Who is the administrator?
Mgr. Lucie Tamášová, ID 87820846, with her registered office at Vačkářova 278, 251 01 Dobřejovice, registered with the Municipal Office of Prague 11 under the file ref. No. S-MCP11/11/028291, operating the online shop MontessoriHracky.cz.
I process your personal data as an administrator, i.e. I determine how personal data will be processed and for what purpose, for how long, and I select any other processors to assist me with the processing.
If you wish to contact us during processing, you can contact us at +420 776 499 527 or by e-mail: email@example.com.
I declare that, as the administrator of your personal data, I comply with all legal obligations required by applicable laws, in particular the Data Protection Act and GDPR, and that: I will only process your personal data on the basis of a valid legal reason, in particular a legitimate interest, performance of the contract, legal obligation or consent given, I comply with Article 13 of the GDPR regarding information duty prior to the commencement of the processing of personal data, and I will enable and support you in the exercise and fulfillment of your rights under the Data Protection Act and the GDPR.
Your data may be disclosed to my co-workers who are committed to improving our services further and who have a confidentiality obligation under a contract.
Scope of Personal Data and Purposes of Processing
We process personal information that you entrust to us for the following reason (s):
● service delivery, contract performance
your personal information to the extent: e-mail, name, surname, mailing address, telephone contact, which we absolutely need to perform the contract.
(E.g. for sending information about the availability date of the goods, order status and delivery of goods),
We urgently need your personal data (billing information) in order to comply with legal obligations for issuing and bookkeeping of tax documents,
● marketing - sending newsletters
We use your personal data (email and name), gender, what you click on in the email and when you open it most often for the purpose of direct marketing - sending business messages.
If you are our customer, we do this for a legitimate interest because we reasonably assume that you are interested in our news for 10 years after your last order. If you are not our customer, we send you newsletters only with your consent, for a period of 5 years from awarding the consent. In either case, you can revoke this consent by using the unsubscribe link in each email sent to you.
● advanced consent-based marketing
It is only with your consent that we may also send you inspirational third-party offers or use an email address, for example, for remarketing and Facebook advertising targeting, for a period of 5 years from the consent. It can of course be revoked at any time by using our contact details.
While browsing the MontessoriHracky.cz website, I record your IP address, how long you stay on the site, and from which page you are coming from. We consider using cookies to measure website traffic and customize the display of websites as a legitimate concern for the administrator, as we believe that based on this we can offer you even better services.
Security and Privacy
We protect personal data to the maximum possible extent by means of modern technologies that correspond to the level of technological development. We protect them as if they were our own. We have taken and maintained all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.
Assignment of Personal Data to Third Parties
Your personal data can be accessed by employees of the MonzessoriHracky.cz e-shop and its associates. We use the services and applications of processors who can protect data even better than we do and who specialize in the processing to provide specific processing operations that we are unable to handle on our own.
List of processors:
Direct Parcel Distribution CZ s.r.o. (DPD)
Česká pošta, s.p. (Postal Services)
Účetnictví Zuzana Řeháková (Accounting)
In the future, we may decide to use additional applications or processors to facilitate and improve processing. However, we promise you that in this case when selecting them, we will place at least the same security and quality requirements on our processors as we do towards ourselves.
Transmission of Data Outside the European Union
We process data exclusively in the European Union or in countries that provide an adequate level of protection at the discretion of the European Commission.
Your Privacy Rights Related to the Personal Data Protection
You have a number of rights regarding your privacy. If you would like to use any of these rights, please contact us via e-mail: firstname.lastname@example.org.
You have the right to information that is already fulfilled by means of this information page regarding Principles for Processing and Protection of Personal Data.
Thanks to the right of access and copy, you can request it at any time and we will be able to prove to you within 30 days what personal data we process and why. In exceptional cases, the deadline may be extended by two months, which we must inform you of, including the reasons for the extension.
If anything changes or you find your personal data out of date or incomplete, you have the right to add and change your personal data.
You may exercise the right to restrict processing if you believe we are processing your inaccurate data, believe that we are processing it illegally, but do not want to delete all data or if you have objected to the processing. You can limit the scope of personal data or processing purposes. (For example, unsubscribing from a newsletter limits the purpose of processing for sending business messages.)
Transferability Right - If you would like to take your personal information and transfer it to someone else, we will proceed in the same way as using the right of access - with the only difference that we will provide you with the data in a machine-readable form within 30 days.
Right of Erasure (be forgotten) – Another of your rights is the right of erasure (be forgotten). We don't want to forget you, but if you wish so, you have the right to request so. In this case, we will delete all of your personal information from our system as well as from all sub-processors and from the backups. We need 30 days to ensure the right of erasure.
In some cases, we are bound by a legal obligation and, for example, we must keep records of issued tax documents for a period set by law. In this case, we will then delete all such personal information that is not bound by any other law. We will notify you by email when the erasure is complete.
Complaint to the Office for Personal Data Protection - If you feel that we do not lawfully handle your information, you have the right to object to a legitimate interest or to contact the Office for Personal Data Protection at any time. We would be pleased if you first let us know of this suspicion so that we can correct any errors.
Unsubscribing from newsletters and business communications - We send you inspiration, article, or product and service emails if you are our customer based on our legitimate interest. If you are not yet a customer, we only send them to you with your consent. In either case, you have the right to dispute a legitimate interest for direct marketing purposes, and you can stop receiving our emails by pressing the unsubscribe link in each email sent to you.
We would like to assure you that the employees of the e-shop MontessoriHracky.cz and its associates who will process your personal data are obliged to maintain confidentiality about personal data and security measures, the disclosure of which would compromise the security of your personal data. This confidentiality obligation continues even after the end of the contractual relations with us. Your personal data will not be disclosed to any other third party without your consent.
These Principles follow the Regulations of the European Parliament and the Council (EU) 2016/679 of 27 April 2016, General Data Protection Regulation, or “GDPR”, effective from 25 May 2018. Basic information on GDPR can be found here.