Privacy Policy and Processing of Personal Data

 

I. Basic Provisions

The controller of personal data is the DMO Lužické a Žitavské hory, z.s., with registered office at Dolní Prysk 17, 471 15 Prysk, IČO (ID No.) 07195371, registered in the Commercial Register kept at the Regional Court in Ústí nad Labem, L 1139, and as the controller we process your personal data.

 

II. Sources and Categories of Personal Data Processed

a) The controller processes the personal data you provide yourself. If you order goods or services, we need data from you that is necessary for the performance of the service or delivery of the service. This mainly includes your name, delivery address, telephone number, and email address.

b) If you provide personal data of third parties, it is your responsibility to inform the person concerned and to secure their consent to this Privacy Policy.

c) Personal data that the controller processes automatically when you visit the website. It may collect information such as your IP address, the date and time you accessed our website, information about your internet browser, operating system, or your language settings. We may also process information about your behaviour on our website, e.g. which links you visit on our website, and which products are displayed to you. However, for your maximum privacy, information about your behaviour on the website is anonymised and therefore we are unable to attribute it to a specific user, i.e. a specific person. If you access our website from a mobile phone or similar device, we may also process information about your mobile device (data about your mobile phone, possible records of application failures, etc.) We also automatically process cookies. You probably allowed their use at the time of your first visit.

 

III. Lawful Reason and Purpose for Processing Personal Data

Your personal data is processed by the controller for the following purposes:

• Marketing: if you subscribe to our newsletter, your email address will be used to send you information about the region. You can unsubscribe from the newsletter at any time.
• Purchase of goods and services: first and foremost, we process your personal data in order to properly process your enquiry or order. If any problems arise, your personal data allows us to determine who we can contact.
• Customer care: if you contact us with a query/problem, we need to process your data in order to answer/resolve it. In some cases, personal data may also be passed on to third parties (e.g. carriers of goods).
• Improving our services: by using your web behaviour history, we can provide more relevant offers of additional information and services. We can also use Google Analytics and Facebook Analytics to optimise elements of the website.
• Exercise of rights and legal claims and control by public authorities: we may also process your personal data because we need it to exercise our rights and legal claims (e.g. if you have an outstanding debt to us). We may also process your personal data because we require it for the purposes of inspections by public authorities and for other similarly compelling reasons.

The lawful reason for processing personal data is:

• Performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR,
• The legitimate interest of the controller in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) GDPR,
• Your consent to processing for the purpose of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services in the absence of an order for goods or services.

 

IV. Transfer of Personal Data to Third Parties

We transfer your personal data to third parties in the following cases:

• Delivery of goods: we pass on the information you provide, such as your name, surname, and delivery address or telephone number, to the carrier so that the carrier can deliver the goods ordered.
• Public authorities: in case of enforcement of our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the law or a public authority (e.g. the Police of the Czech Republic) obliges us to hand over your personal data to them, we are required to do so.

 

V. Data Retention Period

1. The controller keeps your personal data

• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims arising from this contractual relationship (for 10 years from the termination of the contractual relationship)
• for the period until consent to the processing of personal data for marketing purposes is withdrawn, but no longer than 5 years if the personal data is processed on the basis of consent

1. After the expiry of the retention period, the controller will delete the personal data.

 

VI. Your Rights

1. Under the terms of the GDPR, you have

• the right to access your personal data under Article 15 of the GDPR,
• the right to rectification of personal data pursuant to Article 16 GDPR, or restriction of processing pursuant to Article 18 GDPR,
• the right to erasure of personal data pursuant to Article 17 GDPR,
• the right to object to processing under Article 21 GDPR,
• the right to data portability under Article 20 GDPR, and
• the right to withdraw consent to processing in writing or electronically to the address or email of the controller set out in Article III of this Privacy Policy.

  2. Furthermore, you have the right to lodge a complaint with the Data Protection Authority if you believe that your right to data protection has been violated.

 

VII. Personal Data Security Conditions

1. The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data.
2. The controller has taken technical measures to secure data storage and storage of personal data in paper form.
3. The controller declares that only persons authorised by the controller have access to the personal data.

 

VIII. Final Provisions

1. By submitting an order from the online order form, you confirm that you are aware of the terms and conditions of the Privacy Policy and that you accept it in its entirety.
2. You agree to these terms and conditions by ticking the consent box via the online order form. By ticking the consent box, you confirm that you are acquainted with the terms and conditions of the Privacy Policy and that you accept them in their entirety.
3. The controller is entitled to change these conditions. It will publish the new version of the Privacy Policy on its website or send you a new version of the Privacy Policy to the email address you have provided to the controller.

These terms take effect on January 1, 2021.