PERSONAL DATA PROTECTION TERMS

 

1. FUNDAMENTAL PROVISIONS

1.1 The administrator of the personal date as per Article 4, Point 7 of theEuropean Parliament Ordinance and the Council of Europe No. 2016/679 on theprotection of personal data of physical persons in connecting with personaldata processing and free movement of this data (hereinafter referred to as „GDPR“ only) is BROKISGLASS Ltd., seatedat the address of Španielova 1315/25, Řepy – 163 00, Prague 6, registered inthe Trade registry maintained by the MunicipalCourt in Prague,Section C, Inset 327085(hereinafter referred to as „theAdministrator“ only).

1.2 — The contact information of theAdministrator are as follows:

The operation premises:

Sídliště Janštejn 39, 588 52 Horní Dubenky

e-mail: info@brokisglass.cz

telephone: +420 567211 517

1.3 — The personal data refers to allinformation on the identified or identifiable physical person; an identifiablephysical person is a physical person, whichcan be directly or indirectly identified, in particular with referenceto a specific identifier or one or more special elements of physical,physiological, genetic, psychologic, economic, cultural or social identity of this physical person.

1.4 — The Administrator has not appointeda special commissioner for personal data protection.

 

2. THE SOURCES AND CATEGORIES OFTHE PROCESSED PERSONAL DATA

2.1 — The Administrator processes personal data, which were provided to him, or personal data which he had acquired based on your order:

  • name and surname
  • email address
  • postal address
  • telephone

2.2 — The Administrator processes youridentification and contact data and information necessary for theimplementation of the contract.

 

3. THE LEGAL CAUSE AND THE PURPOSE OF PERSONAL DATA PROCESSING

3.1 — The legal cause of the personal data processing is

  • the implementation of the contract between you and the Administrator as per Article 6, Clause 1, Letter B of the GDPR,
  • the fulfilment of the legal duty of the Administrator as per Article6, Clause 1, Letter C of theGDPR,
  • justified interestof the Administrator to provide direct marketing (in particular distribution of commercial information and newsletters) as per Article 6, Clause 1,  Letter F of the GDPR,
  • Your consent with data  processing for the purpose  of providing direct marketing (in particular distribution of commercial  information and newsletters) as per Article 6, Clause 1, Letter A of the GDPR  in connection with § 7, Clause  2 of Law No. 480/2004 on Certain Services of Information Companies  in case no order of goods  or services took place.

3.2 — The purpose of processing personal data is

  • handling of your order and the implementation of rights  and duties following from the contractual relationship between you and the Administrator; when placing an order, personal data [name, address, contact] is required in order to successfully handle the order; the provision of personal data is a necessary requirement for the execution of any contract, it is not possible to enter into a contractual relationship or implement it on part of the Administrator without the provision of the personal data of the other contractual party,
  • handling of your order and the implementation of rights and duties following from the contractual relationship between you and the Administrator; when placing an order, personal data [name, address, contact] is required in order to successfully handle the order; the provision of personal data is a necessary requirement for the execution of any contract, it is not possible to enter  into a contractual relationship or implement it on part of the Administrator without the provision of the personal data of the other contractual party,
  • fulfilment of legal duties vis-a-vis the state authorities,
  • distribution of the commercial information and other marketing activities.    

3.3 — On part of the Administrator there is no automatic individual deliberation as per Article 22 of the GDPR.

 

4. THE TERM OF THE PERSONAL  DATA STORAGE

       

4.1 — The Administrator stores personal data

  • for a period necessary for  implementing the rights and duties following from the contractual  relationship between you and the Administrator and for putting into effect  pertinent claims following therefrom (for a period of 5 years after the  termination of the contractual relationship).
  • for a period ending by a recall  of the consent to process personal data for the purposes of marketing, 5  years at maximum, in case  the personal data  is processed based on a consent.

4.2 — The Administrator shall  erase the data once the term for the personal  data storage has expired.

       

5. THE RECIPIENTS OF THE PERSONAL  DATA (SUBCONTRACTORS OF THE ADMINISTRATOR)

       

5.1 — The Recipients of the  Personal Data are the  following

  • taking part in the delivery of goods,  services or realizations of payments based on the contract,
  • ensuring the services of e-shop operation and other services  connected thereto,
  • ensuring the marketing services.

5.2 — The Administrator has no intent of transferring the personal data to athird country (outside the EU) or to any international organization.

    

6. PERSONAL DATA PROCESSORS

       

6.1 — The processing of the personal data is done by the  Administrator, however, personal data may be processed on his behalf also  by the following processors:

  • the company BROKISGLASS Ltd.,  seated at the address of Španielova 1315/25, Řepy – 163 00, Prague 6,  Business Identification No. 08889295,
  • or, pertinently, other providers  of processing software services and applications, which are not currently  used by the Administrator.

7. YOUR RIGHTS

       

7.1 — Under GDPR your rights  are as follows

  • the right to access  your personal data as per Article 15 GDPR,
  • the right to correct personal  data as per Article 16 GDPR, or, pertinently, to limit the processing of your personal data as per Article 18 GDPR,
  • the right to delete your personal data as per Article 17 GDPR,
  • the right to raise an objection to personal data processing as per Article 21 GDPR,
  • the right to transmission of data as per  Article 20 GDPR and the right to recall your consent with  the personal data processing in writing or electronically by means of an email  of the Administrator listed in Article  III of these conditions.

7.2 — Likewise, you  have the right to submit a complaint to the Personal protection Data Authority in case you suspect that your personal data protection rights has been violated, or you can file a suit at a court of justice.

       

8. PERSONAL DATA  PROTECTION TERMS

 

8.1 — The Administrator hereby represents that he had adopted all the appropriate technical and organizational measures to protect the personal data.

 

8.2 — The Administrator had implemented technical measures for securing the data repositories as well as the archives  containing personal information in the printed form.

 

8.3 — The Administrator represents that personal data may be accessed only by authorized persons.

       

9. CLOSING PROVISIONS

 

9.1 — By sending an order via the internet order form you confirm that you have been acquainted with personal data protection terms and to have accepted them in full.

9.2 — Your consent with these terms is expressed by marking off your consent on the electronic form. Having marked off your consent, you confirm to have been acquainted with the personal data protection terms and to have accepted them in their full extent.

9.3 — The Administrator is entitled to change these terms. He shall publicize the new version of the terms on its web page and, at the same time, he shall send that version to your email address, which you have provided to the Administrator.

These terms come into effect as of October1, 2020.