INFORMATION ON THE PROCESSING OF PERSONAL DATA AND CONSENT TO THE PROCESSING OF PERSONAL DATA

I. Scope and purpose – which personal data do we process about you, why and how?

1.1 You hereby acknowledge and agree to processing of the following personal data ("Personal Data"):

1.2 We will process your Primary Personal Data for the purposes of:

• the proper facilitation of the sale of goods and the provision of other services (i.e. for the performance of the contract and the provision of goods and services), or to resolve complaints and disputes and to assess your claims,
• accounting and tax purposes,
• customer record keeping,
• creating surveys and business statistics, but only if it is not possible to process this using anonymized data.

We will process your Primary Personal Data primarily on the basis of legal authorization, to the extent processing of said data is necessary for the performance of the contract and other legal obligations arising therefrom, such as the issuance of a tax invoice, and on the basis of this Consent, which is the legal basis for the processing of personal data under the GDPR.

1.3 We also process your email address for marketing purposes. You consent to this type of processing by ticking the "I want to receive the newsletter" box or by entering and submitting your email address under the "Subscribe to newsletter" label. This consent is not obligatory! You can withdraw your consent at any time, ideally via the link included in each marketing email or by your account administration.

1.4 We will process your Secondary Personal Data for the purposes of personalised offers and to improve our services. We will process your Secondary Personal Data on the basis of this Consent, which is the legal basis for processing your personal data under the GDPR. You can also manage the setting of Cookies on the Site.

1.5 In order to fulfil the above purposes, your Personal Data will be processed automatically in Klaviyo, the accounting system and manually by authorised personnel.

1.6 In order to improve service quality, objectivity, demonstrability and security, we may wish to monitor and record communications with you (in particular telephone calls to customer service lines). You will be informed of this in advance and are entitled to refuse this in such cases.

II. Recipient of personal data – to whom will we provide your Personal Data?

2.1 Your Personal Data may be processed for us by processors who provide server, web, cloud, marketing or IT services, accountants and tax advisors, solicitors and barristers as part of improving the quality of our services and carrying out certain activities. All such processors will be bound by confidentiality obligations, with the understanding that they will only receive the portion of Personal Data necessary for their activities. If a different category of processor is used, we will inform you by posting this on our website and, of course, in an updated consent. In the event that you do not consent to the processing by that category of processors, you have the right to withdraw your consent. However, by withdrawing consent, we do not lose the right to process Personal Data on the basis of a lawful authorisation.

2.2 Due to the changing nature of some service providers, it is not possible to list all of these Personal Data processors by name. An up-to-date list of specific Personal Data Processors will be provided upon your request to the Company's email address set out above.

2.3 We do not currently transfer, nor do we intend to transfer, any part of your Primary Personal Data outside of the European Union or the Czech Republic.

2.4 Secondary Personal Data in pseudonymised form may also be transferred to companies based outside the European Union, provided that such companies store Secondary Personal Data in pseudonymised form on servers located in the European Union.

2.5 We have not yet appointed a Data Protection Officer.

III. Storage period of Personal Data – how long will we process your Personal Data?

3.1 You grant this Consent for the period of possible business cooperation. Personal data for which there is a legal reason for processing (e.g. invoice data, etc.) will be processed in accordance with the law, i.e. for a period of 10 years from the end of the tax period in which the transaction took place, taking into account our obligation to archive tax documents for that period.

3.2 Secondary personal data is processed for a maximum period of 3 months.

IV. Rights and obligations – what can you ask us to do in relation to the processing of personal data?

4.1 You have the following rights in relation to our processing of your Personal Data:

• The right to access Personal Data and the right to an explanation.
  • o You can request confirmation at any time as to whether or not the Personal Data concerning you is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, how long we will process it, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the Personal Data and whether or not automated decision-making, including possible profiling, is taking place on the basis of the processing of your Personal Data. You also have the right to obtain a copy of your Personal Data, the first provision of which is free of charge. We may charge a reasonable administrative fee for further provision.
• The right to rectification of Personal Data;
  • o You may ask us to correct or complete your Personal Data at any time should it be inaccurate or incomplete. Kindly do so via your user account, if you are registered, or via the contact details above.
• The right to erasure of Personal Data ("right to be forgotten");
  • o We must delete your Personal Data if:
  • – are no longer needed for the purposes for which they were collected or otherwise processed,
  • – processing is unlawful,
  • – you object to the processing and there are no overriding legitimate grounds for the processing, or
  • – we are under a legal obligation to do so.
• the right to restrict the processing of Personal Data;
  • o until we have resolved any disputed issues regarding the processing of your Personal Data, we must restrict the processing of your Personal Data so that we can only store it and, where appropriate, use it to establish, exercise or defend legal claims
• the right to object to the processing of Personal Data;
  • o you may object to the processing of your Personal Data that we process for direct marketing purposes or for legitimate interest. If you object to processing for direct marketing purposes, your Personal Data will no longer be processed for those purposes.
• The right to lodge a complaint about the processing of Personal Data either directly with us or with the supervisory authority, which is the Data Protection Authority (see below),
• the right to withdraw your consent to the processing of Personal Data (withdraw it)
  • o You can withdraw your consent at any time by sending an email to the e-mail address above, stating your name, surname and address and stating that you are withdrawing your consent to the processing of Personal Data.
  • o ATTENTION!!! Withdrawal of consent does not affect the lawfulness of the processing based on the consent you gave before its withdrawal. We will delete your Personal Data once your consent has expired in accordance with this article, unless there is another lawful reason for further processing.

4.2 You may exercise all of your rights by contacting us at the email address set out at the head of this document or in any other ways set out above.

4.3 Please do not abuse your rights so that we can focus on the proper provision and improvement of the Services.

V. Supervision – who supervises the processing of Personal Data?

5.1 Like any processor of Personal Data, we are subject to the supervisory activities of the Data Protection Authority, which may coordinate its activities with other national authorities in other member states of the European Union. If you become aware that any of our processing is in breach of the law, you have the right to lodge a complaint against the processing of your Personal Data with the Data Protection Authority at: www.uoou.cz.

VI. Declaration

By checking the box "By sending your order, you agree to the terms and conditions of the Privacy Policy", by clicking on the "Register" button or "I understand" button, or by entering and sending an email when subscribing to the Newsletter, you agree that you have read and understood the above information and that you consent to the processing of your Personal Data by the controller referred to in Article I above for the purpose(s) specified therein.

This consent to data processing is voluntary and you are entitled to withdraw it at any time in the manner described in Article IV.