GDPR

Basic provisions

• The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 (GDPR) is Kamil Vítek, ID No. 21003441, Riegrova 11, 690 02 Břeclav, registered in the trade register kept by the District Court in Břeclav (the “controller”).
• Controller contact details: Kamil Vítek, Riegrova 11, 690 02 Břeclav, ID No. 21003441, email kamil@kamilvitek.cz, phone +420 731 217 789.
• Personal data means any information relating to an identified or identifiable natural person.
• The controller has not appointed a data protection officer.

• The controller processes personal data you provided or obtained when fulfilling your order: name, email, postal address, phone, website activity history, IP address, and any other information sent via contact forms in line with consumer protection law.
• The controller processes identification and contact data and data necessary for contract performance.

• Legal bases: contract performance (Art. 6(1)(b) GDPR); legal obligation (Art. 6(1)(c)); legitimate interest in direct marketing (Art. 6(1)(f)); consent for direct marketing where no order was placed (Art. 6(1)(a) with Act No. 480/2004 Coll.).
• Purposes: handling your order and contractual rights and obligations; fulfilling legal obligations; sending commercial communications and other marketing activities.

• For the period necessary to exercise rights and obligations from the contractual relationship (up to 15 years after it ends).
• For marketing based on consent, until consent is withdrawn, maximum 10 years.
• After the retention period, personal data are deleted.

• Recipients include persons involved in delivering goods/services/payments under a contract, e-commerce operation providers, and marketing service providers.
• The controller intends to transfer personal data to third countries. Recipients in third countries are mailing/cloud service providers.

Processing is carried out by the controller; processors may include the following for order fulfilment and online advertising:

• Under GDPR you have the right to rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), objection (Art. 21), data portability (Art. 20), and to withdraw consent in writing or electronically to the controller’s contact address.
• You also have the right to lodge a complaint with the Office for Personal Data Protection or to seek judicial remedy.

• The controller has adopted appropriate technical and organizational measures to secure personal data.
• Technical measures include antivirus protection, strong passwords, and two-factor authentication.
• Only persons authorized by the controller have access to personal data.

• By submitting an order via the online form you confirm that you have read and fully accept this privacy policy.
• By checking consent in the online form you confirm the same.
• The controller may amend this policy. A new version will be published on the website and sent to your email address if provided.