Personal data protection

1. Information on the processing of personal data

The company VanCo.cz s.r.o., with its registered office in Prague 1, Vojtěšská 17, IČ: 25762702, zápis. in OR led by MS in Prague in dept. C, vl. 67978, the operator of the WiFiShop.cz e-shop (hereinafter referred to as the „ Administrator “), processes the user's personal data provided by telephone, in person, in writing or electronically in accordance with Art. (a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) ), (hereinafter referred as "GDPR").

The Administrator operates the following websites for communication with its customers and partners (hereinafter referred to as "customers"), through which it provides the necessary information about the offered products, products and services and carries out their sales or other business activities.

• www.wifi-shop.cz
• www.wifishop.cz

The company VanCo.cz s.r.o. has the status of a personal data controller in the processing of personal data.

In order to inform its customers about the processing of the personal data they provide, the controller issues this Privacy Policy (the "Policy").

This policy provides each customer with all necessary information about the processing of personal data concerning him, in connection with the purchase through the e-shop, so that each customer knows what personal data and for what purpose they are processed about him. This policy also provides each customer with all necessary information about the processing of personal data on the basis of consent to the processing of personal data.

The administrator hereby declares that the processing of personal data of customers takes place in accordance with the legal regulations of the Czech Republic and with European legal regulations governing the protection of personal data.
 

2. Legal reasons, purposes, scope and duration of personal data processing

2.1. Concluding the purchase contract and fulfilling the contractual relationship

The legal reason for processing personal data is based on concluding a purchase contract. The purpose of personal data processing is the implementation of the concluded purchase contract – in particular, the settlement of the order, delivery of goods, handover of goods for transport and fulfillment of all other obligations arising from the contractual relationship.

The following personal data is processed about the customer for the above-mentioned purpose in particular, but not exclusively, identification and address data, contact data and other data provided for the purpose of fulfilling the contract – bank account number, etc.

For the above purpose, personal data about the customer are processed by the administrator for the duration of the obligations arising from the concluded purchase contract, obligations stipulated by law and further protection of the rights of the customer and the administrator.
 

2.2. Send / reply to request

The legal reason for processing personal data is based on the pre-purchase process. The purpose of personal data processing is to process the customer's request, prepare an offer for the customer and send it to the customer.

For the above-mentioned purposes, the following personal data, for example, are processed about the customer: identification and address data, contact data.

For the above purpose, personal data about the customer are processed by the administrator for the period of processing the request and implementation of the offer, or its validity and for a period of 60 months from the date of sending the offer to the customer, whichever expires later.
 

2.3. Purchasing advice

The legal reason for processing personal data is based on the provision of the service by the administrator to the customer, who requests a purchase advice service. The purpose of personal data processing is to personalize the request and its processing.

The following personal data about each customer is processed for the above purposes: name and surname, email address, IP address.

Personal data about the customer is processed by the administrator for the above-mentioned purpose for the period of processing the customer's request.
 

2.4. Marketing purposes

The legal reason for processing personal data is based on consent. Only the personal data provided by the administrator about each customer is processed customer for marketing purposes (see below) has provided or will provide in the future.

Based on the customer's consent to the processing of personal data, personal data is processed for the purpose of sending commercial messages related to the goods offered by VanCo.s.r.o. and sending newsletters related to VanCo.cz s.r.o. (collectively, &ld " marketing purposes ”). As part of the processing of personal data for marketing purposes, customers are contacted directly.

The following personal data about the customer is processed for marketing purposes: email address.

Processing of personal data in the framework of subscription to the customer's email address, in particular, is also considered the processing of personal data for marketing purposes.
 

3. How personal data is processed

Personal data is in most cases processed automatically in electronic form. In addition, personal data may be processed manually in writing.

The controller processes personal data to the smallest possible extent so that the purpose of personal data processing is fulfilled.

This personal data will not be subject to automated individual decision-making, including profiling, during processing.

The customer provides the administrator with personal data for processing completely voluntarily. However, if the customer does not provide the administrator with personal data for the purposes of concluding the purchase contract, preparing an offer, or advising on the purchase, the purchase contract cannot be concluded or the services provided for this purpose.

On the other hand, failure to provide the administrator's consent to the processing of personal data for marketing purposes has no effect on the creation of the purchase contract, the preparation of the offer, or the purchase advice. The customer will obtain the full range of processed personal data by a query made in accordance with Article 9 of this policy.

 

4. Cookies

Cookies are also used within the administrator's website. Cookies are small text files containing short details that can be stored on the administrator's computer when visiting the website. Cookies can only contain information that is sent to the customer's computer. Cookies do not link to other data (including personal data) unless the customer has explicitly agreed to such a procedure.

Consent to the use of cookies is not a prerequisite for visiting the administrator's website.

The storage time of cookies on the customer's computer is determined by their nature. Some cookies are limited by the duration of the session (so-called "session cookies"). These cookies only exist as long as the web browser is running and are automatically deleted when the browser is closed. Other cookies are persistent (so-called "persistent cookies"). These cookies remain in the web browser even after its termination until a specified date, or until they are manually deleted by the user. According to these cookies, the administrator's computer can be identified when the web browser is restarted and the Internet is browsed. Cookies do not affect the technical use of your computer and do not contain any viruses or other threats.

The following cookies are used on the administrator's website:

• Cookies necessary for the functionality and appearance of the website – these cookies are absolutely necessary for the proper functioning of the website. They help ensure efficient website delivery.
• Google Analytics Cookies – these files are stored to measure website traffic and simple statistics about visitor traffic and behavior. They are considered in the form of a bulk unit and in an anonymized form.

The storage of cookies can be disabled in the web browser settings. However, if the customer does so, some features of the website may be unavailable or refusing to store cookies may affect the functionality and user-friendliness of the website.

 

5. Security Statement

6. Recipients of personal data

In addition to the controller, external processors may be involved in the processing of personal data, in particular shipping companies, mailing service providers, hosting service providers and online communication platform providers.

The controller declares that all data is processed in the territory of the EU and all recipients follow the applicable regulations regarding personal data protection.

The administrator does not rule out that in the future some personal data of customers will be passed on to other processors. The customer will obtain the current list of processors in accordance with Article 9 of this policy.

 

7. Personal data processing time

Personal customer data is processed for the period specified in Article 2 of this policy. Prior to this period, the processing of personal data shall be stopped or interrupted to the maximum extent possible as soon as the customer withdraws his consent to the processing of personal data or exercises any of his rights under Article 9 of this policy, if such exercise results in restrictions, interruptions. or stop processing personal data.

As soon as a fact occurs which results in the restriction, interruption or cessation of the processing of personal data, the controller will process the customer's personal data only to the extent necessary, for the necessary length of time and only for the purpose of protecting the controller's rights and legally protected interests. As soon as this purpose of personal data processing has ceased, the administrator will destroy it.

 

8. Withdrawal of consent

The customer acknowledges that the consent to the processing of personal data granted to the administrator for marketing purposes lasts until the consent is revoked.

The customer can easily revoke his consent granted for marketing purposes by sending an email to: obchod@vanco.cz with the information that the customer is not interested in having his personal data processed for marketing purposes and that he withdraws his consent to the processing of personal data.
 

9. Data subject rights

• Right of access. The customer has the right to obtain confirmation from the controller whether his personal data is being processed and, if so, the right to access this information and, in this connection, to request in particular recipients to whom this personal data has been or will be disclosed.
• Right to a copy. The customer has the right to request a copy of the personal data processed concerning him or her from the controller, provided that the rights and freedoms of third parties are not adversely affected.
• Right of correction. Customer has the right for the administrator to correct inaccurate personal data concerning him without undue delay, based on the administrator's own notice or other credible finding. In addition to the right to correct personal data concerning him, the customer also has the right to supplement them if the personal data already provided and processed is incomplete.
• Right to delete. When the controller no longer needs the processed personal data relating to the customer for the above purposes and there is no other legitimate reason for their processing by the controller, this personal data is processed illegally, the consent to its processing has been revoked or after an objection has been raised. there are no reasons for their further processing, the customer has the right to require the administrator that such personal data be deleted, resp. sufficiently secured against their processing, or made inaccessible. The administrator has the right to reject this request if there is still a reason to process it. The deletion will not take place if the personal data concerning the customer have to be processed by the administrator in order to determine, enforce or defend the claims or to fulfill the legal obligation of the administrator.
• Limited processing right. Should Customer become aware that their personal data processed by the Administrator is inaccurate, or that their processing is unlawful or unnecessary, or if an objection has been filed, Customer may, pending a duly substantiated action by the Administrator, or a decision on the objection, to require the controller to limit the processing of such personal data to that extent, but only to the minimum extent permitted.
• Right to portability. Customer has the right to obtain personal information provided to the controller in a structured, commonly used, machine-readable format and to transfer that information to another controller. Likewise, the customer has the right to have this personal data passed directly to the other administrator, if this is technically feasible.
• Right to dispute. The administrator hereby expressly informs the customer of the possibilityto object to the processing of personal data concerning him, but only if such processing of personal data takes place in the legitimate interest of the controller or in the public interest. Furthermore, the customer has the right to object if his personal data is processed for the purpose of direct marketing, for this marketing. This objection is made directly to the administrator. In the objection, the customer must describe the negative impact of the processing of personal data on him.
• Right to file a complaint. The customer has the right to file a complaint with the Office for Personal Data Protection if he or she believes that personal data protection has been violated during the processing of personal data concerning him or her.

10. Exercise of rights