Processing of Personal Data for Commercial Communications and Marketing Activities
1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
1.1. The controller of your personal data is the company Shopen Group s.r.o., with its registered office at Purkyňova 3050a/99a, 612 00 Brno, identification number: 29365252, registered in the Commercial Register kept by the Regional Court in Brno, Section C, Insert 75661 (hereinafter referred to as the "controller").
1.2. The controller's contact details are as follows: delivery address Shopen Group s.r.o., Křenová 409/52, 60200 Brno, e-mail address [email protected].
1.3. The controller has not appointed a data protection officer.
2. LEGAL BASIS FOR PROCESSING PERSONAL DATA
2.1. The legal basis for the processing of your personal data is your consent given to the controller within the meaning of Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation").
3. PURPOSE OF PROCESSING PERSONAL DATA
3.1. The purpose of processing your personal data is for the controller to send commercial communications and carry out other marketing activities directed at you.
3.2. The controller does not perform automated individual decision-making within the meaning of Article 22 of the Regulation.
4. DATA RETENTION PERIOD
4.1. The period for which your personal data will be stored by the controller is 3 years, but no longer than until you withdraw your consent to the processing of your personal data (for this processing purpose).
5. METHOD OF PROCESSING AND RECIPIENTS OF PERSONAL DATA
5.1. The processing of personal data is carried out automatically using marketing tools, in electronic form, always with a high level of technical, organisational, and personnel security in accordance with legal requirements.
5.2. The processing is carried out mainly by the controller's employees, whereby the controller, based on a personal data processing agreement and in compliance with legal conditions, entrusts the processing of personal data to the following processors:
- Hosting provider – VSHosting s.r.o., ID No. 61505455
5.3. The controller does not intend to transfer your personal data to a third country (a country outside the EU) or an international organisation.
6. RIGHTS OF THE DATA SUBJECT
6.1. Under the conditions set out in the Regulation, you have the right to request access to your personal data from the controller, the right to rectification or erasure of your personal data, or restriction of its processing, the right to object to the processing of your personal data, and the right to data portability.
6.2. You have the right to withdraw your consent to the processing of your personal data given to the controller at any time. However, this does not affect the lawfulness of the processing of your personal data prior to such withdrawal of consent. You can withdraw your consent to the processing of personal data in the following ways: By post to the controller's address or electronically by e-mail.
6.3. If you believe that the processing of your personal data has violated or is violating the Regulation, you have, among other things, the right to lodge a complaint with a supervisory authority.
6.4. You are not obliged to provide personal data. The provision of your personal data is not a statutory or contractual requirement, nor is it a requirement necessary to enter into a contract.
You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling, where it is related to such direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for these purposes.
