PRIVACY POLICY
I. Basic Provisions
1. The controller of personal data within the meaning of Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is AQUAZORBING.CZ s.r.o., ID No. 28632508, registered at nábřeží Rudoarmějců 897, Příbor 74258 (hereinafter: “Controller”).
2. Contact details of the Controller:
Address: nábřeží Rudoarmějců 897, Příbor 74258 or Warehouse: Ostravská, Příbor, 74258 CZ
Email: aquazorbing@hotmail.com
Phone: +420 776 069 535
3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
4. The Controller has not appointed a Data Protection Officer.
II. Sources and Categories of Processed Personal Data
1. The Controller processes personal data that you have provided or personal data obtained by the Controller in connection with fulfilling your order.
2. The Controller processes your identification and contact data, as well as data necessary for contract performance.
III. Legal Basis and Purpose of Personal Data Processing
1. The legal basis for processing personal data is:
• Performance of the contract between you and the Controller pursuant to Art. 6(1)(b) GDPR,
• The legitimate interest of the Controller in direct marketing (especially sending commercial messages and newsletters) pursuant to Art. 6(1)(f) GDPR,
• Your consent to processing for direct marketing purposes (especially sending commercial messages and newsletters) pursuant to Art. 6(1)(a) GDPR in connection with §7(2) of Act No. 480/2004 Coll., in cases where no goods or services were ordered.
2. The purpose of processing personal data is:
• Processing your order and fulfilling rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data necessary for successful processing (name, address, contact details) are required. Without these data, the Controller cannot conclude or fulfil the contract.
• Sending commercial messages and performing other marketing activities.
3. Automated individual decision-making within the meaning of Art. 22 GDPR may take place only if you have explicitly consented.
IV. Data Storage Period
1. The Controller stores personal data:
• For the period necessary to exercise rights and obligations arising from the contractual relationship and to assert claims arising from such relationships (for up to 15 years after termination of the contract).
• For the period until withdrawal of consent for marketing purposes, up to a maximum of 15 years if the processing is based on consent.
2. After the storage period expires, the Controller permanently deletes the personal data.
V. Recipients of Personal Data (Processor Subcontractors)
1. Recipients of personal data include persons:
• Participating in the delivery of goods/services or processing of payments under the contract,
• Providing e-shop operation services (Shoptet) and other services related to the operation of the e-shop,
• Providing marketing services.
2. The Controller does not intend to transfer personal data to third countries (outside the EU) or international organizations. If such transfer occurs, recipients may include providers of mailing or cloud services.
VI. Your Rights
1. Under the conditions stated in the GDPR, you have the right to:
• Access your personal data under Art. 15 GDPR,
• Rectify personal data under Art. 16 GDPR or restrict processing under Art. 18 GDPR,
• Erase personal data under Art. 17 GDPR,
• Object to processing under Art. 21 GDPR,
• Data portability under Art. 20 GDPR,
• Withdraw consent to processing at any time by written or electronic form sent to the Controller’s address or email stated in Article I.3 of this document.
2. You also have the right to lodge a complaint with the Data Protection Authority if you believe your rights to personal data protection have been violated.
VII. Personal Data Security Measures
1. The Controller declares that appropriate technical and organizational measures have been taken to secure personal data.
2. The Controller has implemented measures to secure data storage and personal data in paper form.
3. The Controller declares that only authorized persons have access to personal data.
VIII. Final Provisions
1. By submitting an order via the online order form, you confirm that you are familiar with this Privacy Policy and accept it in full.
2. You express your agreement to these terms by ticking the consent box in the online form. By doing so, you confirm your acceptance of the Privacy Policy.