Personal Data Processing

The company Shopen Group s.r.o. processes your personal data as it is necessary for the fulfillment of the contract with you regarding the sale of goods (or for the implementation of measures taken before the conclusion of such a contract), and also processes your personal data that is necessary for the fulfillment of the public legal obligations of this company.

1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

1. The controller of your personal data is the commercial company Shopen Group s.r.o., with its registered office at Purkyňova 3050a/99a, 612 00 Brno, identification number: 29365252, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 75661 (hereinafter referred to as the "controller").

2. The contact details of the controller are as follows: delivery address Shopen Group s.r.o., Purkyňova 3050/99a, 61200 Brno, e-mail address [email protected].

3. The controller has not appointed a Data Protection Officer.

2. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The legal basis for the processing of your personal data is the fact that this processing is necessary for:

1. the performance of a contract between you and the controller or for the implementation of measures by the controller prior to the conclusion of such a contract within the meaning of Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "the Regulation");

2. compliance with legal obligations to which the controller is subject, within the meaning of Article 6(1)(c) of the Regulation, specifically the fulfillment of obligations imposed on the controller by generally binding legal regulations, in particular Act No. 235/2004 Coll., on Value Added Tax, as amended, Act No. 586/1992 Coll., on Income Taxes, as amended, and Act No. 563/1991 Coll., on Accounting, as amended.

3. PURPOSE OF PERSONAL DATA PROCESSING

1. The purpose of processing your personal data is the performance of the contract between you and the controller, including the delivery of goods and handling of liability claims for defects, or the implementation of measures by the controller before the conclusion of such a contract, and further the fulfillment of related public legal obligations by the controller.

2. There is no automated individual decision-making by the controller within the meaning of Article 22 of the Regulation.

4. RETENTION PERIOD OF PERSONAL DATA

1. Your personal data will be processed for the duration of the effects of the rights and obligations under the contract and for the period necessary for archiving purposes in accordance with the relevant generally binding legal regulations, but no longer than the period stipulated by generally binding legal regulations.

5. OTHER RECIPIENTS OF PERSONAL DATA

1. Other recipients of your personal data will be shipping companies and other persons involved in the delivery of goods or the execution of payments under the purchase agreement, and persons providing technical services for the controller related to the operation of the e-shop, including software operation and data storage. Other recipients of your personal data will be:

• Česká pošta, s. p., ID No. 47114983
• Direct Parcel Distribution CZ s.r.o., ID No. 61329266
• PPL CZ s.r.o., ID No. 25194798
• Uloženka s.r.o., ID No. 24299162
• Zásilkovna s.r.o., ID No. 28408306
• General Logistics Systems Czech Republic s.r.o, ID No. 26087961
• Lenka Bajzová, ID No. 60354313
• Bc. Patrik Chukir, ID No. 09493476
• VSHosting s.r.o., ID No. 61505455
• ABRA Flexi s.r.o., ID No. 28019920
• OLYMPIC s.r.o., ID No. 27480381
• Smartsupp.com, s.r.o., ID No. 03668681

2. Recipients of your personal data processed for the purpose of fulfilling obligations arising from legal regulations may also be financial administration authorities or other competent authorities in cases where this is imposed on the controller by generally binding legal regulations.

3. The controller does not intend to transfer your personal data to a third country (a country outside the EU) or an international organization.

6. RIGHTS OF THE DATA SUBJECT

1. Under the conditions set out in the Regulation, you have the right to request from the controller access to your personal data, the right to rectification or erasure of your personal data, or restriction of its processing, the right to object to the processing of your personal data, and the right to data portability.

2. If you believe that the processing of your personal data has violated or is violating the Regulation, you have, among other things, the right to lodge a complaint with a supervisory authority.

3. You are not obliged to provide personal data. The provision of your personal data is a necessary requirement for the conclusion and performance of the contract, and without the provision of your personal data, it is not possible to conclude the contract or for the controller to perform it.