I. BASIC PROVISIONS

I.1. Správcem osobních údajů podle čl. 4 bod 7 nařízení Evropského parlamentu a Rady (EU) 2016/679 o ochraně fyzických osob v souvislosti se zpracováním osobních údajů a o volném pohybu těchto údajů (dále jen: „GDPR”) je EUNIP s.r.o., se sídlem Děčínská 474/10 , Praha 9, 190 00, IČ: 05433606, DIČ: CZ05433606, zapsané v obchodním rejstříku vedeném Městským soudem v Praze, spisová značka: C 263476(dále jen: „správce“).

I.2. Kontaktní údaje na správce jsou:

• adresa: Děčínská 474/10, Praha 9, 190 00

• email: info@modadepari.cz

• telefon: + 420 775 484 116

I.3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or one or more specific physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

I.4. The administrator did not appoint a data protection officer.

 

II. SOURCES AND CATEGORIES OF PERSONAL DATA PROCESSED

II.1. The administrator processes the personal data that you have provided to him or the personal data that the administrator has obtained on the basis of the fulfillment of your order.

II.2. The administrator processes your identification and contact data and the data necessary for the performance of the contract.

II.3. The administrator processes the data that are listed in the order form as mandatory for the purpose of processing the order. These are, in particular, the name, address, delivery address and email. An email address is necessary for the execution of the order, especially with regard to the nature of the operation of the e-shop, ie the sale of goods by distance (outside the seller's headquarters), especially to confirm the order and inform about shipping.

II.4. Consent to the processing of personal data is required in the case of sending business messages (eg newsletter) and telemarketing. The administrator may do this without prior consent in the case of a customer of the e-shop, however, the latter may express disagreement with such handling of personal data, via email or telephone. In the case of new e-shop customers, these inquiries will be through the order form whether they agree to the processing of personal data.

II.5. The administrator automatically processes information related to the visit to the website, such as IP address, date and time of access to our website, as well as information about the actual movement on the website, search, etc., especially to improve services and better orientation of visitors website. Due to their nature, such information is completely anonymized and cannot be assigned to individual persons.

 

III. LEGAL REASON AND PURPOSE OF PROCESSING PERSONAL DATA

III.1. The legal reason for the processing of personal data is the performance of the contract pursuant to Article 6, paragraph 1, letter b) GDPR, fulfillment of the legal obligation of the administrator pursuant to Art. c) GDPR and the legitimate interest of the Provider according to Art. 6 par. 1 let. f) GDPR. The legitimate interest of the Provider is the processing of personal data for the purposes of direct marketing.

III.2. Personal data is processed for the following legal reasons:

Performance and conclusion of the contract:

• processed data: personal data of clients (name, surname, residence) and information about the ordered goods,

• purpose of processing: order fulfillment, response to a message sent via the contact form, bookkeeping, customer care

• data source: order form,

• processors: subcontractors, mailing services, cloud storage, transport companies.

Legitimate interests:

• processed data: e-mail address and information about the ordered goods, information about the ordered goods, pseudo-anonymized identifiers of registered users such as UserID, IP addresses, contact data,

• purpose of processing: providing direct marketing (especially for sending business messages and newsletters), routine analysis of traffic, detection of server errors and prevention of fraud and attacks on the server (improvement of our services), enforcement of rights and legal claims and control of public authorities

• data source: information from orders, order form, user movement on the website, registration,

• processors: mailing services, subcontractors, web hosting services, Heureka.cz.

Agreement:

• processed data: e-mails, names of potential customers, IP addresses and other technical identifiers,

• purpose of processing: marketing and promotion of the website, publication of a customer review or product inquiry

• data source: newsletter form, registration form, e-mail communication,

• processors: cloud storage, mailing services, web hosting services.

 

IV. PERIOD OF STORAGE OF PERSONAL DATA

IV.1. The Administrator retains personal data for the time necessary to exercise the rights and obligations arising from the contractual relationship between you and the Administrator and to assert claims arising from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).

IV.2. The controller retains personal data until the consent to the processing of personal data for marketing purposes is revoked, if the personal data are processed on the basis of the consent.

IV.3. After the retention period of personal data, the administrator deletes the personal data.

IV.4. Retention of personal data is necessary for the proper performance of the administrator's obligations, arising in particular from the contract and general legislation.

 

V. RECIPIENTS OF PERSONAL DATA

V.1. The recipients of personal data are mainly subcontractors of the controller, ie persons who participate in the delivery of goods and the implementation of payments on the basis of the contract. There are also reindeer providing e-shop operation services (Shoptet) and other services in connection with the operation of the e-shop and persons providing marketing services.

V.2. The controller intends to transfer personal data to a third country (to a non-EU country) or to an international organization, in particular in relation to receiving mailing services.

 

VI. YOUR RIGHTS IN CONNECTION WITH THE PROTECTION OF PERSONAL DATA

VI.1. Under the conditions set out in the GDPR, you have:

• the right of access to his personal data pursuant to Article 15 of the GDPR:

  • this is the right to provide information on the registered own data, as well as the right to provide a copy, in a structured, commonly used and machine-readable format,

• the right to correct personal data pursuant to Article 16 of the GDPR, or restrictions on processing pursuant to Article 18 of the GDPR:

  • these are situations where the data obtained are incorrect or incomplete,

• the right to delete personal data pursuant to Article 17 of the GDPR:

  • the right to delete personal data applies in particular to data obtained on the basis of consent. In relation to processed data obtained on the basis of another title (eg performance under a contract), the controller is entitled to keep the information for up to 15 years, due to possible future disputes,

• the right to object to the processing under Article 21 of the GDPR:

  • if personal data are processed on the basis of another legal title that there is consent, an objection to the processing of such data may be raised on specific grounds,

• the right to data portability according to Article 20 of the GDPR:

  • that personal data be transferred directly by one controller to the controller, if technically feasible,

• the right to withdraw consent to processing in writing or electronically to the administrator's address or email.

VI.2. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

 

VII. CONDITIONS OF SECURING PERSONAL DATA

VII.1. The controller declares that it has taken all appropriate technical and organizational measures to secure personal data. We strive to use security measures that provide sufficient security with respect to the current state of technology.

VII.2. The administrator has taken technical measures to secure data repositories and personal data repositories in paper form, in particular through the use of locks, passwords and an anti-virus program.

VII.3. The controller declares that only persons authorized by him have access to personal data.

 

VIII. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES

VIII.1. The data controller shall transmit the personal data to the carrier for the purpose of delivery of the goods, in particular the name, address and address of the data subject.

VIII.2. The data controller shall transfer personal data to the external agency in the event of a breach of contract, to the extent necessary to ensure the rights and protect the legitimate interests of the data controller. Prior to such transfer, the data subject shall be called upon to remedy the breach of contract and shall be informed of any transfer to an external agency.

 

IX. FINAL PROVISIONS

IX.1. By sending the order from the online order form, you confirm that you are familiar with the conditions of personal data protection and that you accept them in full.

IX.2. You agree to these terms by checking your consent via the online form. By checking the consent, you confirm that you are familiar with the terms of personal data protection and that you accept them in full.

IX.3. The administrator is entitled to change these conditions. The new version of these terms and conditions will be published on their website and at the same time the new version of these terms and conditions will be sent to you by the e-mail address you provided to the administrator.

IX.4. These conditions take effect on 27.10.2019