The Seller, Petra Stahlová, performs the processing of your Personal Data, as it is necessary for the performance under the Agreement concluded with you with respect to the sales of goods (or to the performance of measures adopted prior to concluding such an Agreement) and, furthermore, she performs the processing of your Personal Data as necessary for the performance of public legal obligations of her Company.
DATA CONTROLLER’S IDENTITY AND CONTACT DETAILS
The data controller of your Personal Data is the Company Petra Stahlová, Žižkovo nám. 975, Nové Strašecí 27101, the Czech Republic, Company ID No.: 75496739, (hereinafter referred to as the “Data Controller”).
The Data Controller’s contact details are as follows: Delivery address: - Ivana Olbrachta 2614, Kladno Postcode 27201 Czech Republic, Email address: firstname.lastname@example.org, Telephone: 00420777302839.
The Data Controller has not appointed a data protection officer.
LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA
The legal grounds for processing of your Personal Data is the fact that this processing is necessary for:
Performance of the Agreement between you and the Data Controller or for the taking measures by the Data Controller prior to concluding such an Agreement within the meaning of Article 6 (1) (b) of the Regulation No. 2016/679 of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”;
Performance of legal obligations arising to the Data Controller within the meaning of Article 6 (1) (c) of the GDPR, including but not limited to the performance of obligations stored by the Data Controllers by general legally-binding regulations, including but not limited to the Act No. 235/2004 Sb., on the Value Added Tax, as amended, Act No. 586/1992 Sb., on the Income Tax, as amended, and Act No. 563/1991 Sb., on Accounting, as amended.
PURPOSE OF PERSONAL DATA PROCESSING
The purpose of processing your Personal Data is the performance of the Agreement between you and the Data Controller, including the goods delivery and dealing with rights arising from a defective performance or the Data Controller’s performance of measures prior to concluding such an Agreement, and also the performance of the Data Controller’s associated public legal obligations.
No automatic individual decisions are to be made by the Data Controller within the meaning of Article 22 of the GDPR.
TERM OF PERSONAL DATA STORAGE
Your Personal Data will be processed for the effective term of the rights and obligations arising from the Agreement and for a period necessary for archiving purposes in compliance with the relevant general legally-binding regulations, however, no longer than for the period stipulated by the general legally-binding regulations.
OTHER RECIPIENTS OF PERSONAL DATA
Other recipients of your Personal Data will include communications companies and other parties contributing to the delivery of the goods or the realisation of payments under the Purchase Agreements, and parties ensuring technical services for the Data Controller, which are associated with the operation of the e-shop, including the software operation and data storage.
The recipients of your Personal Data with respect to performance of obligations arising from legal regulations may also include Czech Financial Administration bodies or other relevant authorities as stipulated by the general legally-binding regulations.
The Data Controller does not intend to transfer your Personal Data to a third country (country outside the EU) or to an international organisation.
DATA SUBJECTS RIGHTS
Under the terms stipulated in the GDPR, you have the right to request from the Data Controller the access to your Personal Data, the right to rectification or the erasure of your Personal Data, or the restriction of its processing, the right to object to the processing of your Personal Data, and the right to portability of your Personal Data.
Should you assume that the GDPR has been or is being breached by the processing of your Personal Data, you have the right to file a complaint with the supervisory authority.
You are not obliged to provide your Personal Data. The provision of your Personal Data is a prerequisite for the conclusion and performance of the Agreement; without the provision of your Personal Data, it is not possible to conclude the Agreement or perform it by the Data Controller.