alupol@alupol.cz
GDPR & PRIVACY

Privacy Policy and Cookie Statement

Alupol s.r.o. places utmost importance on protecting your privacy and ensuring the security of your personal data. This policy provides a transparent overview of what personal data we collect, why we process it, how long we retain it, and what rights you have under Regulation (EU) 2016/679 (GDPR) and applicable legislation.

Last updated: March 1, 2026 • Scope: For all visitors and customers of Alupol s.r.o.

Your cookie settings on this device

You can review or adjust your preferences regarding analytical and marketing cookies at any time by clicking the button on the right, or later via the floating cookie icon in the bottom-left corner of the screen.

1 1. Data Controller

The controller of your personal data according to Art. 4(7) GDPR is:

Alupol s.r.o.
Chýnovská 535, 391 11 Planá nad Lužnicí
IČO: 26106876 | DIČ: CZ26106876
Registered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, File 14389
E-mail: alupol@alupol.cz
Phone: +420 381 297 121

2 2. Categories of processed data, purposes and legal grounds

We only process personal data that you provide to us directly or that is generated in connection with using our website and services.

A. Handling inquiries, preparing non-binding quotes and custom pricing

Processed data: First name, surname, email address, phone number, installation city / postal code, technical pool specifications and selected model, additional notes.

Legal basis: Art. 6(1)(b) GDPR — Performance of a contract or taking steps prior to entering into a contract at your request.

Retention period: For the duration of contract negotiations and execution, subsequently for warranty and statutory tax retention periods (typically 5 to 10 years).

B. Order fulfillment, manufacturing, delivery, and professional installation

Processed data: Billing and delivery address, contact details for technicians and installation crew, payment details, and service records.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (compliance with statutory tax and accounting obligations).

Retention period: For the duration of the contractual relationship and 10 years thereafter in accordance with tax regulations.

C. Website security, abuse prevention, and technical operations

Processed data: Anonymized IP addresses (hash), web server system logs, anti-spam form verification (Google reCAPTCHA v3).

Legal basis: Art. 6(1)(f) GDPR — Legitimate interests of the controller in ensuring cyber security and protection against DDoS and spam.

Retention period: Server logs are rotated and retained for a maximum of 30 to 90 days.

D. Traffic analytics and personalized marketing (cookies)

Processed data: Cookie identifiers, anonymized traffic statistics, page interactions, conversion data.

Legal basis: Art. 6(1)(a) GDPR — Your voluntary and explicit consent granted via the cookie banner.

Retention period: Depending on cookie type, up to 12 to 24 months, or until consent is revoked.

3 3. What are cookies and how we handle them

Cookies are small text files that websites store in your browser or device. They help the website function properly, remember your choices, and enable us to evaluate anonymized traffic data to continually improve our services.

Our website fully supports the latest Google Consent Mode v2 standard. This ensures no analytics or marketing scripts run before you give your explicit consent in the cookie banner.

Category Description and purpose Legal basis Default state
Necessary Cookies These cookies are required for technical website operation, security, and proper submission of inquiry forms. They cannot be disabled. Legitimate interest (Art. 6(1)(f) GDPR) Always active
Analytical Cookies Google Analytics 4 (_ga, _gid) — Allow us to anonymously measure site traffic and understand which enclosure models interest you the most. Consent (Art. 6(1)(a) GDPR) By choice
Marketing Cookies Google Ads (_gcl_au, IDE) and social networks — Measuring inquiry conversions and displaying relevant ALUPOL ads. Consent (Art. 6(1)(a) GDPR) By choice
Functional Cookies Store your preferences and selected language for a more convenient browsing experience. Consent (Art. 6(1)(a) GDPR) By choice

4 4. Overview of specific cookies used on the ALUPOL website

Cookie name Provider Purpose of use Expiration
alupol_consent Alupol s.r.o. (This website) Stores the status of your consent for cookie categories. 12 months
PHPSESSID Web server Maintains technical user session during the website visit. Session (closing the browser)
_GRECAPTCHA Google Ireland Ltd. Protects inquiry forms against automated bots and spam. 6 months
_ga, _ga_* Google Analytics 4 Anonymized statistics on website traffic and user interactions. 2 years
_gid Google Analytics Distinguishes unique visitors for daily statistical metrics. 24 hours
_gcl_au, IDE Google Ads / DoubleClick Measures inquiry conversions and optimizes ad campaigns. 90 days / 1 year
_fbp Meta Platforms Ireland Ltd. Measures performance of advertising campaigns across Facebook & Instagram. 90 days

5 5. Recipients of personal data and processors

We do not sell or provide your personal data to unauthorized third parties. Only vetted processors under Art. 28 GDPR data processing agreements have access:

  • Providers of web hosting, IT systems management, and databases.
  • Providers of analytics and marketing tools (Google Ireland Ltd., Meta Platforms Ireland Ltd.).
  • Transport / logistics companies and our internal installation crews (strictly for delivery and installation at your address).
  • Providers of accounting, tax, and legal advisory services in compliance with statutory obligations.
  • State authorities and public institutions where required by applicable law.

6 6. Your rights under the GDPR

In connection with the processing of your personal data, you have the following rights which you may exercise free of charge at any time:

Right of access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether your data is being processed, and to receive a copy of that data.

Right to rectification (Art. 16 GDPR)

You have the right to request without undue delay the rectification of inaccurate or completion of incomplete personal data.

Right to erasure (Art. 17 GDPR)

„Right to be forgotten“ – where data is no longer necessary or when you revoke your consent.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request restriction of processing, e.g., while verifying data accuracy.

Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, machine-readable format for transmission to another controller.

Right to object (Art. 21 GDPR)

You have the right to object to processing based on legitimate interests of the controller.

Do you have questions about privacy or cookies?

If you have any questions, requests to exercise your rights, or comments, please do not hesitate to contact us. We will respond without undue delay, within 30 days at the latest.

✉ Send email to (alupol@alupol.cz) Inquire pool enclosure →