Processing of personal data

Information on the processing of personal data pursuant to Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and the instruction of data subjects (hereinafter referred to as "GDPR") for customers of the entrepreneur:
Hojdavak s.r.o. Company ID No.: 21203423 registered with the Municipal Court in Prague, Section 398193, Insert C, with registered office at Prague 10 - Benice, Okrasná 114, Postal Code: 103 00, selling goods under the brand name hojdavak - the word may be replaced by a colored logo (hereinafter also "hojdavak")
Some important terms you should understand:
GDPR (General Data Protection Regulation) is the abbreviation used for the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the instruction of data subjects, which is the main piece of legislation governing the protection of personal data as of 25 May 2018.
Personal data is any information about an identified or identifiable natural person, where an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a particular data point such as name, address or other contact details, identification number, location or other data.
The controller of personal data is primarily a natural or legal person, a public authority or another entity which alone or jointly with others determines the purposes and means of processing personal data; in the case of Hojdavak, the controller is Hojdavak s.r.o., registration number 21203423, with its registered office at Prague 10 - Benice, Okrasná 114, Postal Code: 103 00.

Personal data processor natural or legal person, public authority or other entity that processes personal data for the controller; hojdavak does not have any personal data processor.
Processing of personal data means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction.
I. Data Controller
The data controller of your personal data in Hojdavak is Hojdavak s.r.o. ID No.: 21203423, with registered office in Prague 10 - Benice, Okrasná 114, Postal Code: 103 00.
II. Sources of personal data
Hojdavak receives your personal data directly from you, processing data based on your information that you provide on the hojdavak website www.hojdavak.cz or in direct e-mail communication via this domain.

III. Purpose and legal title of the processing of your personal data
As a customer of hojdavak, your personal data is processed for the purpose of fulfilling the contractual obligations arising for hojdavak from the purchase contract to which you are a party. The legal title for the processing of your personal data is thus the conclusion and performance of the purchase contract.
Your personal data may be further processed independently of the conclusion of the purchase contract if you have created a personal user account on the hojdavak web interface www.hojdavak.cz. All personal data collected and processed in this way is based on your consent. Please note that if any personal data is provided on the basis of consent, this consent can be withdrawn at any time (see section IX. of this information on the processing of personal data).
IV. Scope of processing of personal data and categories of personal data processed
Personal data is processed to the extent that you, as a customer of hojdavak, have provided it in connection with the conclusion of a purchase contract or the creation of a personal user account.
In this context, the following categories of personal data are processed:

1. conclusion of the purchase contract
- contact and identification data used to uniquely and unmistakably identify you (name, surname, place of residence, or ID number)
- data for contacting you (telephone, e-mail)
- other data necessary for the performance of the contract (bank account)
2. creation and maintenance of a personal user account
- contact and identification data to uniquely and unmistakably identify you (name and surname, or registration number and address)
- data for contacting you (e-mail or telephone)
V. Categories of persons whose personal data are processed
- the natural person who concluded the purchase contract (buyer/customer)
- the natural person who has created a personal user account on the hojdavak website
VI. Recipients of personal data
Your personal data is not transferred to a third party, not even to a third country, i.e. a country outside the EU.
VII. Duration of processing of personal data
In accordance with generally binding legal regulations, as well as the pro-customer approach of hojdavak, your personal data is processed for the period necessary to ensure the rights and obligations arising from the purchase contract or for the period specified in the individual categories of personal data processed.

1. conclusion of the purchase contract: 2 years
2. creation and maintenance of a personal user account: until your consent is withdrawn or until the personal user account is cancelled by hojdavak in accordance with the terms and conditions
VIII. Your rights related to the processing of personal data
You have the following rights in relation to the processing of personal data:
The right to obtain confirmation from the controller as to whether or not personal data relating to you is being processed and, if so, the right to access that personal data and the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period;
- the existence of the right to request the controller to rectify or erase personal data concerning the data subject or to restrict or object to processing;
- the right to lodge a complaint with a supervisory authority;
- any available information about the source of the personal data, unless it is obtained from the data subject;
- the fact that automated processing of personal data takes place.

The right to have inaccurate personal data concerning you corrected by the controller without undue delay, including the right to request the completion of personal data.
The right to have personal data concerning you erased by the controller without undue delay if one of the following reasons applies:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the data subject withdraws the consent on the basis of which they were processed; and there is no further legal basis for the processing;
- the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing or the data subject objects to the processing;
- the personal data have been unlawfully processed.
The right to have the controller restrict processing in any of the following cases:
- the accuracy of your personal data is contested on your part, for as long as necessary to allow the controller to verify the accuracy of the personal data;
- the processing is unlawful and you request a restriction of processing instead of erasure;
- the controller no longer needs the personal data for the purposes of the processing, but you need your personal data to continue to be processed for the establishment, exercise or defence of your legal claims.

If you discover or believe that the controller or processor is processing personal data in breach of the applicable law, you have the right to:
- ask the controller for an explanation,
- request that the controller remedy the situation (in particular by rectifying, supplementing or erasing the personal data)
IX. Where can I turn in relation to data protection?
If you have any questions or suggestions regarding data protection issues, please contact the following email address:
info@hojdavak.cz
Please also use this address if:
- you wish to exercise any of your rights mentioned above; if you exercise any of the rights mentioned in point VIII. of this information, the controller will provide information on the measures taken without undue delay, at the latest within one month of receipt of the request. This period may be extended by a further two months if necessary and in view of the complexity and number of requests.
- you wish to withdraw your consent to the processing of your personal data.
If the controller does not comply with your request for clarification of any inconsistencies with the relevant legislation or does not rectify such inconsistencies on the basis of your request, you have the right to apply directly to the supervisory authority for personal data, which is the Data Protection Authority.