Principles of personal data processing

We are DECOLED s.r.o., IČO 25683853, with registered office at Fráni Šrámka 18, Prague 5, 150 00, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 60918 ("we"). We are the data controller of your personal data.

We operate an e-shop at www.decoled.cz ("e-shop").

We have prepared this personal data processing policy ("Principles") to inform you about what personal data we process and how we handle it. You will read here why and how we handle your personal data when you visit our e-shop or order our goods. We also dedicate part of the Policy to cookies and how we work with them. You will also learn what rights you have in relation to the processing of your personal data.

If you have any questions about the processing of your personal data, you can contact us using the following contact details:

• Address.Kladenská 37, 252 61 Dobrovíz
• E-mail: info(na)decoled(tecka)cz
• Telefon: +420 721 221 122

We process personal data in accordance with Regulation (EU) No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("Regulation") and Act No. 110/2019 Coll, on the processing of personal data, as amended.

How do we obtain your personal data?

Some personal data you provide to us yourself, for example when you order our goods through our e-shop or in the context of our e-mail communication.

Sometimes we also obtain your personal data from public registers, lists and records. For example, when issuing invoices or checking the accuracy of information, we use the commercial and trade register.

What personal data do we process?

We process the following categories of personal data:

1. basic identification data - used to identify you (e.g. name and surname, date of birth, if provided, identification number and registered or residential address);
2. contact details - telephone number and email address;
3. information from our communications and your user account details - information from emails, the content of our communications, details of the purchase contracts we enter into with you if you order our goods;
4. invoicing and banking data - this is mainly information appearing on invoices, agreed billing terms, bank connections and payments received;
5. cookies - we use these to measure traffic to the shop, to generate statistics relating to visitor traffic and behaviour on the e-shop and to target advertising. You can read more about cookies further in this Policy.

Where you have contracted with us and ordered our goods, we may send you newsletters for a period of 3 years, unless you opt-out of receiving them by clicking directly in the newsletter or by sending us an email.This is for our legitimate interest.

Do you have to provide us with your personal data?

In some cases you have to provide us with your data. For example, if you want to order our goods, we need your personal data so that we can enter into a contract with you and we can deliver the goods to you.Unfortunately, we can't do that without it.

Why do we process your personal data?

We process your personal data for several reasons. However, each of these reasons must be permitted by law.

We process your personal data for the following reasons:

1. Performance of a contract or pre-contractual negotiations - we process personal data for this reason so that we can deliver our goods to you and so that we can contact and communicate with you about your enquiry and contract.
2. Protection of our legitimate interests- we also process your personal data because our legitimate interests allow us to do so. This enables us to send you our newsletter or to take appropriate steps to defend our legal claims.
3. Compliance with legal obligations- we also process your personal data because we are required to do so by law. For example, under the Accountancy Act we are required to keep tax documents - invoices - which may also contain your personal data.
4. You give us consent to do so- in some cases you may give us consent to process your personal data. If you give us consent to process your data, you have the right to withdraw it at any time, for example by email. However, we are not obliged to delete all your personal data even after the period for which you have consented to the processing of your personal data has expired. We may retain those where our legitimate interest allows us to do so or the law requires us to do so. If you withdraw your consent, this does not affect the lawfulness of the processing of your personal data prior to withdrawal.

How long will we keep your personal data?

Personal data will be processed and stored for the duration of the contract. In addition, for a period of 3 years from the end of this contractual relationship, unless otherwise specified below. We will therefore process personal data for a period of 3 years from the delivery of the goods or from the moment you refuse to take delivery of the goods.

Personal data processed for the purpose of defending our legal claims in judicial, extrajudicial and enforcement proceedings will be processed for a period of 15 years from the end of the business relationship between us and you, which corresponds to the longest possible limitation period provided for by law.

Personal data processed on the basis of our obligation to comply with our legal obligations under accounting, tax and other legislation will be retained for the period specified therein; for example, personal data relating to accounting matters will be retained for 5 years from the end of the business relationship and personal data relating to tax matters will be retained for 10 years from the end of the relevant tax period.

If you are our customer, we are entitled to send you our newsletters for a period of 3 years, unless you refuse to do so either by clicking directly in the newsletter or by sending us an email.

Personal data processed on the basis of your consent will be processed for as long as you have given your consent.

What about cookies?

We use cookies (at least electronic ones) for the proper functioning of our e-shop. These are small text files that can record some specific information from your visits to the e-shop. We divide cookies into essential, functional, analytical and marketing cookies.

Nezbytné cookies jsou potřebné pro to, aby vám e-shop vůbec fungoval. Protože jsou nezbytné pro fungování e-shopu, nemusíte s nimi souhlasit a ani je nemůžete odmítnout a to tady.

Analytické cookies nám slouží pro sestavování statistik a přehledů. Jejich pomocí sledujeme návštěvnost e-shopu i to, odkud jste na e-shop přišli. Pokud s jejich použitím nesouhlasíte, můžete je odmítnout, a to tady.

Marketingové cookies nám umožňují přizpůsobovat naši nabídku vašim potřebám. Díky nim můžeme třeba nabízet naše zboží prostřednictvím cílené reklamy včetně reklamních nástrojů třetích stran. K tomu ale potřebujeme váš souhlas. Odmítnout tyto cookies můžete zde.

What specific cookies do we use?

Who else has access to your personal information besides us?

We involve other parties in the processing of your personal data. As part of this, your personal data may also be processed.

You do not have to worry about your personal data or privacy, because our suppliers become so-called data processors and can only handle your data in the context of the activities and services they provide to us. We will also still be the ones who decide what happens to your personal data.

Such people to whom we pass your personal data are, for example, providers of IT, marketing or accounting services.

Specifically, these are the following persons and entities:

1. Vítězslav Poláček
2. SOLARIS.media s.r.o.

What rights do you have in connection with the processing of your personal data?

It is also our duty as a data controller to ensure that the processing of your personal data is carried out properly and securely. We then guarantee you the rights described in this article. You can exercise these rights by writing to us, by e-mail or by telephone at the contacts listed above.

You can ask us to tell you what personal data we process about you and, if you ask us to do so, we must also give you access to it.

You can ask us to correct incorrect data or to complete incomplete data.

Under certain conditions, we are also obliged to delete your personal data or restrict its processing if you ask us to do so.

If you suspect that your personal data is being processed unlawfully, you have the possibility to lodge a complaint with the Data Protection Authority.

In addition, you also have the right to object if we process your personal data on the basis of our legitimate interest. This objection can be made by sending to our contact address or by e-mail. We will then evaluate it within one month of receipt at the latest.

If you have any further questions about the processing of your personal data, please contact us at any time and we will get back to you as soon as possible.

This Policy is valid from 31 August 2023