Personal Data Controller Stoklasa Textile Haberdashery Ltd. with its registered office at Záhumenní 22, Kravaře - Kouty, ID 25877666 (hereinafter referred to as "Controller") provides, in accordance with Article 12 et seq. regulation of the data subjects listed below on the processing of personal data.
Data Subject - a natural person whose personal data is processed by an administrator (e.g., e-shop visitors, registered e-shop customers, loyalty program members, employees).
If necessary, data subjects may contact the Controller at the following contacts:
The processing of personal data is done especially for the purpose of registering e-shop customers, fulfilling the contract, registering bonus programs for merchants and marketing purposes (sending electronic newsletters with news and special offers, sending a birthday / holiday wish with a discount coupon, online ads, customer reviews of e-shop).
The processing of personal data based on the legal basis of the processing referred to in Article 6 (1) f) The Controller strictly observes the defense of its legal claims in the performance of tasks related to the sale of goods at the e-shop www.stoklasa.cz and its language mutations. The processing of personal data based on the legitimate interest of the controller for direct marketing purposes is used to inform our customers about news, events and good tips through a newsletter or text message (pursuant to Act No. 480/2004 Coll., On Some Information Society Services, §7, paragraphs 2 and 3). The processing of personal data on the basis of the data subject's consent (eg date of birth) is done solely for the purpose of the expressed consent with which the data subject is always informed prior to his / her grant.
EU GDPR Lawfulness of processing in Art. 6 (1) 1a, 1b a 1f.
The Collector processes the following categories of personal information:
The controller intends to pass personal data to third countries and international organizations (foreign customers are handled by managers for foreign countries, we use external advertising systems that can be based abroad for marketing purposes). Information about the protection of personal data, the existence of appropriate safeguards and places of access to personal data will be provided by the controller on the above mentioned contacts.
Personal data are stored for as long as the relevant generally binding legal regulations lay down if such processing is imposed or allowed. In other cases, the period of storage of personal data is set as the time required to exercise the rights or legitimate interests of the data subject, the controller or third parties or as the time required to defend the legal rights of the controller, third parties. The period of personal data storage also sets out the relevant requirements of European Union rules, particularly in the area of subsidies. When determining the length of time for the storage of personal data, all aspects of that processing and the interests of the data subject are taken into account. We will manage your personal data obtained from our data subject's consent for 10 years or until your consent is withdrawn.
In cases where the processing of personal data is based on the fulfillment of legal obligations and their provision is a legal requirement, the data subject is obliged to provide personal data. In the case of non-disclosure of personal data, the statutory requirements can not be fulfilled, which may lead to the failure of the performed actions. If the provision of personal data is a contractual requirement or a requirement to be included in the contract (and is not a fulfillment of legal obligations), in the case of refusal, personal data may be provided by the data subject to a situation where the contract can not be concluded. However, the trustee does not make the conclusion of a contract subject to the provision of personal data by the data subject that is not necessary for the proper conclusion of the contract.
There is no automated decision making in the processing of personal data. Profiling is not used by the controller.
The controller does not process personal data directly communicated by the data subject for purposes other than those communicated to the data subject at the time of handover. If the controller intends to process such personal data for other purposes, it will provide the data subject with information about that other purpose, as well as other information necessary to exercise his / her rights, before commencing processing.
The data subject also has the following rights: