We comply with the privacy policy
This Privacy Policy (GDPR) is issued by the controller so that you are sufficiently informed about what personal data the controller processes about you, for what purpose, for how long, who will have access to your personal data and what your rights are. This privacy policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or consent.
- Data Controller
1.1 The personal data controller, První exportní / importní s.r.o., with registered office at Rumunská 14/27, Vinohrady, 120 00 Prague 2, ID No.: 27621499, VAT No.: CZ27621499, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 119499 (hereinafter referred to as the “controller”/”processor”/”company”) declares that all data processed by the controller is strictly confidential. The Controller handles them in accordance with national and European Union legislation in force in the field of personal data protection.
Contact details of the data controller:
První exportní / importní s.r.o., Rumunská 27, Vinohrady, 120 00 Prague 2,
Phone: +420 603 333 309, +420 777 333 309; E-mail: sales@giftsservice.com
1.2 The controller collects, stores and uses your personal data in accordance with Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the “Personal Data Processing Act”), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”). The individual purposes for which the controller processes personal data are defined below.
1.3 The controller also collects this personal data through its website at www.giftsservice.com (the “Website”).
- Collection of data, data processed and purposes of processing personal data
2.1 Where we have obtained consent from a data subject to process personal data, this is for one of the following purposes:
request for goods or services
ordering goods or services
using the website
2.2 The controller is entitled to process the following personal data. Personal data is any information relating to a natural person that První exportní / importní s.r.o. is able to identify. If there is any change to your personal data, please inform us.
2.3 Personal data includes, but is not limited to:
Identification data, such as: title, name and surname, company name, birth number or date of birth, registration number, tax identification number, permanent address, registered office or place of business address, billing address, bank account details;
contact details such as: home address (or delivery address), telephone number, email address, social networking addresses;
other data, such as information obtained through cookies, IP address (network identifier) including browser type, device and operating system, time and number of accesses to the website and other similar information.
2.4 Purposes of the processing of personal data
Performance of a contractual relationship means: the relationship between the data subject and the controller arising from an order, registration, contract, etc;
Sending commercial communications and offering products and services means: sending commercial offers, by electronic mail (e-mail), by post or by telephone call
Accounting and tax purposes means: accounting records within the meaning of accounting and tax legislation
Personnel, payroll means: conclusion of employment contracts, processing of wages, social and health insurance payments in accordance with Act No. 262/2006 Coll., Labour Code, No. 582/1991 Coll., on the organisation and implementation of social security, No. 48/1997 Coll., on public health insurance and on amendment and supplementation of certain related acts;
Statistical purposes means: anonymized survey of website traffic, as well as monitoring of the number of page views, time spent on the website, type of device from which you access the website. We collect the data in order to improve the services we provide and to offer relevant content to our clients;
Display advertising means: displaying advertisements on the website based on statistically determined customer preferences;
Legitimate interest means: effective defence in the event of a dispute. Legitimate interest also means processing for fraud prevention purposes (e.g. assessing the risk of entering into a contract), direct marketing (e.g. offering relevant services to existing customers), transfer of personal data within the group of companies for internal administrative purposes, notification of criminal offences and transfer of personal data to the competent authority, ensuring network and information security. This list is only indicative;
Fulfilling other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, etc.
- Management and processing of personal data
3.1 We process personal data for the period necessary to ensure all rights and obligations arising from the mutual legal transaction, at least for the period of order processing, execution of the transaction, service provision, etc., as well as for the period for which the data subject has given consent to the controller, if applicable. In the event of revocation, the lawfulness of the processing of personal data prior to the revocation of consent shall not be affected. Otherwise, the processing period results from the purpose for which the personal data are processed or is determined by legal regulations.
3.2 The personal data of the subject are processed by the controller in electronic form by automated means or in paper form by non-automated means. The controller is entitled to process certain information in an automated manner, for example, to create statistical information on website traffic.
3.3 All personal data collected from customers is used exclusively for the internal use of the company. To the extent necessary for the performance of the contract or other obligations, we are also entitled to transfer your personal data to other parties, such as carriers, payment institutions, government authorities, or other parties involved in the performance of the contract or our obligations.
- Rights of the data subject
4.1 As a data subject, you have the following rights under the law, which you can exercise at any time. These are:
4.1.1 The right of access to personal data, under which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is determined by Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information.
4.1.2 Right to rectification or erasure of personal data or restriction of processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If the personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not want to request the erasure of personal data, but only to temporarily restrict its processing, you can request the restriction of processing.
4.1.3 The right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;
4.1.4 The right to contact the Data Protection Authority if you are in doubt about compliance with the obligations relating to the processing of personal data;
4.1.5 The right to data portability, i.e. the right to obtain the personal data relating to the data subject that he or she has provided to the controller in a structured, commonly used and machine-readable format, see Article 20 GDPR for more details;
4.1.6 The right to object to the processing of personal data processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing which overrides the data subject’s interests, rights or freedoms.
- Information and questions
5.1 Data subjects who have any questions or requests concerning the processing of personal data by the Company or who are unclear about this information may contact us by e-mail: sales@giftsservice.com or in writing at První exportní/importní s.r.o., Rumunská 27, 120 00 Prague 2.
5.2 The data subject will receive a reply within the statutory 30-day period. Each request must include an unambiguous verification of the identity of the person who sent the request (e.g. by a certified signature) in order to prove that he/she is the subject of the requested data. In the event that your request cannot be unambiguously verified, a subsequent face-to-face meeting will be required to verify the identity of the inquirer and then provide answers to your questions.
This Privacy Policy (GDPR) is valid and effective as of May 25, 2018.
