GENERAL DATA PROTECTION REGULATION (GDPR)
Personal data processing and information to the subject
Terms and conditions of personal data protection
I. Basic provisions
Pursuant to Article 4(7) of the Regulation of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”), the personal data controller is French barriques & wine, s.r.o. CIN:17415446 (hereinafter referred to as “the Controller”).
Contact details of the administrator
seat: French barriques & wine s.r.o., Doudlebská 1046/8, Nusle, 140 00 Praha 4 CIN:17415446
Phone: +420 735 969 889
Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified directly or indirectly, in particular by reference to a specific identifier, such as a name, identification number, location data, online identifier, or one or more specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.
The Controller has not appointed a personal data protection officer.
II. Sources and categories of personal data processed
The Controller processes personal data that was provided by you or personal data the Controller has obtained as a result of executing your order.
The Controller processes your identification and contact data and data necessary for the performance of the contract.
III. Lawfulness and purpose of personal data processing
The lawful reason for personal data processing is the performance of the contract between you and the controller pursuant to Article 6 (1) b) GDPR is the legitimate interest of the controller in the provision of direct marketing (especially for the purposes of sending commercial communications and newsletters) pursuant to Article 6 (1) a) GDPR in conjunction with Section 7 (2) of the Act No. 480/2004 Coll., on Certain Information Society Services in the absence of order of goods or services.
The purpose of personal data processing is the execution of your order and the exercise of the rights and obligations arising from the contractual relationship between the Controller and you. Personal data is required for order in order to ensure successful execution of the order (name and address, contact details). The provision of personal data is a requirement for concluding and performing the contract. Without the provision of personal data, it is not possible to conclude or perform a contract from the side of the Controller, send commercial communications, and perform other marketing activities.
Automatic individual decision-making is made on the side of the Controller pursuant to Article 22 of the GDPR. You have given your explicit content to such processing of your personal data.
IV. Data retention period
The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and controller and to assert claims arising from this contractual relationship (for a period of 10 years from the termination of the contractual relationship).
for the period until the consent to personal data processing for the purposes of marketing (no longer than 3 years) is withdrawn, if the personal data is processed on the basis of the consent given.
After the expiry of the retention period, the Controller shall delete the personal data provided.
V. Recipients of the personal data (subcontractors of the Controller)
The recipients of the personal data are entities involved in the delivery of goods / services / making payments on the basis of the contract concluded, providing services associated with the operation of e-shop (Shoptet) and other services associated with the operation of e-shop, providing marketing services.
The Controller intends to transfer personal data to a third country (a country outside the European Union) or an international organization. The recipients of the personal data in third countries are providers of mailing services.
VI. Your rights
Under the terms stipulated in the GDPR, you have the right to:
access your personal data in accordance with Article 15 of the GDPR;
correct your personal data in accordance with Article 16 of the GDPR, or to restrict data processing in accordance with Article 18 of the GDPR;
have your personal data deleted in accordance with Article 17 of the GDPR;
object to data processing in accordance with Article 21 of the GDPR;
data transfer in accordance with Article 20 of the GDPR.
withdraw your consent with the data processing in writing or in electronic form by sending a withdrawal notice to the postal or e-mail address of the Controller specified in Article III of these Terms and conditions.
Furthermore, you have the right to file a complaint with the Data Protection Office in case you believe that your rights associated with personal data protection have been violated.
VII. Terms and conditions of personal data security
The Controller hereby declares that they have taken all appropriate technical and organizational measures to ensure personal data protection.
The Controller has taken technical measures necessary to safeguard data and personal data repositories in paper form.
The Controller hereby declares that only the persons authorized by them have access to your personal data.
VIII. Final provisions
By submitting an order using the online order form, you hereby acknowledge that you have been acquainted with the terms and conditions of the personal data protection and accept them in their entirety.
Your agreement to these terms is expressed by ticking the consent box in the online order form. By ticking the content form box you hereby acknowledge that you have been acquainted with the personal data protection and conditions and accept them in their entirety.
The Controller is entitled to change these terms and conditions. The changed version of the terms and conditions of personal data protection shall be published on their website and sent to your e-mail address that has been provided by you to the Controller.
These terms and conditions shall come into effect on 1 January 2022.