Privacy Policy

1. Scope of this Policy

This Privacy Policy explains how we process personal data when you visit our website, contact us, make a business enquiry, or otherwise interact with Defendure. It applies to all personal data processed under Regulation (EU) 2016/679 (the “GDPR”) and relevant local laws.

2. Controller & How to Contact Us

Controller: JM DEFENDURE s.r.o., Žižkova 1897, 508 01 Hořice, Czech Republic, Company ID (IČO): 22540067.

How to contact us: Please use the email address and/or phone number listed on our Contact page for privacy enquiries. If we appoint a Data Protection Officer (DPO) in the future, we will update this section accordingly.

3. Personal Data We Process

Depending on your interaction with us, we may process the following categories of data:

• Identity & contact data: name, surname, company, postal address, email, phone.
• Transactional data: records of enquiries, offers, orders, deliveries, and related communications.
• Technical & usage data: IP address, device identifiers, browser type, pages viewed, timestamps, referrers.
• Marketing preferences: newsletter opt-in/opt-out, interaction with our emails (e.g., opens/clicks).
• Cookies & similar technologies: see section Cookies & Online Identifiers.

We do not intentionally collect special categories of personal data. Please do not share such data with us.

4. Purposes & Legal Bases

We process personal data for the purposes and under the legal bases below (Art. 6 GDPR):

• Contract performance (Art. 6(1)(b)): to respond to enquiries, prepare quotations, supply products/services, and handle related communications.
• Legitimate interests (Art. 6(1)(f)): to protect our business (IT security, fraud prevention), improve our website and services, and perform direct B2B marketing in a proportionate way with an easy opt-out.
• Legal obligations (Art. 6(1)(c)): to comply with accounting, tax, consumer-protection and other statutory duties.
• Consent (Art. 6(1)(a)): for optional analytics/marketing cookies and newsletters (where required). You can withdraw consent at any time, without affecting prior processing.

5. Recipients & Processors

We share data only as necessary and subject to appropriate safeguards:

• Service providers (processors): web hosting and maintenance, email/newsletter platform, analytics, advertising and tag management tools, professional advisers (IT, legal, tax).
• Logistics & carriers: if we arrange delivery of goods or samples.
• Public authorities: where required by law or to exercise/defend legal claims.

Key third-party tools we may use include: Google Analytics, Google Ads, and Google Tag Manager; and an email platform (e.g., Ecomail) for newsletters. We maintain data-processing agreements with our processors.

6. Cookies & Online Identifiers

We use necessary cookies to operate the site and (subject to your consent where required) analytics and/or marketing cookies to understand usage and improve our services. Detailed information, including cookie names, providers, purposes, lifetimes and how to change your choices, is available in our Cookie Policy and consent banner.

You can modify or withdraw your cookie consent at any time via the cookie settings link in the site footer or your browser settings.

7. International Transfers

If personal data is transferred outside the EU/EEA (e.g., to tool providers in the United States), we implement appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and, where necessary, supplementary measures. Copies or information about these safeguards are available on request.

8. Retention

We keep personal data only for as long as necessary for the purposes described above:

• Contract & enquiry records: typically for the limitation period required to establish, exercise or defend legal claims and to fulfil tax/accounting duties.
• Marketing data: until you opt out or withdraw consent, or until it becomes stale under our suppression rules.
• Technical logs: for short operational/security periods unless longer retention is needed to investigate incidents.

After the retention period ends, data are securely deleted or anonymised.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including restricted access, encryption in transit where applicable (TLS), secure configuration of our systems, least-privilege practices, staff confidentiality, and vendor due diligence.

10. Your GDPR Rights

Under the GDPR, you have the right to request access to your personal data, rectification, erasure, restriction, and data portability, and the right to object to processing based on our legitimate interests or to direct marketing. Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us using the details on the Contact page. We will respond without undue delay and within one month where feasible.

11. Children’s Data

Our website and services are not intended for children under the age required by law for valid consent. We do not knowingly collect children’s data.

12. Changes to this Policy

We may update this Policy from time to time to reflect legal, technical or business developments. The “Last updated” date shows the latest version. Significant changes will be highlighted on this page.

13. Contact & Complaints

If you have concerns about our processing, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with your local data protection authority. In the Czech Republic this is the Úřad pro ochranu osobních údajů (Czech DPA).