I. Basic provisions

 

1. The controller of personal data pursuant to Article 6 of Regulation 2016/679 of the EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is Lenka Doležalová, ID No.: 74408143, with its registered office at Železný Brod 49, 468 22 Železný Brod - Hrubá Horka (hereinafter: "Controller").

 

2. Personal data Controller

Address: Tržní 833/10, 46001 Liberec - Liberec I-Staré Město

e-mail: tantraliberec@seznam.cz, telephone: +420 733 607 213

 

3. Personal data (hereinafter:"Personal Data") means any information about an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

4. The Controller does not have a designated personal data management officer.

 

II. Reason for processing personal data

 

1. The lawful reason for the processing of personal data is the performance of a contract between you and the Controller pursuant to Article 6(1)(b) of the GDPR (hereinafter referred to as "performance of the contract") - the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of measures taken prior to the conclusion of the contract at the request of the data subject.

 

2. There is no automatic individual decision-making by the Controller within the meaning of Article 22 GDPR.

 

III. Purpose of processing, categories and sources of personal data

 

Legal basis: performance of the contract

Purpose: to fulfill an order or respond to a request sent via the contact form

Data: personal data of the customer (contact details)

Data source: contact form, order

 

IV. Data retention period

 

1. The Controller stores personal data

 

• in the form only for the purpose of answering or processing your enquiry or request /only for the duration of the contract negotiations/ for a maximum of 3 years from your enquiry, unless you consent to further processing.

• In the case of an order, for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the data controller and to enforce claims arising from that contractual relationship (for a period of 15 years from the end of the contractual relationship).

 

2. At the end of the retention period, the Controller shall delete the personal data.

 

V. Recipients of personal data

 

1. The recipients of personal data are:

 

• H-Vision s.r.o., company ID: 09576428, is the provider of the website operation services and other services related to the website operation.

 

• The personal data of the Data Subject may be communicated to the provider of delivery services for the purposes of the proper execution of the contract, as well as to persons who provide legal, accounting and IT services to the data Controller in order to ensure the proper execution of the obligations laid down by generally binding legal regulations. The data Controller does not intend to transfer the personal data of the data subject to third countries, international organizations or third parties other than those mentioned above.

 

VI. Other Arrangements

 

1. You have the right to access your personal data

 

2. You have the right at any time to update, correct or amend your personal data or to restrict the processing of your personal data.

 

3. You have the right to object to the processing of your personal data.

 

4. You also have the right to lodge a complaint with the Office for the Protection of Personal Data if you believe that your right to the protection of personal data has been violated.

 

VII. Personal Data Security Terms and Conditions

 

1. The Controller declares that it has taken all appropriate technical and organizational measures to protect personal data.

 

2. The Controller has taken technical measures to secure data storage and the storage of personal data in paper form, in particular passwords, antivirus, backups, locking.

 

3. The Controller declares that only persons authorised by the Controller have access to personal data.

 

VIII. Final Provisions

 

1. By submitting an order via the online order form or an enquiry via the online enquiry form, you confirm that you are aware of and accept this Privacy Policy in its entirety.

 

2. The Controller reserves the right to modify these conditions. It will publish the new version of the Privacy Policy on its website.

 

These terms and conditions take effect on 1 January 2024