This notice concerns individuals identifiable in company records, including sole traders, professionals and named employees or representatives. A business address may also be a home address. Company data is personal data wherever it relates to an identifiable individual. Website visitors and enquiries are covered by the separate privacy policy.
Martin Adamec
IČO: 19552319
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
info@kontaktyb2b.pl
Depending on the source and the agreed dataset, records may contain business name, a person’s name associated with the business, published business identifiers, business address and region, published telephone, email and website, and activity category. Only relevant business data should be included. Special-category data, criminal-offence data and private identity numbers are not part of the offered export. Source availability does not authorise inclusion of unnecessary personal details.
All data comes from publicly accessible sources. A detailed description is on the Data sources and methodology page.
The controller does not download data directly from the Central Register and Information on Economic Activity (CEIDG) or from the National Court Register. It uses GUS data (REGON register) only to determine the overall size of the market, without data on individual entities.
On request, the controller will tell you which source the data in your record comes from.
The purpose is to organise and maintain business information and supply agreed exports for lawful business research, market analysis and CRM work. Any subsequent outreach requires its own legal basis and compliance with communications law; the dataset provides no marketing consent. It is not offered for sensitive-data processing, consumer credit decisions or automated decisions producing legal or similarly significant effects.
The intended basis for relevant business-data processing is Article 6(1)(f) GDPR: our and customers’ interest in reliable business information and lawful business research. Necessity and the individual’s interests, rights and reasonable expectations must be assessed for the actual processing. Being public or useful for marketing does not settle that balance. Safeguards include limiting the fields to business relevance, assessing accuracy and sources, handling rights requests and preventing re-inclusion after a justified objection. This notice does not assert that every record has already passed an individual assessment.
Recipients include business buyers of agreed exports, acting as independent controllers, and necessary hosting or IT providers under applicable safeguards. Disclosure to authorities occurs where law requires it. Buyers must have their own basis, fulfil transparency duties and respect objections; purchase is not permission for unrestricted contact. An objection to our processing does not itself notify every unrelated sender of advertising.
Before an export involving personal data is supplied to a recipient outside the EEA, the recipient, intended use and applicable transfer mechanism must be assessed. GDPR Chapter V applies, including adequacy decisions or appropriate safeguards where relevant. Contact the controller for information about transfers affecting your record and the applicable safeguards.
Personal business records are kept only while necessary for the stated lawful purpose and reasonably current. Records identified as no longer relevant or inaccurate are reviewed and corrected, restricted or removed as appropriate, taking account of rights requests and legal obligations. After an upheld objection or erasure request, only the minimal identifiers needed to prevent re-inclusion may be retained; necessity is reviewed. Request correspondence is retained as necessary to handle and demonstrate compliance, not indefinitely by default.
You have rights of access, rectification, erasure and restriction under the GDPR. Portability applies only where its legal conditions are met, not merely because processing relies on legitimate interests. You may object to legitimate-interest processing on grounds relating to your situation; we must stop unless overriding compelling grounds or legal claims justify continuation. A direct-marketing objection needs no reason. Send a request to the controller or use the objection form. Normally we respond within one month; a lawful extension is explained within that month. Only proportionate additional identity information may be requested where reasonable doubts exist. Required notifications of rectification, erasure or restriction are handled under Article 19 GDPR; this is not an automatic recall of every delivered file.
You may complain to the Czech Úřad pro ochranu osobních údajů (uoou.gov.cz) or another competent authority, including the Polish UODO (uodo.gov.pl).
Article 14 GDPR requires information within a reasonable period, at most one month after obtaining personal data, or earlier at the first communication or disclosure where applicable. This public notice supplements that duty; it does not automatically replace individual information. An exception requires a documented legal justification in the specific circumstances. Neither public availability nor a large number of records alone establishes an exemption.
This notice is dated 16 October 2026. Updates will reflect material changes to data sources, purposes or processing. You may ask the controller about the source, recipients and processing of your own record.
