Personal and other data protection principles
These Personal and other data protection principles (hereinafter also “Policy”) describes how we collect, use and otherwise handle personal information collected through the www.dekontacbrn.cz web interface (“web interface”).
– Dekonta CBRN s.r.o., Volutová 2523, 1588, Prague 5
– Identification number: 25157957
– Tax registration number: CZ25157957
– registered: in the Commercial Register kept at the Municipal Court in Prague, file number C 275241
Contact details of the data controller:
– Delivery address: Dekonta CBRN s.r.o., Volutová 2523, 1588, Prague 5
– Phone: +420 604 248 098
– Contact e-mail: firstname.lastname@example.org
- INTRODUCTORY PROVISIONS
1.1 When handling personal data, we act in accordance with the legal order of the Czech Republic and directly applicable regulations of the European Union, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR” and Act No. 480/2004 Coll., on certain information society services and on amending certain acts, as amended.
1.2 Personal data means any information that identifies or can identify a specific natural person. In particular (but not exclusively) personal data are:
– Identifying information, such as first and last name, birth number, date of birth, gender, user account login, identification number, tax registration number, business name;
– contact details, such as residential or business address (or delivery address), telephone number, email address;
– other data, such as information obtained through cookies, IP address (network identifier) including browser type, device and operating system, time and number of accesses to the web interface and other similar information.
- COLLECTION AND USE OF PERSONAL DATA
2.1 You provide us with your personal data in particular when you fill in an order or when you create a user account. When you visit and use the web interface, some personal data may also be collected and stored via cookies. You can read more about cookies in Article 5 of this Policy.
2.2 Purposes of processing personal data:
– We may collect and process personal data entered when ordering goods or services without your explicit consent solely for the purpose of performing the contract, i.e. for the purpose of delivering the goods or services. Furthermore, we may process this data for the purpose of fulfilling our other statutory obligations (in particular, record-keeping obligations, archiving of tax documents, etc.).
– We may collect and process the personal data entered when you create a user account without your explicit consent solely for the purpose of enabling access to, managing and maintaining the user account.
– We are entitled to use your e-mail address to send you commercial communications concerning our goods or services similar to those you have ordered from us without your express consent. You may refuse to receive commercial communications at any time.
– If you give us your consent to do so by confirming this on the web interface, we may process the personal data you provide when you complete your order or create a user account for the purpose of sending you commercial communications and direct marketing, or for other purposes to which you have expressly consented.
We can only use your personal data for a purpose other than that for which it was collected with your consent.
2.3 Duration of processing of personal data
– We only use personal data entered in the context of ordering goods or services or in the context of registration for the time necessary to fulfil the contract and comply with legal obligations.
– If you give us explicit consent to the processing of personal data or if we use your e-mail address to send you commercial communications in accordance with the previous article, the data will be used for the duration of the web interface.
- YOUR RIGHTS REGARDING PERSONAL DATA
3.1 Right to withdraw consent to the processing of personal data
If we process your personal data only on the basis of your consent (i.e. without any other lawful reason), you may withdraw this consent at any time.
You can withdraw your consent to the processing of your personal data at any time:
– by sending an email to our contact email address;
– by telephone by calling our contact number;
– in writing by letter sent to our delivery address;
– in the case of commercial communications – in the manner specified in each email containing commercial communications (by clicking on the unsubscribe link or otherwise).
Withdrawal of consent does not affect the lawfulness of the processing of data carried out up to the time of withdrawal of consent to processing.
3.2 Right of access to personal data
You have the right to ask us whether we are processing your personal data. If we are processing your data, you have the right to access this personal data and in particular the following information:
– the purpose of the processing;
– the categories of personal data processed;
– the recipients or categories of recipients to whom the personal data will be disclosed;
– the period for which the personal data will be stored.
Upon your request, we will provide you with a copy of the data processed. We may charge you an administrative fee for additional copies, not exceeding the cost of making and transmitting those additional copies.
3.3 Right to rectification
If your personal data is inaccurate or incomplete, you have the right to request immediate rectification, i.e. correction of inaccurate data and/or completion of incomplete data.
3.4 Right to object to processing
You have the right to object at any time to the processing of your personal data where we process it for direct marketing purposes, including any automated processing of personal data. Once you have objected, we will no longer process your personal data for these purposes.
3.5 Right to erasure (“right to be forgotten”)
You have the right to request that we delete your personal data if:
– the personal data is no longer necessary for the purposes for which it was collected or processed;
– you have withdrawn your consent to processing;
– you have objected to the processing of personal data;
– the personal data have been unlawfully processed.
If there are no lawful grounds for refusing erasure, we are obliged to comply with your request.
3.6 Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if:
– you contest the accuracy of your personal data;
– the processing is unlawful and you request restriction of the processing of your personal data instead of erasure;
– we no longer need your personal data for the purposes of processing but you require it for the establishment, exercise or defence of legal claims;
– you object to the processing.
When restricting processing, we are only entitled to store your personal data; further processing is only possible with your consent or for legal reasons.
If the processing of your personal data is restricted due to an objection to processing, the restriction lasts for the time necessary to determine whether we are obliged to comply with your objection.
If the processing of personal data is restricted due to a denial of the accuracy of the data, the restriction lasts for the period of time necessary to verify the accuracy of the data.
3.7 Right to data portability
You have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another data controller.
3.8 How to exercise your rights
You can exercise your rights in relation to personal data by using our contact details. All information and actions will be provided to you without undue delay.
We will do our utmost to protect your personal data. However, if you are not satisfied with the handling, you have the right to contact the competent authorities, in particular the Data Protection Authority (http://www.uoou.cz), which supervises the protection of personal data. This provision is without prejudice to your right to address your complaint directly to the Data Protection Authority.
In particular, if your residence, place of employment or place of alleged personal data breach is located outside the Czech Republic in another Member State of the European Union, you may contact the competent supervisory authority in that Member State.
- MANAGEMENT AND PROCESSING OF PERSONAL DATA
Your personal data is processed for us by the Company:
– Direct Parcel Distribution CZ s.r.o.
– Google, Inc.
– Facebook Inc.
We may also entrust other data processors with the processing of your personal data.
The personal and other data collected are fully secured against misuse. The personal data will be processed in electronic form in an automated manner or in paper form in a non-automated manner.
To the extent necessary for the performance of the contract or other obligations, we are entitled to transfer your personal data to other parties (e.g. carriers or other parties involved in the performance of the contract or our obligations). We do not transfer personal data to any other person.
Your personal data will not be transferred to countries outside the European Union.
Cookies are text files stored on the computer or other electronic device of each visitor to a web interface that enable the web interface to function.
The web interface uses session (temporary) cookies, which are automatically deleted when you stop browsing the web interface. It also uses persistent cookies that remain on your device until you delete them.
The cookies used by the web interface are as follows:
– First party cookies – these cookies are associated with the domain of our website; they are essential cookies and performance cookies, they can be temporary or permanent;
– Necessary cookies – they allow you to navigate the web interface and use basic functions, they do not identify you in any way and are not personal data;
– performance cookies – used to analyse how the web interface is used (number of visits, time spent on the web interface, etc.); the data obtained by these cookies is anonymous;
– third-party cookies – these cookies are assigned to a domain other than the domain of our website, even when you are on our website; these cookies allow us to analyse our website and display tailored advertising for you; these are functional cookies and targeted and advertising cookies;
– Functional cookies – used to personalise content by remembering login details, geolocation, etc.; they may be used to collect and process personal data;
– Targeting and advertising cookies – used to serve targeted ads on and off the web interface; they may collect and process personal data. We may also share information about your use of our website with our social media, advertising and analytics partners.
The web interface uses Google Analytics and possibly other services provided by Google, Inc (“Google”). These services work with information obtained through cookies.
If you are interested in how Google uses the data it receives from us and how to modify or disable the processing, you can find out this information by clicking on the following link: How Google uses data when you use our partners’ websites or apps.
This Policy is valid and effective as of September 1, 20201.