Privacy Policy

In the context of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (“GDPR”), which is directly applicable from 25. May 2018,

Kubias as

IČO: 24768171, with its registered office at Světická 1114/6, Prague 10, postal code 10000, entered in the Commercial Register kept by the Municipal Court in, under file no. zn. (hereinafter referred to as the “Administrator”),

processes the personal data provided by you in accordance with the protection principles set out below.

I. What personal data is processed by the administrator and how?

1. The controller only processes the personal data that is provided to you as data subjects, in accordance with the applicable legal regulations and with the protection principles stated in this document, which result directly from them.

2. If you use the services we offer, purchase our products or provide information by filling out any of the forms on the website, all in person, by phone, in writing, by e-mail or other means of communication, you may be asked by the administrator to provide the following personal information:

· Name and surname / business name

· IČO, DIČ, provided that you are an entrepreneur

· Permanent residence address, other address (eg delivery), registered office

· Telephone number, e-mail

· Website address

· birthdate.

II. The method of personal data processing by the administrator and the place where your personal data is stored

1. The personal data provided by you are processed automatically by the administrator in electronic form and manually by the company’s employees.

2. The personal data provided by you are stored on the server, in the economic information system and in the e-shop system.

III. For what purpose does the controller process the collected personal data?

1. The personal data provided by you will only be processed to manage your online purchase or order some service we offer, specifically to process your orders and possible return of goods and money through our online services and to send notifications of delivery status or any problems with delivery of your goods, namely in accordance with a validly concluded purchase contract with you as a contracting party. The legal title (authorization) of the processing of personal data provided by you is therefore the fulfillment of contractual obligations from the contracts concluded by you. For this purpose, the provision of your personal data is therefore completely voluntary, but also necessary for the conclusion of the contract and the provision of our services or delivery of goods offered by the administrator. It can also be, for example, a contract concluded orally, by phone or by filling in and sending the order form on the administrator’s website and his subsequent confirmation of the order. For this purpose, the administrator processes personal data for the duration of the contractual relationship between you. After the termination of the contractual relationship, some data are then stored for the purpose of fulfilling legal obligations or for the purposes of legitimate interest, as described below.

2. Data processing to fulfill the administrator’s legal obligations: The administrator has obligations arising from applicable legislation, in particular in the areas of accounting, tax regulations and obligations arising from anti-money laundering measures. The period for which this data is processed is determined directly by the relevant legal regulations.

3. Processing of personal data for the purposes of the legitimate interests of the controller or the interests of a third party: The legitimate interest is the protection and subsequent proving of the rights and legal claims of the controller, especially from concluded contracts or damage. The data provided by you shall be kept in accordance with these legitimate interests for a maximum period of 5 years after the termination of the contractual relationship or since the last contact, if no contract was concluded, due to the length of limitation periods and taking into account that any claim Your administrator may not use your name, surname and e-mail address to send you a business message in order to keep you informed of events, services, products, publications that you might be interested. You may refuse such processing for the purpose of sending commercial communications at any time by exercising your right under Art. VI. Para. 1 letter h) of this document. The administrator never provides, sells or exchanges your data with third parties for marketing purposes

4. Processing of personal data on the basis of your consent: If you give your consent to the administrator, the administrator may process your personal data to send you an offer of goods / services and newsletters. Your consent will be required if you are not a customer of the administrator. Before you give your consent, the administrator will inform you about what data and for what specific purpose of processing your consent will apply. You can revoke your consent at any time. However, if the administrator processes some of the personal data provided by you on the basis of another legal title (see paragraphs 1 – 3 above), he will process personal data for these purposes even after revoking your consent, because consent is not required for such specific purposes.

IV. Who has access to your personal data?

1. The personal data provided by you can be further passed on to our external cooperating entities, which specialize in the given areas, and Kubias as could thus provide you with professional services to the maximum extent possible. These external processors can be:

• IT company that takes care of the network, maintains the system, etc.,

• the company that manages the e-shop for the administrator, or other providers of data storage and software applications,

• a printer that prints and sends letters to customers for the administrator,

• carriers providing consignments

• payment service providers in connection with the acceptance of cards for non-cash transactions

• cooperating law firm and tax advisor

• companies providing corporate systems (economic information system, marketing system, e-shop)

2. The controller has written processing agreements with all these processors, which provide additional protection for the processing of personal data provided by you.

3.Personal data will also be made available to the relevant administrative authorities if the administrator is required to do so by law (especially in the case of an inspection in which the authority is entitled to require the submission of personal data).

V. For how long does the administrator process your personal data?

The personal data provided by you will be processed only for the time strictly necessary to achieve and fulfill the purpose of contracts and performance of services offered by the administrator or for the time strictly necessary to fulfill archiving obligations under applicable legislation (eg Accounting Act, Value Added Tax Act, etc.). ).

VI.What rights can you exercise regarding the processing of personal data?

1. In connection with the processing of personal data provided by you, the following rights may be exercised under the GDPR Regulation:

and. the right of access to personal data

b. the right to correct personal data – the right to correct inaccurate personal data or to supplement incomplete personal data.

C. the right to delete personal data – the so-called the right to be forgotten. In accordance with the reasons set out in Art. 17 of the GDPR Regulation, you have the right to delete your personal data.

d. the right to restrict the processing of personal data – the right to request for the reasons stated in Art. 18 of the GDPR Regulation restrictions on the processing of personal data provided by you.

E. the right to object to the processing of personal data – in cases where your personal data is processed for the purpose of legitimate interests, it is possible to object to such processing if the legitimate interest of the controller does not prevail over your interests. If direct marketing is a legitimate interest, then raising an objection always results in the termination of further processing for direct marketing purposes.

F. the right to lodge a complaint against the processing of personal data with the Office for Personal Data Protection.

G. the right to the transferability of personal data – the right to obtain under the conditions specified in Art. 20 of the GDPR Regulation and transfer their personal data to another controller.

2. If you have any questions regarding the processing of personal data, please send your question to the following e-mail address: [email protected]