Personal data processing and information for subjects

Conditions of personal data processing

I. Basic provisions

Pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR", Planar s.r.o. is the controller of personal data (hereinafter the "controller").

The controller's contact details are

Address: Ve žlibku 1800/77, 193 00 Prague, Czech Republic

E-mail: info@autoterm.cz

Telephone: +420 228 882 392

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The controller has not appointed a data protection officer.

II. Sources and categories of processed personal data

The controller processes the personal data which you provided to it, or personal data which the controller obtained based on performing your order.

The controller processes your identification and contact data and data required to perform the contract.

III. Lawful reason and purpose of processing personal data

The lawful reason for processing personal data

performance of the contract between you and the controller pursuant to Art. 6(1)(b) of the GDPR,

controller's legitimate interest to provision of direct marketing (in particular for sending commercial messages and newsletters) pursuant to Art. 6(1)(f) of the GDPR,

your consent to processing for the purpose of providing direct marketing (particularly for sending commercial messages and newsletters) pursuant to Art. 6(1)(a) of the GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information company services, in cases when goods or services were not ordered.

The purpose of personal data processing is

to handle your orders and exercise the rights and obligations arising from the contractual relationship between you and the controller; during an order, personal data are required as needed for the successful handling of the order (name and address, contact); the provision of personal data is a necessary requirement to conclude and perform the contract; without the provision of personal data, the contract cannot be concluded or performed by the controller,

sending of commercial messages and performance of other marketing activities.

The controller performs automated individual decision-making pursuant to Art. 22 of the GDPR. You have provided your express consent to such processing.

IV. Term of data storage

The controller stores personal data

for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to apply claims from this contractual relationship (for a term of 10 years from termination of the contractual relationship).

for the period until consent to personal data processing for marketing purposes is revoked, but not more than 3 years if personal data are processed based on consent.

After the passing of the term of storing personal data, the controller shall delete the personal data.

V. Recipients of personal data (controller's subcontractors)

The recipients of personal data are parties

participating in the delivery of goods / services / payments made on the basis of the contract,

ensuring e-shop operation services and other services related to e-shop operation,

ensure marketing services,

for the purpose of posting tax documents in accordance with the contract and with generally binding legal regulations in the scope of:

- name and surname, title

- postal address

- invoicing address,

- mailing address,

- telephone contact,

- bank details,

- data about the Controller's subject of performance.

VI. Your rights

Under the conditions stipulated in the GDPR, you have

the right to access your personal data pursuant to Art. 15 of the GDPR,

the right to rectification of your personal data pursuant to Art. 16 of the GDPR, or restriction of processing pursuant to Art. 18 of the GDPR,

the right to erasure of your personal data pursuant to Art. 17 of the GDPR,

the right to object to processing pursuant to Art. 21 of the GDPR, and

the right to data portability pursuant to Art. 20 of the GDPR,

the right to revoke consent to processing in writing or electronically at the controller's address or e-mail specified in Art. III of these conditions.

You also have the right to lodge a complaint with the Office for Personal Data Protection, if you feel that your right to personal data protection has been violated.

VII. Conditions of securing personal data

The controller declares that it has adopted all the appropriate technical and organisational measures to secure personal data.

The controller has adopted technical measures to secure data storage sites and sites where personal data in hardcopy format are stored.

The controller declares that only its authorised persons have access to the personal data.

VIII. Final provisions

By sending the order from the internet order form, you confirm that you are familiar with the conditions of personal data protection and accept them in full.

You consent to these conditions by checking the consent box in the internet form. By checking the consent box, you confirm that you are familiar with the conditions of personal data protection and accept them in full.

The controller is authorised to amend these conditions. The controller shall publish the new version of the conditions of personal data protection on its website and send you a new version of these conditions to your e-mail address, which you provided to the controller.

These conditions come into effect on 25 May 2018.