PROTECTION OF PERSONAL DATA
ERPET Group a.s.
based Strakonická 2860/4, Praha 5, 15000
identification number: 26138093
Společnost je zapsaná v obchodním rejstříku vedeném Městským soudem v Praze, oddíl B, vložka 6285
dealing with the sale of goods through an online store located at https://www.erpetcrystal.cz/
1. Basic provisions
1.1 The Personal Information Manager is ERPET Group a.s., registered Strakonická 2860/4, Praha 5, 15000, ID: 26138093 ("Administrator") who is also an ecommerce provider.
1.2 Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a natural person that can be identified directly or indirectly, in particular by reference to a particular identifier such as name, identification number, location data, network identifier or one or more specific physical, physiological, genetic, psychological, economic, the social identity of this individual.
1.3 The administrator did not appoint a Data Protection Officer.
2. Sources and categories of data processed
2.1 The administrator processes the personal data you have provided to him or the personal data he has received as a result of filling in your order.
2.2 These are the identification and contact details necessary for the proper performance of the contract you have entered into or intends to close with the Administrator. It is a contract of sale, which is concluded at a distance, in accordance with Article 6 (1) (b) Regulation (EC) No 2016/679 of the European Parliament and of the Council of 27.4. 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR").
2.3 Other categories of data are acquired by Administrator based on cookies, Google Analytics, or other tracking signals when you are on #LINK #. By browsing the site, you agree to use this technology.
3. Legitimate reason and purpose of processing personal data
3.1 The administrator has legitimate reasons for processing personal data. For legitimate reasons, we consider the performance of a contract between you and the trustee, the Administrator's legitimate interest in providing direct marketing, for the purpose of a targeted supply of products and services, pursuant to Article 6 (1) f) GDPR, as well as consent to the processing of personal data for the purpose of direct marketing that you provide to the Administrator in the event that goods or services have not yet been ordered.
3.2 The purpose of processing personal data is to execute the user's order and to exercise the rights and obligations arising from the contractual relationship between you and the Administrator. The purpose of processing personal data is also the sending of business messages and other marketing activities.
3.3 No automatic automatic decision-making within the meaning of Article 22 GDPR by the Administrator
4. Retention period
4.1 The administrator keeps your personal data for a period of time strictly necessary for the proper performance of the subject matter and for claims arising out of a contractual relationship between you and the Administrator (specifically for 15 years from the termination of the contractual relationship).
4.2 If you agree to receive commercial communications, even if there is no purchase of goods or services, the Administrator has the right to process the personal data provided until the consent is withdrawn, but for a maximum period of 15 years.
4.3 After this period, the Administrator will erase personal information.
5. Recipients of personal data
5.1 The Personal Data Recipient is a subcontractor of the Administrator involved in the https://www.erpetcrystal.cz/ shop.
5.2 The administrator uses the FineEshop service, operated by FineSolution sro, registered office at Pod Táborem 54/10, Prague 9 - Hrdlořezy, postal code 190 00, company ID 24301230, registered in the Commercial Register of the Municipal Court in Prague, Section C, Insert 194470 The administrator concluded with FineSolution sro a processing agreement that is part of the FineEshop Terms of Service. FineSolution undertakes that personal data may be used only for the purpose of FineEshop's proper functioning, direct communication with the Administrator and for the statistical needs of the Provider.
5.3. The administrator uses the services of Smartsupp.com s.r.o. headquarters Milady Horákové 13, 602 00 Brno Company ID: 03668681 DIČ CZ03668681 - smartsupp stores data in the Czech Republic and Germany. The administrator has entered into an agreement with Smartsupp on the processing of personal data. Smartsupp.com s.r.o. undertakes that personal data may be used only for the purpose of the proper functioning of the smartsup service, direct communication with the Administrator and for the statistical needs of the Provider.
5.4 The controller transfers personal data to third countries.
6. Your rights
6.1 Subject to the terms of the GDPR, you have the right to have access to your personal data pursuant to Article 15 of the GDPR, the right to the repair of personal data under Article 16 GDPR, or the limitation of processing pursuant to Article 18 GDPR, the right to delete personal data under Article 17 GDPR , the right to object to processing under Article 21 of the GDPR, the right to data portability under GDPR Article 20, and the right to withdraw consent to processing in writing to the address specified in Article 8.4 of these Terms.
6.2 If you believe that the right to protection of personal data has been violated, you have the right to file a complaint with the Supervisory Authority - the Office for Personal Data Protection.
7.1 The Administrator declares that he has taken the necessary technical and organizational measures to safeguard your personal data.
7.2 Access to personal data is password-protected. Personal data is regularly backed up and the security of the communication is encrypted (SSL certificate).
7.3 Only authorized persons of the Administrator and its subcontractors have access to personal data.
8. Final Provisions
8.2 By confirming your consent, you grant the Administrator the assent to these terms and conditions, confirm that the provided data is accurate and that it is a voluntary provision of personal information.
8.3 The Administrator is authorized to change these terms and conditions without undue delay publishing the new version on https://www.erpetcrystal.cz/.
8.4 Contact Manager information on the following conditions: Strakonická 2860/4, Praha 5, 15000, Email: firstname.lastname@example.org, Phone: +420 224 229 755.
These Terms are valid and effective on May 24, 2018