Terms and Conditions ruling the protection of personal data when using the mobile application DENINY
I. Basic provisions
Personal data administrator pursuant to Article 4, section (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural individuals with regard to the processing of personal data and on the free movement of such data (hereinafter: „GDPR”) is the CMPG s.r.o. (Ltd.) Company. ID. No. 28749863 with registered office in Ústí nad Labem - City, Ústí nad Labem - Centre, Rooseveltova-Street 1804/2. (hereinafter referred to as the „Administrator“ only).
Administrator contact data
Address: Rooseveltova Street 1804/2, Ústí nad Labem - Centre
Phone: +420 478 579 092
Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a particular identifier such as name, identification number, location information, network identifier or by one or more specific physical, physiological, genetic, psychological, economic, cultural signs or by the social identity of this natural person.
The administrator did not appoint a Data Protection Officer.
II. Sources and categories of processed personal data
The administrator processes the personal information you provided to it or the personal information that the administrator obtained as a result of downloading and using the application. In order for the application to provide its functionality, in some circumstances the activation of which you will be notified requires access to:
- Social network access data
The administrator processes your identification and contact data and the data necessary for the performance of the contract.
The Administrator continues to process the following information and data to ensure the contractual terms and conditions of Use of the application:
III. Legal reason and purpose of personal data processing
The legal reason for processing the personal data is
the performance of the contract between you and the administrator pursuant to article 6, section 1, letter (b) of the GDPR;
the legitimate interest of the administrator as to the provision of direct marketing (in particular for sending commercial communications and newsletters) pursuant to article 6, section 1, letter (f) of the GDPR;
Your consent as to processing for the purpose of providing direct marketing (in particular for sending commercial messages and newsletters) pursuant to article 6, section 1, letter (a) of the GDPR in conjunction with § 7, article 2 of Act No. 480/2004 Coll., on Certain Information Society Services, in the absence of an order for goods or services.
The purpose of the processing of personal data is:
- Securing the terms and conditions for operation of the application
- Sending business messages and doing other marketing activities.
There is no automatic individual decision-making by the Administrator within the meaning of Article 22 of the GDPR. You have given your explicit consent to such data processing.
IV. Data retention and archiving period
The administrator keeps the personal data
for the time period necessary to exercise the rights and obligations arising from the contractual relationship between You and the Administrator and to assert claims arising from these contractual relationships (for the time period of 15 years from the termination of the contractual relationship).
for the time period until the withdrawal of consent with the processing of personal data for marketing purposes, but no later than 5 years if the personal data are processed on the basis of the consent.
After the personal data retention and archiving period has expired, the administrator will delete the personal data.
V. Recipients of personal data (subcontractors of the Administrator)
The recipients of personal data are persons
involved in the delivery of goods / services / payments under contract,
providing e-shop operation services and other services related to e-shop operation,
providing marketing services.
Operated services providing marketing and support services
Google analytics - It records cookies and web usage.
Google Adwords - It records cookies and web usage.
Google Purchases - Request for a review, it logs e-mail if you agree in the order process.
Heureka - It records purchase conversions and e-mails for the service indicated as "Verified by customers".
Zboží.cz - It records purchase conversions and e-mails.
Sklik - It records cookies, web usage and purchase conversions.
Bing - It records cookies, web usage and purchase conversions.
Zoho - It records cookies, web usage and purchase conversions.
VI. Your rights
Under the conditions set out in the GDPR you have
the right of access to your personal data pursuant to Article No. 15 of the GDPR;
the right to rectify personal data pursuant to Article 16 of the GDPR, or to limit the data processing according to Article No. 18 of the GDPR;
the right to have personal data deleted pursuant to Article No. 17 of the GDPR;
the right to raise objection against the data processing under Article No. 21 of the GDPR; and
the right to data portability and data transfer under Article No. 20 of the GDPR;
the right to revoke the data processing consent in writing or electronically to the address or e-mail of the administrator specified in Article No. III hereof. You can revoke the consent at any time via your own customer account.
You also have the right to file a complaint towards the Office for Personal Data Protection if you believe that your right concerning the personal data protection has been violated.
VII. Terms and conditions of personal data security and safety
The administrator declares that it has taken all appropriate technical and organizational measures to secure the personal data.
The administrator has implemented technical measures to secure data and personal data storage in paper form, especially in form of secured / encrypted access to the web, encrypting customer passwords in the database, regular system updates and regular system backups.
The administrator declares that only the persons authorized by it have access to the personal data.
VIII. Final provisions
By submitting an order from the on-line order form, you confirm that you are familiar with and accept the terms and conditions of personal data protection in full extent.
You agree to these terms and conditions by checking and indicating your consent via the on-line form. By checking your consent, you acknowledge that you are familiar with and accept the terms and conditions of personal data protection in full extent.
The Administrator is entitled to change these terms and conditions. The administrator will post a new version of the “Terms and conditions ruling the personal data protection” on its website and at the same time it will send you a new version of these terms and conditions to your e-mail address which you provided to the administrator.
These Terms and Conditions come into effect on 01st April 2020.