Protection of personal data

Protection conditions
personal data

AND.

Basic provision

1. By the administrator of personal data according to
   Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on protection
   natural persons in connection with the processing of personal data and free
   the controller of this data (hereinafter: " GDPR ") is Section s.r.o., IČO 09110534 with registered office at Jeruzalémská 1782/11, Prague, 110 00 (hereinafter: " controller ").
2. The administrator's contact details are

address: Jeruzalémská 1782/11, Prague, 110 00

email: i nfo@sectionstore.cz

telephone: +420 722 590 721

1. Personal data is understood
   any information about an identified or identifiable natural person;
   an identifiable natural person is a natural person who can be directly or
   to identify indirectly, especially by reference to a certain identifier, for example
   name, identification number, location data, network identifier or na
   one or more special elements of physical, physiological, genetic,
   psychological, economic, cultural or social identity of this physical
   persons.
2. The administrator did not appoint a trustee
   for the protection of personal data.

II.

Resources and categories
processed personal data

1. The administrator processes personal
   data that you have provided to him/her or personal data that the controller has obtained on
   based on the fulfillment of your order.
2. The administrator processes your
   identification and contact data and data necessary for the performance of the contract.

III.

Lawful reason and purpose
processing of personal data

1. Legal reason for processing
   personal data is

• fulfillment of the contract between you and the administrator
  according to Article 6 paragraph 1 letter b) GDPR,
• the administrator's legitimate interest in
  providing direct marketing (especially for sending business messages and
  newsletters) according to Article 6 paragraph 1 letter f) GDPR,
• Your consent to processing for
  for the purposes of providing direct marketing (especially for sending business
  communications and newsletters) according to Article 6, paragraph 1 letter a) GDPR in conjunction with § 7
  paragraph 2 of Act No. 480/2004 Coll., on certain information services
  company in the event that the goods have not been ordered or
  services.

1. The purpose of personal data processing
   data is

• processing your order a
  exercise of rights and obligations arising from the contractual relationship between you and
  administrator; personal data is required when ordering, which is necessary
  for the successful completion of the order (name and address, contact), providing
  personal data is a necessary requirement for concluding and fulfilling the contract, without
  it is not possible to enter into a contract with or without the provision of personal data
  administrator fulfill,
• sending commercial messages and
  doing other marketing activities.

1. There is no automatic from the administrator side
   individual decision-making within the meaning of Article 22 GDPR. With such
   by processing you have given your express consent.

IV.

Data retention period

1. The administrator stores personal data

• for the time necessary to exercise the rights
  and obligations arising from the contractual relationship between you and the administrator and
  asserting claims from these contractual relationships (for a period of 15 years from termination
  contractual relationship).
• until the consent is withdrawn
  with the processing of personal data for marketing purposes, no longer than 2 years, if any
  personal data processed on the basis of consent.

1. After the retention period has expired
   the personal data administrator deletes the personal data.

IN.

Recipients of personal data
(administrator subcontractors)

1. Recipients of personal data are
   persons

• involved in the delivery of goods /
  services / execution of payments based on the contract,
• providing operating services
  e-shop (Shoptet) and other services in connection with operation
  e-shop,
• providing marketing
  services.

1. The administrator intends to transfer
   personal data to a third country (a country outside the EU) or an international organization.
   Recipients of personal data in third countries are mailing providers
   services and cloud services.

VI.

Your rights

1. Under the conditions specified
   in the GDPR you have

• the right to access your
  personal data according to Article 15 GDPR,
• the right to correct personal data according to
  Article 16 of the GDPR, or restriction of processing according to Article 18 of the GDPR.
• the right to erasure of personal data
  according to Article 17 GDPR.
• the right to object to
  processing according to Article 21 GDPR a
• the right to data portability
  according to Article 20 GDPR.
• right to withdraw consent
  by processing in writing or electronically to the address or email address of the manager listed
  in Article III of these conditions.

1. You also have the right to file a complaint
   with the Office for the Protection of Personal Data in the event that you believe it was
   Your right to the protection of personal data has been violated.

VII.

Security terms
personal data

1. The administrator declares that he has accepted
   all appropriate technical and organizational security measures
   personal data.
2. The administrator accepted the technical
   measures to secure data stores and personal data stores
   in paper form, especially passwords, encryption, cloud backups and
   anti-theft programs.
3. Administrator declares that
   only authorized persons have access to personal data.

VIII.

Final Provisions

1. By sending an order from
   of the online order form, you confirm that you are familiar with
   terms of personal data protection and that you accept them in their entirety.
2. With these conditions
   you agree by ticking consent via the internet form.
   By checking consent, you confirm that you are familiar with the terms of protection
   personal data and that you accept them in their entirety.
3. The administrator is entitled to these
   conditions to change. The new version of the personal data protection conditions will be published on
   its website and at the same time will send you a new version of these
   terms and conditions, your e-mail address that you provided to the administrator.

These conditions take effect on 04/05/2020.