Martin Drábek is the controller of personal data, Company number: 75569892, Boční 547, Velký Týnec, 78372, Czech Republic (hereinafter referred to as ‘controller’).
Controller’s contact details
Address: Boční 547, Velký Týnec, 78372, Czech Republic
I. ‘Personal data’ means any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’). In the case of the website and user accounts, the following personal data are processed in particular: name, address, contact details, shipping details, ordered goods, data on products viewed on the website.
II. By using the website, the data subject is sharing the IP address and other basic metadata about himself. If the data subject does not agree with sharing of this data, he must refrain from using the website.
III. By purchasing goods from the website, registering, communicating with us, subscribing to the newsletter, or otherwise granting consent for marketing purposes, the data subject agrees that he has read the conditions of personal data processing and that he agrees with the processing.
IV. The controller processes the personal data of data subjects for the following reasons: processing of the order and fulfillment of the contract of sale; compliance with the legal obligation applicable to the controller; direct communication with customers; management of customer accounts; sending of newsletters, satisfaction surveys, marketing and for other reasons to which the data subject agreed to; to protect the legitimate interests of the controller arising from the concluded contract of sale.
V. The controller processes the personal data of data subjects for the following purposes: processing the order and fulfilling the contract of sale, business communication and other marketing activities.
VI. Personal data shall be kept for the time strictly necessary for the exercise of rights and obligations between the data subject and the controller and subsequently for a maximum period of 15 years from the extinction of obligations. After this period, the controller deletes the personal data.
VII. The controller secures personal data by organizational and technical means corresponding to the level of risk of personal data processing.
VIII.Recipients of personal data are subcontractors of the controller, providing shipping, payment system, website hosting, cloud services, advertising, mailing and marketing services. Recipients of personal data in third countries are website hosting providers, payment system providers, cloud services, advertising, mailing and marketing services and carriers to third countries.
IX. Rights of the data subject (buyer) according to the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR):
right of access (article 15)
right to rectification (article 16)
right to erasure (article 17)
right to restriction of processing (article 18)
right to data portability (article 20)
right to object (article 21)
right to withdraw consent to the processing of personal data in respect of the processing of personal data based on the consent of the data subject pursuant to Article 7(3)
right to file a complaint with the supervisory authority (in the Czech Republic, the Office for Personal Data Protection)
If you have any questions, suggestions or reguests do not hesitate to contact us at firstname.lastname@example.org