PRINCIPLES ON PROCESSING PERSONAL DATA
Company RICHENZA s. r. o., IČ: 259 21 371, DIČ: CZ 259 21 371, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, Insert 14588 (hereinafter "Administrator"). Contact information of the administrator: Delivery address: RICHENZA s. r. o., Škroupova 441, Hradec Králové, Postal code 500 02, e-mail address: firstname.lastname@example.org, telephone +420 604 237 128. The administrator did not appoint a Data Protection Officer.
THE LEGAL BASIS OF PROCESSING PERSONAL DATA
RICHENZA processes personal data in accordance with European Union law, in particular in accordance with Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, Directive 95/46 / EC (hereinafter referred to as GDPR), as well as in accordance with the international treaties binding on the Czech Republic, in particular the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data No 108, promulgated under No. 115 / 2001 Sb. as well as the relevant national legislation.
The legal reason for processing your personal data is that such processing is necessary to meet the agreement between you and RICHENZA or to implement the arrangements by the trustee before the conclusion of such a contract within the meaning of Article 6 (1) b) GDPR.
In the event of a contractual relationship, RICHENZA sends its customers a commercial communication relating to its products in order to realize the legitimate interests of RICHENZA as a form of limited direct marketing. Therefore, RICHEZNA does not require consent to send these business communications, but allows you to unsubscribe at any time, or to object to such processing. In the case of Direct Marketing by the Administrator without a contractual relationship, the Administrator is entitled to process your personal data only on the basis of your consent.
For better targeting of RICHENZA's advertising and promotion, RICHENZA processes cookie data about visits to websites, viewed products, and other website activity. Processing is only possible based on your consent to the use of the appropriate cookies.
SCOPE OF PERSONAL DATA OF PROCESSED COMPANIES
Special categories of personal data (sensitive data) are not processed by the Company.
PURPOSE OF PERSONAL DATA PROCESSING
RICHENZA, as a Personal Data Service Provider in connection with the provision of its services through the Website, processes and maintains, under the conditions and within the limits established by applicable law, in particular in accordance with the provisions of Article 6 (1) (a) and (b) GDPR, personal data of data subjects for these purposes: contacting and providing information requested by the Data Entity (e-mail address used); fulfillment of contractual obligations (used name, surname, address, e - mail address and telephone number for carriers) direct marketing based on the data subject 's consent (e - mail address used); direct marketing database (name, surname, address, telephone number and e - mail address).
DATE OF PROCESSING OF PERSONAL DATA
Personal data will be processed for as long as is necessary to ensure the mutual rights and obligations arising from the contractual relationship, ie throughout the execution of the order, including payment and delivery of the goods. By law, RICHENZA subsequently retains some of the data contained in the accounting documents.
Further processing of personal data in excess of the above is processed only if it is necessary to fulfill the obligations arising from the RICHENZA legislation. Once the purpose of the processing ceases, or the Administrator no longer has any legal reason to process personal data, the administrator will delete the personal data.
ADDITIONAL INFORMATION ON PROCESSING PERSONAL DATA
Personal Data of the Data Entity are processed manually by the Company's employees. The personal data of the data subject will be further processed by these personal data processors: processors providing server, web, cloud, or IT services; transport service - Česká pošta a. s.
LEARNING OF THE DATA OF THE DATA SUBJECTS
The Administrator hereby informs the Entities of the Fundamental Principles and Principles in accordance with the provisions of Article 13 et seq. Of the GDPR, under which the Company, as a Personal Data Administrator, treats Personal Data of the Data Entity.
The Data Entity has the right to obtain from the Administrator a confirmation of whether or not personal data are processed and, if processed, the Data Entity has the right to access personal data. The data subject has the right to have inaccurate personal data corrected by the Administrator without any unnecessary correction, or the data subject has the right to complete incomplete personal data, including the provision of an additional statement.
The data subject has the right to delete the personal data if the personal data are no longer needed for processing purposes, the data subject has withdrawn consent to processing, has objected to the processing of personal data and there are no overriding legitimate reasons for processing, the data subject has the right, if the data subject disclaims the accuracy of personal data for the time necessary to verify the accuracy of the personal data, the controller no longer needs personal data for the purpose of processing but the data subject is required to identify, exercise or defend the legal claims, or the Entity data subject to the processing of personal data. The data subject has the right at any time to withdraw consent to the processing of personal data without any sanction. The consent may be revoked by the Data Entity in any way specified above on the individual contact information of the Administrator. Revocation of consent The data subject is unaffected by the lawfulness of processing based on consent prior to its recall.
The data subject has the right to file a complaint with the relevant supervisory authority if the Data Entity considers the processing of personal data to be contrary to the law. The Office of Personal Data Protection is the relevant supervisory authority in the Czech Republic. The data subject has the right to object to the processing of his personal data if the controller processes personal data for the following reasons: processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the controller, processing is necessary for the purposes of the legitimate interests of the trustee or third party, for the purposes of direct marketing, scientific or historical research or for statistical purposes.
RICHENZA hereby declares that the handling of personal data is in full compliance with applicable law. The data of the data subject's personal data are secured by RICHENZA by means of set technical and organizational measures.
All personal data in electronic form is stored in databases and systems accessible only to persons who need to immediately dispose of their personal data for the purposes specified in these rules, and only to the extent necessary. Access to these personal data is protected by encrypted connections, passwords, and firewalls.
These rules are effective from May 25, 2018.