These Personal Data Protection Principles (hereafter referred to as the “Principles“) describe the method of collection, use and other treatment of personal data received through the web interface www.klenota.com (hereafter referred to as the “Web Interface“)
Personal data controller:
KLENOTA s.r.o., registered office at Bílkova 855/19, 110 00 Prague 1
Tax identification number: CZ26286505
Registered in the Companies Register kept by the Metropolitan Court in Prague, Section C, insert 125957
Telephone: +420 603 219 313, e-mai: firstname.lastname@example.org
UK contact address: KLENOTA JEWELLERY, BPM 381080, 372 Old St., EC1V 9AU London, United Kingdom
Your privacy is very important to us. We kindly ask you to carefully read the present Principles, which contain important information regarding the treatment of your personal data and related rights and obligations.
1. INTRODUCTORY PROVISIONS
1.1. What is personal data protection governed by?
We process personal data in compliance with the laws of the Czech Republic and directly applicable legislation of the European Union, specifically Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereafter referred to as the “Regulation”) and Act No. 480/2004 Sb. (Coll.) on certain information society services and on the amendment of other acts, as amended.
1.2. What is personal data?
Personal data means any information which identifies or can identify a particular natural person. Personal data includes but is not limited to: identification details, such as first names, surnames and usernames for the user account; contact details, such as the address of residence (or address for service), telephone number and email address.
2. COLLECTION AND USE OF PERSONAL DATA
2.1. How do we collect your personal data?
You provide your personal data when you complete a purchase order (and/or in contact forms) or when you create a user account. If any changes to your personal data occur, we kindly ask you to inform us.
2.2. On what basis and for what purposes do we process your personal data?
- We can process personal data entered in the purchase orders without your explicit consent on the basis and for the purposes of executing and performing the contract, i.e. for the purposes of product delivery. Furthermore, we can process such data on the basis and for the purposes of fulfilling obligations imposed by the law (including, but not limited to, record-keeping obligations, tax document archiving obligations, etc.) and on the basis of our legitimate interest for the purposes of protecting our legal claims.
- We can process personal data entered when you create a user account without your explicit consent on the basis of performing the contract and solely for the purpose of accessing, administering and managing the user account.
- We are authorized to use your email address without your consent on the basis of our legitimate interest for sending commercial communication regarding products similar to those ordered by you. You can refuse to receive commercial communication at any time.
- If you give us your consent by confirming it on the Web Interface, we can process your personal data entered via the Web Interface, in particular data entered when you complete an order or create a user account, for the purposes of sending commercial communication and direct marketing, and/or for other purposes you expressly consented to. If you are under 16 years of age, your legal representative’s consent is required. In case of doubts, we can request confirmation of your age.We can use your personal data for any purpose other than those for which they were collected only on the basis of your consent.
2.3. For how long do we use your data?
Personal data entered when you order products or register is used by us for the
period necessary to perform the contract, to comply with legal obligations and/or for the protection of our legal claims. If you give us your explicit consent for the processing of your personal data or if we use your email address for sending commercial communication in accordance with the previous clause, the data will be used throughout the functioning of the Web Interface.
3. YOUR RIGHTS REGARDING PERSONAL DATA
3.1. Right to withdraw your consent in the processing of your personal data
When processing of your personal data is based on your consent (i.e. for no other legal grounds), you can withdraw your consent at any time.
You can withdraw your consent for the processing of your personal data at any
time through one of these methods:
- by an email sent to our contact email address;
- by phone at our contact telephone number;
- in writing, by a letter sent to our service address;
- in the case of commercial communication – in a manner described in each
email containing commercial communication (by clicking on the Unsubscribe link). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
3.2. Right of access to personal data
You have the right to obtain from us information as to whether or not your personal data is being processed, and, when that is the case, you have the right to access the personal data and the following information
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data has been or will be disclosed;
- the period for which the personal data will be stored. We will provide a copy of the personal data undergoing processing. For any further copies, we may charge a fee based on administrative costs not exceeding the costs of making and delivering such further copies.
3.3. Right to rectification
If your data is inaccurate or incomplete, you have the right to obtain rectification without undue delay, i.e. the right to have inaccurate data rectified and to have incomplete personal data completed.
3.4. Right to object to processing
You have the right to object to the processing of your personal data at any time if we process it for direct marketing purposes, incl. any automated processing of personal data. After such objection, we will cease to process your personal data for such purposes.
3.5. Right to erasure (“right to be forgotten“)
You have the right to obtain the erasure of your personal data when:
- the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- you have withdrawn your consent to the processing;
- you have objected to the processing of personal data;
- the personal data has been unlawfully processed.If there are no legal grounds to refuse the erasure, we are obliged to comply with your request.
3.6. Right to restriction of processing
You have the right to obtain from us a restriction on the processing of your
personal data when:
- the accuracy of the personal data is contested by you;
- the processing is unlawful and you request a restriction on its processing instead of an erasure;
- we no longer need your personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims;
- you have objected to processing. Where processing has been restricted, we are only authorized to store your personal data; any other processing is possible with your consent or on legal grounds. Where processing has been restricted due to an objection to processing, the restriction will apply only for the period necessary to find out whether we are obliged to comply with your request. Where processing has been restricted due to the denial of data accuracy, the restriction will apply only for the period necessary for the verification of data accuracy.
3.7. Right to data portability
You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another controller.
3.8. How you can apply your rights?
You can apply your rights regarding personal data using our contact details. We
will provide information to you and carry out necessary acts without undue delay. We will do our best to accommodate your requirements regarding the protection of your personal data. If you are dissatisfied, you have the right to appeal to the competent supervisory authority in the Czech Republic or in another member state of the European Union.
4. ADMINISTRATION AND PROCESSING OF PERSONAL DATA
4.1. How do we administer and process your personal data?
We are a controller of personal data pursuant to the Regulation. We will inform you who
processes your personal data at your request. Personal and other data obtained is fully secured against any unauthorized use. Personal data in electronic format will be processed by automated means, and personal data in paper format will be processed by non-automated means.
4.2. Who do we transfer personal data to?
To the extent necessary to perform the contract or other obligations, we are entitled to transfer your personal data to other entities, such as carriers or other entities engaged in the performance of the contract or our obligations. Your personal data is not transferred to any other entities. Your personal data will not be transferred to states outside the European Union.
5. COOKIE FILES
5.1. What are cookies?
Cookies are text files stored in computers or other electronic devices of each
visitor of the Web Interface, which enable the functioning of the Web Site.
The cookies used by the Web Interface www.klenota.cz do not collect personal
data; they only facilitate the correct functioning of the Web Interface.
5.2. What cookies does the Web Interface use and for what purposes?
The Web Interface uses session (temporary) cookies, which are automatically deleted after the visitor closes the Web Interface. It also uses persistent cookies that stay in your device until you delete them. Cookies used by the Web Interface are as follows:
- first-party cookies – such cookies are assigned to the domain of our website; these comprise necessary cookies and performance cookies, that may be either temporary or persistent;
- strictly necessary cookies– enable navigating on the Web Interface and basic features; they do not identify you and these are not personal data;
- performance cookies – gather information about how the Web Interface is used (number of visits, time spent on the Web Interface etc.); data collected by such cookies are anonymous.
These Principles are valid and effective from 22 May 2018.