I. Basic provisions
By sending an order, you confirm that you are familiar with the terms and conditions for the protection of personal data
The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) is Vivasan-shop Name of the entrepreneur: Nazariy Shevaga
Address: Psary ev.č.245, 25244 Psary
Entrepreneur code: 19465807
Registered at the Municipal Office of Černošice
The contact details of the Controller are:
Address: Psary ev.č.245, 25244 Psary, email: vivasanshopping@gmail.com
Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Given the purpose and form of processing of the information received, which only represents an anonymous telephone number from which the order for services is sent, it is not possible to directly or indirectly identify a natural person, this information is not considered Personal Data. In the interest of legal certainty, the Administrator informs about the conditions for the protection of the handling of the information received.
The Administrator has not appointed a personal data protection officer.
Conditions and relationships not regulated in these Personal Data Protection Conditions are governed by the legal order of the Czech Republic, primarily by the relevant provisions of legal regulations: the Personal Data Protection Act, the Civil Code, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
II. Sources and categories of processed personal data
The Administrator processes personal data that you have provided to him/her or personal data that the Administrator has obtained based on the fulfillment of your order (hereinafter referred to as the “Contract”).
The Administrator processes only data necessary for the fulfillment of the Contract.
III. Legal basis and purpose of processing personal data
The legal basis for processing received information is:
1.1. fulfillment of the contract between you and the Administrator pursuant to Article 6(1)(b) of the GDPR,
The purpose of processing received information is
2.1. processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Administrator; When placing an order, information is required that is necessary for the successful processing of the order (telephone number), providing this information is a necessary requirement for concluding and fulfilling the contract, without providing this information, it is not possible to conclude the contract or for the Administrator to fulfill it,
The Administrator does not make automatic individual decisions within the meaning of Article 22 of the GDPR.
IV. Data retention period
The Administrator stores the received information:
1.1. for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Administrator and to assert claims from these contractual relationships (for a period of 6 months from the termination of the contractual relationship).
After the expiration of the personal data retention period, the Administrator deletes the personal data.
V. Recipients of received information (subcontractors of the Administrator)
The recipients of received information are persons:
1.1. participating in the delivery of goods, services or the execution of payments under the contract,
1.2. providing services for operating the ordering system and other services in connection with its operation,
1.3. providing economic, legal and consulting services in connection with the fulfillment of the purpose of the Contract.
The Administrator does not intend to transfer the received information to a third country (a country outside the EU) or an international organization.
VI. Your rights
Under the conditions set out in the GDPR, if you provide the Administrator with your personal data, you have:
1.1. the right to access your personal data pursuant to Article 15 GDPR,
1.2. the right to rectify personal data pursuant to Article 16 GDPR, or to restrict processing pursuant to Article 18 GDPR.
1.3. the right to erase personal data pursuant to Article 17 GDPR.
1.4. the right to object to processing pursuant to Article 21 GDPR,
1.5. the right to data portability pursuant to Article 20 GDPR,
1.6. in the event of consent to the processing of personal data, the right to withdraw consent to the processing in writing or electronically to the address or email address of the Administrator of these terms and conditions.
You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been violated.
VII. Personal data security conditions
The Administrator declares that it has taken all appropriate technical and organizational measures to secure the information and personal data received.
The Administrator has taken technical measures to secure data storage and storage of information and personal data received, in paper form, in particular passwords, antivirus programs, encryption, lockable and separate spaces.
The Administrator declares that only persons authorized by him have access to the information and personal data received.
VIII. Personal data security conditions
- By submitting an order, you confirm that you are familiar with the terms and conditions of personal data protection and that you accept them in their entirety.
- The Administrator is entitled to change these terms and conditions. The Administrator will publish the new version of the terms and conditions of personal data protection on its website and will also send you a new version of these terms and conditions to your e-mail address that you provided to the Administrator.
These terms and conditions are valid and effective from October 10, 2019