1. Who is the controller of personal data and what are the categories of personal data subjects whose personal data we process?
Personal data manager:
- WolfGang concept s.r.o., I C: 29363233, registered office: Vachova 44/8, Brno-Stadt, 602 00 Brno, registered in the Commercial Register of the Regional Court of Brno under C 75445.
Categories of data subjects:
- Customers of the AIFM, i.e. persons who have entered into a contract with the AIFM for the provision of services or goods via a website https://wolfgangstore.cz
- administrator staff,
- service providers and persons acting for the AIFM under another contractual relationship.
2. What personal data about data subjects are we processing?
We process the following personal data about the Customer Manager: personal data which serve to uniquely identify the data subject, i.e. name, surname, date of birth, address of permanent residence; if the customer is a natural person operating under specific legislation, we further process his ID and ID. Furthermore, in order to communicate with the customer when receiving the goods, we process his contact details, such as telephone number and e-mail address, as well as the customer's bank account number when processing the order.
Other entities (employees, service providers) we process the following personal data: identification data: personal data which serve to uniquely identify the data subject, i.e. name, surname, title, date of birth, address of permanent residence; for the supplier, the natural person of the entrepreneur also tax identification number, ICO. We further process contact data, personal data enabling contact with the data subject in the performance of contractual obligations (contact address, e-mail address, telephone number, or payment details, bank account number).
Other personal data (beyond the above) can be processed with consent data subject for e.g. marketing.
3. From what sources do we obtain personal data?
We receive personal data directly from the data subject when concluding a contract for the provision of services or goods via the website https://wolfgangstore.cz and, further, when negotiating another contractual relationship (with an employee, when concluding a contract with a supplier, etc.), possibly from third parties in accordance with the Regulation, in particular from public sources, while respecting the purpose of the processing of personal data.
4. How and for how long do we process personal data?
We process personal data of customers in an automated way in electronic information systems, where personal data of data subjects are recorded and stored from the outset only in the information system. However, no automated decision is made when processing personal data. (i.e. without human interference) Personal data are protected at all times from unauthorised interference, loss, destruction or misuse. All persons who come into contact with data are bound by confidentiality obligations, especially our employees and processors. i Manager, we also process manually in compliance with the above principles.
Personal data shall be retained for the duration of the contractual relationship and for the period strictly necessary to ensure all rights and obligations arising from the contractual relationship, i.e. for the duration of the existence of possible claims arising from the contractual relationship (statutory limitation period) and, furthermore, for as long as we are obliged to keep them under generally binding legislation.
Five. Based on what legal title and for what purpose are we processing personal data?
The personal data of customers shall b e processed for the purpose of fulfilling the contract for the provision of services or goods referred to in Article Six percent. One letter. (b) Regulations.
In the context of negotiations for the conclusion of a contract or for the performance of a contract with other data subjects (employees, suppliers), personal data shall be processed in accordance with Article Six percent. One letter. (b) a regulation, i.e. for the purpose of implementing this Treaty.
Personal data may be further processed in order to protect the legitimate interests of the AIFM in accordance with Article Six percent. One letter. (f) the regulation, in particular the recovery of any claims arising from contracts concluded with the data subject. In addition, personal data of data subjects may be processed for the purposes of direct marketing (i.e. sending product offers, information on new products) with the agreement of the data subject under Article Six percent. One letter. (a) Regulations.
In the case of the processing of personal data, the data subject shall have the legitimate interests of the controller in accordance with Article Six percent. One letter. (f) The regulation has the right to raise an objection to the administrator pursuant to Article 21 Regulation. The controller shall not further process personal data where this objection is raised unless it demonstrates serious legitimate grounds for processing which override the interests or rights and freedoms of the data subject or for the determination, exercise or defence of legal claims.
Where the right to process personal data is based on the granting of consent to the processing of personal data, the data subject may withdraw such consent at any time; e.g. marketing consent. However, the revocation of this consent shall not affect the lawfulness of the processing on the basis of the consent given prior to its revocation;
Personal data shall also be processed by the administrator for the purpose of carrying out legal obligations in accordance with Article Six percent. 1, typeface. (c) Regulations, e.g. to state authorities (e.g. tax administrators for the purposes of tax administration, courts, executives, notaries) for the fulfilment of legal obligations arising from specific provisions.
Six. What legal rights does the data subject have in the processing of personal data?
Right of access to personal data:
The data subject shall have the right t o obtain from the controller confirmation as to whether he processes his personal data and, if so, shall have the right to have access to such personal data and to the information referred to in Article III. 15 Regulations.
Right of correction or deletion, or limitation of processing where applicable:
The data subject shall have the right (in the cases provided for by the Regulation) to request correction or correction of errors by the controller, or incomplete personal data, request the deletion of personal data if it has been deleted or if there is n o reason to process it, or request a limitation of the processing of personal data in connection with the processing of personal data by the administrator.
Right to object:
The data subject shall have the right to object at any time to the controller, on grounds relating to his particular situation, against the processing of his personal data processed for the legitimate interests of the controller or other persons (as provided for in the Regulation); the legitimate interests under the Regulation may be, in particular, cases of protection of the rights and legal rights of the AIFM.
Right to data portability:
The data subject shall have the right (under the conditions laid down in the Regulation) t o obtain his/her personal data from the controller and to transfer it to another controller.
Right to complain to the Authority:
The data subject shall have the right to lodge a complaint with the supervisory authority if he considers that the processing of his personal data has infringed the Regulation. This supervisory authority shall be the Office for the Protection of Personal Data.
Where the right to process personal data is based on the granting of consent to the processing of personal data, the data subject may withdraw such consent at any time; e.g. marketing consent. However, the revocation of this consent shall not affect the lawfulness of the processing on the basis of the consent given before its revocation.
In order to exercise all its rights, the data subject may use the contact details listed below in point 7 of these Rules. The administrator shall be informed without undue delay of the processing of his/her application and of the measures taken (the Regulation shall give the entity a period of one month from receipt of the application). A closer description of individual rights of entities is freely available on our website https://wolfgangstore.cz/osobni-udaje
Seven. Where can the data subject exercise his rights or any objections to the processing of personal data?
Apply any objection t o the processing of personal data, revoke the consent granted or change its scope, or exercise any right of the data subject to exercise any of the following:
- written to Vachova 44/8, Brno city, 602 00
- via information line: +420 737 638 663
- e-mail message to email@example.com
By these means, the data subject may contact the controller with any request or question concerning the processing of personal data.
Eight. Who are we giving personal information to?
Personal data shall be processed through the staff of the administrator or the administrator of authorised processors on the basis of the relevant contract in accordance with Article 28 Regulation. In all cases, however, the AIFM shall ensure that all obligations arising out of the applicable legislation for the AIFM and its processors are maintained and shall ensure that the security of personal data transmitted or misuse thereof is not compromised.
Processors/ recipients of personal data are in particular:
- State authorities and other institutions under statutory obligations, in particular public authorities, courts, tax administrators, law enforcement authorities, social security authorities, executives, notaries, Czech Insurance Association, insurance companies);
- Company managing information system Manager and company providing IT service manager
- personal data may be provided to other entities with the prior consent or at the request of the data subject;
Nine. When do we transfer personal data to third countries?
Personal data shall not be transferred to a foreign or any international organisation.
Ten. Are we making automated decision-making and profiling of personal data?
When processing personal data, there is no automated decision making (i.e. without human interference), including profiling.
11. What do the concepts contained in these Principles mean?
- Personal data any information relating to the designated or identifiable data subject; the data subject is considered to be designated or identifiable if the data subject can be identified directly or indirectly;
- Data subject the natural person whose personal data are processed by the controller;
- Administrator The body which determines the purpose and means of processing personal data shall carry out the processing and be responsible for it;
- Processor any entity processing personal data under a specific law or mandate by the controller;
- Recipients any entity to which personal data are made available;
- Processing of personal data any operation or system of operations which the controller or processor systematically carries out with personal data, either automatically or by other means; in particular, the collection, storage, making available, modification or modification, search, use, transfer, dissemination, publication, storage, exchange, sorting or combination, blocking, liquidation.