Privacy Policy
according to:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
on the protection of natural persons in connection with the processing of personal data and on the free movement of such data
and on the repeal of Directive 95/46/EC
(general regulation on personal data protection)
hereinafter also referred to as "Regulation," "GDPR Regulation," or just "GDPR"
1. Legal entity:
YuTa Partners s.r.o.
ID number: 21240167
with registered office and place of business: Podnikatelská 539, Běchovice, 190 11 Prague 9
Contact information:
telephone contact: +420 234 660 626
e-mail address: info@yuta.cz
website: www.lavo4ka.com
(hereinafter also referred to as: "Company")
is the administrator of the personal data of the data subjects, i.e., the entity that determines the purposes and means of processing the personal data of the data subject.
2. The subject of data is understood in the sense of Article 4, paragraph 1 of the Regulation, a person whose personal data is processed, i.e., an interested party searching for advertisements on the Company's website, or a user advertising offers on the Company's website (for simplicity, hereafter also simply: "customer")
3. The company processes the following personal data of customers:
a) title, name and surname,
b) ID number,
c) TIN,
d) contact address,
e) delivery address,
f) bank account number,
g) telephone number,
h) e-mail address,
i) IP address (for website customers),
j) "cookies" (for website customers).
4. The purpose and legal basis for processing customers' personal data is:
· Article 6, paragraph 1 letter b) GDPR Regulation, i.e., that the processing is necessary for the fulfillment of the contract to which the data subject is a contracting party, i.e., for the implementation of customer advertisements
- refers to personal data specified in Article 3 under letters: a), b), c), d), e), f), g), h)
Provision of personal data specified in Article 3 sub-letters a), b), c), d), e), f), g), h) of these Principles is a contractual requirement and is necessary for the purpose of fulfilling the Company's obligations towards customers. Phone number and e-mail are used to process customer orders. The phone number and e-mail are also necessary to simplify and make communication with the customer more efficient. A customer who does not provide the Company with a telephone number or e-mail will not be able to be contacted by the Company by telephone or e-mail in this regard. If the customer refuses to hand over this data to the Company, it is not possible to properly fulfill the Company's obligation, or it is not possible to properly fulfill the customer's order.
· Article 6, paragraph 1 letter a) The GDPR regulation, i.e., the customer's consent to the processing of personal data
- refers to personal data specified in Article 3 under letters h, i), j)
The company data specified in Article 3 sub-letters h, i), and j (i.e., e-mail address, IP address and "cookies") is used for marketing purposes, specifically for sending irregular newsletters with information about current products, discounts or other news.
Furthermore, the Company data specified in Article 3 sub-letters i and j is used for the purpose of advertising on certain websites (e.g., Facebook) with the help of advertising agencies such as Google Ads.
5. The customer can withdraw his consent to the processing of personal data at any time; if they do so, the data for which consent has been revoked can no longer be processed. Revocation of consent does not affect the lawfulness of processing based on consent granted before its revocation.
6. Personal data of customers is processed by the Company for the entire duration of the contractual relationship. As soon as the contractual relationship is terminated, the personal data of customers is processed only in terms of their archiving, according to the following paragraph.
7. Personal data of customers referred to in Article 3 under letters h), i), j) is kept for the period during which these personal data are processed. Other personal data of customers are kept for a period of ten (10) years from the date of execution of the customer's order, unless a special legal regulation provides otherwise.
8. The Company has access to customers' personal data. In the event that it hires a web administrator or other employees/collaborating entities to handle customer orders and accounting, they will be properly instructed on the preservation of confidentiality and GDPR and will be obliged in writing to comply with their obligations.
9. Outside of the data subject himself (the customer), his personal data may be forwarded to:
- employees of the personal data administrator bound in writing to the obligation of confidentiality,
- entities providing external services to the administrator of personal data bound in writing to the obligation of confidentiality (legal representative, IT service provider, etc.),
- to public authorities (court, authorities active in criminal proceedings, etc.).
10. Personal data of customers are obtained from customers - data subjects to whom they relate.
11. Personal data of customers is stored as follows:
a) The administrator of personal data keeps a documentary record of customers. The records are located at the registered office of the Company. The files containing the records are stored in lockable cabinets and only the Company, or the Company's employees, who are bound by the duty of confidentiality, have access to them.
b) The data administrator also keeps electronic records of customers. Access to this data is possible after entering a password. Access to accounting software that contains personal data is also protected by a password.
12. The customer has the right to access personal data in accordance with Article 15 of the Regulation. This includes the right to obtain confirmation from the Company whether its personal data is being processed and, if it is processing it, the right to access that data, and the following information:
- list of personal data that is processed,
- the purpose of processing this personal data,
- recipients or categories of recipients to whom the customer's personal data has been or will be made available,
- sources of personal data, if not obtained directly from the customer,
- the period of processing of personal data or the method of its determination,
- the existence of the right to request from the Company the correction/addition of personal data within the meaning of Article 16 of the Regulation, the right to request the erasure of personal data (the right to be forgotten) within the meaning of Article 17 of the Regulation, the right to limit the processing of personal data within the meaning of Article 18 of the Regulation, the right to portability their personal data in the sense of Article 20 of the Regulation, the right to file a complaint with the supervisory authority in the sense of Article 77 of the Regulation and the right to judicial protection of the customer in the sense of Articles 78 and 79 of the Regulation.
The request to exercise the data subject's right under this article shall be sent by the customer to the Company's e-mail address, with the Company sending the requested data to the customer's e-mail address from which the request was sent. If the customer sends a request in paper form and, at the same time requests information according to this article to be sent in paper form (or if he does not specify a contact e-mail, where the information according to this article can be sent to him in electronic form), the Company will charge an administrative fee of CZK 100.
The company is obliged to respond to the customer's request in the sense of this article in writing without undue delay, no later than one (1) month from the date of receipt of the request; in cases where special circumstances justify it, no later than two (2) months from the date of receipt of the request. If there is a delay in the response in the sense of the previous sentence after the semicolon, the Company is obliged to inform the data subject about this within one (1) month from the date of receipt of the request, including the reasons for such a delay.
If the customer requests it, the Company is also obliged to give him a copy of the personal data it processes, primarily in electronic form. However, if the customer requests the delivery of copies in paper form, or if he does not provide the Company with an e-mail address for this purpose, the Company will provide copies in paper form. For the provision of copies in paper form, the Company charges an administrative fee of CZK 3/sheet.
13. The Customer has the right to request from the Company the correction or addition of personal data within the meaning of Article 16 of the Regulation, namely:
- in person at the Company's registered office,
- in person at the Company's place of business,
- by phone at any phone number specified in point 1 of these Policies,
- to the e-mail address specified in point 1 of this Policy,
- by written submission in paper form (letter) addressed to the registered office of the Company.
If the customer requests a correction or addition in person or by telephone, the Company will make this change immediately, or immediately inform the data subject of the reasons why his request cannot be granted.
If the customer requires a written response from the Company to his request (see the next paragraph of this article), he is obliged to submit his request in writing, either in paper form or by e-mail in the sense of paragraph 1 of this article.
The company is obliged to respond in writing to the customer's written request within the meaning of this article without undue delay, no later than one (1) month from the date of receipt of the request; in cases where special circumstances justify it, no later than two (2) months from the date of receipt of the request. If there is a delay in the response in the sense of the previous sentence after the semicolon, the Company is obliged to inform the data subject about this within one (1) month from the date of receipt of the request, including the reasons for such a delay. The Company's written response will be provided to the data subject electronically, unless the data subject requests a written response, or unless the data subject's email address is provided to the Company; in such a case, the Company will charge an administrative fee of CZK 100.
If the Company discovers a change in the customer's processed data(s) other than on the part of the data subject (e.g., through its own investigation from a public register or list or other publicly accessible records), it will update the personal data itself, and the data subject will inform the data subject of this in writing or by telephone will understand.
14. The Customer has the right to demand from the Company the erasure of his personal data (the right to be forgotten) in the sense of Article 17 of the Regulation, but only:
-
- if these data are no longer needed for the purpose for which they are processed,
- there is no legal reason for processing this data,
- if personal data were processed unlawfully,
- if it is necessary for personal data to be deleted to comply with a legal obligation.
Even if the conditions specified above are met, the customer does not have the right to delete personal data if the processing is necessary:
- for the exercise of the right to freedom and information,
- to fulfill a legal obligation according to valid and effective legal regulations, or to fulfill a task in the public interest or in the exercise of public authority,
- for the purposes of archiving in the public interest, scientific or historical research, or statistical purposes,
- for reasons of public interest in public health,
- for the determination, exercise or defense of legal claims.
The customer sends a request to exercise the right under this article to the Company's e-mail address, with the Company sending the required data to the customer's e-mail address from which the request was sent. If the customer sends a request in paper form and, at the same time requests information according to this article to be sent in paper form (or if he does not specify a contact e-mail, where the information according to this article can be sent to him in electronic form), the Company will charge an administrative fee of CZK 100.
At the request of the customer, the company is obliged to provide information on the measures taken in connection with his request according to this article, without undue delay, no later than one (1) month from the date of receipt of the request; in cases where special circumstances justify it, no later than two (2) months from the date of receipt of the request. If there is a delay in the response in the sense of the previous sentence after the semicolon, the Company is obliged to inform the customer about this within one (1) month from the date of receipt of the request, including stating the reasons for such a delay.
15. The Customer has the right to request from the Company the restriction of the processing of his personal data in accordance with Article 18 of the Regulation, but only:
- if he denies the accuracy of the personal data, until the accuracy is verified by the Company; these personal data may then be processed for the duration of the processing restriction only in the sense of storage for the determination, exercise or defense of legal claims, in an important public interest, to protect the interests of another natural or legal person, or only with the consent of the customer,
- if the processing of personal data is illegal, and the customer does not want to use the right to be forgotten in the sense of Article 17 of the Regulation, but this right,
- The company no longer needs the customer's personal data for processing purposes, but the customer needs it for the determination, exercise or defense of legal claims.
If the customer uses this right, the Company is obliged to inform him, even before the expiry of the period for restricting the processing of his personal data, that the restriction of processing will be cancelled.
The company is obliged to inform all recipients of the customer's personal data about corrections, deletions or restrictions on the processing of specific personal data.
The request to exercise the right under this Article shall be sent by the Customer to the Company's e-mail address, with the Company sending the required data to the Customer's e-mail address from which the request was sent. If the customer sends a request in paper form and, at the same time requests information according to this article to be sent in paper form (or if he does not specify a contact e-mail, where the information according to this article can be sent to him in electronic form), the Company will charge an administrative fee of CZK 100.
The company is obliged to provide, at the customer's request, information on the measures taken in connection with his request under this article, without undue delay, no later than one (1) month from the date of receipt of the request; in cases where special circumstances justify it, no later than two (2) months from the date of receipt of the request. If there is a delay in the response in the sense of the previous sentence after the semicolon, the Company is obliged to inform the customer about this within one (1) month from the date of receipt of the request, including stating the reasons for such a delay.
16. The Customer has the right to exercise against the Company his right to the portability of personal data within the meaning of Article 20 of the Regulation, which includes the right to obtain personal data concerning him in a structured, commonly used and machine-readable format, and the right to transfer this data to another administrator personal data, if these personal data are processed automatically. If it is technically feasible, the customer has the right to request from the Company that these personal data be transferred (sent) to another data controller directly.
The request to exercise the data subject's right under this article shall be sent by the customer to the Company's e-mail address, with the Company sending the requested data to the customer's e-mail address from which the request was sent. If the customer sends a request in paper form and, at the same time requests information according to this article to be sent in paper form (or if he does not specify a contact e-mail, where the information according to this article can be sent to him in electronic form), the Company will charge an administrative fee of CZK 100.
At the request of the customer, the company is obliged to provide information on the measures taken in connection with his request according to this article, without undue delay, no later than one (1) month from the date of receipt of the request; in cases where special circumstances justify it, no later than two (2) months from the date of receipt of the request. If there is a delay in the response in the sense of the previous sentence after the semicolon, the Company is obliged to inform the customer about this within one (1) month from the date of receipt of the request, including stating the reasons for such a delay.
17. If the Company does not take the measure requested by the customer, the Company is obliged to inform the customer of the reasons again within one (1) month from the date of receipt of the request.
18. The customer has the right to file a complaint with the Office for the Protection of Personal Data (hereinafter also referred to as the "Office") in accordance with Article 77 of the Regulation, if he believes that the processing of his personal data has resulted in a violation of the Regulation by the Company. Against the binding decision of this office, or in the event that the Office does not deal with the complaint or if it does not inform the customer within three (3) months from the date of filing the complaint, the customer is entitled to demand judicial protection.
The contacts for the Office are as follows:
Office for Personal Data Protection
Headquarters: Lt. Col. Sochora 27, 170 00 Prague 7
tel.: +420 234 665 111
website: www.uoou.cz
19. The customer has the right to judicial protection, both against the Office and against the Company as the controller of personal data. More detailed information on exercising the right to judicial protection is specified in Articles 78 and 79 of the Regulation.
20. If it is likely that a certain case of violation of personal data security will result in a high risk for the rights and freedoms of the customer (except for cases where the provisions of Article 34 of the GDPR Regulation do not impose this procedure on the Company), the Company is obliged to report any violation to the Authority security of personal data, within a period without undue delay, no later than 72 hours from the moment of detection. If the Company fails to report a security breach within 72 hours, it is obliged to provide the Office with the reasons for such delay at the same time as the late report. The rule on the obligation to notify the Office of security breaches does not apply if it is unlikely to result in a risk to the rights and freedoms of data subjects. The notification to the Office must contain the requirements set out in Article 34 of the GDPR Regulation.
21. The company has not appointed a personal data protection officer.
22. The company stores personal data exclusively within the EU.
23. Cookies are text files containing a small amount of information that are downloaded to your device when you visit websites. Cookies are then sent back to the website or another website that recognizes them on each subsequent visit. Cookies perform various tasks, for example, enabling efficient navigation between web pages, remembering your preferences and overall improving the user experience. They can also ensure that the advertisements displayed online are better tailored to you and your interests.
24. The company hereby takes the liberty of informing you that, in accordance with the provisions of Section 89, Paragraph 3 of the Act,. No. 125/2007 Coll., on electronic communications, uses the following types of cookie files on its website:
a) necessary cookies – these cookies do not collect information and data on the basis of which the website user can be individually identified, but they are necessary for the basic operation of our website. This includes, for example, cookies that allow you to log into your account. Without these cookies, it is not possible to ensure the proper operation of our website. If you do not want these cookies to be stored, change your browser settings.
b) functional cookies – these cookies make it possible to remember usage preferences such as settings selected when browsing the visited pages, username, favorite documents, etc. to improve user comfort.
c) statistical cookies – these cookies help us understand how visitors interact with the website by anonymously collecting and reporting information, thereby improving our site.
d) marketing cookies – these cookies are used for the purpose of providing and displaying advertising based on the interests of website users or collecting personal data from them for future marketing purposes. On the basis of these files, it is possible for us to target direct marketing communication more relevantly and effectively, but also to limit the number of advertising displays.
e) analytical cookies – these cookies are used to obtain data on website traffic, identify the origin of the visit, determine and collect information about how the visitor uses this website, and serve to improve and simplify the user interface of the site.
25. Consent to the use of cookies is automatically given to us when you first visit our website
26. Allowing cookies in the Internet browser settings is considered consent to the processing of personal data.
27. You can revoke your consent to the storage of cookies at any time through the settings of your internet browser.
28. By submitting an order from the online order form, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.
29. You agree to these terms and conditions by ticking your consent via the online form. By checking consent, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.
30. The administrator is authorized to change these conditions. It will publish the new version of the personal data protection conditions on its website and at the same time send you the new version of these conditions to your e-mail address, which you have provided to the administrator.
In Prague on March 1, 2024 YuTa Partners s.r.o.
