Privacy policy
I. Basic provisions
- EVmate s.r.o., ID No. 17457661 with registered office at Cílkova 865/11, 142 00 Praha 4, Czech Republic, registered in the Commercial Register at the Municipal Court in Prague, section C, entry 101498 (hereinafter only: “controller”), is the data controller pursuant to art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter only: "GDPR") is.
- The data controller's contact details are:
Address: Cílkova 865/11, 142 00 Praha 4, Czech Republic
Email: sales@evmate.eu
Phone: +420 724 478 686 - Under personal data, all information relating to an identified or identifiable physical person is understood; an identifiable physical person is a physical person that can be identified directly or indirectly, in particular by reference to a specific identifier, for example the name, an identification number, location data, a network identifier or one or more special elements of the physical, physiological, genetic, psychological, economic, cultural or social identity of this physical person.
- The administrator has not appointed a data protection officer.
II. Sources and categories of processed personal data
- The data controller processes personal data that you provided to him or personal data that the controller has received on the basis of the fulfilment of your order.
o first and last name
o email address
o postal address
o telephone number
- The data controller processes your identification and contact details and the data necessary for the fulfilment of the contract.
III. Legal basis and purpose of processing personal data
- The legal basis for the processing of personal data is
o the fulfilment of the contract between you and the data controller in accordance with art. 6 para. 1 point b) GDPR,
o the fulfilment of the contractual obligation of the data controller according to art. 6 para. 1 point c) GDPR,
o the legitimate interest of the data controller in offering direct marketing (in particular for the sending of business communication and newsletters) in accordance with art. 6 para. 1 point f) GDPR,
your consent to the processing for the purpose of offering direct marketing (in particular for the sending of business communication and newsletters) in accordance with art. 1 point a) GDPR in conjunction with § 7 para. 2 act no.
o 480/2004 Coll., about some services of the information society, in the case that no goods or services have been ordered.
- The purpose of processing personal data is
o the completion of your order and the exercise of rights and obligations resulting from the contractual relationship between you and the data controller; when placing an order, your personal data necessary for the successful processing of the order are required (name and address, contact), the provision of personal data is a necessary requirement for the conclusion and the fulfilment of the contract, without the provision of personal data, the contract cannot be completed or fulfilled by the controller,
o the fulfilment of legal obligations towards the state,
o the sending of business communication and performing other marketing activities.
- On the part of the data controller, there is no automatic individual decision-making within the meaning of art. 22 GDPR
IV. Data retention period
- The data controller stores the personal data
for the time period necessary for the exercise of the rights and obligations resulting from the contractual relationship between you and the controller and for the raising of claims resulting from this contractual
o relationship (for a period of 15 years as of the end of the contractual relationship).
o for the time period until the consent to the processing of the personal data for marketing purposes has been revoked, at most for 5 years, provided that the personal data is processed on the basis of your consent.
- After the retention period of the personal data has expired, the data controller deletes the personal data.
V. Recipients of personal data (sub-suppliers of the administrator)
- Recipients of personal data are persons who
o are involved in the delivery of the goods/services / the implementation of payments on the basis of the contract,
o ensure the operation of the e-shop (TwoDo s.r.o.) and other services in connection with the operation of the e-shop,
o provide marketing services.
- The controller does not intend to transfer personal data to a third country (a country outside the EU) or to an international organization. The recipients of the personal data in third countries are providers of mailing services / cloud services.
VI. Processors of personal data
- The processing of personal data is carried out by the controller, however the following processors can also process the personal data on his behalf:
o providers of processing software services and applications, which the administrator does not employ at the moment.
VII. Your rights
- Under the conditions set out in the GDPR, you have
o the right to access your personal data in accordance with art. 15 GDPR,
o the right to change your personal data in accordance with art. 16 GDPR, respectively the right to a limitation of processing in accordance with art. 18 GDPR,
o the right to delete personal data in accordance with art. 17 GDPR,
o the right to object against the processing in accordance with art. 21 GDPR,
o the right to data portability in accordance with art. 20 GDPR and
o the right to revoke your consent to the processing in writing to the postal address or electronically to the email of the data controller listed in art. III.
You also have the right to submit a complaint at the Office for the Protection of Personal Data (Úřad pro ochranu osobních údajů), if you believe that your right to the protection of your personal data has been violated, or to appeal to a court.
VIII. Conditions for the protection of personal data
- The data controller declares that he has taken all suitaxble technical and organizational precautions to secure the personal data.
- The controller has taken technical measures in order to secure the data storage units and the storage locations of personal data in written form, particularly to safeguard the (electronic) data storage locations with a password and coded communication in order to secure authorized access as well as operational measures to secure documents in written form against theft, loss or damage.
- The administrator declares that only authorized persons have access to the personal data.
IX. Final provisions
- By submitting the order form in the online shop, you confirm that you are familiar with the conditions of personal data protection and that you accept them in their entirety.
- By accepting the consent in the order form, you agree to these conditions. By accepting the consent, you confirm that you are familiar with the conditions of personal data protection and that you accept them in their entirety.
- The data controller is entitled to change these conditions. In this case, he will publish the new version of the conditions of personal data protection on his website.
These conditions become effective on February 1, 2020.