Personal Data Protection Conditions

Personal Data Protection Conditions

Manager Personal Data Pursuant to Article 4 of Section 7 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of this data (hereinafter "GDPR") is Balkanova, s.r.o. 28531299 (hereinafter referred to as the “administrator”).

The administrator can be contacted at Balkanova, s.r.o., Karoliny Světlá 321/23, 110 00 Prague 1 - Old Town or on the phone number 776 332 522 or at the e -mail address info@balkanova.eco.

The administrator did not appoint a personal data protection commissioner.

When ordering from an online store of the administrator, the administrator is required to provide the buyer's personal data that are necessary for a successful order, namely name and surname, address, e -mail address, telephone number. The Buyer is not obliged to provide personal data, but it is not possible to conclude the contract or fulfill it by the controller without providing personal data.

The purpose The processing of personal data is the processing of the Buyer's order and the exercise of rights and obligations arising from the Purchase Agreement concluded between the Administrator as the Seller and the Buyer. The purpose of the processing of personal data is to keep the user account if the buyer has made registration in the administrator's online store. The purpose of the processing of personal data is to send commercial communications and offer trade and services. By the statutory reason For the processing of personal data, it is necessary to fulfill the contract pursuant to Article 6 (1) (a). b) GDPR, necessity for fulfilling the legal obligation of the administrator pursuant to Article 6 (1) (a). (c) GDPR and legitimate interest of the administrator pursuant to Article 6 (1) (a). f) GDPR. The legitimate interest of the controller is the processing of personal data for direct marketing purposes.

The administrator does not decide to be based on automated processing within the meaning of Article 22 GDPR.

The controller shall save the Buyer's personal data for the period necessary to exercise the rights and obligations arising from the Purchase Agreement concluded between the Administrator as the Seller and the Buyer and the application of claims from this Agreement or for the period of necessary obligations under applicable legislation, such as the Accounting Act. If any legal regulation does not require a longer archiving period after the administrator, the administrator shall save personal data for a maximum of 10 years. Personal data on customer account will be processed until the buyer cancels it.

The processing of personal data may be carried out by the processor with which the controller has a contract on the processing of personal data.

Personal data recipients may be carriers of goods ordered from the administrator, persons providing the service of the service of the online store and persons for administrators of marketing services.

The administrator does not intend to transfer personal data to a third country (to a country outside the EU) or an international organization.

Under the conditions set out in GDPR, the buyer has the right to access his / her personal data pursuant to Article 15 of the GDPR, the right to correct personal data pursuant to Article 16 of GDPR, the right to delete personal data pursuant to Article 17 of GDPR, or the right to restraint processing pursuant to Article 18 of GDPR. The buyer has the right to object to processing pursuant to Article 21 of GDPR.

The Buyer has the right to file a complaint with the Office for Personal Data Protection in the event that his / her right to the protection of personal data has been violated.

The administrator declares that it has introduced suitable technical and organizational measures to ensure personal data protection. The administrator has taken technical measures to secure data storage and personal data storage in paper form (especially password security, antivirus programs, data backups, lockable cabinets and lockable offices in security with security). The administrator declares that only the persons authorized are accessible to personal data.

By sending an order from the online store, the Administrator confirms that he has become acquainted with these conditions of personal data protection and that he accepts it in the entire extent.

These personal data protection conditions come into effect on 1.8.2018.