Principles of protection and processing of personal data

 

A. General provisions

1. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is ANIMA Design s.r.o, ID No. 08973440, with registered office at Legerova 578/70, 120 00 Prague 2 - Vinohrady, Czech Republic, represented by Vit Bechynsky, Managing Director, registered in the Commercial Register maintained by the Municipal Court in Prague, file No. C 328473 (hereinafter referred to as the "Controller").
2. The Administrator is the operator of the e-shop www.animahookah.com.
3. Contact details Administrator: ANIMA Design s.r.o., ID No. 08973440, registered office: Legerova 578/70, 120 00 Prague 2 - Vinohrady, the Czech Republic, e-mail: hello@animahookah.com, telephone: +420 725 558 393.
4. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

B. Data protection and sending commercial communications

1. Ordering the goods requires entering certain important data in terms of further communication between the parties and in connection with the subsequent delivery of the ordered goods. Registration requires the entry of certain important data in terms of further communication. The data provided is intended only for the Controller, who is also the seller, and is not provided to third parties.
2. By providing your contact details, in particular your e-mail address, you agree to receive information and special offers and promotions. You can refuse or withdraw your consent at any time.
3. On the basis of the contract concluded between you as a buyer and the Administrator as a seller (hereinafter referred to as the "Contract") and your subscription to commercial communications, your personal data (hereinafter referred to as "Personal Data") is processed.
4. Personal data is processed only for:
   • for the purpose of performance of the Contract and
   • if you give your consent by confirming this on the web interface, we may also process Personal Data for the purpose of sending commercial communications and direct marketing, or for other purposes to which you have expressly consented.
5. Personal data may be disclosed to the following third parties:
   • external accountant,
   • external law firms,
   • persons providing server, web, cloud or IT services or business partners of the Administrator.
6. Personal data will not be disclosed to third parties from outside the EU and EEA.
7. Personal data will be processed for the duration of the Agreement or for the period necessary to fulfil archiving obligations under applicable law, but no longer than 5 years after the execution or other termination of the Contract.
8. You have the following rights under data protection regulations:
   • the right of access to Personal Data, which means that you may at any time request confirmation as to whether or not Personal Data concerning you are being processed and, if so, for what purposes, to what extent, to whom they are disclosed, for how long they will be processed, whether you have the right to rectification, erasure, restriction of processing or to object, where the Personal Data were obtained from, and whether or not automated decision-making, including possible profiling, is taking place on the basis of the processing of Personal Data; you also have the right to obtain a copy of your Personal Data, the first provision of which is free of charge, and further provision of which may be subject to a reasonable charge for administrative costs.
   • the right to rectification of Personal Data, which means that it is possible to request the rectification or completion of Personal Data if it is inaccurate or incomplete.
   • the right to withdraw consent to processing in writing or electronically to the address or e-mail of the Controller.
   • the right to erasure of Personal Data, which means that Personal Data must be erased if:
     • are no longer necessary for the purposes for which they were collected or otherwise processed, 
     • consent to the processing of Personal Data is withdrawn and there is no further reason for the processing of Personal Data,
     • there is an objection to processing and there are no overriding legitimate grounds for processing the Personal Data,
     • the processing of Personal Data is unlawful or 
     • this is a legal obligation.
   • the right to restrict the processing of Personal Data, which means that until the disputed issues regarding the processing of Personal Data are resolved, specifically if:
     • the accuracy of the Personal Data is denied, 
     • the processing is unlawful, but instead of erasure, it is only requested to restrict the processing, 
     • The Contracting Party no longer needs the personal data for the purpose of processing, 
     • or if an objection to the processing has been raised, the other party may only store the Personal Data and further processing is subject to consent or that the data is needed for the establishment, exercise or defense of legal claims. 
   • the right to portability of Personal Data, which means that you have the right to obtain your Personal Data provided by the Controller with consent to processing or for the purposes of performance of a contract in a structured, commonly used and machine-readable format and, where technically feasible, to have such data transferred to another controller.
   • the right to object to the processing of Personal Data, which means the ability to object in writing or electronically to the processing of Personal Data.
9. All rights set out in the preceding paragraph may be exercised either in writing by registered letter sent to the address of the Administrator's registered office or electronically at the e-mail address hello@animahookah.com.
10. You have the right to lodge a complaint against the processing of Personal Data with the Office for Personal Data Protection at: www.uoou.cz.
11. The provision of personal data is required because it is necessary for communication with you, the performance of your obligations under the Contract, or is required by law. The consequence of not providing the data may be not concluding the contract.
12. There is no automated decision-making or profiling based on the Personal Data processed.

 

C. Final provisions

1. The controller declares that it has taken all appropriate technical and organizational measures to safeguard personal data.
2. The controller declares that only persons authorized by it have access to the personal data.
3. By submitting an order from the online order form, you confirm that you are aware of the terms of the privacy policy and that you accept it in its entirety.
4. The administrator is entitled to change these conditions. It will post the new version of the Privacy Policy on its website and will also send the new version of the Privacy Policy to the email address you have provided to the Controller.