I. Basic provision

1. The administrator of personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter: "| ||37GDPR”) isDrozd sevis s.r.o. ID number 08699372 with registered office at U Zličína 198/22, Prague, 155 21 (further only: "administrator").

2. The administrator's contact details are info@drozdservis.cz

3. Osobními údaji se rozumí veškeré informace o identifikované nebo identifikovatelné fyzické osobě; identifikovatelnou fyzickou osobou je fyzická osoba, kterou lze přímo či nepřímo identifikovat, zejména odkazem na určitý identifikátor, například jméno, identifikační číslo, lokační údaje, síťový identifikátor nebo na jeden či více zvláštních prvků fyzické, fyziologické, genetické, psychické, ekonomické, kulturní nebo společenské identity této fyzické osoby.

4. The administrator did not appoint a personal data protection officer.

II. The legal reason for processing personal data

1. The legal reason for processing personal data is

   • fulfilment of the contract between you and the administrator according to Article 6 paragraph 1 letter b) GDPR (hereinafter referred to as "Performance of the contract"),

   • the administrator's legitimate interest in providing direct marketing (especially for sending business communications and newsletters) according to Article 6, paragraph 1 letter f) GDPR (hereinafter referred to as "Legitimate interest"),

   • Your consent to processing for the purposes of providing direct marketing (in particular for sending business communications and newsletters) pursuant to Article 6, paragraph 1 letter a) GDPR in conjunction with § 7, paragraph 2 of Act No. 480/2004 Coll., on certain information society services in the event that no goods or services have been ordered (hereinafter referred to as "Consent").

2. There is no automatic individual decision-making by the controller within the meaning of Article 22 of the GDPR. You have given your express consent to such processing.

III. Purpose of processing, categories, sources and recipients of personal data

 

​

Legal reason               Purpose                   Data                  Source of data                 Recipients of personal data (processors)

Plnění smlouvy    Vyřízení objednávky a odpověď na dotaz zaslaný přes kontaktní formulářOsobní údaje klientů (kontantní údaje)Kontaktní a objednávkový formulářSubdodavatelé, mailingové služby, cloudová úložiště, platební brány

Legitimate interest Ensuring the correct functionality of the websiteCookies (technical)Logging into the user account accountWeb hosting services, subcontractors

Legitimate interestNormal analysis of traffic, detection of server errors and prevention of fraud and server attacksFor a period of 50 months: Third-party cookies, pseudo-anonymized identifiers of registered users such as UserID, IP addresses and web browsing data.User movement on the website, registration and creation anonymized user ID, page display with Google Analytics error, web hosting services and possibly other analytical services

ConsentTargeted advertising (retargeting)Po time max. 13 months: Third-party cookies, IP addresses, browser data and website browsing dataDisplay of certain pages on the websiteAdvertising platforms enabling retargeting (AdWords, Sklik, Facebook)

IV. Data retention period

1. Unless otherwise stated in the previous points, the Administrator stores personal data

   • for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the administrator and the exercise of claims from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).

   • until the consent to the processing of personal data for marketing purposes is revoked, if personal data is processed on the basis of consent.

2. After the personal data storage period has expired, the administrator will delete the personal data.

V. Cookies

1. If they are in point III. cookies listed among personal data, the following rules apply to their processing.

   • Rules for the use or blocking of cookies can be set by each user in their Internet browser, thereby indicating their consent to their processing. You can look athow to block cookies.

   • The user can set the permission or rejection of all or only some cookies (eg third-party cookies) . Blocking cookies may have a negative effect on the usability of the website and services.

   • On this website, information from the following companies is placed for visitors who agree to the placement of cookies in their browser through the appropriate cookie behavior settings of individual browsers:|| |145

     • Facebook

     • Google (information about cookies)

     • Tripadvisor

2. If you object to the processing of technical cookies necessary for the functioning of the website, then the full functionality and compatibility of the website cannot be guaranteed.

VI. Recipients of personal data (subcontractors of the administrator)

1. The administrator intends to transfer personal data to a third country (a country outside the EU) or an international organization. Recipients of personal data in third countries are providers of mailing services, data and file storage, analytical tools, discussions and direct marketing services.

VII. Your rights

1. Under the conditions set out in the GDPR, you have

   • the right to access your personal data according to Art. 15 GDPR,

   • the right to correct personal data according to Art. 16 GDPR, or restriction of processing according to Art. 18 GDPR,

   • right to erasure of personal data according to Art. 17 of the GDPR

   • right to object to processing according to Article 21 GDPR,

   • right to data portability according to Article 20 GDPR,

   • right to withdraw consent to processing in writing or electronically to the address or the administrator's email listed in Article III of these terms and conditions.

2. Furthermore, you have the right to file a complaint with the Office for the Protection of Personal Data if you believe that your right to the protection of personal data has been violated.

VIII. Podmínky zabezpečení osobních údajů

1. The administrator declares that he has taken all appropriate technical and organizational measures to secure personal data.

2. The administrator has taken technical measures to secure data stores and personal data stores in documentary form, in particular...

3. The administrator declares that only authorized persons have access to personal data.

IX. Final Provisions

1. By submitting an order from the online order form or filling out the inquiry form, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.

2. You agree to these terms by ticking consent via an online form. By checking consent, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.

3. The administrator is authorized to change these terms. It will publish the new version of the personal data protection conditions on its website and at the same time send you the new version of these conditions to your e-mail address that you provided to the administrator.

These conditions become effective on 25/05/2018|| |247