Through this Privacy Policy ("the Policy"), we inform the data subjects whose personal data we process about all data processing activities and privacy policies of data subjects.
1. Responsible persons
Privacy Manager:
Petra Jelenova, IČ: 87410001, Zelivskeho 1346/7, 73601, Havirov, E-mail: info@shoppingpark.eu
(the "we", "us", "our" or "us")
2. Basic concepts
GDPR:
Regulation (EU) 2016/679 of the European Parliament and of the Council 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC effective from 25.05.2018.
Personal data:
Personal data within the meaning of Regulation (EU) 2016/6792016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data shall mean all information about an identified or identifiable natural person (ie, the data subject = you).


Special personal info:
Specific personal data means data on racial or ethnic origin, political opinions, religion or philosophical beliefs or trade union membership, and the processing of genetic data, biometric data to uniquely identify a natural person and data on health or sexual life or sexual orientation Individuals.
Data subject = You:
By the data subject is meant an identified or identifiable natural person, wherein the identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, for example, name, identification number, location data, network identifier, or one or more particular physical elements , physiological, genetic, psychological, economic, cultural or social identity of the individual.
Administrator:
Under Article 4 (7) of the GDPR, the controller is a natural or legal person, public authority, agency or other entity that alone or jointly determines the purposes and means of processing personal data. We act as an administrator in relation to your personal information.
Processor:
The processor is, within the meaning of Article 4 (8) of the GDPR, a natural or legal person, public authority, agency or other entity that processes personal data for the controller.

Supervisory Authority:
In the Czech Republic, the Supervisory Authority is the Office for Personal Data Protection (hereinafter referred to as the “ÚOOÚ”).
Risk Processing:
Risk processing means processing that is likely to pose a risk to the rights and freedoms of data subjects, processing is not occasional, or involves processing specific personal data or personal data relating to criminal convictions and offenses referred to in Article 10 GDPR.
Automated by individual decision making incl. profiling:
Automated individual decision making incl. profiling generally means any form of decision based on automated processing of personal data, ie without human intervention, consisting, inter alia, of evaluating certain personal aspects related to the data subject, in particular for the purpose of analysis or estimation. Analyze or anticipate aspects related to his or her work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movement.

We process personal data for a clearly defined purpose:

Categories of data subjects

Purpose of personal data processing

Legal basis and personal data processed

Processing time

Our customers

Implementation and implementation of contracts concluded with customers

The legal basis is the performance of the contract.

Identifying information (name, surname), contact details (delivery address or permanent address, e-mail, telephone), accounting information (credit card number, bank account number), order history, IP address, cookies and account registration information through which you are signing in and the claim form information (product identification, product defects).

For this purpose, personal data may be processed for the duration of the contractual relationship and the warranty period.

Applying Contractual Claims After Contract Termination

The legal basis is our legitimate interest in the right to recover claims, damages and other claims that may have arisen in the course of our contractual relationship.

Identifying information (name, surname), contact details (delivery address or permanent address, e-mail, telephone), accounting information (bank account number), order history, IP address, cookies and registration information for the account you use to sign in , and the claim form data (product identification, product defects) are required to settle claims, recover claims and other contractual obligations from contracts concluded between us and these data subjects upon termination.

For this purpose, personal data may be processed for four years after the termination of the contractual relationship, in the case of legal proceedings throughout the proceedings.

Fulfillment of our accounting and tax duties

The legal basis is the fulfillment of a legal obligation imposed on us by legislation such as the Accounting Act or the Value Added Tax Act.

Identification data (name, surname), contact details (delivery address or permanent address, e-mail, telephone), accounting data (bank account number and other information on tax documents).

For this purpose, personal data may be processed up to 10 years after the end of the tax period in which the performance was provided to the customer.

Dissemination of business messages in the form of professional information and news, marketing materials, offers of our goods or services

The legal basis is our legitimate interest in providing and offering similar goods to you that meet your needs based on our common business relationship.

Customer identification and contact personal data are processed to disseminate commercial communications.

For this purpose, personal data may be processed for the duration of the contractual relationship.

Website visitors

Statistics before anonymizing data, showing ads for our services or goods

The legal basis for us is a legitimate interest in the sense of a) improving our services and focusing on what you are really interested in; b) to offer you similar services or goods that meet your needs by accessing our website.

Identification data (name, surname), contact details (address, e-mail, telephone), IP address and cookies.

For this purpose, personal data may be processed for 6 months.

Sending a reply to a visitor's questionnaire

The legal basis is the performance of the contract or your consent

Identification data (name, surname), contact details (address, e-mail, telephone), IP address and cookies, query form submitted.

For this purpose, personal information may be processed until the request form is processed from the contact form, but not longer than 30 days or the time for which you consent to processing.

News subscribers

Regular sending of business messages by e-mail

The legal basis is the consent you have given us when registering for our newsletter.

Identification data (name and surname), contact details (e-mail).

For this purpose, personal data may be processed until the consent is revoked.

  1. Processing of personal data
    We only store personal data for as long as is necessary for the purpose of processing them - see the table above. After this period, personal data may be kept only for the purposes of the State Statistical Service, for scientific and archival purposes.

    5. Recipients of personal data and transfer of personal data outside the European Union
    In justified cases, we may also pass on your personal data to other entities (hereinafter referred to as "Beneficiaries").
    Personal data may be transferred to these recipients:
    processors who process your personal information according to our guidelines, in particular in the area of ​​public relations, electronic data management or bookkeeping
    public authorities and other entities, if required by applicable law;
    other entities in the event of an unexpected event in which the provision of data is necessary for the purpose of protecting life, health, property or other public interest or when necessary to protect our rights, property or security.

  1. Cookies
    After your first visit to our site, our server will send a small amount of data to your computer and store it there. Each time you visit the site, the browser sends the data back to the server. This small file is called a "cookie" and is a short text file containing a specific string of characters with unique information about your browser. We use cookies to improve the quality of our services and better understand how people use our site. That is why we have user preferences stored in the cookies and with their help we track user trends and how people behave on our site and how they view them.
    Most browsers are set to accept cookies. However, you have the option to set your browser to block cookies or to notify you of your cookies. However, without cookies, some services or features will not function properly.
    Our website uses only "first-party" cookies, ie cookies used only by our website ("first-party cookies") and "third-party" cookies (ie, cookies coming from third-party websites). and the data needed during your visit to the website (eg the content of your shopping cart) .We use third-party cookies to track user trends and behavior patterns, ad targeting with the help of third party web statistics providers. Third-party cookies used to track trends and behavior patterns are used only by our website and web statistics provider, and are not shared with any other third party.
    In particular, we use the following cookies:
    -GoogleAnalytics
    -GoogleAdWords
    -FacebookPixel
    -Sklik.cz

  1. Principles of personal data processing
    Legality
    We process your personal data in accordance with applicable law, especially GDPR.
    Data subject's consent
    We process personal data only in the manner and to the extent that you have given us permission if it is a processing title.
    Minimizing and limiting the processing of personal data
    We process personal data only to the extent that it is necessary for the purpose of their processing and for no longer than is necessary for the purpose of their processing.
    Accuracy of processed personal data
    We process personal data with an emphasis on accuracy using available measures. And using reasonable resources we process personal information updated.
    Transparency
    Through this Policy and Contact Person, you have the opportunity to learn how we process your personal information, as well as its scope and content.
    Purpose limitation
    We process personal data only to the extent necessary to fulfill the stated purpose and in accordance with this purpose.
    Safety
    We process personal data in a manner that ensures adequate security, including protection by appropriate technical or organizational measures, against unauthorized or unlawful processing and accidental loss, destruction or damage.

  1. Automated individual decision making and profiling
    When processing personal data, there is no automated individual decision-making, even on the basis of profiling.

    9. Your rights as a data subject
    Right to access personal data
    You have the right to request access to your personal information about us. In particular, you have the right to obtain confirmation from us as to whether personal data relating to you are processed by us or not, and to provide further information about the processed data and processing in accordance with the relevant provisions of the GDPR (purpose of processing, personal data category, recipients the planned storage period, the existence of your right to request the correction, erasure, restriction of processing or the right to object, the source of personal data and the right to lodge a complaint). If you request it, we will provide you with a copy of the personal information we process about you, free of charge. In the event of a repeated request, we may charge a reasonable fee for providing the copy corresponding to the administrative costs of processing.
    To access your personal information, please use your user account or the contacts listed in this policy.
    The right to withdraw the consent to the processing of personal data if the processing is based on consent
    You have the right at any time to withdraw your consent to the processing of personal data processed by us based on this consent.
    You may withdraw your consent through your user account or contacts listed in this policy.

Right of rectification, restriction or deletion
If you find that your personal information is inaccurate about us, you may request that we correct this information without undue delay. If it is reasonable in the light of the particular circumstances of the case, you may also request the addition of the information we hold about you.

You may request correction, restriction of processing or deletion of data through your user account or contacts listed in this policy

  • Right to delete personal data
    You have the right to request us to delete, without undue delay, the personal data we process about you in the following cases:

  • if you withdraw consent to the processing of personal data and no other legitimate reason for processing is given on our part, which would prevail over your right to delete;

  • if you object to the processing of personal data (see below);

  • Your personal information is no longer needed for the purposes for which we collected or otherwise processed it;

  • personal data has been processed unlawfully by us;

  • personal information was collected by us in connection with the offer of information society services to a person under the age of 18;

  • personal data must be erased in order to fulfill the legal obligation laid down in European Union law or in the Czech law applicable to us.

  • You may request deletion in these cases through your user account or contacts listed in this policy.


The right to request the deletion of personal data is not given in a situation where processing is necessary

  • to exercise the right to freedom of expression and information;

  • to meet our legal obligations;

  • for reasons of public interest in public health;

  • for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, where the deletion of data is likely to render impossible or seriously compromise the achievement of the objectives of that processing;
    to determine, exercise or defend legal claims.


You can find out if there are reasons for not being able to use the deletion right through your user account or contacts listed in this policy.
The right to limit the processing of personal data
You have the right to limit the processing of your personal data when:

-you deny the accuracy of personal information. In this case, the restriction applies to the time needed to verify the accuracy of your personal information.
processing is illegal and you refuse to delete your personal data and ask instead to restrict their use.
-We no longer need your personal information for the purposes for which we have processed it, but -you require it to determine, execute or defend legal claims;
-you object to the processing (see below). In this case, the restriction is valid until it is verified that the legitimate reasons on our part outweigh your legitimate reasons.
-At the time of processing of personal data, we may process your personal data (with the exception of their storage) only with your consent or for the purpose of defining, exercising or defending our legal claims, for the protection of the rights of another natural or legal person or for important public interest of the Union Member State. As stated above, you may request processing restrictions through your user account or contacts listed in this policy.

Right to object to processing
You have the right to object to the processing of your personal data in the following cases:

  • If personal information is processed because processing is necessary for the performance of a task performed in the public interest or in the exercise of public authority to which we are entrusted, or for the purposes of our legitimate interests, and you do not object to the processing, to process unless we substantiate serious legitimate reasons for processing that outweigh your interests, rights and freedoms, or to determine, exercise or defend our legal claims.

  • If personal data is processed for direct marketing purposes and you object to the processing, we will no longer process personal data for that purpose.

  • If your personal data is processed for scientific or historical research or for statistical purposes, we will not process it further unless processing is necessary for the performance of a task performed for reasons of public interest.

You can submit an objection through your user account or contacts listed in this policy.


Right to data portability
In the event that we process your personal data on the basis of your consent or because it is necessary to perform a contract concluded between us, you have the right to obtain from us personal information that concerns you and which you have provided to us in a structured way , commonly used and machine readable format, if personal data are processed by us. You have the right to transmit this data to another data controller or to request that this data be provided directly to another data controller if technically feasible. You may obtain your personal information through your user account or contacts listed in this policy.

The right not to be subject to any decision based solely on automated processing, including profiling
We do not use personal data for automated decision making.

Right to get information about breaches of your personal information
If it is likely that a violation of our security will result in a high risk to your rights and freedoms, we will notify you of this violation without undue delay. If proper technical or organizational measures have been used to process your personal data, for example, to make it incomprehensible to an unauthorized person, or to ensure that there is no high risk of additional risk, we do not need to provide you with violation information.

Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data violates the obligations set out in the GDPR, you have the right to file a complaint with the supervisory authority. The supervisory body in the Czech Republic is the Office for Personal Data Protection.

This Privacy Policy is effective from May 25, 2018.