Protection of Personal Data

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, ServisControl s.r.o., ID: 27878201, with its registered office at Ovčáry 299, 280 02 Ovčáry, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 123618 (hereinafter referred to as the "controller"), hereby informs the customer, if they are a natural person, as the data subject, that their personal data will be processed by the controller in the following manner:

1. Due to fulfilling the legal obligations of the controller, the following personal data of the customer will be processed:

Name and surname or company name, residential or registered office address, identification number, tax identification number, date of birth, if applicable, personal identification number, scope and subject of performance, as well as any other mandatory data according to the relevant legal regulations.

These personal data will be processed primarily for the purpose of fulfilling obligations arising from relevant legal regulations (e.g., in the field of accounting). Personal data may be disclosed by the controller to third parties, especially to state authorities, if legal regulations require the controller to do so. Personal data will be processed for the period necessary to fulfill the legal obligations applicable to the controller.

 

2. For the purpose of fulfilling the contract, of which the customer is a party, the following personal data of the customer will be processed:

Name and surname or company name, residential or registered office address, delivery address, identification number, tax identification number, date of birth, if applicable, personal identification number, email address, telephone number, bank account details, and any other data provided by the customer for this purpose.

These personal data will be processed primarily for the purpose of processing the customer's order and for exercising rights and fulfilling obligations arising from the contract for the controller. Customers' personal data may be disclosed to the controller's contractual partners, especially transportation companies for the purpose of delivering goods. The controller processes personal data necessary for the duration of rights and obligations arising from the contract, of which the customer is a party, including related rights, such as those arising from liability for defects. These personal data will also be processed for the purpose of taking necessary measures before concluding a contract at the request of the customer. Personal data will be processed for the purposes of negotiating the conclusion of the contract. Personal data for these purposes will be processed until the negotiations for concluding the contract are terminated.

 

3. For the purpose of legitimate interests of the controller, the following personal data of the customer will be processed:

Name and surname or company name, residential or registered office address, email address, telephone number, identification number, tax identification number, date of birth, if applicable, personal identification number, scope and subject of performance, and any other data provided by the customer for this purpose.

These personal data will be processed primarily for the purpose of enforcing any claims of the controller and potentially contacting the customer with whom a contract has been concluded, through an offer for the supply of goods or services by the controller. The customer's personal data will be processed for these purposes for the period necessary to pursue the legitimate interests of the controller.

The controller informs the customer that if the customer is a legal entity, the controller will process the personal data of the natural person acting on behalf of this legal entity in specific cases. This processing will include the name and surname, job position, and possibly email address and telephone number, for the reasons stated above. The controller also informs the customer that the above-mentioned personal data may be processed by a processor on behalf of the controller (e.g., in connection with providing technical support, consulting, securing the assets of the controller, etc.). Upon request, the controller will disclose the identity of the processors to whom the personal data has been transferred.

The processing of acquired personal data of all customers by the controller is conducted in accordance with Act No. 101/2000 Coll., on Personal Data Protection, as amended ("the Act"), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, in its effective version since 25 May 2018 ("the Regulation").

The customer has the right to request access to their personal data from the controller, meaning they have the right to request confirmation that their personal data is being processed and to request information about the processing process. Furthermore, the customer has the right to data portability. The customer may request correction if their personal data is inaccurate or incomplete. The customer may raise objections, request erasure, and restrict the processing of personal data only for reasons provided by law or regulation.

 

4. Conditions for the protection of personal data when making a purchase in the e-shop:

The processing of the mentioned personal data is necessary for order processing and other performance under the contract if a purchase agreement is concluded between you and the seller. Such processing of personal data is permitted by Article 6(1)(b) of the Regulation - processing is necessary for the performance of a contract.

The seller also processes these data for the purpose of contract documentation and potential future enforcement and defense of the rights and obligations of the contracting parties.

The retention and processing of personal data for the aforementioned purpose is for a duration specified by law from the completion of the last part of the contract performance unless another legal regulation requires the retention of contractual documentation for a longer period. Such processing is possible under Article 6(1)(c) and (f) of the Regulation – processing is necessary for compliance with a legal obligation and for the purposes of the legitimate interests pursued by the controller.

The collection of cookies for the purposes mentioned above may be considered as the processing of personal data. Such processing is possible on the basis of a lawful ground - the legitimate interests of the controller, permitted by Article 6(1)(f) of the Regulation.

 

Any inquiries regarding the processing of personal data will be answered to the customer by phone at the number 311 240 070 or through e-mail.

The customer has thus been informed of their rights arising from the law and regulations and has been informed about what personal data will be processed by the controller, for what purposes, and for how long.