In this notice you will find instructions on how we process your personal data in connection with the operation of the online store available at eshop.ewafarna.com (the “online store”).
IDENTIFICATION OF THE ADMINISTRATOR
The administrator of your personal data is Asobi s.r.o., registered office Hrádek 249, 739 97 Hrádek, IČ no: 139 68 777, registered in the Commercial Register kept by the Krajského soud in Ostrava under No. C 87524 (“We”).
CONTACT INFORMATION
You can contact us via email at the email address shop@ewafarna.com, via the contact form available on the pages of the online store or in writing at Hrádek 249, 739 97 Hrádek, Czech Republic.
PURPOSE OF DATA PROCESSING
1. Order processing
Our products can be purchased directly through the online store. Confirmation of your order leads to the conclusion of a purchase contract.
What data about you do we process?
In order to conclude a contract, we need to know your identification data (name, surname, place of residence). To deliver the goods to you, we need to know your delivery data (delivery address). In the course of our contractual relationship, there may be situations in which we need to contact you, so we need to know your contact information (e-mail, telephone).
We need your bank account number in case of return of goods (withdrawal from the contract) and complaints. In this case, we will use your account number for the refund. In the case of payment by card, we do not have access to your card details. You enter your payment card data directly through a secure website managed by PayU.
What authorizes us to process this data?
We will process your personal data due to the need to perform a contract (Article 6(1)(b) of the DPA). We will also process your personal data in order to fulfill our legal obligations (e.g. tax and accounting) (Article 6(1)(c) RODO).
2. Protecting our interests
There may be times when we need to protect our interests. Such a situation may arise especially in the event of a court or other dispute.
What data about you do we process?
If a judicial or other dispute arises between us, we will be entitled to use information about you that we have previously obtained in accordance with the law.
What authorizes us to process this data?
We have a legitimate interest in defending our interests in legal or other disputes (Article 6(1)(f) of the DPA). You have the right to object to the processing of your personal data on the basis of our legitimate interest.
3. Answers to your questions
If you need help with your order, have a question about our products, or have any other questions, you can contact us using the contact form available in the online store or by email.
What data do we process about you?
To process your inquiry, we need to know your email address. This address will be used to send you a response. If you do not provide us with this information, we will not be able to deal with your inquiry. We would also like, in our response, to address you directly, so we would appreciate you sharing your name.
What authorizes us to process this data?
We have a legitimate interest in handling your inquiries (Article 6(1)(f) of the RODO). However, if your inquiry relates to a specific order (e.g., delivery date, return of goods, complaints), we will process your data on the basis of necessity for the performance of the contract (Article 6(1)(b) RODO). You have the right to object to the processing of your personal data on the basis of our legitimate interest.
4. Sending commercial information
We do not like full email inboxes. Therefore, we try to minimize the sending of commercial information. However, sometimes we have such a message for you that we simply have to share it.
What data do we process about you?
If you have made a purchase of goods in the online store and have given your consent with the use of your e-mail address to receive commercial information when creating an order, we will use your e-mail address for this purpose. You may unsubscribe from receiving commercial information at any time. The link to unsubscribe can be found in individual promotional emails.
What authorizes us to process this data?
Because you have purchased our products from us, we have a legitimate interest in informing you about our similar products (Article 6(1)(f) GDPR). You have the right to object to the processing of your personal data on the basis of our legitimate interest.
5. Newsletter
If you have not yet purchased any product from our online store, but want to keep up to date with news or want to learn about products or services from friendly manufacturers, you can sign up to receive our newsletter. You can sign up directly in the online store.
What data do we process about you?
We need to know your email address so that we can send you the newsletter. After you sign up to receive, we will send you a confirmation email. If you have not signed up to receive our newsletter, please unsubscribe by clicking on the unsubscribe link.
What authorizes us to process this data?
We can only send you the newsletter if you have given us your consent to do so (Article 6(1)(a) of the RODO). You can opt out of receiving the newsletter at any time, i.e. withdraw your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal
6. Data analysis and ad targeting
For users of our sites, we want to guarantee the best possible experience. Therefore, we need to collect data about how you use our online store. We also want to measure visits to our online store and target advertising as best we can. For these purposes, we want to use data collected through cookies.
What data do we process about you?
Through cookies, we can process data about your IP address, browser settings, time spent in our online store, your preferences, etc.
What authorizes us to process this data?
We need your consent to use the information obtained through cookies (Article 6(1)(a) of the DPA). You can withdraw this consent at any time in the detailed cookie settings. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.
However, we do not need your consent to use technical cookies to operate our online store.
RECIPIENTS AND CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Your personal data remains primarily with us. However, there may be situations where we need to transfer your data to other companies or individuals because it is necessary to operate our online store.
We may transfer your data to:
- to the operator of the online store platform, i.e. the operator of bartvisions.cz/, NIP: CZ07522282;
- companies engaged in the delivery of goods;
- companies engaged in securing payments;
- mailing service providers;
- marketing agencies;
- attorneys;
- tax advisors and accounting firms;
- authorized public authorities.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
We have no intention of transferring your personal data to countries outside the European Economic Area (EEA), where data protection laws may set lower standards than in the EEA.
DATA RETENTION PERIOD
We will retain your personal data only for the period necessary to fulfill the purpose of processing. If you enter into a sales contract with us, we process your personal data for 11 years from the date the contractual relationship ends. If you contact us only before concluding a contract, we store the data for 4 years. We use data processed on the basis of consent only for the duration of the consent.
In exceptional cases, legal regulations may provide for a longer archiving period, in which case we will keep some of your data for the period provided by the relevant regulations.
YOUR RIGHTS
We process your data in a completely transparent manner. At any time we process your personal data, you may exercise the following rights under the terms of the RODO:
– to obtain confirmation from us as to whether we are processing your personal data and, if so, whether you have the right to access your personal data (right of access),
– to obtain personal data from us in a structured, commonly used and machine-readable format, and the right to have that data transferred to another controller (right to data portability),
– to rectify inaccurate personal data or the right to complete incomplete personal data (right of rectification and completion),
– to request erasure of personal data if:
(a) your personal data is no longer necessary for the purposes of processing,
(b) your consent to their processing has been withdrawn, and the personal data cannot be further processed,
(c) you have objected to the processing of personal data and there are no overriding legitimate grounds for processing,
(d) your personal data has been processed unlawfully, or
(e) the personal data must be erased in order to comply with our legal obligation (right to erasure),
Request for restriction of data processing if:
(a) you deny the veracity of the personal data for the period necessary to verify the veracity of the personal data,
(b) the processing is unlawful and you request that we restrict the use of your personal data instead of deleting it,
(c) we no longer need your personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims, or
(d) an objection has been made to the processing of your personal data, pending a review of whether our legitimate interests outweigh your legitimate interests (right to restrict processing).
You also have the right to object to the processing of your personal data if the personal data is processed for purposes arising from our legitimate interests. If you object, we will not process your personal data until we can demonstrate compelling reasons for the processing that override your interests or rights and freedoms, or for the establishment, exercise or defense of legal claims.
In addition, you have the right to withdraw your consent to the processing of personal data at any time without penalty. You may withdraw your consent by any means by contacting us at the addresses provided in the contacts. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
You also have the right to file a complaint with the relevant supervisory authority if you believe that the processing of your personal data is unlawful. The relevant supervisory authority is the Office for the Protection of Personal Data in the Czech Republic (address: Pplk. Sochora 27, 170 00 Praha 7; e-mail: posta@uoou.cz) or the President of the Office for the Protection of Personal Data in Poland (address: ul. Stawki 2, 00-193 Warsaw; e-mail: kancelaria@uodo.gov.pl).
SECURITY
We use appropriate technical and organizational measures to ensure that your personal data is processed in a manner that ensures its confidentiality and protects it from unauthorized or unlawful processing and from accidental loss, destruction and damage.
FINAL PROVISIONS
This instruction on the processing of your personal data is subject to constant review and may be amended from time to time. The current version is always available on the interent store website.
Updated as of 1.1.2022.