PRIVACY POLICY

The rules for the processing and protection of personal data of Buyers are governed by Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR") and Act No. 110/2019 Coll.

The operator of the e-shop Poklady_duše on the Webnode website, ID No. 09720707, based in Brno, processes the personal data provided by the Buyer for the purpose of fulfilling and additionally confirming the Terms and Conditions, for the purpose of processing the electronic order, making the delivery, clearing the payment and the necessary communication between the contracting parties for the period required by specific legislation.

Basic provisions

1.The administrator of personal data is Aneta Bartošová ID 09720707 with registered office in Brno, Heleny Malířové 154, 638 00, (hereinafter referred to as "Administrator");

2.Contact details of the Administrator are: e-mail: info@pokladyduse.cz, tel.: +420777442079;

3. Personal data means all information identifying a natural or legal person.

Sources of personal data processed

1. the Controller processes personal data provided to it with the consent of the Buyer and obtained by the Controller on the basis of the performance of the Purchase Agreement and the processing of the electronic order in the online shop Poklady_duše.;

2. The Controller processes only the identification and contact data of the Buyer necessary for the performance of the Purchase Agreement;

3. the Controller processes personal data for the purpose of delivery, settlement of payments and for the necessary communication between the contracting parties for the period required by specific legislation. The personal data will not be disclosed and will not be transferred to other countries.

Purpose of the processing of personal data

The controller processes the personal data of the buyer for the following reasons:

1. For the purpose of registration on the Poklady duše website;

2. For the purpose of processing the buyer's electronic order (name, address, e-mail, telephone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Buyer and the Administrator;

4. The provision of personal data is a necessary requirement for the performance of the purchase contract. Without the provision of personal data, the contract cannot be concluded.

Retention period of personal data

1. The Controller shall retain personal data for the period necessary for the performance of the rights and obligations arising from the contractual relationship between the Buyer and the Controller and for 3 years after the termination of the contractual relationship;

2. After the expiry of the retention period, the Controller is obliged to delete the data.

Recipients and processors of personal data

The third party that receives the Buyer's personal data are the Controller's subcontractors. The services of these subcontractors are necessarily related to the successful performance of the purchase contract and the electronic order between the Controller and the Buyer.

The Administrator's subcontractors are:

Webnode AG (e-shop system);

Czech Post, s.p., Zásilkovna, PPL (delivery service);

Google Analytics (website analysis);

Accounting software ABRA Flexi (incl. accounting company)

Other courier and delivery entities by type of transport

Buyer's rights

Under the terms of the Act, the Buyer has the right to:

1. To access his personal data;

2. To rectification of personal data;

3. To erasure of personal data; 2;

4. To object to processing;

5. To data portability;

6. To withdraw consent to the processing of personal data in writing or electronically at the following e-mail address: info@pokladyduse.cz;

7. File a complaint with the Office for Personal Data Protection if he/she believes that his/her right to personal data protection has been violated.

Security of personal data

1. The Controller declares that it has taken all appropriate technical and organisational measures necessary to secure the personal data of the Purchaser;

2. The Controller has taken technical measures to secure the data storage of the personal data, in particular the security of computer access with a password, the use of antivirus software and regular maintenance of computers.

Final provisions

1. By submitting an electronic order on the Poklady duse website, the purchaser confirms that he/she has been informed of the terms and conditions of the protection of personal data and that he/she accepts them in their entirety;

2. The buyer agrees to these rules by ticking the box in the order;

3. The Controller is entitled to change this Policy at any time. It is obliged to publish the new version of the Rules on its website.

These Rules come into force on 1.1.2020