I. Basic Provisions
The controller of personal data according to Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is the operator of this website (hereinafter: “controller”).
The controller’s contact details are:
Data Processor: Natalia Malyshak
Address: Slavíkova 19, Prague 2
Email: [email protected]
Phone: +420 774 593 651
Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, especially by reference to a particular identifier, such as name, identification number, location data, online identifier, or one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
The controller has not appointed a data protection officer.
II. Sources and Categories of Processed Personal Data
The controller processes personal data that you have provided or personal data obtained based on the fulfillment of your order.
The controller processes your identification and contact details as well as the data necessary for contract fulfillment.
III. Legal Basis and Purpose of Personal Data Processing
Filling in the form – The personal data contained in the form is managed solely for responding to your inquiry or request. Your personal data will not be further processed or shared.
The purpose of processing personal data is to fulfill your order and to exercise rights and obligations arising from the contractual relationship between you and the controller. When placing an order, personal data necessary for the successful processing of the order (name and address, contact details) are required. Providing personal data is a necessary requirement for concluding and fulfilling the contract; without providing personal data, it is not possible to conclude or fulfill the contract.
The controller conducts automated individual decision-making under Article 22 of the GDPR. You have given explicit consent for such processing.
IV. Data Retention Period
The controller stores personal data for the necessary period to fulfill rights and obligations arising from the contractual relationship and for asserting claims from these contractual relationships (for 10 years after the termination of the contractual relationship).
For marketing purposes, personal data is stored until the withdrawal of consent, but no longer than 3 years if processing is based on consent.
After the expiration of the data retention period, the controller deletes the personal data.
V. Recipients of Personal Data (Subcontractors of the Controller)
Recipients of personal data are:
- Persons involved in the delivery of goods/services/payment processing under a contract,
- Providers of website operation services and related services,
- Providers of marketing services.
The controller does not intend to transfer personal data to a third country (outside the EU) or an international organization.
VI. Your Rights
Under GDPR, you have:
- The right to access your personal data (Article 15 GDPR),
- The right to correct personal data (Article 16 GDPR) or restrict processing (Article 18 GDPR),
- The right to erase personal data (Article 17 GDPR),
- The right to object to processing (Article 21 GDPR),
- The right to data portability (Article 20 GDPR),
- The right to withdraw consent in writing or electronically to the contact details listed in Article III of these terms.
You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to data protection has been violated.
VII. Personal Data Security Conditions
The controller declares that all appropriate technical and organizational measures have been taken to secure personal data.
The controller has implemented technical measures to secure data storage (login name, password, antivirus software, and firewall) and physical storage of personal data (locked room).
The controller declares that personal data is accessible only to authorized persons.
VIII. Final Provisions
By submitting an order via the online order form, you confirm that you have read and fully accept the privacy policy.
The controller has the right to change these terms. The new version of the privacy policy will be published on the website and sent to your email address provided to the controller.
These terms take effect on January 1, 2021.