Terms of personal data protection

PRIVACY POLICY

of the business corporation
DOMFIDA, s.r.o.
with its registered office at Bruselská 442/1, Praha 2 - Vinohrady, 120 00
Company ID number: 07745265
Tax ID No: CZ07745265
registered in the Commercial Register maintained with the Municipal Court in Prague, file reference 306840
for the sale of goods via the online shop located at the web address www.domacipotreby.cz

1. INTRODUCTION

1.1. The personal data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to personal data processing and on the free movement of such data (hereinafter referred to as: the “GDPR”) is DOMFIDA, s.r.o., Company ID No 07745265, tax ID No CZ07745265, with its registered office at Bruselská 442/1, Praha 2 - Vinohrady, 120 00 (hereinafter referred to as the: „Controller“).

1.2. The Controller’s contact details are
Address: DOMFIDA, s.r.o., Bruselská 442/1, Prague 2 – Vinohrady, 120 00
E-mail: prodejna@domacipotreby.cz
Telephone: +420 222515070. 1.3. Personal data means any information regarding an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 1.4. The Controller has not appointed a data protection officer.

2. SOURCES AND CATEGORIES OF PROCESSED PERSONAL DATA

2.1. The Controller processes personal data that you provided to the Controller or personal data that the Controller has obtained as a result of fulfilling your order.

2.2. The Controller processes your identification and contact details and data necessary for the agreement’s performance.

3. LEGAL GROUNDS AND PURPOSE FOR PERSONAL DATA PROCESSING

3.1. The legal grounds for personal data processing are:
• performance of the agreement between you and the Controller pursuant to Article 6(1)(b) of the GDPR,
• the legitimate interest of the Controller in providing direct marketing (particularly in regard to sending commercial communications and newsletters) pursuant to Article 6(1)(f) of the GDPR, on the basis of which it can send commercial communications to its customers, i.e. persons who have purchased goods from it,
• a legitimate interest under Article 6(1)(f) of the GDPR to respond to your suggestions and queries to the controller, for example via a contact form or otherwise,
• Your consent to processing for the purposes of providing direct marketing (particularly in regard to sending commercial communications and newsletters) pursuant to Article 6(1)(a) of the GDPR in conjunction with § 7(2) of Act No. 480/2004 Coll., on Certain Information Society Services, in the absence of an order for goods or services.

3.2. The purpose of personal data processing is:
• processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data is required that is necessary to successfully process the order (name and address, contact), the provision of personal data is a necessary requirement for concluding and performing the agreement, a conclusion is not possible without providing the personal data,
• sending commercial communications and other marketing activities,
• responding to queries and suggestions and improving the Controller´s services.

3.3. There is no automated individual decision-making by the Controller within the meaning of Article 22 of the GDPR.

4. PERSONAL DATA RETENTION PERIOD

4.1. The Controller retains personal data:
• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims arising from this contractual relationship (for a period of 15 years from the contractual relationship’s termination), with regard to legal obligations arising in particular from tax and accounting legislation and with regard to the running of the limitation period). 
• for the period until consent to personal data processing for marketing purposes is withdrawn, but no longer than 5 years if the personal data is processed on a consent basis.

4.2. After the retention period’s expiry, the Controller deletes the personal data.

4.3. The Controller shall also cease to process data for the purpose of sending commercial communications in the event that disagreement to their further sending is expressed. The objection to the sending can be exercised via a link which is included in each communication sent.

5. PERSONAL DATA RECIPIENTS (SUBCONTRACTORS OF THE CONTROLLER)

5.1. Recipients of personal data are people:
• involved in delivering goods / executing payments under the agreement,
• ensuring the transport of goods to the customer’s address/addressee of the ordered goods,
• providing e-shop operation services (BSSHOP s.r.o.) and other services in connection with operating the e-shop,
• providing marketing services,
• operating goods search engines (heureka.cz, zbozi.cz, google.com, etc.)
• providing accounting services for the Controller.

5.2. The Controller does not intend to transfer personal data to a third country (to a country outside the EU) or to an international organisation.

6. YOUR RIGHTS

6.1. Under the GDPR terms, you have:
• the right to access your personal data under Article 15 of the GDPR,
• the right to rectification of your personal data pursuant to Article 16 of the GDPR or restriction of processing pursuant to Article 18 of the GDPR.
• the right to erasure of personal data pursuant to Article 17 of the GDPR.
• the right to object to processing under Article 21 of the GDPR, and
• the right to data portability under Article 20 of the GDPR.
• the right to withdraw consent to processing in writing or electronically to the Controller’s address or email set-out in Article III of these terms and conditions.

6.2. You also have the right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been breached.

7. PERSONAL DATA SECURITY CONDITIONS

7.1. The Controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data.

7.2. The Controller has taken technical measures to secure data storage and storage of personal data in paper form, particularly by using anti-virus programmes, securing systems with alphanumeric passwords, electronic security and CCTV systems.

7.3. The Controller declares that only authorised people have access to personal data.

8. FINAL PROVISIONS

8.1. By submitting an order from the online order form, you confirm that you are aware of the Privacy Policy and that you accept it in its entirety.

8.2. You confirm your acceptance of these terms and conditions by ticking the relevant box via the online form. By ticking the box, you confirm that you are aware of the privacy policy and that you accept it in its entirety.

8.3. The Controller is entitled to change these terms and conditions. They will publish the new version of the Privacy Policy on their website and will also send you the new version of the Privacy Policy to the e-mail address you provided to the Controller.

These terms will take effect on July 18, 2023.