Privacy policy

Principles of personal data processing and data protection

The principles of personal data processing and protection (‘Principles‘) constitute the basic principles by which TESCAN GROUP, a.s., Libušina třída 21, 623 00 Brno – Kohoutovice, the Czech Republic, ID No. 17774713 and its affiliates (the ‘Company‘) is guided when collecting and processing personal data. These Principles implement the Company’s rights and obligations arising in particular from the following generally binding legal regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (‘GDPR‘);
Act No. 480/2004 Sb. (Coll.), on certain information society services and on the amendment to certain other acts (Certain Information Society Services Act), as subsequently amended (‘Certain Information Society Services Act‘); and
Act No. 127/2005 Sb. (Coll.), on Electronic Communications and on Amendment to Certain Related Acts (Electronic Communications Act), as subsequently amended (‘Electronic Communications Act‘).

The Principles apply to all persons visiting the Company’s website www.tescan.com (‘Website’) and both prospective customers and customers of the Company.

What are personal data

In accordance with the GDPR, ‘personal data’ means any information relating to an identified or identifiable natural person (not a legal person). In principle, it is any information that, whether alone or in summary with other information, can serve to identify a particular individual or belongs to an identified person (‘Personal Data’).

What type of personal data does the company process

The Company may collect the following Personal Data about you:

Personal Data that you give to the Company yourselves

In particular, such Personal Data is any information that you provide when completing registration, an order or other type of a form or that you communicate to the Company by e-mail, telephone, fax or another similar device. You may also provide the Company with Personal Data when concluding a contract with the Company or during tenders, by submitting a product or service review, by booking a training place, or by sending a general inquiry. These Personal Data processed by us include primarily first name, surname, mailing address, e-mail address, phone number, bank account details, selected payment method, content of communications, your organization and position in it, information about your organizations.

The Company will process the above-mentioned Personal Data for the following purposes:

provide, administer and improve the Website based on our legitimate interest in providing our services via the internet;
to provide the service, product or information you have been interested in, incl. e-learning, which the Company processes on the basis of the performance of the contract or in order to take steps at your request prior to entering into a contract;
handling your requests either on the basis of our obligation to perform contracts concluded between us and you and for the conclusion of such contracts or based on our legitimate interest in providing our services and ensuring adequate support when handling requests not connected with any contract;
customer device management based on our legitimate interest to assure the security of our services;
if you are an existing customer also provide information about other services or products similar to those that were the subject of your previous purchase, which the Company processes on the basis of its legitimate interest of deepening the client relationship and further increase of sales;
if you are a prospective customer, the Company will send you commercial messages and offers of products and services either 1) based on the Company’s legitimate interest concerning the Company’s own similar products in connection with your inquiry regarding a product or a prospective sale of a product in accordance with the requirements of personal data protection or 2) based on your revocable consent only if you have explicitly agreed to it with the Company;
to provide and manage the Tescan Collaboration Network and the other customer programs in order to ensure its efficient functioning, incl. collaboration among members based on the performance of the contract and our legitimate Interest in operating the program and fulfilling its mission;
organization of our events and conferences, based on our legitimate interests in enhancing our public image and promoting our activities.
protection of legal claims and internal control based on our legitimate interests for the purpose of protecting legal claims and our internal records and control.
provide for internal operations, including data analysis, testing, user research, statistical purposes on our legitimate interest in developing and optimizing our products, services and our operations.
compliance with our legal obligations, in particular those related to the provision of information to public authorities.

Personal Data that the Company collects

When visiting our Website, the Company may collect some information necessary to ensure the proper and convenient operation of the Website. Such information is the Internet Protocol (IP) data used to connect your computer to the Internet, your registration information, browser type and version, time zone settings, browser plug-ins, your visit information, including a valid Uniform Resource Locator (URL), the path to and from the Website (including date and time), the products you viewed or searched for, response times, download errors, the length of visits to certain pages, site visit interaction information (such as scrolling, clicks, and mouse locations); a way of leaving the page.

These Personal Data are used by the Company to:

provide, administer and improve the Website based on our legitimate interest in providing our services via the internet;
protect our Website and all services from cyber-attacks and fraud, as well as test new features and changes to the Website based on our legitimate interest in securing and improving our services;
provide for internal operations, including data analysis, testing, user research, statistical purposes on our legitimate interest in developing and optimizing our products, services and our operations.
to measure ad performance and to provide relevant advertising inc. personalized ads on our Website and third-party websites. Depending on the type of advertising, the basis for this is either our legitimate interest in promoting our business or, for certain types of advertising, your consent, if we ask for it and you decide to give it to us.

Transfers of personal data

Personal data that the Company acquires may be transferred within the related parties of the Company and to third parties in the position of data processors (the ‘Processors’) who assist the Company in performing its contractual obligations by meditating certain services (e.g. ensuring of services). The Company only passes Personal Data to those Processors who provide guarantees of an adequate level of security for your Personal Data, and who process these Personal Data solely on the basis of a Personal Data Processing Agreement.

In this sense, the Company may transmit Personal Data to these Processors:

IT service providers and other technology suppliers incl. office system providers, providers of IT infrastructure, operators of analytical and marketing tools, customer and other relationship management systems or contract management systems, and providers of communication tools
Providers of postal and delivery services for the purpose of delivering products or services offered by the Company;
Website administrators.

Under certain circumstances, the Company may be required to provide your Personal Data to third parties in accordance with generally binding legal regulations acting as controllers:

Law enforcement agencies in order to fulfill our legal obligations.
When ensuring the execution of payments, we transfer personal data to payment system operators.
For the provision of online advertising, we may transfer personal data to advertising system operators (Google Ireland Limited which processes your personal data as described at https://policies.google.com/privacy) and social networks inc. LinkedIn (see https://www.linkedin.com/legal/privacy-policy), Facebook (see https://www.facebook.com/privacy/policy/) and X (see https://x.com/en/privacy).
Legal service providers, consultants and auditors helping us to protect our legal rights, financial and operational status and to assess them.

Further processing of your Personal Data after transfer to these persons is carried out independently by these other controllers, who are responsible to you for its lawfulness and for fulfilling all obligations under the law, including handling requests to exercise your rights.

If your Personal Data is transferred outside the European Economic Area, it will be based on an adequacy decision pursuant to Article 45 of the GDPR or appropriate safeguards pursuant to Article 46 of the GDPR.

Means of personal data protection

In order to protect and minimise the risk of unauthorised access to Personal Data, the Company has adopted organizational and technical measures.

These measures include:

organisational restrictions restricting the range of persons authorised to come into contact with Personal Data; and
technical support for servers and the Company’s Website against unauthorised manipulation.

Persons in contact with Personal Data are taught about the principles of personal data protection, and are bound by confidentiality agreement when processing these data.

Length of personal data storage

The Company keeps Personal Data for as long as is strictly necessary for the performance of its contractual obligations and for the fulfilment of the obligations that the Company derives from the applicable legal regulations. Personal data that are processed on the basis of your consent are retained by the Company only for the duration of the purpose for which the consent was granted. Once the legitimate reason for processing your Personal Data has expired, the Company will destroy these Personal Data and any existing copies thereof.

Usually, we store personal data for 4 years from the end of our cooperation based on the duration of the limitation period and for one year after its expiry, taking into account possible claims made at the end of the limitation period. In the event of legal or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and for the remainder of the limitation period after their conclusion. For the purpose of sending commercial communications to customers, we process your personal data until you refuse to receive commercial communications. To comply with legal obligations, we process personal data for the time necessary to fulfill these obligations, up to 10 years if required.

Cookies

When running the Company’s Website, it uses cookies which are small text files (‘Cookies’) sent from the Company’s server to your browser, and when revisiting the Company’s Website they are sent back to the Company’s server. Thereby, Cookies help the Company to identify your browser, remember information about your previous activity on the Website and thus adapt the content of the Website to your particular needs.
The Company uses the following types of Cookies:

Essential Cookies that allow the basic operation and functionality of the Website inc. to ensure secure log-on, and without which the content of the Website could not be displayed correctly.
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
Statistic Cookies that allow you to analyze the use of the Website to understand how visitors interact with websites by collecting and reporting information.
Ad Cookies that allow displaying a targeted ad, sharing Website on social networks, or commenting on products on social networks.

Cookies can be removed using your browser settings. It can also be set up so that Cookies are not automatically saved. However, if you block, disable or otherwise reject certain Cookies, the Website may not display correctly, or you may not be able to use certain services or features of the Website.

The rights of the data subjects

In connection with the processing of your Personal Data by the Company, you are entitled to the following rights:

the right to withdraw consent to the processing of Personal Data where the processing of data is based on the consent at any time;
the right to request access to Personal Data and to the information about what Personal Data of yours are processed by the Company; this allows you request confirmation as to whether processing is taking place and, if so, information relating to such processing to the extent specified in Article 15 of the GDPR, as well as a copy of the data processed (we are entitled to charge a fee to cover the necessary costs for additional copies),
the right to correct inaccurate Personal Data and, if applicable, to supplement incomplete Personal Data, so if you find that the Personal Data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented without undue delay;
the right to delete the Personal Data that are being processed. We will delete your Personal Data without undue delay if we no longer need it for the purposes for which we processed it, or if you exercise your right to object to the processing and we find that we no longer have any legitimate interests that would justify such processing, or if it turns out that our processing of Personal Data is no longer in accordance with generally binding regulations. However, this right does not apply if the processing of your Personal Data is still necessary for the fulfillment of our legal obligation, for archiving purposes, for scientific or historical research, or for statistical purposes, or for the determination, exercise, or defense of our legal claims;
the right to limit the processing of Personal Data. This right allows you, in certain cases, to request that your Personal Data be marked and that this data not be subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of Personal Data if you contest the accuracy of the Personal Data before we agree on what data is correct, or if we process your Personal Data without a sufficient legal basis (e.g., beyond what we are required to process), but you prefer to have such data restricted rather than erased (e.g., if you expect to provide us with such data in the future anyway), or we no longer need the Personal Data for the above-mentioned processing purposes, but you require it for the establishment, exercise, or defense of your legal claims, or you object to the processing and we are obliged to restrict the processing of your Personal Data for the duration of our investigation, if your objection is justified.
the right to obtain the Personal Data you have provided to the Company in a structured, commonly used and machine-readable format, and the right to pass it on to another person, in cases of processing based on your consent or on the basis of a contract;
the right to object to the processing of Personal Data that occurs on the basis of our legitimate interest. We will stop processing your Personal Data unless we have serious legitimate reasons to continue such processing. In the event of an objection to marketing activities, we will terminate these activities in any case; and
the right to file a complaint with the Supervisory Authority, i.e. at the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00, Prague 7, Czech Republic or via a data box at qkbaa2n.

The above-mentioned rights and possible complaints may be filed with the Company as the data controller in writing to the address below or by email to the email address info@tescan.com or compliance@tescan.com.

TESCAN GROUP, a.s. and its affiliates
Libušina třída 21 
623 00 Brno – Kohoutice 
Czech Republic

These Principles are valid and effective from May 25, 2018, and were most recently updated on December 3, 2025.