In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (also referred to as the "GDPR") and in accordance with Act No. 110/2019 Coll, on the processing of personal data, as amended (also referred to as the "Act on the processing of personal data"), AVILERI s.r.o., identification number 174 83 581, with registered office at Radlická 751/113e, Jinonice, 158 00 Prague 5, registered in the Commercial Register kept at the Municipal Court in Prague under file no. No. C 371795 (also referred to as the "Controller" or the "Company"), as the controller of personal data, draws up this Privacy Policy.
- the definition of personal data and which of them are processed,
- the reason for processing personal data,
- the scope of processing of personal data,
- the period of processing of personal data,
- who has access to personal data,
- the rights of persons relating to the processing of personal data,
- information on automated decision-making, including profiling.
This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest, or consent.Information relating to the storage or processing of cookies, including information on setting cookies, is available in the section entitled Cookie Policy itself .
Personal data means any information about an identified or identifiable natural person. An identifiable natural person is a natural person (also referred to as a "person") who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.The Company processes personal data to the extent that it is provided to the Company in connection with the use of the Company's services or that is publicly available. Typically, this includes the first and last name of the person, his or her email address, delivery and billing address, telephone number, credit card number and, in the case of business persons, also the identification or tax identification number (also "personal data"). This list is merely illustrative and it is possible that additional data may be provided by the person in the course of the proceedings and treated in the same way. The scope of processing of personal data depends on the data provided by the person to the company.
The Company processes the data of persons who:
- have contacted the Company to place an order and/or to find out details of the Company's services,
- have expressed an interest in receiving the Company's newsletter by entering their email address in a dedicated field on the Company's website or by other demonstrable means,
The person gives consent to the Company to process personal data by sending a request or enquiry to the Company using a form or by providing the Company with their email address in a dedicated field on the Controller's website.Giving consent to the processing of personal data does not affect the conclusion of a contract with the company. The granting of permission to process personal data is not a condition for entering into any contract with the company. Consent to the processing of personal data is free, informed, unambiguous and unconditional.
The reason for the processing of personal data is:
a) the performance of a contract between you and the company (in accordance with Article 6(1)(b) of the GDPR)
b) the legitimate interest of the company, in particular for the provision of direct marketing, for fraud prevention or to ensure the security of the IT system network and information (in accordance with Article 6(1)(f) of the GDPR).
The company processes personal data with the utmost care and attention to its security. Personal data is protected in accordance with the GDPR, the Personal Data Processing Act and other related regulations. The Company has taken all appropriate technical and organizational measures to secure the data. Personal data is processed only by trained personnel who are bound by confidentiality and secrecy.
The Company will keep personal data for as long as is strictly necessary, whereby the following is considered strictly necessary:
- the time to resolve a person's request or answer a person's query, or
- [5] years in the case of interest in sending newsletters, or
- the time necessary for the purposes of performance under a contract, or
- the duration of the Company's legitimate interest.
If another legal regulation obliges the Company to keep personal data of persons for a certain period of time, the Company is obliged to keep such data for the specified period of time. A person may withdraw his or her consent to the processing of personal data at any time, either in person at the Company's registered office, or electronically by email to info@avileri.cz, or in writing to the Company's registered office. Withdrawal of consent does not affect the lawfulness of the processing of personal data that was processed prior to the withdrawal of consent.
The personal data can be accessed exclusively by the company and, where applicable, its employees.
In addition to the company, the necessary (minimum) personal data can also be accessed by the company's suppliers, to whom the data is passed on for the fulfilment of the company's obligations.
The company is not entitled to pass on personal information to other processors - the company's business partners involved in the operation of the website, as well as to the company's collaborators involved in the preparation and dispatch of newsletters or the handling of requests and enquiries from individuals. To third parties beyond those mentioned above, the personal data of customers is only passed on to the extent necessary to fulfil the purpose of the contract between the company and the person - e.g. name, surname and delivery address in the case of delivery of goods by a shipping company directly to the customer, etc. the company is also entitled to pass on personal data to its legal, accounting and tax advisors, but only to the extent necessary.
A person has the right to decide on the treatment of his or her personal data. The person may exercise his/her rights in person at the company's registered office, or electronically by e-mail to jillova@avileri.cz, or in writing to the address of the company's registered office.
The person has the right in connection with the processing of his/her personal data:
- to request from the company a disclosure of what personal data are processed and other information regarding the processing of personal data pursuant to Art. 15 of the GDPR Regulation,
- to rectify and complete the personal data processed, if the data is incorrect, incomplete or inaccurate,
- to have the personal data processed erased, subject to the conditions set out in Art. 17 of the GDPR Regulation,
- to request access to personal data,
- to the portability of personal data in the event of a person's request for the transfer of personal data to another entity,
- to restrict the processing of personal data pursuant to Article 18 of the GDPR Regulation,
- to object to the processing of personal data in the event that the person considers that the interests and his/her fundamental rights and freedoms regarding the protection of personal data outweigh the legitimate interests of the company or a third party. If an objection is lodged, the company undertakes not to process the personal data of the person any further unless compelling reasons justifying further processing of the personal data are demonstrated. In the case of processing of personal data for marketing purposes, the person has the right to object at any time without further action.
- lodge a complaint with a supervisory authority if the person believes that the processing of personal data by the company has violated the law. In the Czech Republic, such a supervisory authority is the Office for Personal Data Protection, identification number 708 37 627, with registered office at Pplk. Sochora 27, 170 00 Prague 7, data box ID qkbaa2n.
The processing of personal data does not involve automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR.
This Privacy Policy takes effect on 02.01.2024.
AVILERI s.r.o.
