PRIVACY POLICY RULES

Notice: These rules have been created as a sample document and are not legally binding. Webnode bears no responsibility for the use of this document. We recommend consulting these rules with your lawyer and adjusting them to fit the needs of your business.

The operator of the e-shop [….] at the website [….] Company ID […] with registered office […] processes personal data provided by the Buyer for the purpose of fulfilling and additionally confirming the Terms and Conditions, processing an electronic order, executing delivery, settling payments, and necessary communication between the contractual parties for the period required by specific legal regulations.

Basic Provisions

1. The controller of personal data under Section 5 letter o) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter the "Act"), is […..] Company ID [….] with registered office [….] (hereinafter the "Controller");

2. The Controller's contact details are: e-mail: [……], tel.: [………];

3. Personal data means all information identifying a natural or legal person.

Sources of Processed Personal Data

1. The Controller processes personal data provided with consent by the Buyer and obtained based on fulfilling the Purchase Agreement and processing an electronic order in the online store […].;

2. The Controller processes only the Buyer's identification and contact data necessary for fulfilling the Purchase Agreement;

3. The Controller processes personal data for the purposes of delivery, payment settlement, and necessary communication between contractual parties for the period required by specific legal regulations. Personal data will not be published or transferred to other countries.

Purpose of Processing Personal Data
The Controller processes the Buyer's personal data for the following reasons:

1. For the purpose of registration on the website [….] under Section 13(1)(a) of Act No. 18/2018 on the Protection of Personal Data;

2. For the purpose of handling the Buyer's electronic order (name, address, e-mail, phone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Buyer and the Controller;

4. Providing personal data is a necessary requirement for fulfilling the Purchase Agreement. Without providing personal data, the contract cannot be concluded.

Retention Period of Personal Data

1. The Controller retains personal data for the period necessary to exercise rights and obligations arising from the contractual relationship between the Buyer and the Controller and for 3 years after the termination of the contractual relationship;

2. After the retention period, the Controller is obliged to delete the data.

Recipients and Processors of Personal Data
Third parties receiving the Buyer's personal data are subcontractors of the Controller. The services of these subcontractors are directly related to the successful fulfillment of the Purchase Agreement and electronic order between the Controller and the Buyer.

The Controller's subcontractors are:

• Webnode AG (e-shop system);

• Czech Post, s.p. (delivery service);

• Google Analytics (website analysis);

Buyer's Rights
Under the conditions set forth in the Act, the Buyer has the right to:

1. Access their personal data;

2. Rectify personal data;

3. Delete personal data;

4. Object to processing;

5. Data portability;

6. Withdraw consent to personal data processing in writing or electronically at the e-mail address: [….];

7. File a complaint with the Office for Personal Data Protection if they believe their personal data protection rights have been violated.

Personal Data Security

1. The Controller declares that all appropriate technical and organizational measures necessary to secure the Buyer's personal data have been adopted;

2. The Controller has adopted technical measures to secure personal data storage, including password-protected computer access, use of antivirus software, and regular computer maintenance.

Final Provisions

1. By submitting an electronic order on the website [….], the Buyer confirms that they have been informed about the terms of personal data protection and fully accept them;

2. The Buyer agrees to these rules by checking the box in the order;

3. The Controller is entitled to amend these Rules at any time. The new version of the Rules must be published on their website.