Principles of processing and protection of personal data
We consider the protection of privacy and personal data to be our primary duty. We handle personal data exclusively in accordance with applicable legislation. In addition to Regulation (EU) 2016/679 (hereinafter referred to as "GDPR"), we are governed by the applicable laws of the Czech Republic. If you are our customer, newsletter subscriber or website visitor, you are entrusting us with your personal data. We are responsible for their protection and security. Please read the Privacy Policy at Zídekhk s.r.o. to find out what principles we follow in ensuring the confidentiality and security of your personal data and what rights you have in connection with the GDPR.
Who is the administrator?
We are Zídekhk s.r.o., Václavské náměstí 823/33, 110 00 Prague – Nové Město, identification number: 24242411, registered in the commercial register kept at the Municipal Court in Prague, section C, file 196033.
Which actively operates the following websites:
www.zidekhk.com
We also operate e-shops:
www.zidekhk.com
We process your personal data as an administrator, i.e. we determine how personal data will be processed and for what purpose, for how long and we select any other processors who will help us with the processing.
Contact details
If you want to contact us during processing, you can contact us via email: info@zidekhk.com, eshop@zidekhk.com
We declare
We declare that, as the administrator of your personal data, we fulfill all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:
- we will process your personal data only on the basis of a valid legal reason, namely legitimate interest, performance of a contract, legal obligation or consent granted,
- according to Article 13 of the GDPR, we fulfill the obligation to provide information even before starting the processing of personal data,
- we will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR
Scope of personal data and processing purposes
We process personal data that you entrust to us yourself for the following reasons (to fulfill these purposes):
● provision of services, fulfillment of the contract
Your personal data in the scope of: e-mail, telephone number, first and last name, delivery address, invoicing address (in the case of a client - a natural person entrepreneur, also tax identification number and social security number), which we absolutely need to fulfill the purchase contract (delivery of goods, sending of tax invoices documents, sending notification emails about the status of the order, conducting the complaint procedure, observing the rights arising from the guarantee, etc.).
● bookkeeping
If you are a customer, we absolutely need your personal data (invoicing data) to comply with the legal obligation to issue and register tax documents.
● marketing – sending newsletters
We use your personal data (e-mail and name), what you click on in the e-mail and when you most often open it for the purpose of direct marketing - sending business messages.
If you are our customer, we do so out of legitimate interest, as we reasonably assume that you are interested in our news, for a period of 2 years from the last order. (according to Act 480/2004 Coll., §7). In that case, we don't even need your consent. If you are not our customer, we only send you newsletters based on your consent, for a period of 2 years from the date of granting. In both cases, you can withdraw this consent by using the unsubscribe link in each email sent.
● consulting
We can only answer questions from the advisory and contact forms if you give us your consent via the check box in the inquiry form. Without consent, it is not possible to send the inquiry. There is no commercial or contractual relationship between us and you at that moment, which would authorize us to process your personal data without your consent.
● advanced consent marketing
Only on the basis of your consent, we can also send you inspirational offers from third parties or use your e-mail address, for example, for remarketing and targeting advertising on Facebook, for a period of 2 years from the granting of consent. This can of course be revoked at any time via our contact details.
● photographic documentation – live events, e.g. handing over prizes from competitions or competition photos related to the use of goods from our offer, for the purpose of further promoting the functionality of our products and the effect resulting from their use.
We retain your personal data for the duration of the statute of limitations, unless the law stipulates a longer period for their retention or we have not stated otherwise in specific cases.
Cookies
When you browse our website, we record your IP address, how long you stay on the page and which page you come from. We perceive the use of cookies to measure website traffic and customize website display as our legitimate interest as an administrator, as we believe that thanks to this we can offer you even better services. Advertising targeting cookies will only be processed based on your consent. Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.
Security and protection of personal data
We protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We protect them as if they were our own. We have adopted and maintain all possible (currently known) technical and organizational measures that prevent misuse, damage or destruction of your personal data.
Transfer of personal data to third parties
We process and store the personal data you have provided us within Zídekhk s.r.o. Your personal data can be accessed by employees and co-workers.
In order to ensure specific processing operations that we cannot provide on our own, we use the services and applications of processors who can protect data even better than us and specialize in the given processing. We carefully select the entities that cooperate with us in this way on the basis of guarantees that ensure the technical and organizational protection of the personal data transferred by us. Only processors can process personal data for Zídekhk s.r.o., exclusively on the basis of a personal data processing contract.
In this sense, Zídekhk s.r.o. may provide personal data to the following recipients for legitimate purposes:
- to external collaborators and suppliers for the purpose of fulfilling the contract
- technology and cloud service providers for the management and operation of the company's websites and e-shops
- to payment service providers and payment processors for the purpose of securing the transfer of funds
- to providers of postal, transport and communication services and electronic communications services
- to marketing and research agencies for business, service and product offers and satisfaction research
A list of specific processors of personal data according to the purposes mentioned above in the paragraph can be found in Appendix No. 1, which is part of this document.
It is possible that in the future we will decide to use other applications or processors to facilitate and improve the quality of processing. However, we promise you that in such a case, when choosing, we will place at least the same demands on security and quality of processing on the processor as we do on ourselves.
We determine your satisfaction with the purchase through e-mail questionnaires as part of the Verified by customers program, in which our e-shop is involved. We send them to you every time you make a purchase from us, if in the sense of § 7 paragraph 3 of Act No. 480/2004 Coll. about some services of the information society, you do not refuse their sending. We process personal data for the purpose of sending questionnaires as part of the Verified by customers program on the basis of our legitimate interest, which consists in ascertaining your satisfaction with your purchase from us. For sending questionnaires, evaluating your feedback and analyzing our market position, we use a processor that is the operator of the Heureka.cz portal; for these purposes, we may pass on information about the purchased goods and your e-mail address. When sending e-mail questionnaires, your personal data is not passed on to any third party for its own purposes. You can object to the sending of e-mail questionnaires as part of the Customer Verified program at any time by opting out of further questionnaires using the link in the e-mail with the questionnaire. In case of your objection, we will not send you the questionnaire any further.
Transfer of data outside the European Union
We process data exclusively in the European Union or in countries that ensure an adequate level of protection based on the decision of the European Commission.
Your rights in connection with the protection of personal data
You have a number of rights in connection with the protection of personal data. If you wish to exercise any of these rights, please contact us via email: info@zidekhk.com, eshop@zidekhk.com
You have the right to information, which is already fulfilled by this information page with the principles of personal data processing.
Thanks to the right of access, you can challenge us at any time and we will provide you with evidence within 30 days of what personal data we process and why.
If something changes about you or you find your personal data out of date or incomplete, you have the right to supplement and change your personal data.
You can use the right to restrict processing if you believe that we are processing your inaccurate data, if you believe that we are carrying out the processing illegally, but you do not want to delete all data, or if you have objected to the processing.
You can limit the scope of personal data or processing purposes. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial messages.)
Right to portability
If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access - except that we will provide the information to you in a machine-readable form. Here we need at least 30 days.
Right to erasure (to be forgotten)
Your other right is the right to erasure (to be forgotten). We don't want to forget you, but if you wish, you have the right to do so. In this case, we will delete all your personal data from our system and from the system of all sub-processors and backups. We need 90 days to ensure the right to erasure.
In some cases, we are bound by a legal obligation, and, for example, we must register issued tax documents for a period specified by law. In this case, we will delete all such personal data that are not bound by another law. We will notify you by e-mail when the deletion is complete.
Complaint to the Office for Personal Data Protection
If you feel that we are not handling your data in accordance with the law, you have the right to contact the Office for Personal Data Protection at any time with your complaint. We will be very happy if you first inform us about this suspicion so that we can do something about it and correct any errors.
Unsubscribing from newsletters and business communications
We send you e-mails with inspiration, articles or products and services, if you are our customer, based on our legitimate interest. If you are not yet a customer, we only send them to you based on your consent.
In both cases, you can unsubscribe from our emails by clicking on the unsubscribe link in each email sent.
Secrecy
We would like to assure you that our employees and collaborators who will process your personal data are obliged to maintain confidentiality about personal data and security measures, the disclosure of which would endanger the security of your personal data.
At the same time, this confidentiality continues even after the end of contractual relations with us. Without your consent, your personal data will not be released to any other third party.
These principles of personal data processing apply from 25/05/2018 and replace paragraphs 10 and 11 of the original "Business Terms" valid until 24/05/2018.
If you have any question regarding personal data, you can send it to e-mail: info@zidekhk.com, eshop@zidekhk.com.
Appendix No. 1
List of personal data processors that we use at Zídekhk.com.
1. management and operation of information websites, hosting:
websupport.sk, ferix.sk
2. administration and operation of e-shops, incl. sending commercial messages
zidekhk.com, ferix.sk
3. marketing-analytical and research agencies
www.google.cz (Google Analytics service, Google AdWords incl. related tools)
www.seznam.cz (Sklik service)
www.heureka.cz (Verified by customers service - see text below:)
"We determine your satisfaction with the purchase through e-mail questionnaires as part of the Verified by customers program, in which our e-shop is involved. We send them to you every time you make a purchase from us, if in the sense of § 7 paragraph 3 of Act No. 480/2004 Coll. about some services of the information society, you do not refuse their sending. We process personal data for the purpose of sending questionnaires as part of the Verified by customers program on the basis of our legitimate interest, which consists in ascertaining your satisfaction with your purchase from us. For sending questionnaires, evaluating your feedback and analyzing our market position, we use a processor that is the operator of the Heureka.cz portal; for these purposes, we may pass on information about the purchased goods and your e-mail address. When sending e-mail questionnaires, your personal data is not passed on to any third party for its own purposes. You can object to the sending of e-mail questionnaires as part of the Customer Verified program at any time by opting out of further questionnaires using the link in the e-mail with the questionnaire. In the event of your objection, we will not send you the questionnaire any further."