Privacy Policy and Terms and Conditions of Personal Data Processing

Privacy Policy and Terms and Conditions of Personal Data Processing

By submitting the form or ticking the consent box, you agree that the Data Controller and the Website Operator (e-shop operator) may process automatically or manually any personal data you submit, including any profile-making under the terms set forth herein.

Who is your data controller?

KORUproduction s.r.o.
Pecháčkova 1244/7, Smíchov, 150 00 Praha 5
IČ: 075 45 894
DIČ: CZ075 45 894

hereinafter referred to as the “Data Controller”.

Definition of personal data

Personal data means all information concerning an identified or identifiable natural person; an identifiable natural person is such a natural person who may be identified directly or indirectly, especially by means of a link to a certain identifier, such as a name, ID number, email address, address of residence, data on location, IP address. The Data Controller has not appointed a data protection officer.

Which personal data do we process?

We solely process such personal data which we need to deliver your order, to provide our services and customer service, and to adhere to our statutory obligations and to protect our legitimate interest.

In the event that you provide your contact details - first name and surname, email address, telephone, address - to the Data Controller, it will process such data for the purposes of performance of its business activities, which include but are not limited to the delivery of your order and direct marketing, i.e. re-contacting you and creating and sending a repeated offer by the Data Controller.

Granting your consent to processing of your contact details for marketing purposes and commercial purposes is voluntary. This consent remains valid unless its withdrawn.

How can you erase your personal data?

You may cancel your registration at our web (e-shop) or erase your account at any time. This can be performed by clicking on “erase my account” upon signing into your user account.

Your consent with sending commercial communication by us can be withdrawn at any time by clicking on the link typically located at the email footer.

Statutory (legitimate) claim and purpose of processing

The Data Controller may process your identification details and contact details in order to conclude and fulfil the contract even without your consent. Furthermore, the Data Controller may process your identification details without your consent for the purpose of fulfilment of its own statutory obligation arising from legal regulations (e.g. Act No. 235/2004 Sb., the Value Added Tax Act, Act No. 253/2008 Sb., on measures against legitimisation of proceeds of crime and financing of terrorism, etc.).

The legitimate interest of the Data Controller is to inform you of news concerning the management of your contract and to offer you services and products associated therewith. Furthermore, its legitimate interest is market research and surveys concerning customer satisfaction with the used products and services.

Your rights

Under the GDPR, you have the right to access to your personal data under Article 15 of the GDPR, the right to rectification of your personal data under Article 16 of the GDPR, and the right to request the restriction of personal data processing under Article 18 of the GDPR. You also have the right to erasure of your personal data under Article 17 of the GDPR. The right to object to the processing of personal data under Article 21 of the GDPR, and right to data portability under Article 20 of the GDPR. The right to withdraw your consent with processing in writing or by email using the address or email address of the Data Controller. Furthermore, you have the right to file a complaint with the Office for Personal Data Protection in the event that you assume that your right to protect your personal data may have been breached.

Any information and statements related to the rights you decide to exercise will be provided by us free of charge. Nevertheless, if your request is evidently unreasonable or inadequate, especially due to its repeated nature, we may charge a reasonable fee taking into account the administrative costs associated with the provision of the required information. Any statements or information on any adopted measures will be provided to you at the earliest convenience no later than within one month. If need be, we may prolong the time limit by two months with respect to the potential complexity and quantity of requests.

Data storage term

The Data Controller stores the data for the term of fulfilment of its rights and obligations arising from the contractual relation (for the term of 15 years of terminating the contractual relation). Unless the consent is withdrawn, the personal data is processed based on the consent. Upon expiry of the term, the Data Controller will erase your personal data.

Cookies

In order to be fully functional, our website uses cookies. Cookies are short text files saved by your browser for technical data storage. Cookies enable the website to record the information on your visit, for instance, your preferred language, contents of the basket, and other settings. Provided that your web browser allows cookies, the Data Controller processes the records of your behaviour on its website in order to improve the operation of the Data Controller’s website and for the purposes of direct marketing. Storage of cookies can be blocked in the settings of your web browser. By blocking cookies, certain functions of the website may not be available.

Personal data security

The Data Controller hereby declares to have adopted all technical and organisational measures to ensure the maximum security of your personal data. For this purpose, the Data Controller uses secured server solution, SSL secure connection, and solely authorised persons have access to the personal data.

Who has access to personal data?

Personal data is accessible by the Data Controller, its employees and also any contractual service providers. This mainly includes the providers of transport and postal services (Česká pošta, PPL, etc.) for personal data solely within the scope necessary for delivering consignments. The recipients of personal data are persons participating in the delivery of goods / services / payment realisation based on a contract and other services associated with the website (e-shop) operation and providing marketing services.

Final provisions

By submitting the online form, you confirm to have become familiarised with the Privacy Policy and that you accept the Privacy Policy in full.

You grant your consent within the meaning of Article 6 (1) (a) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( General Data Protection Regulation), and you declare that all the data you have provided is true.

The Privacy Policy is effective of 25 May 2018.