INQUIRY FORM

Protection of Personal Data

 

Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how we collect, use, and otherwise handle personal data collected through the website www.luma-kamna.cz (hereinafter "Website").

Data Controller:

LUMA-kamna s.r.o.
Address: Strakonice - Strakonice II, Nádražní 403, ZIP 386 01
Identification Number: 09416161
Registered at the District Court in České Budějovice, 30177 C

Contact Information of the Data Controller:

Postal Address: Strakonice II, Nádražní 403, ZIP 386 01
Contact Email: info@luma-kamna.cz

Data protection is very important to us. Please read this Policy carefully, as it contains important information about the handling of your personal data and associated rights and obligations.

1. INTRODUCTORY PROVISIONS

1.1. What is the basis for our handling of personal data?

In handling personal data, we comply with the legal regulations of the Czech Republic and directly applicable regulations of the European Union, especially Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data, on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "Regulation"), Act No. 110/2019 Coll. on the processing of personal data, as amended, and Act No. 480/2004 Coll. on certain information society services and on the amendment of certain laws, as amended.

1.2. What is personal data?

Personal data is any information that identifies or can identify a specific natural person. Personal data includes, but is not limited to:

  • Identification data such as first and last name, identification number, tax identification number, date of birth, user account login name;
  • Contact details such as residential address (or delivery address), telephone number, email address;
  • Other data such as information collected through cookies, IP address (network identifier) including browser type, device and operating system, time and number of accesses to the internet interface, and other similar information.

2. COLLECTION AND USE OF PERSONAL DATA

2.1. How do we obtain personal data? You provide us with your personal data, particularly when you complete an order (or through the contact form) or create a user account. If your personal data changes, please inform us. When visiting and using the internet interface, some personal data may also be collected and stored through cookies. For more information on cookies, see Article 5 of this Policy.

2.2. On what basis and for what purposes do we process your personal data?

  • The personal data entered in an inquiry (especially via the contact form) and in a purchase order may be processed without your explicit consent on the basis and for the purpose of concluding and performing a contract, i.e., for the delivery of goods or provision of services. Additionally, we may process this data on the basis and for the purpose of fulfilling our legal obligations (including reporting obligations, archiving tax documents, etc.) and based on our legitimate interest to assert our legal claims.
  • We may process the personal data you entered when setting up your user account without your explicit consent for the purpose of fulfilling the contract and solely to enable access to, management of, and administration of the user account.
  • We are entitled to use your email address without your explicit consent based on our legitimate interest to send you commercial communications about our goods that are similar to those you have ordered from us. You can refuse to receive commercial communications at any time.
  • If you give us your consent by confirming it on the website, we may process your personal data entered on the website, especially when you fill out an order or create a user account, for the purpose of sending commercial communications and direct marketing or for other purposes to which you have expressly consented. If you are under 15 years old, your guardian must give consent. In case of doubt, we may ask you to confirm your age.
  • We may use your email address and information about the goods or services you have purchased based on our legitimate interest to review and improve our services and goods and to determine your satisfaction, through the “Customer Verified” service of Heureka Shopping s.r.o. Your email address will be forwarded to Heureka Shopping s.r.o. to send you a feedback questionnaire as part of the “Verified by Customers” service. If you fill out this feedback questionnaire, Heureka Shopping s.r.o. will evaluate your feedback for us. This questionnaire will be sent to your email address after purchase at intervals determined by Heureka Shopping s.r.o. so you can evaluate the quality of our services and products. You can opt out of receiving feedback questionnaires at any time by using the link in the email with the questionnaire.
  • If you consent to the sharing of your personal data for the purpose of order processing, we will forward the order data along with your email address to Seznam.cz. They may use it to obtain independent reviews of our products and services. The transmitted personal data will be kept only for as long as necessary for this purpose.
  • We process personal data collected through cookies based on your consent (which you grant through the appropriate setting of your browser). We use the personal data collected through cookies primarily to support users, to improve our services, including analysis of user behavior, and for marketing purposes. We may use your personal data for a purpose other than the one for which it was collected only with your consent.

2.3. Wie lange verwenden wir die Daten?
Wir verwenden die im Rahmen von Anfragen und Warenbestellungen oder im Rahmen der Registrierung zur Verfügung gestellten personenbezogenen Daten nur für den Zeitraum, der zur Vertragsabwicklung und zur Erfüllung rechtlicher Verpflichtungen oder zur Wahrung unserer rechtlichen Ansprüche erforderlich ist.
Wenn Sie uns Ihre ausdrückliche Zustimmung zur Verarbeitung personenbezogener Daten erteilen oder wenn wir Ihre E-Mail-Adresse verwenden, um Ihnen kommerzielle Mitteilungen zukommen zu lassen und/oder um unsere Dienstleistungen und Waren gemäß dem vorhergehenden Artikel zu überprüfen und zu verbessern, werden die Daten für die Funktionsdauer der Internetschnittstelle verwendet, auf der wir ähnliche Dienstleistungen oder Waren wie die Ihnen angebotenen anbieten.

3. YOUR RIGHTS REGARDING PERSONAL DATA

3.1. Right to Withdraw Consent for the Processing of Personal Data If we process your personal data solely on the basis of your consent (i.e., without any other legal reason), you can withdraw your consent at any time. You can withdraw your consent to the processing of your personal data:

  • By email to our contact email address;
  • By phone using our contact number;
  • By written letter to our postal address;
  • In the case of commercial communications, by using the unsubscribe link provided in each email or by other means specified in the email. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal of consent.

3.2. Right to Access Personal Data You have the right to ask us if we are processing your personal data. If we are processing your data, you have the right to access this personal data and specifically to obtain the following information:

  • The purpose of processing;
  • The category of personal data processed;
  • The recipient or categories of recipients to whom the personal data has been disclosed;
  • The period for which the personal data will be stored. Upon request, we will provide you with a copy of the processed data. For additional copies, we may charge a fee not exceeding the cost of creating and delivering these additional copies.

3.3. Right to Rectification If your personal data is incorrect or incomplete, you have the right to request the immediate rectification, i.e., the correction of inaccurate data and/or the completion of incomplete data.

3.4. Right to Object to Processing You have the right to object at any time to the processing of your personal data if we process it for direct marketing purposes, including automated processing of personal data. In the event of an objection, we will cease to process your personal data for these purposes.

3.5. Right to Erasure ("Right to be Forgotten") You have the right to request the deletion of your personal data if:

  • The personal data is no longer necessary for the purposes for which it was collected or processed;
  • You have withdrawn your consent to processing;
  • You have objected to the processing of personal data;
  • The personal data has been processed unlawfully. If there are no legal grounds for refusing the deletion, we are obligated to comply with your request.

3.6. Right to Restriction of Processing You have the right to request that we restrict the processing of your personal data if:

  • The processing is unlawful and you request restriction instead of deletion;
  • We no longer need your personal data for processing purposes but you need it to assert, exercise, or defend legal claims;
  • You have objected to the processing. If we restrict processing, we are only allowed to store your personal data; further processing is only possible with your consent or for legal reasons. If the processing of personal data is restricted due to an objection to processing, the restriction applies for the time necessary to determine whether we are required to comply with your objection. If the processing of personal data is restricted because the accuracy of the data is disputed, the restriction applies for the period of verification of the data's accuracy.

3.7. Right to Data Portability You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another data controller.

3.8. How to Exercise Your Rights? You can exercise your rights regarding personal data by using our contact information. All information and actions will be provided to you without undue delay. We will do our best to protect your personal data. However, if you are not satisfied with the processing, you have the right to contact the relevant authorities, particularly the Office for Personal Data Protection (http://www.uoou.cz), which oversees the protection of personal data. This provision does not affect your right to lodge a complaint directly with the Office for Personal Data Protection. Especially if your residence, workplace, or the location of the alleged data protection violation is outside the Czech Republic, in another EU member state, you may contact the relevant supervisory authority in that member state.

4. MANAGEMENT AND PROCESSING OF PERSONAL DATA

4.1. Who Processes Your Personal Data? We are a data controller in accordance with the Regulation. To fulfill the contract or other obligations, we may also transfer your personal data to other parties, such as transport companies or other parties involved in fulfilling the contract or our obligations. Alternatively, we may engage other processors and recipients of personal data. We will also inform you about who specifically processes your personal data based on your request. Your personal data will not be transferred to countries outside the European Union unless necessary for the performance of a contract or for other reasons in accordance with the rules established by the Regulation for such transfers. The processing of your personal data is primarily carried out by:

  • Google LLC;
  • Seznam.cz, a.s., Id-No. 26168685;
  • Heureka Shopping s.r.o. Id-No. 02387727

4.2. How Do We Process Personal Data? Personal and other data are fully protected against misuse. Personal data is processed electronically through automated means or in printed form through non-automated means.

5. COOKIES

5.1. What Are Cookies? Cookies are text files stored on the computer or other electronic devices of each visitor to an internet interface, enabling the functionality of the internet interface. Not all cookies collect personal data; some merely enable the proper functioning of the internet interface. You can refuse the use of cookies by adjusting the settings in your browser. Please note that if you refuse the use of cookies, you may not be able to use the full functionality of the internet interface.

 

5.2. What Cookies and for What Purposes Does the Internet Interface Use?

The internet interface uses (temporary) session cookies, which are automatically deleted when you stop visiting the interface. It also uses persistent cookies that remain on your device until you delete them. The cookies used by the internet interface are as follows:

  • First-Party Cookies: These cookies are associated with the domain of our website and include essential cookies and performance cookies, which can be temporary or persistent:
    • Essential Cookies: They enable navigation on the website and the use of basic functions. They do not identify you in any way and are not considered personal data.
    • Performance Cookies: They are used to analyze how the website is used (e.g., number of visits, time spent on the website).
  • Third-Party Cookies: These cookies are associated with a domain other than our website's domain, even if you are on our website. They allow us to analyze our website and display tailored advertising. These include functional cookies as well as targeting and advertising cookies:
    • Functional Cookies: They personalize content by remembering login details, geolocation, etc.
    • Targeting and Advertising Cookies: They are used to display targeted ads on and off the internet interface. They may collect and process personal data. We may also share information about how you use our website with our partners in social media, advertising, and analytics.

5.3. Services Used That Work with Cookies

The internet interface uses Google Analytics and, if applicable, other services provided by Google LLC ("Google"), Facebook Pixel from Facebook Inc., and Sklik from Seznam.cz, a.s. These services work with information obtained through cookies.

These principles are valid and effective from May 1, 2020.