.
7. Contact Forms and Email Communications
If you contact WC-BDT s.r.o. by email or through a contact form, we process the information you provide to us.
This may include your name, email address, telephone number, company information, and the content of your message.
We use this information to:
- respond to your enquiry;
- provide requested information;
- prepare a quotation;
- provide requested services;
- establish or perform a contractual relationship;
- maintain appropriate business records.
We will not use your information for incompatible purposes unless required or permitted by applicable law.
8. Cookies
Our website may use cookies and similar technologies.
Cookies may be used for:
- essential website functionality;
- security;
- remembering preferences;
- website analytics;
- measuring website performance;
- marketing and advertising, where applicable.
Strictly necessary cookies may be used where permitted by applicable law.
Non-essential cookies, including certain analytics and marketing cookies, will only be used where the required legal basis, including consent where necessary, has been obtained.
Where third-party services are used on our website, information about those services and the relevant cookies may be provided through our cookie banner or separate Cookie Policy.
9. Disclosure of Personal Data
We may disclose personal data to the following categories of recipients where necessary and legally permitted:
- authorised employees and representatives of WC-BDT s.r.o.;
- IT and hosting service providers;
- email and communication service providers;
- accounting and tax service providers;
- legal and professional advisers;
- payment service providers;
- contractual business partners;
- government authorities, courts, regulators, or other public bodies where required by law.
Where third-party service providers process personal data on our behalf, we take appropriate measures to ensure that such processing is carried out in accordance with the GDPR.
10. International Transfers
WC-BDT s.r.o. aims to process personal data within the European Economic Area (“EEA”).
Where personal data is transferred to a country outside the EEA, we will ensure that the transfer is carried out in accordance with Chapter V of the GDPR.
Depending on the circumstances, transfers may be based on:
- an adequacy decision of the European Commission;
- Standard Contractual Clauses approved by the European Commission;
- other appropriate safeguards permitted by the GDPR.
11. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.
The retention period depends on the nature of the data and the purpose of processing.
For example:
- contractual information may be retained during the contractual relationship and afterwards for the period necessary to comply with legal obligations or protect our legal rights;
- accounting and tax records are retained for the periods required by applicable legislation;
- contact and enquiry information may be retained for as long as reasonably necessary to handle the enquiry and maintain appropriate business records;
- information processed based on consent may be retained until consent is withdrawn, unless another legal basis permits or requires continued processing.
After the applicable retention period expires, personal data will be securely deleted, anonymised, or otherwise disposed of in accordance with applicable law.
12. Your Data Protection Rights
Subject to the conditions and limitations set out in the GDPR, you have the following rights:
Right of Access
You have the right to request confirmation as to whether we process your personal data and, where applicable, to request access to your personal data and certain information about its processing.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data.
This right is not absolute. We may be required to retain certain information to comply with legal obligations or to establish, exercise, or defend legal claims.
Right to Restriction of Processing
Under certain circumstances, you may request that we restrict the processing of your personal data.
Right to Data Portability
Where applicable, you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format and, where technically feasible, request its transmission to another controller.
Right to Object
You have the right to object to processing based on legitimate interests where the conditions of the GDPR are met.
You also have an absolute right to object to the processing of your personal data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Rights Regarding Automated Decision-Making
Where applicable, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, subject to the exceptions provided by the GDPR.
13. Exercising Your Rights
To exercise any of your data protection rights, please contact us:
WC-BDT s.r.o.
Petra Křičky 2696/21
Moravská Ostrava
702 00 Ostrava
Czech Republic
Email: info@wc-bdt.com
Please provide sufficient information to allow us to identify you and understand your request.
Where necessary and proportionate, we may request additional information to verify your identity before processing your request.
We will respond to valid requests within the timeframe required by the GDPR.
Requests are generally free of charge. However, where permitted by the GDPR, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
14. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR or applicable data protection legislation, you have the right to lodge a complaint with a competent data protection supervisory authority.
In the Czech Republic, the competent supervisory authority is:
Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
Email: posta@uoou.gov.cz
Website: https://uoou.gov.cz/
You may also have the right to seek a judicial remedy in accordance with applicable law.
15. Data Security
WC-BDT s.r.o. implements appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- accidental loss;
- destruction;
- alteration;
- unauthorised disclosure;
- unlawful processing.
Access to personal data is limited to persons who require access for legitimate business purposes.
However, no method of electronic transmission or storage can be guaranteed to be completely secure. We therefore continuously review and improve our security measures according to the nature and risks of the processing.
16. Personal Data Breaches
In the event of a personal data breach, WC-BDT s.r.o. will assess the incident and take appropriate measures in accordance with the GDPR and applicable law.
Where legally required, we will notify the competent supervisory authority and/or affected individuals within the applicable statutory time limits.
17. Children's Data
Our website and services are not specifically directed at children.
WC-BDT s.r.o. does not intentionally collect personal data from children where such collection would be unlawful.
If a parent or legal guardian believes that a child has provided personal data to us unlawfully, they may contact us at info@wc-bdt.com.
18. Special Categories of Personal Data
WC-BDT s.r.o. does not generally seek to collect special categories of personal data, including information concerning health, biometric data, political opinions, religious beliefs, or other categories referred to in Article 9 GDPR.
If such information is voluntarily provided to us, we will process it only where there is an appropriate legal basis and where required safeguards are in place.
19. Provision of Personal Data
Some personal data may be necessary for us to enter into or perform a contract, respond to your request, provide our services, or comply with legal obligations.
If you do not provide information that is necessary for these purposes, we may be unable to provide certain services, respond to your request, or enter into or perform a contract.
Where the provision of information is optional, this will be indicated where appropriate.
20. Automated Decision-Making and Profiling
WC-BDT s.r.o. does not currently intend to use personal data for decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals, except where permitted by the GDPR and appropriate safeguards are implemented.
If our processing activities change in a way that involves such automated decision-making or profiling, we will provide the information required by applicable data protection legislation.
21. Data Protection Principles
WC-BDT s.r.o. processes personal data in accordance with the fundamental principles of the GDPR, including:
- lawfulness, fairness, and transparency;
- purpose limitation;
- data minimisation;
- accuracy;
- storage limitation;
- integrity and confidentiality;
- accountability.
We are committed to ensuring that personal data is processed responsibly and only for legitimate and clearly defined purposes.
22. Changes to This Privacy Policy
WC-BDT s.r.o. may update this Privacy Policy from time to time to reflect:
- changes in applicable legislation;
- changes to our services;
- changes to our business processes;
- changes to technologies used on our website;
- improvements to our privacy and security practices.
The updated version will be published on our website and will include the date of the latest revision.
Where required by law, we will take reasonable steps to notify affected individuals of material changes.
23. Contact Us
If you have any questions regarding this Privacy Policy or the way WC-BDT s.r.o. processes personal data, please contact us:
WC-BDT s.r.o.
Company ID (IČO): 08718059
Address: Petra Křičky 2696/21, Moravská Ostrava, 702 00 Ostrava, Czech Republic
Email: info@wc-bdt.com
Website: https://wc-bdt.com/
WC-BDT s.r.o. is committed to respecting the privacy of individuals and to maintaining appropriate standards of data protection and GDPR compliance.
Last updated: 18 August 2026
Version: 2.0