Privacy Policy (GDPR)
Introduction
- The privacy of our website visitors is very important to us and we are committed to protecting it. This policy explains what we do with your personal data.
I.
Basic provisions
- The administrator of personal data according to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is Andrea Bařinková, DiS. with registered office: Rochovská 757/1, 198 00 Prague 14, ID: 02974703.
- Personal data means any information about an identified or identifiable natural person; an identified natural person is a natural person who can be directly or indirectly identified, in particular by reference to a certain identifier, for example a name, identification number, location data, network identifier or to one or more special elements of physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
- We record the following data about the natural person (customer): name and surname, residence, e-mail, telephone contact, if they are needed to fulfill the order and were provided to us by the customer. For self-employed persons, we record, among other things: ID number, VAT number and billing address, for limited liability companies, in addition, the name and registered office of the company.
- The administrator has not appointed a personal data protection officer. Your personal data is accessible to IT staff involved in the technical management of the website, only to the extent necessary to ensure the security and functionality of the website, and to third parties for the purpose of improving the website environment.
II.
Sources and categories of processed personal data
- The administrator processes personal data that you have provided to him or her, or personal data that the administrator has obtained based on the fulfillment of your order.
- The administrator processes your identification and contact data, and the data necessary to fulfill your order.
- The following types of personal data may be collected, stored and used:
- information about your computer, including IP address, geographic location, browser type and version, and operating system;
- information about your visits to and use of this website including referral source, length of visit, pages viewed and website traversal;
- information related to your purchase, services used, or transactions that includes your name, address, telephone number, email address, or credit card details;
- information contained in any communication you send to us by email or mobile phone, including the content itself and metadata;
- any other personal data you send us.
Before you share another person's personal data with us, you must obtain that person's consent to the disclosure and processing of that personal data in accordance with this policy.
III.
Use of Cookies
- Our website uses different types of cookies that are used to optimize and improve website functions:
- Necessary cookies: They ensure basic functions such as security, network management, user login, etc. The website would not function properly without these cookies.
- Analytical/performance cookies: Collect anonymized data about traffic and user behavior on the website. This information is used to optimize the website and improve the user experience.
- Functional cookies: They enable the website to remember your preferences, for example language or region, and thus offer personalized content.
IV.
Third-party privacy policies
- Through cookies, we share some data with third parties, specifically with the Google Analytics tool, which is used to analyze traffic and user behavior.
- Google Analytics: For more information on privacy protection and the terms of Google Analytics, you can visit the Google Privacy Policy page.
V.
The purpose of personal data processing
- The purpose of personal data processing is:
- the processing of your order and the performance of rights and obligations arising from the contractual relationship between you and the administrator; when placing an order, personal information is required, which is necessary for the successful processing of the order (name, address, contact). The provision of personal data is a necessary requirement for the conclusion and performance of the contract,
VI.
Data retention period
- We keep your personal data only for the necessary time required to fulfill the purposes for which they were collected or for the time required by the relevant legal regulations. The specific retention periods of personal data depend on the nature of the data and the purpose of its processing.
- Data collected through contact forms: We keep your contact data for the time necessary to process your request and subsequent communication. If our communication is terminated and there is no legal reason for further retention, the data will be securely deleted within 12 months.
- Marketing purposes: If you have given us consent to send you marketing materials, we will keep your data for the duration of this consent. You can withdraw your consent at any time, after which we will delete your data within 30 days.
- Cookies and analytical data: We store analytical and functional cookies that help us improve the performance of our website for a period of 12 months, unless otherwise specified in the browser settings.
- Accounting and legal documents: In accordance with legal regulations, we retain some personal data (e.g. billing data) for up to 10 years as required by tax and accounting laws.
- After the end of the cooperation: We keep the personal data that we process as part of the fulfillment of the order for the period necessary to fulfill the order and subsequently for the period determined by legal regulations (for example, to exercise warranty claims or resolve disputes).
- Please let us know if the personal information we hold about you needs to be corrected or updated for further communications.
- After the retention period has expired or the purpose for which the personal data was collected has been fulfilled, the data will be securely deleted or anonymized so that it is no longer associated with a specific person.
- You have the right to request the erasure of your personal data at any time if they are no longer needed for the purposes for which they were collected or if there is no longer a legal reason for their retention. In case of further questions regarding the retention period, please contact us at [rb@rbart.cz].
VII.
Your rights
- Under the conditions set out in the GDPR, you have:
- the right to access your personal data according to Article 15 GDPR,
- the right to correct personal data according to Article 16 of the GDPR, or to restrict processing according to Article 18 of the GDPR,
- the right to erasure of personal data according to Article 17 GDPR,
- the right to object to processing according to Article 21 GDPR a
- the right to data portability according to Article 20 GDPR,
- the right to withdraw consent to processing in writing or electronically to the address or email address of the administrator listed in Article IV of these terms and conditions.
VIII.
Terms of security of personal data
- The administrator declares that he has taken all appropriate technical and organizational measures to secure personal data.
- The administrator has taken technical measures to secure data stores of personal data in paper form.
- The administrator declares that only authorized persons have access to personal data.
- You acknowledge that the transmission of information over the Internet is inherently insecure and we cannot guarantee the security of data sent over the Internet.
IX.
Final determinations
- By checking consent, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.
- The administrator is authorized to change these conditions. It will publish a new version of the terms of personal data protection on its website, and at the same time it can send you a new version of these terms to your e-mail address that you provided to the administrator.
These terms are effective on August 25, 2024.