The personal data specified above and their categories are indicative only; the specific scope of categories we may process in the context of our co-operation can be found below.

5. ON WHAT BASIS MAY WE PROCESS YOUR PERSONAL DATA?
First of all, we only process your personal data when strictly necessary. We must always adhere to the conditions required by the GDPR in this regard. We may thus process your personal data only if:

• such processing is necessary for entering into and performance of our contract, or for processing related to the conclusion of the contract;
• such processing is directly required of us by the law and is necessary for compliance with a specific legal obligation;
• the processing is necessary for the purposes of our legitimate interests, which override your rights in the specific case;
• you have given us your express and free consent to such processing.

The GDPR specifies further legal grounds for processing of your personal data, but these are not applicable to our co-operation.

Specific information as to the basis on which we process your personal data can be found below.

6. HOW DO YOU PROCESS MY PERSONAL DATA AND FOR HOW LONG?
The actual scope of the categories of personal data processed, the purpose for which they are processed, and the legal grounds vary depending on the situation. You will find a list of specific situations in this paragraph below, although not all these manners of processing may be applicable in your case.

Entering into and performance of our mutual contract
If you purchase a product or services from us, or if you co-operate with us and enter into a contract, we need your personal data so that we can enter into the relevant contract together and subsequently perform the contract. Without the information below, it would be impossible for us to conclude the contract in the first place (as we would not know with whom we are concluding it) or to perform it (as we would not be able, for example, to process your address and match the relevant payment).

In the above case, we process your personal data for the following purposes:

If you purchase a service or product from us, we have the right to use your email (and your telephone number), on the basis of the “customer exception”, to contact you with an offer of a product or service similar to the one you have purchased from us. This procedure is made possible by Section 7 (3) of Act No. 480/2004 Coll., on certain services of the information society, as amended. If you do not wish to receive these messages, you can exclude this option when negotiating the contract, or you can find a link at the end of each commercial communication – if you click on this link, we will stop sending such communications to you until you give us your consent again.

For more information on how to opt out of commercial communications concerning a product or service similar to one you have purchased from us, see below.

Contact and inquiry form
You can leave us a message and your contact details on our website with a view to initiating further communication concerning our products and services. In this case, too, we will process your personal data and you are not obliged to disclose your personal data to us if you do not want to. Without these data, however, we will unable to write back to you or respond to your inquiry.

In the above case, we process your personal data for the following purpose:

Marketing communication
We are happy to share our news with you. To make this possible, you have the option to write to us or fill in a form and agree that we may contact you with our product and service offerings or news (by email, by phone or in writing). If you wish to receive such news from us, we need to know your contact details and, where applicable, also your order history and related information so that we can send you news that will be of interest to you. All this is voluntary on your part and you are under no obligation to subscribe to our newsletter.

In the above case, we process your personal data for the following purpose:

In any case, the provision of the personal data in question is completely voluntary on your part and you can always withdraw your consent through the procedure set out below. If you have previously entered into a contract with us and have not opted out of receiving commercial communications relating to products and services similar to those you have received from us in the past, we may also send commercial communications to you without your consent (see above, with regard to entering into and performance of the contract).

7. WHO HAS ACCESS TO MY PERSONAL DATA?
We do not disclose your personal data to anyone unless absolutely necessary. In some cases, we use suppliers who are then in the position of personal data processors. We have concluded appropriate contracts with these persons in accordance with Art. 28 (3) GDPR.

We denote all these persons as recipients and list the categories of recipients below:

8. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH PERSONAL DATA PROCESSING?
At this point, we would like to inform you about the rights you have in relation to the possible processing of your personal data, and how you can subsequently exercise these rights. 

8.1 Right of access
You have the right to obtain a confirmation from us as to whether or not we process your personal data. If we process your personal data, you have the right to access the personal data being processed and, at the same time, the right to obtain a copy of such personal data.

8.2 Right to rectification
We strive to process only up-to-date information about you and erase any incorrect information, following their rectification. However, this does not prevent you from asking us to rectify personal data that are no longer up-to-date or are incorrect.

8.3 Right to erasure (“right to be forgotten”)
If we no longer require your personal data, we will erase them immediately. However, this in no way affects your right to have your personal data erased (or rendered anonymous) without delay based on any of the following reasons:

• the personal data are no longer required for the above purposes;
• you withdraw your consent to personal data processing;
• you raise an objection regarding a legitimate interest and we come to the conclusion that this legitimate interest does not override your rights (in the case of marketing purposes based on a legitimate interest, we will erase these data immediately);
• the processing has been unlawful;
• we are required to erase the data based on the laws of the Czech Republic or European Union law.

However, this right is not absolute. In some cases, we need not/must not erase your personal data – this is so in the following cases, where processing is necessary:

• for exercising the right of freedom of expression and information;
• for complying with a legal obligation;
• for reasons of a public interest in the area of public health;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
  for the establishment, exercise or defence of legal claims.

However, it is quite possible that none of the above cases will become relevant, and so you need not worry that we would not erase your personal data.

8.4 Right to restriction of processing

• At the same time, you have the right to claim that we restrict personal data processing in one of the following cases:
• you contest the accuracy of your personal data – for a period necessary to verify their accuracy;
  the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
• we no longer need the personal data for the purposes of the processing, but you require us to store them for the establishment, exercise or defence of legal claims;
• you raise an objection regarding a legitimate interest – until the objection is evaluated as to its justification.

8.5 Right to portability
Although this might seem odd at first sight, if we process your personal data by automated means and the processing is based on consent or necessity for the performance of a contract, you have the right to “portability”. The right to portability guarantees that we will transmit the data you have provided to us in a commonly used and machine-readable format, either to you or to another data controller identified by you.

8.6 Right to object to processing based on a legitimate interest 
If we process your personal data on the basis of a legitimate interest, you have the right to raise a justified objection against such processing. In cases where data are being processed for the purposes of direct marketing, you need not justify your request and we will immediately cease processing your personal data, in line with the GDPR. 

This is so, for example, when we send commercial communications to you about products or services similar to ones you have purchased from us, i.e. on the basis of the “customer exception”. If you do not wish this, please let us know by email or state this at the relevant point when negotiating the contract; we will not use this option or will cease doing so. You can also use the unsubscribe link at the bottom of the email with our commercial communication.

In other cases, we have the right to review your objection and assess whether your rights override our legitimate interest.

8.7 Right to withdraw consent
If we process your personal data on the basis of your consent, you naturally have the right to refuse the consent and withdraw it at any time. In that case, we will not continue with the processing and, if the law does not prevent us from doing so, we will erase your personal data.

However, if we simultaneously process your personal data based on some other legal ground, we are not required (and sometimes not even allowed) to erase the personal data.

8.8 Right to lodge a complaint with the Office for Personal Data Protection
If you believe that we are processing your personal data unlawfully, you naturally have the right to lodge a complaint with the supervisory authority, specifically the Office for Personal Data Protection (www.uoou.cz).

9. HOW TO EXERCISE THE ABOVE RIGHTS?
You can exercise your rights easily by sending an email to the address given above. Once we have checked your identity, we will be happy to help you with exercising your rights.

10. ARE PERSONAL DATA TRANSFERRED OUTSIDE THE EU?
No.

11. IS AUTOMATED INDIVIDUAL DECISION-MAKING USED IN PERSONAL DATA PROCESSING?
No.

12. WHEN DOES THIS DOCUMENT ENTER INTO EFFECT?
March 20, 2023