Personal data protection
Personal data processing principles
INTRODUCTORY INFORMATION
CORMEN s.r.o., with its registered office at Bystřice nad Pernštejnem, Věchnov 73, Postal Code 59301, ID No.: 25547593, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 32085 (hereinafter referred to as "Controller" or "Cormen")
Contact details of the Administrator:
Delivery address: Průmyslová 142, 593 01 Bystřice nad Pernštejnem, e-mail address: info@cormen.cz, telephone +420 565 400 300.
The controller has not appointed a data protection officer.
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The Company processes personal data in accordance with European Union law, in particular in accordance with Regulation (EC) No 2016/679 of the European Parliament and of the Council of 27 April 2016. 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR"), as well as in accordance with international treaties to which the Czech Republic is bound, in particular the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data no. 108, promulgated under No. 115/2001 Coll, 101/2000 Coll., on the Protection of Personal Data and on Amendments to Certain Acts, as amended (hereinafter referred to as the "PDPA").
The lawful reason for processing your personal data is that such processing is necessary for the performance of a contract between you and the Company or for the performance of a measure by the controller prior to the conclusion of such contract within the meaning of Article 6(1)(b) GDPR.
In the event of a contractual relationship, the Company sends its customers commercial communications related to its products in order to pursue the legitimate interests of the Company in the form of limited direct marketing. Thus, the Company does not require consent to send these commercial communications, but allows you to unsubscribe from the newsletter at any time or to object to such processing.
In the case of direct marketing by the Controller without the establishment of a contractual relationship, Cormen is entitled to process your personal data only on the basis of your consent.
For better targeting of the Company's advertising and promotion, the Company processes data on website visits, products viewed and other website activity when using cookies. Processing is only possible on the basis of your consent to the use of the relevant cookies. More information about cookies can be found here.
SCOPE OF PERSONAL DATA PROCESSED BY THE COMPANY
The personal data processed is personal data that customers themselves provide when registering or creating an order. This includes: name, surname, address, telephone number, e-mail.
If you have enabled the storage of cookies in your browser and agree to their use, the Company obtains data about your visit to the website, products viewed and other activity on the website.
Special categories of personal data (sensitive data) are not processed by the Company.
PURPOSE OF PROCESSING PERSONAL DATA
The Company, as a personal data controller in connection with the provision of its services through the website, processes and stores the personal data of Data Subjects for the following purposes under the conditions and within the limits set by applicable law, in particular in accordance with the provisions of Article 6(1)(a) and (b) of the GDPR:
- contacting and providing information requested by the Data Subject (email address used);
- performance of a contractual obligation (name, surname, address, email address and telephone number for the carrier are used);
- direct marketing based on the Data Subject's consent (email address used);
- maintenance of a database for direct marketing (name, surname, address, telephone number and e-mail address provided);
THE PERIOD OF PROCESSING OF PERSONAL DATA
The personal data will be processed for the time necessary to ensure the mutual rights and obligations arising from the contractual relationship, i.e. for the entire period of processing the order, including its payment and delivery of the goods. By law, the Company subsequently retains certain data contained in accounting documents.
Commercial communications are sent for as long as the consent to receive them lasts. In the case of customers, commercial communications are sent until unsubscription or until an objection is raised against the processing of personal data for this purpose. However, commercial communications are sent for a maximum period of 7 years. Thereafter, the Company shall request consent again.
The data collected for marketing purposes via cookies will be processed for as long as you consent to the use of cookies, i.e. for as long as the storage of cookies is enabled in your browser or until an objection is raised against the processing of your data for this purpose.
Further processing of personal data beyond this is only processed if it is necessary for the fulfilment of the obligations arising from the legal regulations applicable to the Company.
As soon as the purpose of the processing ceases to exist or the Controller no longer has any legal basis for processing personal data, the Controller will delete the personal data.
FURTHER INFORMATION ON THE PROCESSING OF PERSONAL DATA
The personal data of the Data Subject is processed manually by the Company's employees.
The Data Subject's personal data will be further processed by the following data processors:
- Processors who provide server, web, cloud or IT services to the Controller;
- transport services - Geis Parcel CZ s.r.o., Dachser Czech republic, a.s., Raben Group N.V.
- HYGOSUPPPORT a.s.
INFORMATION ON THE RIGHTS OF DATA SUBJECTS
The Data Controller hereby informs the Data Subjects of the basic principles and principles in accordance with the provisions of Article 13 et seq. of the GDPR, on the basis of which the Company, as the Data Controller, handles the personal data of the Data Subject.
The Data Subject has the right to obtain confirmation from the Data Controller as to whether or not personal data is processed and, if it is processed, the Data Subject has the right to access the personal data.
The Data Subject has the right to have inaccurate personal data corrected by the Controller without undue delay or, taking into account the purposes of the processing, the Data Subject has the right to have incomplete personal data completed, including by providing an additional declaration.
The Data Subject has the right to have the Controller erase the personal data if the personal data are no longer necessary for the purpose of processing, the Data Subject has withdrawn consent to the processing, has objected to the processing of the personal data and there are no overriding legitimate grounds for the processing,
The Data Subject has the right to have the Controller restrict the processing if the Data Subject denies the accuracy of the personal data for the period necessary to verify the accuracy of the personal data, the Controller no longer needs the personal data for the purpose of the processing but the Data Subject requires it for the establishment, exercise or defence of legal claims, or the Data Subject has objected to the processing of the personal data.
The Data Subject has the right to withdraw consent to the processing of personal data at any time without any penalty. The Data Subject may withdraw consent in any of the ways set out above at the individual contact details of the Data Controller. The withdrawal of consent by the Data Subject shall not affect the lawfulness of processing based on consent prior to its withdrawal.
The Data Subject has the right to lodge a complaint with the competent supervisory authority if the Data Subject believes that the processing of personal data is in breach of the law. The competent supervisory authority in the Czech Republic is the Office for Personal Data Protection.
The Data Subject has the right to object to the processing of personal data concerning him or her if the controller processes personal data on the following grounds:
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
- the processing is necessary for the purposes of the legitimate interests of the controller or of a third party,
- for direct marketing purposes,
- for scientific or historical research purposes or for statistical purposes.
SECURITY
The Company hereby declares that the processing of personal data is carried out in full compliance with applicable law. The personal data of the data subject are kept secure by the Company through the technical and organizational measures set up.
All personal data in electronic form are stored in databases and systems that can only be accessed by persons who have an immediate need to handle the personal data for the purposes set out in this Policy, and only to the extent necessary. Access to this personal data is password and firewall protected.
EFFECTIVENESS
This policy is effective as of May 25, 2018.
Cookies
What are cookies?
Text files that websites store on your computer or mobile device when you start using the website.
- First party cookies are cookies that are stored when you visit a website. They can then only be read by that website. In addition, websites can potentially use external services that also store their own cookies - so-called third-party cookies.
- Persistent cookies are cookies that have been stored on your computer and are not automatically deleted when you close your browser - unlike temporary cookies, which are always deleted when you close your browser.
The length of time cookies are stored on the user's computer is determined by their nature. Some cookies are limited by the duration of the session (so-called session cookies). These cookies exist only while the web browser is running and are automatically deleted when the browser is closed. Other cookies are persistent (so-called "persistent cookies"). These cookies remain in the web browser after it has been closed until a specified date, or until they are manually deleted by the user. These cookies can be used to identify the administrator's computer when the web browser is restarted and the internet is browsed. Cookies do not affect the technical use of the computer and do not contain any viruses or other threats.
Consent to the use of cookies is not a prerequisite for visiting the website. When visiting our website, you have the option to either accept or reject the optional cookies. By clicking on "Accept all cookies" you accept all cookies, by clicking on "Reject all" you prevent the storage of optional cookies on your website. Technical cookies cannot be refused, the functionality of the website depends on them. Only technical cookies are stored before consent or non-consent. We use optional cookies to make anonymised various statistics concerning the browsing of our website by users and services for advertising purposes.
This website uses the following cookies and similar technologies.
Technical cookies
| Name | Service | Purpose |
|---|---|---|
| xartConsent | consent to cookies | Saves your cookie preferences (so the site doesn't ask you over and over again) |
| PHPSESSID | use of the site | maintaining the user's context on the site |
| recaptcha | Google recaptcha | collection of risk analysis data to determine the actual site visitor or robot |
| maps and location | detecting the user's location | at the user's option |
Optional cookies
We process your data in accordance with our privacy policy for the following purposes: visitor feedback in the form of analytical statistics on site usage, storing or accessing information on your device, content measurement, advertising and product development. Unless the visitor gives consent, these cookies will not be stored.
- Google Analytics(https://marketingplatform.google.com/about/analytics/)- Google's analytics tool for collecting anonymous statistics about users of our website.
