Privacy

We protect you

Privacy Policy

Basic information

1.1. Document content. These personal data processing principles describe how we process the personal data of visitors, customers of the online store and other persons. Here you will learn in particular what personal data we process, why and on what basis we do so, to whom we transfer it and what rights you have in connection with their processing. All personal data processing takes place in accordance with the General Data Protection Regulation of the European Union No. 2016/679, usually referred to as GDPR.

1.2. Our position. All described personal data processing activities are carried out as the controller by the company GP novum sro, with its registered office at Riegrova 1756/51, 37001 České Budějovice, Company ID No. 28155483, entered in the Commercial Register kept by the Regional Court in České Budějovice, Section C, File 20704, Tax Identification Number (DIČ CZ28155483) (for greater clarity, hereinafter referred to as “we”). This means that we determine the purposes described below for which we collect your personal data, determine the means of processing and are responsible for its proper execution.

1.3. Scope of personal data processing. The personal data that we process are: 1.3.1. identification data (in particular name and surname or identification number and

tax identification number in the case of entrepreneurs),
1.3.2. contact details (in particular address, e-mail address and telephone number),

1.3.3. data on orders and transactions (in particular, ordered goods and services, selected payment and shipping method and other information related to the order),

1.3.4. data on mutual communication (in particular, content and other data associated with communication between us and you),

1.3.5. registration and settings data (in particular data associated with your user account if you register with us and data on the settings of our services),

1.3.6. data about the use of our website (in particular IP address, data about your device, data obtained using cookies or data about what you do on our website).

1.3. Scope of personal data processing. The personal data that we process are: 1.3.1. identification data (in particular name and surname or identification number and

tax identification number in the case of entrepreneurs),
1.3.2. contact details (in particular address, e-mail address and telephone number),

1.3.3. data on orders and transactions (in particular, ordered goods and services, selected payment and shipping method and other information related to the order),

1.3.4. data on mutual communication (in particular, content and other data associated with communication between us and you),

1.3.5. registration and settings data (in particular data associated with your user account if you register with us and data on the settings of our services),

1.3.6. data about the use of our website (in particular IP address, data about your device, data obtained using cookies or data about what you do on our website).

Why and how do we process your personal data?

2.1. Website operation.If you visit our website, we process your personal data to ensure its proper functioning based on our legitimate interest in providing our services via the internet.

2.2. Improving and developing our services. We also process your personal data for the purpose of measuring website traffic and creating statistics and records that we use to evaluate and develop our services, based on our legitimate interest in monitoring website traffic and developing and optimizing our services.

2.3. Measuring your satisfaction. To measure your satisfaction with our services, we process your personal data based on our legitimate interest in obtaining your feedback.

2.4. Security and testing. To protect our website and all other services from cyber attacks and fraud, and to test new features and changes.

website, we process your personal data based on our legitimate interest in securing and improving our services.

2.5. Protection of legal claims and internal control. We process your personal data based on our legitimate interests for the purpose of protecting legal claims and our internal records and control.

2.6. Sending commercial communications to customers. If we obtain electronic contact details from you in connection with an order or our services, we may also process your personal data for the purpose of further offering our goods and services through commercial communications based on our legitimate interest in our promotion, unless you have refused this sending.

2.7. Sending commercial communications based on consent. Based on your consent, we process your personal data for the purpose of sending commercial communications.

2.8. Online advertising. We may process personal data based on our legitimate interest in promoting ourselves to you in order to display tailored advertisements on our website and third-party websites.

2.9. Fulfillment of our legal obligations. We also process your personal data for the purposes and on the basis of fulfilling our legal obligations related in particular to providing information to public authorities.

2.10. Performance and conclusion of contracts. We process your personal data on the basis of and for the purpose of fulfilling our obligations arising from contracts concluded between us and you and for the conclusion of these contracts. For this purpose, we may also process the personal data of addressees and other recipients of goods and other possible services.

2.11. Customer support. To handle your requests related to orders, we process your personal data based on the obligation to fulfill contracts concluded between us and you and for the conclusion of such contracts. When handling other possible requests, we process your personal data based on our legitimate interest in providing our services and ensuring adequate support.

2.12. Storage period. We store personal data only for the period strictly necessary to achieve the stated purposes of processing personal data. After the purpose of processing has expired, we will immediately destroy the personal data. As a rule, we store personal data for the duration of the limitation period (standard 3 years) and one year after its expiration with regard to possible claims made at the end of the limitation period.In addition to the above, the following special storage periods apply:

2.12.1. In the case of legal and other proceedings, we process your personal data to the extent necessary for the entire duration of such proceedings and the remaining part of the limitation period after their termination.

2.12.2. We process your personal data to send commercial communications to customers until you refuse to send commercial communications.

2.12.3. We process your personal data for the purpose of sending commercial communications based on your consent until you withdraw your previous consent to the processing of personal data.

2.12.4. To fulfill legal obligations, we process personal data for the period necessary to fulfill these obligations.

To whom is personal data transferred?

3.1. Processors. For the processing of personal data, we also use the services of other entities in the position of processors, who process personal data only according to our instructions. These are in particular:

3.1.1. 3.1.2. 3.1.3. 3.1.4.

3.2. Administrators. administrators:

IT service providers and other technology suppliers, operators of analytical and marketing tools, providers of communication tools,
operators of customer satisfaction survey programs.

You may disclose your personal data to other entities in a position

our suppliers involved in the performance of the contract, in particular carriers and 3.2.2. operators of advertising systems and social networks.

3.3. Transfers outside the EU. In some cases, your personal data may be transferred outside the European Economic Area, either on the basis of an adequacy decision pursuant to Article 45 GDPR, appropriate safeguards pursuant to Article 46 GDPR, or an exemption pursuant to Article 49 GDPR.

Your rights

4.1. Rights of the data subject. With regard to your personal data, you have the right to:

4.1.1. request the correction of inaccurate or outdated personal data, so if you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented without undue delay,

4.1.2. request confirmation of whether processing is taking place, and if so, information regarding this processing to the extent set out in Article 15 of the GDPR, as well as a copy of the processed data (we are entitled to charge a fee for additional copies to cover necessary costs),

4.1.3. in some cases you have the right to have your personal data erased. We will erase your personal data without undue delay if we no longer need it for the purposes for which we processed it, or if you exercise your right to object to the processing and we find that we no longer have any legitimate interests that would justify this processing, or it turns out that the processing of personal data carried out by us is no longer in accordance with generally binding regulations. However, this right does not apply if the processing of your personal data is still necessary for the fulfilment of our legal obligation, for archiving purposes, scientific or historical research purposes or for statistical purposes, or for the determination, exercise or defence of our legal claims.

4.1.4.exercise the right to restrict the processing of personal data. This right gives you

3.2.1.
payment system operators,

allows you to request in certain cases that your personal data be marked and that this data is not subject to any further processing operations - in this case, however, not forever (as in the case of the right to erasure), but for a limited period. We must restrict the processing of personal data when you dispute the accuracy of the personal data before we agree on which data is correct, or when we process your personal data without sufficient legal basis (e.g. beyond what we have to process), but you will prefer only their restriction to the deletion of such data (e.g. if you expect that you will provide us with such data anyway in the future), or we no longer need the personal data for the above-mentioned processing purposes, but you require them for the determination, exercise or defense of your legal claims, or you object to the processing and we are obliged to restrict the processing of your personal data for the period for which we are saving, if your objection is justified.

4.1.5. request the transfer of personal data in cases where processing is based on your consent or on a contract,

4.1.6. object to the processing of personal data based on our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds for continuing such processing. In the event of an objection to marketing activities, we will in any case cease such activities,

4.1.7. at any time express your disagreement with the processing of your personal data for the purpose of sending commercial communications, just as you can at any time withdraw your previous consent to the processing of personal data for any other purpose, unless it is processing for the purpose of fulfilling our obligations arising from contracts, for the purpose of fulfilling our legal obligations or for another purpose arising from our legitimate interests.

4.2. Method of exercising your rights. You can exercise your rights in one of the following ways: 4.2.1. by email to our email address.

4.3. Right to lodge a complaint with a supervisory authority. If you believe that we have violated the GDPR when processing your personal data, you have the right to lodge a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7 (http://www.uoou.cz).

Cookies

5.1. Files stored on your device for later access (temporary files). Our websites may use cookies (and possibly other technologies on a similar principle, such as Web Storage). This means that we store small data files in a reserved space in the memory of your device that allow us to provide you with the service and further improve it. For simplicity, we will refer to all these technologies as "cookies".

5.2. Cookies necessary for the provision of the service. Some cookies are technologically necessary for the provision of the service. This means that their storage cannot be avoided while maintaining the functionality of the service. These include cookies for:

5.2.1.storing your choices in connection with your order,

5.2.2. saving website settings,

5.2.3. ensuring IT security.

5.3. Other types of cookies. We use and store some cookies so that we can provide you with a better quality service and more tailored to your preferences. As part of this, we may store cookies on your device:

5.3.1. to ensure analysis of website traffic and usage, including third-party cookies,

5.3.2. for advertising purposes to display tailored advertising on our and other websites, including third-party cookies,

5.3.3. ensuring connections with social networks, including third-party cookies, 5.3.4. to tailor our website to you,
5.3.5. to determine your geographical location.

5.4. Cookie settings. You can configure the use of cookies on our website within the relevant options of your device, for example by blocking cookies if you do not agree to their use on our website. If you use this option, you acknowledge that some parts of the service may not function correctly.