The protection of your personal data is a top priority for our company. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) is SAK LOŽISKA spol. s r. o., Company ID 64609391, with its registered office at Horní Tošanovice 146, 739 53 Horní Tošanovice (hereinafter referred to as the “controller”).

Personal data means any information relating to an identified or identifiable natural person.

The controller processes personal data that you have provided or personal data obtained on the basis of fulfilling your order via the e-shop.

The controller processes in particular your identification and contact data and other data necessary for fulfilling your order.

The legal basis for processing personal data is:

• performance of a contract / order between you and the controller pursuant to Article 6(1)(b) GDPR,
• the controller’s legitimate interest in direct marketing pursuant to Article 6(1)(f) GDPR,
• your consent to processing for direct marketing purposes pursuant to Article 6(1)(a) GDPR in connection with applicable legislation, if no order has been made.

The purpose of processing personal data is:

• processing your order and exercising rights and obligations arising from the contractual relationship,
• sending commercial communications and conducting marketing activities.

When placing an order, personal data necessary for successful processing of the order are required (in particular name, address, telephone number and e-mail). Without providing personal data, it is not possible to conclude or perform the contract.

The controller does not / does carry out automated individual decision-making within the meaning of Article 22 GDPR. You have provided your explicit consent to such processing.

The controller retains personal data:

• for the period necessary to fulfill the purposes set out in this policy and for the duration of rights and obligations arising from the contractual relationship.

After the retention period expires, personal data will be deleted.

Under the conditions set out in GDPR, you have the right to:

• access your personal data pursuant to Article 15 GDPR,
• rectification of personal data pursuant to Article 16 GDPR, or restriction of processing pursuant to Article 18 GDPR,
• erasure of personal data pursuant to Article 17 GDPR,
• object to processing pursuant to Article 21 GDPR,
• data portability pursuant to Article 20 GDPR,
• withdraw consent to processing in writing or electronically,
• lodge a complaint with the relevant supervisory authority, for example: www.uoou.cz.

The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.

The controller declares that only authorized persons have access to personal data.

By submitting an order via the e-shop, you confirm that you have read and agree to these personal data protection conditions in full.

The controller is entitled to amend these conditions. The new version will be published on the website or sent to your e-mail address.

These terms take effect on 15 February 2019.