Privacy policy

I.

Basic Provisions

1. According to Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred as the "GDPR"), the personal data administrator is VTC, a.s., Company ID No.: 25390341, headquartered at Plzeňská 868, 783 91 Uničov, Czech Republic (hereinafter referred to as the "administrator").

2. The contact information of the administrator is

                 address: VTC, a.s., Plzeňská 868, 783 91 Uničov, Czech Republic
                 e-mail:   
                 phone:    +420 585 051 217

3. Personal data means any and all information about an identified or identifiable natural person; an identifiable natural person is a natural person that can be identified directly or indirectly, in particular by reference to a particular identifier such as a name, identification number, location data, a network identifier, or one or more specific features of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

4. The administrator did not appoint a data protection officer.

II.

Sources and categories of processed personal data

1. The administrator processes personal data that you have provided to the administrator or personal data that the administrator has received in connection with handling your order.

2. The administrator handles your identification and contact information and data necessary for the performance of a contract.

III.

Legitimate reason and purpose of processing personal data

1. A legitimate reason for processing personal data is

• the performance of a contract between you and the administrator according to Article 6 (1) b) of the GDPR,
• the legitimate interest of the administrator to provide direct marketing (in particular for sending business communications and newsletters) under Article 6 (1) f) of the GDPR, only in the case that you express your interest in this service by selecting it in your user account settings.

2. The purpose of processing personal data is

• the execution of your order and the exercise and fulfilment of rights and obligations arising from a contractual relationship between you and the administrator; personal data necessary for the successful execution of the order (name and address and contact information) is required during the order; the provision of personal data is a necessary requirement for the conclusion and performance of a contract, and without the provision of personal data, it is not possible to conclude a contract or for the administrator to perform the contract.

3. There is no automatic, individual decision-making by the administrator within the meaning of Article 22 of the GDPR.

IV.

Data storage period

1. The administrator stores the personal data

• for the period necessary for the exercise and fulfilment of rights and obligations arising out of a contractual relationship between you and the administrator and the enforcement of claims arising under these contractual relationships (for a period of 10 years from the termination of the contractual relationship).
• for the necessary period after the expiry of a contractual relationships to ensure that the contract has been duly and fully executed and that it will not be necessary to file a lawsuit, or a distraint proposal,

2. After the data storage period has expired, the administrator will delete the personal data.

V.

Cookies

1. When using our website, your personal data may be processed through cookies. For more information on how we use cookies, please visit: www.vtc.cz/en/cookies.

2 Our website uses retargeting technology from Sklik service operated by Seznam.cz, a.s. This allows us to show our visitors, who have already expressed interest in our products, our ads on the Seznam.cz, a.s.

VI.

Personal data recipients (subcontractors of the administrator)

1. Personal data recipients are persons who

• have a part in the delivery of goods/services and the realization of payments on the basis of a contract,
• provide e-shop operation services and other services related to the operation of the e-shop.

2. The administrator does not intend to transfer personal data to a third country (a non-EU country) or an international organization.

VII.

Your rights

1. Under the terms laid down in the GDPR, you have

• the right of access to your personal data in accordance with Article 15 of the GDPR,
• the right to correct your personal data in accordance with Article 16 of the GDPR, or restrict the processing of your personal data in accordance with Article 18 of the GDPR.
• the right to delete your personal data in accordance with Article 17 of the GDPR.
• the right to object to the processing in accordance with Article 21 of the GDPR, and
• the right to data portability in accordance with Article 20 of the GDPR.
• the right to withdraw your consent to processing in writing or electronically to the address or e-mail of the administrator specified in Article I. of this policy.

2. You also have the right to file a complaint with the Personal Data Protection Office if you believe that a personal data protection right has been violated.

VIII.

Personal Data Security Policy

1. The administrator declares that it has taken all appropriate technical and organizational measures to secure personal data.

2. The administrator has taken technical measures to secure data repositories and personal data repositories in paper form.

3. With the personal data processors under Article VI., the administrator has concluded personal data processing contracts that guarantee at least the same level of protection for your personal data as that provided by this Privacy Policy.

4. The administrator declares that only persons authorized thereby have access to personal data.

IX.

Final Provisions

1. By sending an order from the online order form, you confirm that you are familiarized with the Privacy Policy and that you accept it in its entirety.

2. The administrator is entitled to change this policy. It shall always publish new versions of the Privacy Policy on its website with an alert (e.g. a highlighted strip).

This Privacy Policy will take effect on 25 May 2018.