PRIVACY POLICY of the companies in the Bonett Group issued in connection with the Regulation of the European Parliament (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR")
1. Basic provisions
1.1 This data protection policy (the "Policy") of Bonett Group, a.s. ("Bonett") summarises the data protection practices and processes that Bonett, as a data controller, applies in its business activities and in the provision of services to its customers.
1.2 This Policy is also applicable to the relationship with other companies of the Bonett Group, in particular Bonett Group a.s. and Bonett Energie a.s., Bonett EUROGAS, and other Bonett companies. For any verification, please contact us using the form within this website.
2. Lawful reason for processing personal data
2.1 The processing is necessary for the purposes of the performance of a contract to which the data subject is a party or for the implementation of measures taken prior to the conclusion of the contract at the request of the data subject.
2.2 Processing is necessary for the purposes of the legitimate interests of the controller or third party concerned, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring data protection, in particular where the data subject is a child.
3. Scope and purposes of the processing of personal data
3.1 Bonett processes personal data, i.e. any information about an identified or identifiable natural person, where an identifiable natural person means a natural person who can be identified, directly or indirectly, by reference to an identifier, in particular a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, for the purposes set out in more detail below in paragraphs 3.2 to 3.5 of this Policy.
3.2 For the purpose of fulfilling the contractual relationship between Bonett and the Customer, including ensuring changes to the terms of the contract, ensuring settlement of payments (payment processing) and including the provision of any additional operational and information services and support, Bonett processes (may process) the Customer's personal data to the following extent:
Data that has (may have) a material impact on the parameters of the service/delivery offered/negotiated:
- Name and surname,
- Residential address,
- Date of birth, ID number,
- Identification number and tax identification number, if applicable,
- Electronic mail address,
- Telephone number,
- Account number, Bank,
- Alternatively: delivery address, information from the internet browser used, or other necessary additional data or technical parameters that have (may have) a significant impact on the parameters of the service/delivery under discussion.
Data stored for the protection of property and persons:
- Type and registration number of the customer's vehicle(s),
- Identification of customer cards issued,
- Records of all refuelling operations carried out using the customer card issued to the customer,
- CCTV footage at Bonett filling and refuelling stations equipped with such CCTV; such footage shall be taken and retained for the purpose of improving service for the period of time required to process the specific request in question or, in other cases, for a maximum of 60 days,
- Voice recording in the case of a call to the Bonett call centre (tel. +420 288 288 298 or other telephone numbers to be determined in the future); the customer is informed of the possible recording at the beginning of the call; such recording is made and kept for the purpose of improving the quality of service for the period necessary to process the specific request in question, or in other cases for a maximum of 60 days.
For this purpose, an entity that uses Bonett's supplies and services through another contractual partner (third party) shall also be considered a customer. Unless otherwise specified for each of the aforementioned points, personal data is processed for the period necessary to fulfil all legal obligations arising for Bonett (as controller) from the contractual relationship in question.
3.3 For the purpose of handling requests from potential customers to be contacted by Bonett in order to prepare/negotiate/conclude business contracts (i.e. to ensure communication between potential customers - prospective customers interested in Bonett's supplies and services), Bonett processes personal data to the extent of:
Data that has (may have) a material impact on the parameters of the service/supply offered/negotiated:
- Name and surname,
- Residential address,
- Date of birth, ID number,
- Identification number and tax identification number, if applicable,
- Electronic mail address,
- Telephone number,
- Delivery address, information from the internet browser used, as well as other necessary additional data or technical parameters that have (may have) a significant impact on the parameters of the service/delivery under discussion,
- Voice recording in the case of calls to Bonett's call centre (tel. +420 288 288 298, or other telephone numbers to be determined in the future); the customer is informed of the possible recording at the beginning of the call, such recording is made and kept for the purpose of improving the quality of the service and for the time necessary to deal with the specific request/enquiry in question, or in other cases for a maximum of 60 days.
An enquiry or request to enter into (or amend) a contract may be made via the forms on the Bonett website, via a Bonett sales representative (project manager) or using other published contact details or communication channels.
Personal data will only be processed to the extent necessary to process the request/enquiry. If a contract is not concluded between the customer and Bonett within two years, the customer's personal data will be deleted.
3.4 For the purpose of sending marketing and commercial offers and communications from Bonett to its contractual customers, including the dissemination of electronic commercial communications within the meaning of §7 of Act No. 480/2004 Coll., on certain information society services (hereinafter referred to as "Commercial Communications"), Bonett usually processes the following personal data of the customer:
Data that have (may have) a significant impact on the parameters of the offered/negotiated service/delivery:
- Name and surname,
- Residential address,
- E-mail address,
- Telephone number,
- Alternatively: delivery address, information from the internet browser used, other necessary additional data or technical parameters that have (may have) a significant impact on the parameters of the service/delivery under negotiation.
In this way, Bonett can exercise its legitimate interest in using direct marketing tools and informing existing contract customers, in their own interest and in accordance with the law, about Bonett's news and products. If the customer does not wish to receive commercial communications, he/she always has the right to object to this processing in a simple way. The objection can be made either by following the instructions contained in the relevant commercial communication or by following the instructions set out later in this document.
Personal data for this purpose will be processed for as long as the customer has a valid (long-term) contractual relationship with Bonett (unless the customer objects).
3.5 If the potential customer, as a personal data subject, has given Bonett consent to the processing of personal data for the purpose of sending commercial offers and commercial communications from Bonett, including the dissemination of electronic commercial communications within the meaning of Section 7 of Act No. 480/2004 Coll., on Certain Information Society Services ("Commercial Communications"), Bonett shall process the following personal data of the potential customer for these purposes:
Data that has (may have) a significant impact on the parameters of the offered/negotiated service/delivery:
- Name and surname,
- Residential address,
- E-mail address,
- Telephone number,
- Possibly also a delivery address.
The purpose of this communication is to inform you about business and marketing news and events related to Bonett's service offerings, based on the consent of the potential customer. If the potential customer does not wish to receive these commercial communications, he/she always has the right to withdraw his/her consent in a simple way. Withdrawal of consent can be made by following the instructions set out later in this document.
Personal data for this purpose will be processed for as long as the prospective customer's consent to the processing of personal data is valid (i.e. until consent is withdrawn).
4. Terms and conditions for processing personal data
4.1 The Customer's personal data will only be processed for as long as is necessary for the purposes stated above for which it was collected, but no longer than 10 years after the termination of the relevant contract between Bonett and the Customer, by electronic automated means. The personal data of potential customers will only be processed for the period referred to in Article 3, paragraphs 3.3 and 3.5, to the extent that such personal data is provided to the controller.
4.2 Bonett is entitled to entrust a third party as a processor to process personal data in accordance with this "Policy", in the case of processing:
4.2.1. pursuant to paragraph 3.2 or 3.4, i.e. for the purpose of fulfilling the contractual relationship, such third party shall be, in particular, the relevant IT contractor engaged in the storage, maintenance and management of data and/or the administration of the relevant information system, the billing company for the payment of payments and, where applicable, a law firm, collection agency or bailiff engaged in the defence of Bonett's legal claims (in particular debt recovery), in accordance with the relevant legislation. Bonett chooses data processors so that the processing of personal data by them complies with the requirements of the GDPR and ensures the protection of the data subject's rights. The relevant processors process the personal data in question for the period of time specified by the relevant legislation depending on the purpose of the processing of the personal data or the period necessary to establish, exercise and defend Bonett's legal claims.
4.2.2. pursuant to paragraph 3.3 or 3.5, i.e. for the purpose of sending commercial offers and communications from Bonett, including the dissemination of Commercial Communications, such third party is the relevant IT contractor engaged in the storage, maintenance and management of data and/or the administration of the relevant information system. The respective processors process the personal data in question for the period of time determined by the validity of the contract with the customer or the validity of the consent of the potential customer.
5. Obligation to provide data by the customer
5.1 The provision of personal data by the customer to Bonett is a contractual requirement, whereby the failure to provide personal data pursuant to paragraph 3.2 or 3.3, i.e. for the purpose of entering into or performing a contractual relationship, prevents the conclusion of a contract, as the condition necessary for the valid conclusion of a contract is not fulfilled.
6. Rights of the customer in relation to the processing of his personal data
6.1 Right to withdraw consent to the processing of personal data for the purpose of sending commercial communications
6.1.1. If the personal data of a customer or potential customer ("Customer") is processed on the basis of his/her consent, the Customer has the right to withdraw the consent given for the purpose of sending commercial offers and communications to Bonett by sending a request to the e-mail address gdpr@bonett.cz.
6.2 Right of access to personal data
6.2.1 The Customer has the right to obtain confirmation from Bonett as to whether or not personal data relating to him/her is being processed and, if so, has the right to access such personal data and the following information:
- The purposes of the processing,
- The categories of personal data concerned,
- The recipients or categories of recipients to whom the customer's personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
- The intended period of time for which the personal data will be stored or, if this cannot be determined, the criteria used to determine this period,
- The existence of the right to request Bonett to rectify or erase personal data relating to the customer or to restrict its processing and the right to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- Any available information about the source of the personal data, unless obtained from the customer,
- Whether automated decision-making takes place, including related information.
6.2.2 Bonett will provide a copy of the processed personal data to the customer free of charge. A reasonable fee based on administrative costs will be charged for additional copies at the customer's request. If the customer makes a request in electronic form, the information shall be provided in the electronic form that is commonly used, unless the customer requests otherwise.
6.3 Right to rectification of personal data
6.3.1 The customer shall have the right to rectification of inaccurate personal data concerning him/her which Bonett processes without undue delay. At the same time, the customer has the right to have incomplete personal data completed, including by providing an additional statement.
6.4 Right to erasure of personal data
6.4.1 The customer has the right to request the erasure of personal data that Bonett processes about him/her, if one of the following reasons is given:
- The personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
- The customer withdraws the consent on the basis of which the data was processed pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no further legal basis for the processing,
- The customer objects to the processing pursuant to Article 21(1) GDPR, provided that there are no overriding legitimate grounds for the processing or the customer objects to the processing pursuant to Article 21(2) GDPR,
- The personal data has been unlawfully processed,
- The Personal Data must be erased to comply with a legal obligation under Union or Member State law to which Bonett is subject,
- Personal Data has been collected in connection with the offer of information society services pursuant to Article 8(1) of the GDPR.
6.4.2 If Bonett is obliged to erase Customer Personal Data, Bonett shall take all steps, including technical measures, to erase all references to, copies or replications of such Personal Data.
6.4.3 Bonett is not obliged to erase personal data at the request of the customer if the processing of the personal data is necessary:
- For the exercise of the right to freedom of expression and information.
- For compliance with a legal obligation requiring processing under Union or Member State law to which Bonett is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in Bonett.
- For reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR.
- For archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR.
- For the establishment, exercise or defence of legal claims.
6.5 Right to restriction of processing
6.5.1 The Customer has the right to have Bonett restrict the processing of his/her personal data if:
- The Customer disputes the accuracy of the personal data, for the time necessary for Bonett to verify the accuracy of the personal data.
- The processing is unlawful and the customer refuses to erase the personal data and requests instead that the use of the personal data be restricted.
- The customer objects to the processing in accordance with Article 27(1) GDPR, for the time necessary to verify whether the processing is lawful.
- Bonett no longer needs the personal data for the purpose of processing, but the customer requests it for the establishment, exercise or defence of legal claims.
6.6 Right to data portability
6.6.1 The customer has the right to obtain the personal data concerning him or her which he or she has provided to Bonett in a structured, commonly used and machine-readable format and the right to transfer such data to another data controller without Bonett preventing this, provided that:
The processing is based on consent pursuant to Article 6(1)(a), (b) or Article 9(2)(a).
(a) of the GDPR;
(b) the processing is carried out by automated means.
6.7 Right to object and to lodge a complaint with the supervisory authority
6.7.1 The Customer has the right to object at any time to the processing of personal data concerning him/her on the basis of Article 6(1)(e) or (f) GDPR. Bonett will examine the customer's objection and, if it does not demonstrate compelling legitimate grounds for processing that override the interests or rights and freedoms of the customer, it will not process the personal data further.
6.7.2 If the customer objects to the processing of personal data processed in accordance with Article 3, paragraph 3.5, this shall be deemed to be a withdrawal of the consent given and Bonett shall terminate the processing without delay.
6.7.3 In the event that the customer has the impression that his/her personal data is not processed in accordance with the applicable and effective law, he/she has the right to lodge a complaint against Bonett with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection, headquarters: Pplk. Sochor 27, 170 00 Prague 7, www.uoou.cz.
7. Automated decision-making
7.1 The processing of personal data does not involve automated decision-making.
8. How you can contact Bonett
8.1 The controller has not appointed a data protection officer. You can contact the following person in charge for all matters related to the processing of personal data:
- Name and surname: Markéta Drábková.
- Phone: +420 724 484 861
- E-mail address: gdpr@bonett.cz
If you wish to exercise your rights under the General Data Protection Regulation (GDPR) in relation to the processing of your personal data, you may do so in the ways set out in Article 6 of this Policy.
This Policy is regularly updated, with the last update on 22 August 2025, and is publicly available on the website www.bonett.cz/en.