The data controller of personal information about you is dott.ssa Barbora Flora Tomanova, a natural person with registered office at Tyrsova 170, 572 01 Policka, Czech Republic, identification number 07154429, registered in the Czech Trade Register, (hereinafter the “Administrator”). A representative of the Administrator hasn’t been appointed.

This Privacy Policy (the “Policy”) has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679, on the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data (the “Regulation”) and in accordance to the Act No. 110/2019 Coll., on Processing of Personal Data. This Policy is intended to clarify how the personal data of natural persons, which are collected by or provided to the Administrator, are processed.

Personal data means any information relating to an identified or identifiable natural person (the “Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Please read the following carefully to understand how your personal data will be used.

PURPOSE OF PERSONAL DATA PROCESSING

Processing of your personal data is necessary to fulfill the contract between the Data Subject and the Administrator. Without providing your personal data it is not possible to conclude the contract and therefore fulfill it by the Administrator.

WHAT PERSONAL DATA IS PROCESSED?

The Administrator processes personal data provided by the Data Subject only to the extent necessary for the fulfillment of the given purpose of processing. These data include:

Your first name, last name, delivery address – are processed on the legal basis of Act No. 563/1991 Coll., on Accounting. This processing of personal data is necessary for compliance with a legal obligation to which the Administrator is subject in the sense of Article 6 paragraph 1 point (c) of the Regulation.

Your e-mail address – is processed for the purpose of communication between you and the Administrator prior to entering into a contract, in the course of finalization of the contract and for the purpose of communication in case of a complaint or repairs of goods.

Your phone number – is processed for the purpose of communication in case of a complaint or repairs of goods. For the fulfillment of the contract, the next recipient of your phone number is the delivery company, which is also given your name, surname, and address.

Your bank account number – is processed for the eventual refund of the goods in the case of a justified warranty claim.

LEGAL BASIS FOR PERSONAL DATA PROCESSING

The legal basis for the processing of your personal data by the Administrator is the fulfillment of the contract with a data subject in the sense of Article 6 paragraph 1 point (b) of the Regulation, and compliance with a legal obligation to which the Administrator is subject in the sense of Article 6 paragraph 1 point (c) of the Regulation. There is no automated individual decision-making, including profiling, in the sense of Article 22 of the Regulation.

YOUR RIGHTS

You do not have an obligation to provide personal data. Providing your personal data is a necessary requirement for the conclusion of the contract and with out providing your personal data it is not possible to conclude the contract and therefore fulfill it by the Administrator. Under the conditions set out by the Regulation, you have a number of rights over your personal information, which are:

the right to request information about the processing of your personal data,

the right to obtain access to a copy of the personal data held about you,

the right to ask for incorrect, inaccurate or incomplete personal data to be corrected,

the right to request that personal data be erased when it’s no longer needed or if processing it is unlawful,

the right to request the restriction of the processing of your personal data in specific cases,

the right to object to the processing of your personal data,

the right to data portability.

If you believe that the processing of your personal data has violated the Regulation, you have, among other things, the right to file a complaint with the supervisory authority. In the Czech Republic, this authority is the Office for Personal Data Protection (https://www.uoou.cz/en/), with headquarters at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

OTHER RECIPIENTS OF PERSONAL DATA

Other recipients of your personal information are the accountants, IT administrators, and companies providing the delivery of the goods. In addition, the recipients of your personal data for the purpose of complying with legal obligations may be financial authorities or other competent authorities in cases where the Administrator is bound to comply with the legislation.

STORAGE PERIOD OF PERSONAL DATA

Personal data is retained for a period of time resulting from tax and accounting regulations and for the period necessary to assert legal claims, typically for five (5) years. However, given the circumstances, certain personal data will be processed for a longer or shorter period of time. In the case when you consent to the processing of your personal data by submitting your e-mail address through the dedicated form on the website or by ticking the newsletter subscription box when completing your order, you consent to the storage of your e-mail address for an indefinite period of time or until you revoke your consent. This personal information will not be disclosed to third parties. After the personal data retention period has expired, the Administrator will delete all of your personal information.

TERMS OF PERSONAL DATA SECURITY

The Administrator declares that all appropriate technical and organizational measures to protect your personal data have been taken. All information provided by you to the Administrator online is stored on secure servers, encrypted and transmitted in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the Website. The Administrator also declares that only personally authorized persons have access to your personal data.

CHANGES TO THE PRIVACY POLICY

The Administrator is entitled to change this Policy anytime. The new version of the Policy will be posted on this page and, where appropriate, notified to you by the e-mail you have provided. The current version of the Policy is effective from 15th August 2024.

FINAL PROVISIONS

By submitting an order or by subscribing to the newsletter, you acknowledge that you are familiar with the Policy and accept it in its entirety. The Administrator does not intend to further process your personal data for a purpose other than that for which the personal data were collected.

CONTACT

If you have any questions, comments or requests regarding this Policy, please contact the Administrator who will respond to your requests without undue delay and at least within 30 days. Contact details for delivery: Atelier DEVA DE SAAT, Tyrsova 170, 572 01 Policka, CZ / for electronic communication: atelier@devadesaat.com / by phone: +420 605 301 094.