Protection of personal data

1. Basic information

• • Document content. This personal data processing policy describes how we process the personal data of visitors, customers of the online store and others. Here you will learn in particular what personal data we process, why and on what basis we do so, to whom we pass it on, and also what rights you have in connection with their processing. All processing of personal data takes place in accordance with the general regulation of the European Union No. 2016/679 on the protection of personal data, usually referred to as GDPR.

  • Our position. All described personal data processing activities are carried out in the capacity of administrator by entrepreneur Pavel Sikora, with headquarters in Plk. Velebnovského 87, 73991 Jablunkov, IČO 10603522, entered in the trade register, VAT number CZ6607241949 (hereinafter referred to as "we" for greater clarity). This means that we determine the purposes described below for which we collect your personal data, determine the means of processing and are responsible for its proper execution.

  • Scope of personal data processing. The personal data we process are:

    • identification data (in particular first and last name or identification number and tax identification number in the case of entrepreneurs),

    • contact details (in particular address, e-mail address and telephone number),

    • data on orders and transactions (in particular ordered goods and services, selected method of payment and transport and other information related to the order),

    • mutual communication data (in particular the content and other data associated with the communication between us and you),

    • registration and settings data (in particular data associated with your user account if you register with us and data about the settings of our services),

    • data about the use of our website (in particular IP address, data about your device, data obtained through the use of cookies or data about what you do on our website).

2. Why and how do we process your personal data?

• • • Website operation. If you visit our website, we process your personal data to ensure its proper functioning based on our legitimate interest in providing our services via the Internet.

    • User account. Based on the contract, we process your personal data when maintaining user accounts in our online store.

    • Improving and developing our services. We also process your personal data for the purpose of measuring website traffic and creating statistics and records that serve us to evaluate and develop our services, based on our legitimate interest in monitoring website traffic and in the development and optimization of our services.

    • Determining your satisfaction. To determine your satisfaction with our services, we process your personal data on the basis of our legitimate interest, which consists in determining your feedback. We also do this as part of the Verified by Customers program via e-mail questionnaires that we send to you every time you make a purchase from us, unless you opt-out. For sending questionnaires, evaluating feedback and analyzing the market position, we transfer information about the purchased goods and your e-mail address to the program operator. Your personal data is not passed on to any third party for its own purposes. You can object to the sending of questionnaires as part of the Customer Verified program at any time by rejecting further questionnaires using the link in the questionnaire email. In case of your objection, we will not send you the questionnaire any further.

    • Security and testing. To protect our website and all other services from cyber-attacks and fraud, as well as to test new functionalities and website changes, we process your personal data based on our legitimate interest in securing and improving our services.

    • Protection of legal claims and internal control. We process your personal data based on our legitimate interests for the purpose of protecting legal claims and our internal records and control.

    • Sending commercial messages to customers. If we receive electronic contact details from you in connection with an order or our services, we may also process your personal data for the purpose of further offering our goods and services through commercial communications based on our legitimate interest in our promotion, unless you have opted out of such sending.

    • Sending business communications based on consent. Based on your consent, we process your personal data for the purpose of sending commercial communications.

    • Online advertising. We may process personal data based on our legitimate interest in our promotion in order to display personalized advertisements to you on our website and third party websites.

    • Fulfilling our legal obligations. We also process your personal data for the purposes and on the basis of the fulfillment of our legal obligations connected, in particular, with the provision of information to public authorities.

    • Performance and conclusion of contracts. We process your personal data on the basis of and for the purpose of fulfilling our obligations arising from the contracts concluded between us and you and for the conclusion of these contracts. For this, we can also process the personal data of recipients and other recipients of goods and other possible services.

    • Customer support. In order to process your requests related to orders, we process your personal data based on the obligation to fulfill the contracts concluded between us and you and for the conclusion of these contracts. When dealing with other possible requests, we process your personal data based on our legitimate interest in providing our services and providing appropriate support.

    • Storage time. We store personal data only for the time necessary to achieve the stated purposes of personal data processing. After the purpose of the processing ceases, we will immediately dispose of the personal data. Usually, we keep personal data for the duration of the limitation period (standard 3 years) and one year after its expiration with regard to possible claims made at the end of the limitation period. In addition to the above, the following special storage periods apply:

      • We keep the data associated with the user account for the entire duration of the account until it is deleted.

      • In the case of judicial and other proceedings, we process your personal data to the extent necessary for the entire duration of such proceedings and the remaining part of the limitation period after its termination.

      • To send commercial messages to customers, we process your personal data until you refuse to send commercial messages.

      • We process your personal data for sending commercial communications based on your consent, until you withdraw your previous consent to the processing of personal data.

      • In order to fulfill legal obligations, we process personal data for the time necessary to fulfill these obligations.

3. To whom are personal data transferred?

• • • • Processors. For the processing of personal data, we also use the services of other entities in the position of processors, who process personal data only according to our instructions. These are in particular:

        • IT service providers and other technology suppliers,

        • operators of analytical and marketing tools,

        • providers of communication tools,

        • operators of programs for determining customer satisfaction, e.g. Verified by customers (Heureka.cz).

      • Administrators. You can make your personal data available to other entities in the position of administrators:

        • our suppliers participating in the fulfillment of the contract, in particular transporters and operators of payment systems,

        • operators of advertising systems and social networks.

      • Transfers outside the EU. In some cases, your personal data may be transferred outside the European Economic Area, either on the basis of a decision on adequate protection pursuant to Article 45 of the GDPR, appropriate guarantees pursuant to Article 46 of the GDPR, or an exception pursuant to Article 49 of the GDPR.

4. Your rights

• • • • Rights of the subject of personal data. Regarding your personal data, you have the right to:

        • request the correction of inaccurate or out-of-date personal data, so if you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented without undue delay,

        • request confirmation of whether processing is taking place, and if it is, information regarding this processing to the extent set out in Article 15 of the GDPR, as well as a copy of the processed data (for additional copies, we are entitled to charge a fee designed to cover the necessary costs),

        • in some cases, you have the right to have your personal data deleted. We will delete your personal data without undue delay if we no longer need it for the purposes for which we processed it, or if you exercise your right to object to the processing and we find that we no longer have any legitimate interests that would justify this processing, or will show that the processing of personal data carried out by us is no longer in accordance with generally binding regulations. However, this right does not apply if the processing of your personal data is still necessary for the fulfillment of our legal obligation, archiving purposes, scientific or historical research or statistical purposes, or the determination, exercise or defense of our legal claims.

        • use the right to limit the processing of personal data. This right allows you to request in certain cases that your personal data is marked and that these data are not the subject of any further processing operations - in this case, not forever (as in the case of the right to erasure), but for a limited period of time. We must limit the processing of personal data when you dispute the accuracy of the personal data before we agree what data is correct, or when we process your personal data without a sufficient legal basis (eg beyond what we need to process), but you will be before such data is deleted prefer only to limit them (e.g. if you expect that you would still provide such data to us in the future), or we no longer need the personal data for the above processing purposes, but you require them for the establishment, exercise or defense of your legal claims, or you object to processing and we are obliged to limit the processing of your personal data for the period during which we save, if your objection is justified.

        • request the transfer of personal data in cases of processing based on your consent or on the basis of a contract,

        • object to the processing of personal data based on our legitimate interest. We will stop processing your personal data unless we have serious legitimate reasons for continuing such processing. In case of objection to marketing activities, we will end these activities in any case,

        • at any time express your objection to the processing of your personal data for the purpose of sending commercial communications, just as you can at any time revoke your previous consent to the processing of personal data for another purpose, unless it is processing for the purpose of fulfilling our obligations arising from contracts, for the purpose of fulfilling our legal obligations or other purpose arising from our legitimate interests.

      • Method of exercising rights. You can exercise your rights in one of the following ways:

        • by email at our email address.

      • The right to lodge a complaint with the supervisory authority. If you believe that we have violated the GDPR when processing your personal data, you have the right to file a complaint with the Office for the Protection of Personal Data, which is located at Pplk. Sochora 27, 170 00 Prague 7 (http://www.uoou.cz).

5. Cookies

• • • • Files stored on your device for later access (temporary files). Our website may use cookie technology (and possibly other technologies based on a similar principle, such as Web Storage). This means that we store small data files in a dedicated place in your device's memory that allow us to provide you with the service and further improve it. For simplicity, we will further refer to all these technologies as "cookies".

      • Cookies necessary to provide the service. Some cookies are technologically necessary to provide the service. This means that their storage cannot be avoided while maintaining the functionality of the service. In particular, these are cookies for:

        • saving your choices in connection with the order,

        • saving site settings,

        • ensuring IT security.

      • Other types of cookies. We use some cookies in order to provide you with a service of better quality and more adapted to your preferences. As part of this, we may store cookies on your device:

        • to ensure the analysis of traffic and use of the website, including third party cookies,

        • for advertising purposes to display customized advertisements on our and other websites, incl. third party cookies,

        • ensuring connection with social networks, incl. third party cookies,

        • to customize our website for you,

      • Cookie storage settings. You can set cookies through the settings available on our website. Within the relevant options of your device, you can set the use of cookies on our website, for example by blocking cookies, if you do not agree to their use on our website. If you use this option, you acknowledge that some parts of the service may not function correctly.