I. Basic Provisions
1. Who manages your personal data?The controller of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR") is Peter Janata, ID: 22495061, with its registered office at Žerotín 88, 440 01 Žerotín, Czech Republic (hereinafter referred to as the "Controller").
2. The contact details of the controller:Address: Peter Janata, Žerotín 88, 440 01 Žerotín, Czech Republic
E-mail: p.janata92@gmail.com
3. What is personal data?Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
4. Data Protection OfficerThe Controller is not obliged to appoint a Data Protection Officer.
II. Sources and categories of personal data processed
1. The controller processes personal data that you have provided to the controller or personal data that the controller has obtained on the basis of the fulfilment of your order:
- Name and surname
- Postal address
- E-mail address
- Telephone
2. This data is necessary for the performance of the contract between you and the controller.
III. Lawful reason and purpose for processing personal data
1. The lawful reason for processing personal data is:
- Performance of the contract between you and the controller (e.g. processing an order)
- Fulfillment of a legal obligation
2. The purpose of the processing of personal data:
- Delivery of ordered goods
- Communication with you regarding the order
3. The controller does not carry out automated individual decision-making pursuant to Article 22 GDPR.
IV. Data retention period
1. The controller keeps your personal data for the period necessary to fulfill the contract and other obligations related to accounting (maximum 3 years from the end of the contract).
2. After this period, your data is irretrievably deleted.
V. Recipients of personal data
1. Third parties involved in order processing:
- Carriers: Czech Post, Packeta
- E-mail and cloud services: Google Inc.
2. The controller does not share your personal data outside of EU only within the framework of services provided by Google Inc. (cloud and email services).
VI. Your rights in relation to the protection of personal data
1. According to the GDPR, you have:
- The right to access your personal data
- The right to rectify inaccurate data
- The right to erase personal data
- The right to restrict processing
- The right to object to processing
- The right to data portability
2. In case of doubts or requests, please contact the Office for Personal Data Protection.
VII. Personal data security conditions
1. Security measures:
- Use strong passwords
- Antivirus programs
- Encryption using HTTPS
- Regular backups
2. Only authorized persons have access to personal data.
VIII. Final provisions
1. By submitting an order from the online order form, you confirm that you are aware of the terms of the privacy policy and that you fully accept them.
2. The controller is entitled to change these conditions. It will publish the new version of the Privacy Policy on its website and will also send the new version of the Privacy Policy to the email address you have provided to the Controller.
3. These terms and conditions come into effect on 21. 1. 2025.