Principles of personal data processing of customers
We would like to assure you that Originalky.cz s.r.o., a company headquartered at Tř. Budovatelů 2392/88, 434 01 Most, registered in the Commercial Register maintained by the Municipal Court in Ústí nad Labem under file C 40302, company ID: 06449760 (hereinafter "Originalky.cz" or "we"), pay maximum attention to the security of your personal data. In addition to Regulation (EU) 2016/679 ("GDPR"), we follow the applicable laws of the Czech Republic.
All data collected by Originalky.cz is processed only for legitimate purposes for a limited time and with the maximum possible security. The protection of our customers', partners' and, of course, employees' personal data is our priority and we pay maximum attention to their security. The protection of the personal data of the purchaser is provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Regulation on the Protection of Personal Data), which on 25 May 2018 replaced Act No. 101/2000 Coll., On the Protection of Personal Data. The English abbreviation that can be encountered is GDPR (English General Protection Protection Regulation). We also follow the applicable laws of the Czech Republic. If you have any questions regarding the processing of your personal information, please do not hesitate to contact us at firstname.lastname@example.org.
What data we process
Definition of personal data according to Regulation of the European Parliament and of the Council, Article 4):
Why we process personal data and what entitles us to do so
As part of our activity, we process personal data for various purposes and to varying degrees either:
What processing we can do without your consent depends on the purpose of the relevant processing and the position you are taking - whether you are just a visitor to our site or have a contract with us or order goods (Regulation of the European Parliament and of the Council , Article 6). Consent to the processing of personal data in its entirety under this Article is not a condition that would in itself make it impossible to conclude a sales contract.
Purposes of processing customers data
1. If you order goods with us, we perform the following processing:
1.1. Processing based on contract performance
If you order goods with us, we process your personal data to fulfill this Agreement, your identification and contact details, and your order details. This means we will use them in particular:
1.2. Processing based on legitimate interest
If you order goods with us, we will keep your identification, contact details and ordered products data in our legitimate interest (without your consent) in order to protect our legal claims and our internal records and controls. Our legitimate interests include the protection of legal claims and the control of the proper provision of our services.
In order to protect legal claims, property protection and our internal records and controls, we process your data for the duration of the limitation period of 10 years and one year after its expiration with respect to the claims enforced at the end of the limitation period. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and the remainder of the limitation period after termination.
We further process, based on our legitimate interest (ie without your consent) your identification, contact details and ordered goods data for the purpose of sending offers by e-mail; our legitimate interest is the promotion of our products and services. We use personal data for this purpose for 12 months from the last order.
We have the right to object to these processing carried out on our legitimate interest.
1.3. Processing based on legal obligations
We also have to comply with certain statutory obligations. If we process your personal information just for this reason, we do not need to obtain your consent for such processing. Based on this legal basis, we process your identification, contact details and ordered product data, in particular by following the following rules:
For these purposes, we save personal data for up to 10 years.
2. If you visit our website
2.1. Using cookies and other technologies
If you visit our site, we store and read small cookies on your device. Cookie is a small set of letters and numbers that we store in your internet browser or your computer's hard drive. Some cookies allow us to link your activities while browsing our site from the moment you open the web browser window until you close it. Others stay on the device for a set amount of time and activate each time you visit the website that created the cookie. We not only store cookies on your device, but we also read the cookies stored on your site by your device. Also, in this document, we will talk about storage only for simplicity. These cookies do not contain any personal data and are encrypted.
These cookies help us:
Such cookies and other files are necessary for the operation of our website. If you block these cookies in your browser, our website may not work properly and we may not be able to provide our services.
We also store cookies from our site on your device that allow us to:
In order to display customized bids and targeted ads on advertising and social networks on sites other than our site, we also provide advertising and social networks with information about your Web site behavior. However, we do not pass on your identifying information to such partners. For a list of social and advertising networks that we use, see Who processes your personal information and everyone get have access?
If you do not disable using of our or third-party cookies and the transmission of your data to advertising and social networks in your browser and you remain on our site, we will assume that you consent to the use of these cookies and to the transmission of your data to advertising and social networks. You can revoke your permission at any time by turning off this feature in your browser.
2.2. Use of site visitors personal information
If you visit www.originalky.cz, www.originalky.eu and www.originalka.sk we will process data about your behavior on the web based on our legitimate interest (without your consent) in order to:
We do not gain information about your behavior on the web by cookies only. We also include:
We use this personal data for 14 months. You have the right to object to this processing.
3. If you communicate with us through different channels
If you communicate with us through various channels, especially via email and social networks, we will process your identification, contact and tracking information on our legitimate interest (ie without your consent) in order to:
For this purpose, we keep personal data for 12 months. Against processing based on our legitimate interest, you have the right to object.
If you visit our store
If you visit our store, we will process a recording from a camera system that you can capture based on our legitimate interest (ie without your consent) in order to protect our and your property and shoppers, which is our legitimate interest . Processing is in accordance with Article 6 (1) (f) of the GDPR.
The operator of the camera system is our company Originalky.cz s.r.o .. The data is encrypted and the access to the video is strictly limited and not provided to third parties. For this purpose, we keep your personal information for 3 months, then permanently deleted. You have the right to object to this processing.
If you give us your consent
If you are not using our services (you have not ordered goods and products) and give us your consent, we may use your identification and contact information to send you the offers via e-mail.
Your consent is completely voluntary and you can revoke it at any time. To cancel your consent, please contact us by e-mail email@example.com or just click on the bottom part of the e-mail that will remove you from the offers.
Who processes your personal data and to whom does it pass?
We process all of these personal data as an administrator. This means that we determine the above-defined purposes for which we collect your personal data, identify the processing resources, and respond to them for proper performance.
We may also share your personal information with other entities that are in the role of administrator, namely:
For the processing of personal data, we also use the services of other processors who process personal data only according to our instructions and for the purposes described in Why we process personal data and what entitles us to do so. Such processors are in particular:
All our partners are carefully selected and are committed to securing your personal data by technical and organizational means of security (software protection, access rights, employees' secrecy).
How do we protect your personal information?
Your data is stored in the iPodnik.cz cloud solution. This solution uses the latest security on a professional level. Therefore, your data is not physically in our company but on secure servers to which only authorized personnel have access. Access to computers in company are only for trained workers who have to go through dual authentication.
How do we get personal data from?
In most cases, we process personal information you provide when ordering goods or communicating with us. We also collect personal data directly from you by monitoring your behavior on our site. In some cases, Originalky.cz is authorized to collect personal data from public registers and this is especially the case where Originalky.cz exercises its legitimate interests, especially the interest to act prudently.
What are the rights to the processing of personal data?
Just as we have our rights and obligations to process your personal information, you also have certain rights to process your personal data. These rights include:
Right for access
Right for edit
If you find that the personal informations we process about you is inaccurate or incomplete, you are entitled to have it repaired or supplemented without undue delay.
Right for deletion
In some cases, you have the right to have your personal data in ymazali. We will delete your personal information without undue delay if any of the following is true:
This right does not apply if the processing of your personal data is still necessary to fulfill our legal obligation or to determine, enforce or defend our legal rights (see Why process personal data and what entitles us to do so).
Right to limit processing of your personal data
In some cases you may, in addition to the right of cancellation, exercise the right to limit the processing of personal data. This right allows you, in certain cases, to require your personal data to be tagged, and these data are not subject to any further processing operations - in this case not forever (as in the case of a right of cancellation) but for a limited time. We need to restrict the processing of personal data when:
For the period we are saving, if your objection is justified, we are obliged to limit the processing of your personal information.
The right to portability
You have the right to obtain from us all of your personal data that you have provided to us and which we process based on your consent (see section If you give us your consent) and the performance of the Agreement. We will provide your personal information in a structured, commonly used and machine-readable format. In order to easily convert your data to your request, it can only be data that we process automatically in our electronic databases.
Right to object to processing
You have the right to object to the processing of personal data that occurs on our legitimate interest (see Why we process personal information and what entitles us to do so). In the case of marketing activities, we will no longer process your personal data without further delay; otherwise we will do so unless we have serious legitimate reasons to continue such processing.
Right to file a complaint
By exercising your rights in the above manner, your right to file a complaint with the relevant supervisory authority is unaffected. You may exercise this right in particular if you believe that we process your personal data unjustifiably or in violation of generally binding legal regulations. You may file a complaint against our processing of personal data with the Personal Data Protection Office located at Pplk. Sochora 27, 170 00 Praha 7.
How to apply these rights
In all matters relating to the processing of your personal information, whether it be a question, a law enforcement, a complaint, or anything else, you can contact the email address firstname.lastname@example.org.
We will resolve your request without undue delay, but within a maximum of one month. In exceptional cases, especially due to the complexity of your request, we are entitled to extend this period by another two months. We will, of course, inform you of any such extension and its justification.