Principles of personal data protection
Principles of personal data protection
I.
Basic provisions
- Administrator of personal data pursuant to Article 4 point 7 of the Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter only: "GDPR") is GLOBETECH INNOVATION s.r.o.. IdNo 03586570 with registered office at Kořenského 1107/15, 150 00 Prague 5, registered in the Commercial Register kept at the Municipal Court in Prague, file number C 58731. (hereinafter only: "Administrator").
- Contact details of the Administrator:
Address: GLOBETECH INNOVATION s.r.o., Kořenského 1107/15, 150 00 Prague 5.
E-mail: info@mujsain.cz
Telephone: +420 605 111 532
- Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, locating data, network identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- The Administrator has appointed an officer responsible for the protection of personal data.
II.
Sources and categories of personal data processed
- the Administrator processes the personal data that you have provided to it or the personal data that the Administrator acquired based on the fulfillment of your order:
- First and last name
- E-mail address
- Postal address
- Telephone number
- the Administrator processes your identification and contact data and the data necessary for the fulfillment of the contract.
III.
Legal ground and purpose of the processing of personal data
- the legal ground of processing of personal data is
- the fulfillment of the legal obligation of the Administrator pursuant to Art. 6 para. 1 lit. c) DSGVO,
- the legitimate interest of the Administrator pursuant to Art. 6 (1) (f) DSGVO,
- your consent to the processing for the purposes of direct marketing (in particular for the purpose of sending business communications and the newsletter) pursuant to Art. 6 par. 1 letter a) DSGVO in connection with Section 7 par. 2 Act No. 480/2004 Coll., on some information society services.
- the purpose of the processing of personal data is
- the execution of your order and the exercise of the rights and obligations arising from the contractual relationship between you and the Administrator; when placing the order, you must provide the personal data necessary for the successful execution of the order (name and address, contact), the provision of the personal data is a necessary condition for the conclusion and performance of the contract; without these personal data, no contract can be concluded, nor can it be performed on the part of the Administrator,
- the fulfillment of legal obligations towards the State,
- sending business communications and other marketing activities. 3.
- an automated individual decision within the meaning of Article 22 of the GDPR is made on the part of the Administrator. You expressly consent to such processing.
IV.
Data retention period
- the Administrator shall keep the personal data for the following period:
- for the period strictly necessary for the exercise of the rights and obligations arising from the contractual relationship between you and the Administrator and for the assertion of claims arising from such contractual relationships (for a period of 10 years from the end of the contractual relationship).
- until the consent to the processing of personal data for marketing purposes is revoked, for a maximum of 10 years if the personal data is processed on the basis of consent.
- after the expiry of the period for keeping personal data, the Administrator shall delete the personal data.
V.
Recipients of personal data (subcontractors of the Administrator)
- recipients of the personal data are persons
- who are involved in the delivery of goods/services/realization of payments based on the contract,
- who perform services related to the operation of the e-shop and other services related to the operation of the e-shop,
- who perform marketing services.
- the Administrator wishes to transfer the personal data to third countries (to countries outside the EU) or international organizations. The recipients of personal data in third countries are providers of mailing services / cloud services.
VI.
Processors of personal data
- personal data shall be processed by the Administrator; however, personal data may also be processed on its behalf by the following processors:
- by service providers
- possibly by other providers of processing software services and applications,
- accountants, tax advisors for the control of accounting, processors of IT services.
VII.
Your rights
1) Under the conditions set forth in the GDPR, you have.
- The right to access your personal data in accordance with Article 15 of the GDPR,
o You have the right to obtain confirmation from us whether or not the personal data concerning you is being processed, and if so, you have the right to access that personal data.
- The right to rectification of personal data in accordance with Art. 16 of the GDPR, possible restriction of processing in accordance with Art. 18 of the GDPR,
o You have the right to request from us the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request completion of incomplete personal data, including by granting an additional explanation.
o You have the right to require us to restrict processing in any of the following cases:
(a) if you dispute the accuracy regarding the personal data for the time necessary for the Administrator to verify the accuracy of the personal data;
- b) if the processing is unlawful, you object to erasure of personal data and instead request restriction of processing;
- c) if we no longer need the personal data for the purposes of the processing, but you request it in order to determine, exercise or defend legal claims;
- d) if an objection to the processing has been raised pursuant to Article 21(1) of the Regulation, pending verification that the legitimate grounds of the Administrator override your legitimate grounds.
- If the processing has been restricted in accordance with the previous paragraph, such personal data, with the exception of storage, may be processed only with your consent, or for the purpose of determining, exercising or defending legal claims, for the purpose of protecting the rights of another natural or legal person or because of a public interest of the EU or a member state. The right to erasure of personal data in accordance with Art. 17 DSGVO:
o You have the right to request from us the immediate erasure of personal data concerning you and we have the obligation to erase the personal data without undue delay if one of the following reasons applies:
(a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- b) you revoke the consent on the basis of which the data were processed and there is no other legal ground for the processing;
- c) you object to the processing pursuant to Article 21 (1) of the Regulation, the processing is carried out on the basis of consent, or the data are processed for the purpose of protecting the interests of the Administrator or a third party and there are predominantly legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) of the Regulation, or the processing is carried out for marketing purposes;
- d) personal data have been processed unlawfully;
- e) personal data to comply with a legal obligation established by the law of the EU or a Member State that relates to the Administrator must be deleted;
- f) personal data has been collected in connection with an information society service offer pursuant to Art. 8 par. 1. of the Regulation in connection with an information offer of the Society for Children;
o This provision shall not apply if the processing is necessary:
(a) for compliance with a legal obligation that requires processing under EU law or the law of a Member State that applies to the Administrator,
- b) for the determination, exercise or defense of legal claims.
- The right to object to processing in accordance with Article 21 of the GDPR,
o You have, for reasons relating to your specific situation, the right to object at any time to the processing of personal data concerning you if the processing is necessary for the purposes of our legitimate interests or the interests of third parties, including profiling based on these provisions. As an administrator, we will not further process personal data unless we present substantial legitimate grounds for processing that override your interests or rights and freedoms. We have the right to further process the data if you are significant for the determination, exercise or defense of legal claims.
o If personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data relating to you for such marketing, which includes profiling if carried out as part of direct marketing.
- If you object to the processing for the purposes of direct marketing, the personal data will no longer be processed for these purposes. The right to data portability in accordance with Art. 20 DSGVO and.
o You have the right to keep the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.
- The right to withdraw consent to the processing in writing or electronically at the address or email address of the Administrator, listed in Art. III of these terms and conditions.
2) You also have the right to lodge a complaint with the Data Protection Agency if your right to protection of personal data has been violated, possibly you can also turn to court.
VIII.
The conditions for the protection of personal data
- the Administrator declares that it has taken all appropriate technical and organizational measures for the protection of personal data.
- the Administrator has taken technical measures to protect the data storage and the archived personal data in paper form.
- the Administrator declares that only persons authorized by him/her have access to the personal data.
IX.
Final provisions
- by sending the order by means of the order form on the Internet, you confirm that you have been made familiar with the terms and conditions for the protection of personal data and that you agree with them in full.
- you agree to these conditions by marking them with a cross in the internet form. By ticking the consent you confirm that you have been familiarized with the terms and conditions for the protection of personal data and that you agree with them to the full extent.
- the Administrator is entitled to change these conditions. He will publish the new version of the Terms and Conditions for Personal Data Protection on his website, at the same time he will send you the new version of these Terms and Conditions to your e-mail address, which you have provided to the Administrator.
These conditions are valid from April 1, 2024.