I. Basic Provisions
1. The controller of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) and Act No. 110/2019 on the processing of personal data is PNM International s.r.o., Company ID: 05060192, registered office at Nádražní 385/34, Ostrava, Czech Republic (hereinafter: “the controller”).
2. The controller’s contact details are: address: Závodní 540/51, 73506 Karviná; email: eshop@dometa.cz; telephone: 555 222 029.
3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
II. Sources and Categories of Personal Data Processed
1. The controller processes personal data that you have provided, as well as personal data and other derived data obtained by the controller on the basis of the fulfilment of your order, your behaviour on the website, and data arising from your communication.
2. The controller processes your identification and contact data and data necessary for the performance of the contract. These include in particular, though not exclusively:
- identification data, in particular surname and first name, username and password if you have registered, and email address;
- contact data, such as delivery address, any correspondence or home address, email address, telephone number, or your contact on social networks;
- data about your orders and goods you were interested in, bank account or other payment details, information about your shipments and their receipt;
- review data, meaning comments or reviews of our services and goods;
- data about your behaviour on our website, in particular browsing of goods and services you view, links you click, how you navigate our website and scroll the screen, as well as data about the device from which you browse our website, such as IP address and location derived from it, device identification, its technical parameters such as operating system and its version, screen resolution, browser used and its version, and data obtained from cookies and similar technologies for device identification;
- data about your behaviour when reading messages we send you, such as times of opening messages and data about the device on which you read messages, such as IP address and location derived from it, device identification, its technical parameters such as operating system and its version, screen resolution, browser used and its version, and data obtained from cookies and similar technologies;
- derived data, meaning personal data derived from your settings, data about services you order from us, data about your behaviour on our website, and data about your behaviour when reading messages we send you; in particular data about purchasing behaviour and attitude towards various services;
- data related to the use of a call centre and visits to our branches, in particular recordings of telephone calls with the call centre, identification of messages you send us including identifiers such as IP addresses, and recordings from CCTV systems at our branches.
III. Legal Basis and Purpose of Processing Personal Data
1. The legal basis for processing personal data is:
- performance of a contract between you and the controller pursuant to Art. 6(1)(b) GDPR: if you create an account on one of our websites, we process your identification and contact data, your settings, and your order data (if you subsequently order from us), on the basis of contract performance, in order to maintain your user account. The contract on which our processing is based comes into existence upon the creation of your account. If you place an order with us, we use your personal data for the purpose of fulfilling your order, meaning in particular:
- so that you can complete your order on the website, for example to prevent data from an incomplete order from being deleted;
- so that we can communicate with you about the order, for example to send you its confirmation;
- for payment for goods; in this context we may also pass your data to our partners operating payment systems;
- for the delivery of goods; in this context we may also pass your data to our partners providing courier and delivery services or operating pick-up points;
- in connection with the assurance and complaint handling of the ordered service; in this context we may also pass your data to the service provider;
- in connection with your further requests that you address to us, for example via the call centre.
For this purpose we use personal data for the period necessary to fulfil your order, or to handle a contractual request such as a complaint, but at least for the period arising from requirements to fulfil a legal obligation.
- legitimate interest of the controller in providing direct marketing (in particular for sending targeted and personalised commercial communications and newsletters or adapting the website presentation to improve communication and service quality) pursuant to Art. 6(1)(f) GDPR: if you create an account on our website, we also process your identification and contact data, your settings, your order data (if you subsequently order from us), and data about your behaviour on the website and behaviour when reading messages, on the basis of our legitimate interest, for the purpose of:
- obtaining information on the basis of which we will be able to improve our services for you in the future, in particular by finding out your satisfaction with our services; our legitimate interest here is the improvement of our services for you;
- providing personalised offers and targeted advertising, which we may send you by email, text message, via social networks, communicate to you by telephone or other electronic means, send to you by post, or display on our website; these offers may relate both to our products and services and to the products and services of third parties; our legitimate interest here is the effective promotion of our products and services.
In order to prepare personalised offers for you, we analyse the above-mentioned data and derive further derived data from it, which we use for this purpose. We may also use data about your behaviour on our website obtained before you registered (unless you previously disabled website personalisation in your browser’s Privacy Settings), and we may collect data about your behaviour on the website even when you are not logged in (e.g. when we identify you via a cookie). We also segment our users into different groups based on this data, with each group receiving its own specific offer. If you have viewed a product on our website, or clicked on it in an email we sent you, we may display this product on your next visit to a page on our website, or send you an email offer for this product. Similarly, if you have placed an order with us, we can compile a list of products you have previously purchased, for example to make it easier to reorder. Based on which product you viewed, we may also determine which group of customers you belong to, and accordingly offer you further services on our website or by email that we believe may interest you. This data may also be passed to operators of advertising systems so that they can display this product to you in advertising on other pages. However, we will not pass on to these operators any other personal data that would allow them to contact or identify you further (such as your email address, name, or address).
For the purpose of protecting legal claims and our internal records and control, we process data for the duration of the limitation period (5 years) and one year after its expiry, taking into account claims asserted at the end of the limitation period. In the event of judicial, administrative, or other proceedings being initiated, we process your personal data to the necessary extent for the entire duration of such proceedings and for the remaining limitation period after their conclusion.
- your consent to processing for the purposes of providing direct marketing (in particular for sending targeted and personalised commercial communications and newsletters) pursuant to Art. 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services, in cases where no order of goods or services has been placed. If you create a product review on our website, we also process your identification data and review data about the products we offer, including uploaded photographs, on the basis of your consent to processing, for the purpose of sharing information about your satisfaction with the products we offer with other visitors to our website. For this purpose we use personal data until you withdraw your consent to processing.
- compliance with a legal obligation: on this legal basis we process your identification and contact data and order data in compliance with in particular the following laws:
- Act No. 89/2012 Coll., the Civil Code,
- Act No. 634/1992 Coll., on Consumer Protection,
- Act No. 235/2004 Coll., on Value Added Tax,
- Act No. 563/1991 Coll., on Accounting.
2. The purpose of processing personal data is:
- the fulfilment of your order and the exercise of rights and obligations arising from the contractual relationship between you and the controller; when placing an order, personal data that is necessary for the successful fulfilment of the order (name, address, contact details) is required; the provision of personal data is a necessary requirement for concluding and performing the contract; without providing personal data it is not possible to conclude the contract or for the controller to perform it;
- sending commercial communications and carrying out other marketing activities.
3. The controller carries out profiling within the meaning of Art. 22 GDPR. You have given your explicit consent to such processing.
IV. Data Retention Period
1. The controller retains personal data:
- for the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the controller and for enforcing claims arising from such contractual relationships (for a period of 10 years from the termination of the contractual relationship);
- until consent to the processing of personal data for marketing purposes is withdrawn, for a maximum of 10 years, if personal data is processed on the basis of consent.
2. After the data retention period expires, the controller will erase the personal data.
V. Recipients of Personal Data (Sub-processors of the Controller)
1. Recipients of personal data are persons:
- involved in the delivery of goods / services / execution of payments on the basis of the contract;
- providing e-shop operation services and other services related to the operation of the e-shop;
- providing marketing services.
2. The controller does not intend to transfer personal data to a third country (a country outside the EU) or an international organisation.
VI. Your Rights
1. Under the conditions set out in GDPR, you have:
- the right of access to your personal data pursuant to Art. 15 GDPR;
- the right to rectification of personal data pursuant to Art. 16 GDPR, or restriction of processing pursuant to Art. 18 GDPR;
- the right to erasure of personal data pursuant to Art. 17 GDPR;
- the right to object to processing pursuant to Art. 21 GDPR;
- the right to data portability pursuant to Art. 20 GDPR;
- the right to withdraw consent to processing in writing or electronically to the address or email of the controller stated in these terms and conditions.
2. You also have the right to lodge a complaint with the Office for Personal Data Protection, with registered office at Pplk. Sochora 27, 170 00 Praha 7, if you believe that your right to the protection of personal data has been violated.
3. In all matters related to the processing of your personal data, whether it is a query, exercise of a right, lodging of a complaint, or anything else, you may contact us via our contact details. We will handle your request without undue delay, and within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will inform you of any such extension and its justification.
VII. Personal Data Security
1. The controller declares that it has taken all appropriate technical and organisational measures to secure personal data.
2. The controller has taken technical measures to secure data storage facilities and personal data stored in paper form.
3. The controller declares that access to personal data is restricted to persons authorised by the controller.
VIII. Final Provisions
1. By submitting an order via the online order form, you confirm that you have familiarised yourself with these privacy policy terms and conditions and that you accept them in their entirety.
2. You consent to these terms by ticking the consent box via the online form. By ticking the consent box, you confirm that you have familiarised yourself with these privacy policy terms and conditions and that you accept them in their entirety.
3. The controller is entitled to amend these terms and conditions. The new version of the privacy policy terms and conditions will be published on the controller’s website and you will simultaneously be sent information about the new version of these terms to the email address you provided to the controller.
These terms and conditions take effect on 1 February 2021. Further information can be found here.