Personal data processing policy
within the meaning of the provisions of Article 13 of the GDPR.
_____________________________________________________________________________
1. CONTENT AND PURPOSE OF THE DOCUMENT
1.1. This document contains information regarding the protection of personal data that we collect from you when selling bicycles, scooters, balance bikes, other cycling equipment and accessories and when providing related services.
1.2 The purpose of this document is to inform you (data subjects) of your rights and to provide you with understandable information about how your personal data will be handled.
1.3. When handling personal data, we follow Regulation (EU) 2016/679, i.e. the General Data Protection Regulation, which entered into force on 25 May 2018 and is commonly known by the abbreviation GDPR. By clicking on the regulation number in the previous sentence, you will be taken directly to the text of this regulation and you will also find the exact wording of the legal provisions to which we refer below in this text.
1.4. Content that awaits you in this document:
Content and purpose of the document
Personal data controller – who are we and how can you contact us?
What personal data do we process and how do we obtain it?
For what purposes do we process personal data, for how long and what authorizes us to do so?
Information about your privacy rights
Transfer of personal data outside the European Economic Area
Other important information for exercising your rights
_____________________________________________________________________________
2. PERSONAL DATA CONTROLLER
Who am I and how can you contact us?
Ing. Ondrej Brunecky
ID 66569524
VAT number CZ66569524
with registered office at Bellova 356/18, Brno, ZIP code 623 00
contact e-mail: obchod@cyklospeciality.cz
website: https://www.cyklospeciality.cz/
_____________________________________________________________________________
3. WHAT PERSONAL DATA DO WE PROCESS AND HOW DO WE OBTAIN IT?
3.1. We process personal data that you provide to us. In specific cases, this may include the provision of personal data when preparing contracts and related documents and in connection with the implementation of contracts (i.e. in connection with the delivery of goods and the provision of services), during personal contact, by telephone, in writing, by email or by other means of communication (text messages, messages in applications such as Skype, FB messenger and others).
3.2. We also process data from public registers (in particular for entering or checking your identification data into contracts).
3.3. If we need your consent to process some personal data for specific processing purposes, then we process such data for that purpose only with your consent.
3.4. You provide us with data on a voluntary basis, except in some cases where we would not be able to deliver the ordered goods or provide the agreed service without providing the data. You are only required to provide us with data in cases where this is directly required by law.
3.5. Personal data may fall into the category of "ordinary personal data" or it may be a special category of data, i.e. sensitive data, where legal regulations stipulate stricter conditions for its processing.
3.6. Common personal data that we process:
Name, surname, address, ID number, VAT number, telephone number, email and bank account number (business partners only).
3.7. We do not process any special categories of personal data.
_____________________________________________________________________________
4. FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA, FOR HOW LONG AND WHAT AUTHORIZES US TO DO SO?
4.1. Processing of personal data for the purpose of concluding a contract and fulfilling contractual obligations
In order to conclude a contract with you, deliver the ordered goods or provide you with the agreed service and conduct related communication, we process the following common personal data: name, surname, address, ID number, VAT number, telephone number, e-mail and bank account number (business partners only).
The legal title (authorization) for processing this data is the conclusion of a contract.
and the fulfillment of contractual obligations from the contract concluded between us. Such an obligation may, for example, be the delivery of ordered goods or the provision of an agreed service. This does not necessarily have to be a contract concluded in a classic printed form, signed by hand. It may also be a contract concluded orally or over the telephone.
For this purpose, we process personal data for the duration of the contractual relationship between us. After the termination of the contractual relationship, some data is then retained for the purposes of fulfilling legal obligations or for the purposes of legitimate interest, as you will read in the following sections of this document.
4.2. Processing of personal data to fulfill obligations under accounting, tax, archiving and other legal regulations
In order to comply with obligations arising from applicable legal regulations, especially in the areas of accounting, tax law and archiving, we process the following data: name, surname, address, company ID, VAT number.
The period for which data is processed is determined directly by the relevant legal regulations that impose on us the obligation to process it.
4.3. Processing of personal data for the purposes of our or a third party's legitimate interests
Legitimate interest can cover a wide range of situations. Therefore, we inform you about the legitimate interests for which we process personal data:
(a) The legitimate interest is the protection and assertion of our rights and legal claims and the protection of our property. For this purpose, we retain personal data from contractual documentation, from our mutual communication and camera footage from our premises. For these purposes, we process personal data for a period of four (4) years after the termination of the contractual cooperation or our last contact, if no contract has been concluded. This period is set with regard to the limitation periods of claims, taking into account that
We may not be aware of any claim made in court immediately upon its being made by the other party. We only retain camera footage from our premises for one (1) week from the time it was taken.
(b) The legitimate interest lies in being able to contact you or your contact person in the event of an unexpected event. For these purposes, your contact details are stored for four (4) years after the termination of the contractual cooperation or our last contact, if no contract has been concluded. This period is set with regard to the limitation periods of claims, taking into account that we may not learn about a possible claim asserted in court immediately at the time it is asserted by the other party. Data from contracts and our mutual communication are stored for these purposes.
4.4. Processing of personal data based on your consent
If you give us your consent, we will process your personal data only for the purpose for which consent was given.
Before you give us your consent, we will inform you about what data and for what specific purpose the consent will apply. You can withdraw your consent at any time. However, if we also process some of your personal data on the basis of another legal title, we will process the personal data for these purposes even after you withdraw your consent, because consent is not required for such specific purposes.
4.5. Disclosure of personal data to other persons
We are assisted by other persons who are processors to ensure some of our contractual or legal obligations. In particular, these include cooperating carriers, accountants, law firms, and data storage providers.
and software applications, etc. We have written contracts with processors that stipulate the fulfillment of personal data protection obligations to keep your data safe.
Personal data will also be made available to the relevant administrative authorities if we are required to do so by law (i.e. in particular in the case of an inspection during which the authority is entitled to require the submission of personal data).
_____________________________________________________________________________
5. INFORMATION ABOUT YOUR OTHER RIGHTS IN THE AREA OF PERSONAL DATA PROTECTION
5.1. Right to access personal data
This is the right to confirm whether we are processing your personal data and, if so, to access this data and information about its processing.
5.2. Right to rectification of personal data
This is the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement (in which you provide the data in full).
5.3. Right to erasure of personal data (right to be forgotten)
In cases provided for by law or the GDPR, you have the right to request that we erase your personal data without undue delay (the GDPR lists the reasons in Article 17, including exceptions where erasure will not be performed).
5.4. Right to restriction of processing
In the cases specified in Article 18 of the GDPR, you have the right to request that we restrict the processing of your personal data.
5.5. Right to data portability
Under the conditions set out in Article 20 of the GDPR, you have the right to obtain your personal data and transmit them to another controller. If technically feasible, you have the right to request the transmission directly to another controller.
5.6. Right to object
Where we process personal data for the purposes of legitimate interests, you have the right to object to such processing and we will then no longer process the data unless our legitimate interest overrides your interests or rights and freedoms. If the legitimate interest is direct marketing, then objecting always results in the cessation of further processing for direct marketing purposes.
5.7. Right to information about automated decision-making, including profiling
You are not subject to any decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you.
5.8. Right to lodge a complaint with a supervisory authority
If you believe that your rights in the area of personal data protection are being violated, you have the right to file a complaint with the Office for Personal Data Protection. More information about the office and personal data protection can be found directly on the office's website www.uoou.cz.
_____________________________________________________________________________
6. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
6.1. If we transfer your personal data for processing to a third country (outside the European Economic Area (EEA), which also includes states outside the European Union - Iceland, Liechtenstein and Norway) or an international organization, we do so only if such third country or international organization ensures an adequate level of protection or if the recipient of the personal data has provided appropriate guarantees for their protection and enforceable data subject rights and effective legal protection of data subjects are available in the destination country.
6.2. The European Commission has so far recognised an adequate level of protection in the following countries: Andorra, Argentina, Canada (trade organization), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and the United States (limited to the Privacy Shield framework).
_____________________________________________________________________________
7. OTHER IMPORTANT INFORMATION FOR EXERCISING YOUR RIGHTS
7.1. If you have any further questions about the processing of your personal data by us, you can contact us at the e-mail address obchod@cyklospeciality.cz. By sending a message to this e-mail or by sending a written request to our address specified in the introductory part of this document, you can also directly exercise your rights, which we write about in Article 5. We would just like to point out that for the purposes of verifying that the request is indeed made directly by you, we may then contact you and verify your identity and request in an appropriate manner. The same applies to any telephone and similar communication.
7.2. The current version of this document can always be found on the website https://www.cyklospeciality.cz/zpracovani-osobnich-udaju/. This version is effective from 25.5.2018.
