GDPR personal data processing principles
Ovchinnikov Alexander, company ID: 04211502 with registered office at Podvinný mlýn 2281/12, Libeň (Prague 9), 190 00 Prague, (in the future referred to as the "Controller") wishes to inform you about how and why it processes your data.
This policy applies in particular to the Controller's customers who enter into a purchase contract with the Controller via the Controller's e-shop to order products offered by the Controller in this way, but also to a limited extent to visitors to the Controller's website.
This Policy is effective from 01 May 2022 and is issued by Regulation (EU) 2016/679, on the protection of natural persons about the processing of personal data ("Regulation" or "GDPR").
Scope of processing (categories of personal data)
1. We will process your data to the extent necessary for processing, particularly for mutual business relations such as pre-contractual negotiations and the subsequent performance of concluded contracts. This includes contact and identification data (name and surname, home address, e-mail address, and telephone number) and other data necessary for the performance of the contract.
2. If you are a customer of ours and express an interest when placing an order, we will contact you from time to time with offers of our products, discount promotions, loyalty programs, and other forms of direct marketing. We will then also process your data to the extent necessary for direct marketing, in particular, identification and contact data
3. A special category of personal data is so-called cookies. These are small data files that are stored on your device from our website via your browser. These files ensure a better user experience and better functionality of our website and, in particular, they will enable faster loading of pages you have already visited, remember what items you have in your basket, and enable you to stay logged in to your user account. We do not use so-called advertising cookies, which are used for targeted advertising, on our website. You can disable the storage of cookies in your browser or manually delete them from your device. However, this will affect the functionality of our website, which will not remember you.
Purpose and legal basis of processing
4. We process your data for several purposes. However, the primary purpose is the conclusion and performance of the contract you enter into with us. Another purpose of processing is to comply with our many legal obligations. We also process your data for direct marketing and, after the termination of the business relationship, to protect the legitimate interests of the controller, in particular, if we have to submit some of the documents containing your data as evidence in legal proceedings.
5. The legal basis for the processing is the performance of a contract between us as the controller and you as the customer, the data subject. The overlapping legal basis to some extent is the fulfillment of legal obligations, in particular about certain tax and accounting regulations - for example, under the Value Added Tax Act we must keep accounting documents for 10 years from the end of the accounting period. The legal basis for processing for direct marketing purposes is our legitimate interest. However, you can object to this at any time and we will no longer process your data for direct marketing purposes. Our legitimate interest is also the basis for processing where we retain personal data for 10 years, in particular, if we have to produce this personal data or the documents on which this personal data is located as evidence in a legal dispute. Our legitimate int
Processing time
6. We process your data for the time necessary for the performance of the contract, or for the time you have a customer account with us. For reasons of our legitimate interest, we retain your data for a further 10 years after the termination of the contract for our protection in any litigation, which corresponds to the objective limitation period under the Civil Code. We process some of the personal data for a period fixed by specific legal regulations, in particular in the field of tax and accounting.
Persons with access to your data
7. Your data will only be accessed by our employees or external accountants, tax and legal advisors, and other advisors who only receive this personal data to the extent necessary and who are bound by a duty of confidentiality. At the same time, we pass on your contact details in particular to transport service providers to deliver the goods you have ordered. We do not pass on personal data to other third parties, except public authorities (in particular the tax office) in the performance of our legal obligations.
Our interest is therefore our legal protection, for the duration of the limitation period.
Contact the administrator
8. Although we do not have a data protection officer, you can contact us as the controller at any time by email: info@rozvoz-hhc.cz . The controller is entitled to request proof of your identity to prevent unauthorized persons from accessing your data.
Your rights under the GDPR
9. By the GDPR, you have the right to correct or supplement your data, to request the restriction of processing, to complain about the processing of your data, to request data portability, to access your data, to be informed of a personal data breach, the right to erasure and other rights set out in the GDPR.
10. If you do not consent to us using your data for direct marketing purposes, you have the right to object to this processing by emailing us under Article 8 of this Processing Policy. Once we receive such objections from you, we will stop processing your data for direct marketing purposes. You will be additionally notified of this right in any marketing email you receive from us.
11. You have the right to complain about the processing of personal data or the controller's failure to comply with its obligations under the GDPR with a supervisory authority. The supervisory authority is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, www.uoou.cz.