1 Personal data controller
1.1 The personal data administrator ARTENLUX s.r.o., IČ 09041826, with its registered office at Nové sady 998/2, 602 00 Brno (hereinafter referred to as the “administrator”), declares that all personal data processed by the administrator are strictly confidential. The controller shall handle them in accordance with national and European Union law in the field of personal data protection.
1.2 The administrator collects, stores and uses your personal data in the sense of Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the Personal Data Processing Act), resp. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (“GDPR Regulation”). The individual purposes for which the controller processes personal data are further defined.
1.3 The administrator also collects this personal data through its website at artenlux.com (hereinafter referred to as the “website”).
1.4 This policy is issued by the controller so that you are sufficiently informed about what personal data your controller processes, for what purpose, for how long, who will have access to your personal data and what your rights are. This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or consent given.
2 Processed data
|C.||Purpose of processing||Scope of personal data|
|1||Provision of services and performance of the contract||Name and surname, e-mail, telephone, any other personal information needed to fulfill the contract or process your inquiry.|
|2||Marketing purposes||Name, phone number and e-mail.|
If you are our customer, we do so out of a legitimate interest, because we reasonably assume that you are interested in our news and updates, for a period of 5 years from the last order.
If you are not our customer, we send you newsletters only with your consent, for a maximum period of 5 years from the grant.
You can revoke this consent by using the unsubscribe link in each newsletter you send.
2.1 The controller is entitled to process the following personal data according to the purpose, according to the categories of personal data, according to the categories of the data subject, according to the categories of recipients and according to the retention period as follows.
2.2 The individual processing purposes mean the following:
2.2.1 fulfillment of the contractual relationship means: the relationship between you and the administrator established on the basis of an order, registration, on the basis of a concluded contract, on the basis of an application and participation in a competition, and the like;
2.2.2 sending business messages and offering products and services means: sending business offers, by electronic mail (e-mail), short text messages or telephone call;
2.2.3 accounting and tax purposes means: accounting records in the sense of accounting and tax legislation;
2.2.4 personnel, payroll means: concluding employment contracts, payroll processing, social and health insurance contributions pursuant to Act No. 262/2006 Coll., the Labor Code, No. 582/1991 Coll. on the organization and implementation of social security, No. 48/1997 Coll., on public health insurance and on the amendment of some related acts;
2.2.5 statistical purposes means: anonymized detection of website traffic, further monitoring of the number of page views, time spent on the website, the type of device from which you come to the website. We collect data so that we can improve the quality of services provided and offer clients relevant content;
2.2.6 ad serving means: displaying ads on websites based on statistically determined customer preferences;
2.2.7 legitimate interestmeans: effective defense in the event of a dispute; the period of processing personal data in such a case is 4 years from the expiration of the warranty period for the goods and is extended by the period during which the dispute is conducted. We want to constantly improve our services and possibly provide new and better services; we want to prevent obstruction of such activity; therefore, activities that contribute to the fulfillment of this goal are in our legitimate interest. There is also a legitimate interest in fraud prevention processing (eg risk assessment of contracting), direct marketing (eg offering relevant services to existing customers), transfer of personal data within a group of companies for internal administrative purposes, criminal reporting and transfer of personal data to the relevant authority, ensuring network and information security. This list is only an example;
2.2.8 fulfillment of other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities and the like.
2.3 We process your personal data for the time strictly necessary to ensure all rights and obligations arising from mutual legal action, at least for the period of order processing, trade, service facilities, etc., as well as for which the controller is obliged to store personal data under generally binding legal regulations or for the period for which you may have given your consent to the administrator. Otherwise, the processing time results from the purpose for which the personal data are processed or is determined by law.
2.4 Personal data is processed manually and automatically by the administrator
The administrator is entitled to process some information automatically, for example to create statistical information about traffic to its website.
3 Personal data processed on the basis of consent
3.1 If we have obtained your consent to the processing of personal data from you, this has happened for one of the following purposes:
3.1.1 Google ad targeting and List
3.1.2 sending business messages
3.1.3. saving shopping preferences
3.1.4. storage of cookies (more information in the cookie processing policy document)
4 Rights of the data subject
4.1 As a data subject, you have the rights that arise for you under the law and that you can exercise at any time. It is about:
4.1.1 the right of access to personal data, according to which you have the right to obtain information from the administrator on whether the administrator processes your personal data. The administrator is obliged to provide you with this information without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR Regulation. The controller shall have the right to demand an appropriate remuneration for the provision of information, not exceeding the costs necessary to provide the information;
4.1.2 the right to rectification or erasure of personal data, or a processing restriction under which you have the right to have personal data that is inaccurate or incorrect corrected. If your personal data is no longer needed for the purposes for which it was collected or is processed illegally, you have the right to request its deletion. If you do not want to request the deletion of personal data, but only temporarily restrict their processing, you can request a processing restriction;
4.1.3 the right to request an explanation if you suspect that the processing of personal data by the controller is contrary to law;
4.1.4 the right to contact the Office for Personal Data Protectionin case of doubt as to compliance with the obligations relating to the processing of personal data;
4.1.5 the right to data portability, ie the right to obtain personal data concerning you, which you have provided to the administrator, in a structured, commonly used and machine – readable format, for more details see. Article 20 of the GDPR;
4.1.6 the right to object to the processing of personal data, which are processed for the purpose of fulfilling a task performed in the public interest or in the exercise of public power or for the purposes of protecting the legitimate interests of the administrator. The controller shall terminate the processing without undue delay, unless he proves that there is a legitimate interest / reason for the processing which outweighs your interest, rights or freedoms;
4.1.7 the right to withdraw the consent to the processing of personal data at any time, if you have given the administrator consent to the processing of personal data.
5 Transfer to third countries
5.1 Your personal data will not be transferred to third countries.
6 Information and questions
6.1 Further information on the rights and obligations in the protection of personal data can be obtained by the data subject on the website or via e-mail to firstname.lastname@example.org
8 Final Provisions
8.1. All legal relationships arising in connection with the processing of Personal Data are governed by the laws of the Czech Republic, regardless of where the access to them was made. The Czech courts have jurisdiction to resolve any disputes arising in connection with the protection of privacy between the Subscriber and the Operator.
8.2 Participants who provide their Personal Data via the registration form for the purpose of concluding a contract with the Operator or provide consent to the processing of Personal Data do so voluntarily, do not control their activities in any way on their behalf and the Operator.
8.3 The wording of the Principles may be amended or supplemented by the Operator. The Operator shall inform the Participants by e-mail of any such change at least 30 days before the changes take effect.
These Principles take effect on 20. 5. 2020.