1. FUNDAMENTAL PROVISIONS

 

The administrator of personal data pursuant to Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") is Malvarenaco CZ s.r.o. IČO6103219 with its official registered office at Štíhlice 16, 28163 (hereinafter as the “seller” or the “administrator”).

The contact information of the administrator is:

 

a) address: Štíhlice 16, 28163
b) e-mail: malvarenacocz@seznam.cz
c) telephone: 778480900

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or one or more specific physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The administrator has not appointed a commissioner for the protection of personal
information.

2. SOURCES AND CATEGORIES OF PROCESSED PERSONAL INFORMATION

2.1. The administrator processes personal information, which you have provided to him, or
personal information, which the administrator obtained on the basis of filling your order.
2.2. The administrator processes your identification and contact information and information
essential for the performance of the contract.

3. LAWFUL REASONS AND PURPOSES FOR THE PROCESSING OF PERSONAL INFORMATION

3.1. The lawful reasons for processing personal information are:

a) performance of the contract between you and the administrator according to Article
6 subsection 1 (b) of the GDPR,

b) the legitimate interest of the administrator to conduct direct marketing (in particular
for sending commercial messages and newsletters) according to Article 6 subsection
1 (f) of the GDPR,

c) your consent to processing for the purposes of conducting direct marketing (in
particular for sending commercial messages and newsletters) according to Article 6
subsection 1 (a) of the GDPR in connection with Section 7 subsection 2 of Act No.
480/2004 Coll., on Certain Services of Information Companies in Cases where No
Orders of Goods and Services Were Made.

3.2. The purposes of the processing of personal information are:

a) processing of orders and other performance from the contract if a purchase contract
is concluded between you and the seller;such processing of personal information is
allowed under Article 6 subsection 1 (b) of the Regulation – processing is essential
for the performance of the contract, and

b) sending of commercial messages and conducting of other marketing activities.

3.3. On the part of the administrator, automatic individual decision-making in the sense Article
22 of the GDPR does not occur.

 

 

4. INFORMATION STORAGE PERIOD

4.1. The administrator stores personal information:

a) for the purposes of record-keeping of the contract and the potential future exercise
and defense of the rights and obligations of the contracting parties; the storage and
processing of personal information for the aforementioned purposes is for a period
of 15 years from the realization of the last part of the performance according to the
contract; such processing is possible on the basis of Article 6 subsection 1 (c and f)
of the Regulation – the processing is essential for the fulfillment of legal obligations
and for purposes of the legitimate interests of the administrator,

b) for a period, prior to the rescinding of consent to the processing of personal
information for marketing purposes, no longer than 5 years, if personal information
are processed on the basis of consent.

4.2. After the storage period for personal information expires, the administrator will delete the
personal information.

 

5. RECIPIENTS OF PERSONAL INFORMATION (SUBCONTRACTORS OF THE ADMINISTRATOR)

5.1. Recipients of the personal information are persons:

a) participating in the delivery of goods, services, realization of payments on the basis
of the contract

b) providing services for the operation of the e-shop and other services in connection
with the e-shop, the company Shoptet.

c) providing marketing services.

5.2. The administrator does not intend to transfer the personal information to a third country
(to a country outside of the European Union) or an international organization. Recipients
of the personal information in third countries are providers of mailing services or cloud
services.

 

6. YOUR RIGHTS IN CONNECTION WITH THE PROCESSING OF PERSONAL INFORMATION

6.1. Under the conditions stipulated in the GDPR, you have the right to:

a) access to your personal information according to Article 15 of the GDPR,
b) correction of personal information according to Article 16 of the GDPR, or the
limitation of processing according to Article 18 of the GDPR,
c) deletion of personal information according to Article 17 of the GDPR,
d) transferability of the information according to Article 20 of the GDPR,
e) make an objection to the processing according to Article 21 of the GDPR.

6.2. You furthermore also have the right:

a) to rescind consent to the processing in writing or electronically at the address or
email of the administrator mentioned in cl. 3 of these terms and conditions,

b) to submit a complaint to the Office for Personal Data Protection (Úřad pro ochranu
osobních údajů) in the event that you believe that your rights to the protection of
personal information have been violated

7. TERMS AND CONDITIONS FOR THE SAFEGUARDING OF PERSONAL INFORMATION

7.1. The administrator declares that he has taken all appropriate technical and organizational
measures for the safeguarding of the personal information.

7.2. The administrator has taken technical measures for the safeguarding of data storage and
storage of personal information in paper document form, in particular passwords,
encryption and backup.

7.3. The administrator declares that only person authorized by him have access to the personal
information.

 

8. FINAL PROVISIONS

8.1. By sending an order from the internet ordering form, you confirm that you are familiar with
the terms and conditions for the protection of personal information and accept them in
their entirety.

8.2. Agree to these terms and conditions by checking consent by means of the internet form.
By checking consent, you confirm that you are familiar with the terms and conditions for
the protection of personal information and accept them in their entirety.

8.3. The administrator is entitled to modify these terms and conditions. He will publish the new
version of the terms and conditions for the protection of personal information on his
internet site and at the same time send you the new version of these terms and conditions
at your e-mail address, which you provided to the administrator.

 

These terms and conditions become effective on the date of January 25,2021