Personal data protection
PROCESSING OF PERSONAL DATA
This declaration is processed in accordance with a regulation of the European parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”) and Czech legislation, namely the bill no. 101/2000 Sb., on personal data protection in regards to their processing, on free movement of said data and guidance of subjects of said data.
The goal of this declaration is to inform the customers about the requirements of the personal data processing that is being done by the administrator of the personal data (as defined below) in regards to the operation and usage of the e-shop www.airsoftshop.cz as well as some other cases of processing of personal data done by the administrator of the personal data.
Administrator of the personal data and contact details
Jan Šulc – Bohemia Air Soft
address: Lánovská 1550, 190 16 Praha 9 – Újezd nad Lesy
e-mail: gdpr@airsoft.cz
phone: +420 281 972 592
(further referred to only as „the administrator“)
The administrator in accordance with the legislation did not appoint an appointee for the protection of personal data.
Range, legal basis for the processing of personal data and its reason
Personal data (basic contact and identification details, e.g. first name and surname, address, e-mail, phone number, data box, bank details or given identification numbers) is processed in range provided by the subject of said data on a voluntary basis in order to establish a contractual or legal relationship with the administrator or the data lawfully gained by the administrator from the subject of said data or a lawful third party through the administrator’s business operation or the data gained legally in regards to the administrator’s business operation from e.g. public registry, registrations, etc. and the administrator processes said data in accordance with valid laws or as the administrator is required by the law or lawfully given requirements.
Legal basis for the processing of personal data are:
-preparation and performance of a contract between the administrator and the subject of said data as per article 6 par. 1 b) GDPR;
-further potential processing to which the subject of said data provided consent as per article 6 par. 1 a) GDPR;
-performance of legal requirements and laws in regards to stored registries for the subject of said data as per article 6 par. 1 c) GDPR;
-on the basis of lawful interest of the subject of said data or a third party as per article 6 par. 1 f) GDPR.
The personal data of subjects of said data is being processed by the administrator through its employees in electronic or printed version. There is no automatic individual decision making as per article 22 GDPR on the administrator’s part.
Processing of personal data in regards to the purchase of goods or service in e-shop or direct sale
In case of a purchase of good on e-shop www.airsoftshop.cz the administrator is also in the position of the seller of said goods. In regards to this, the administrator will process personal data of the buyer (subject of said data) of the following range: first name, surname, e-mail address, phone number and shipping address as well as other information important for the safe delivery of goods (e.g. the name of the employer while shipping to the buyer’s company).
Processing of said personal data will be done in order to perform the contract between the subject of said data and the administrator, to deliver ordered goods and to protect the rights and legally protected interests of the subject of said data.
The administrator will be processing said data only per the absolutely necessary period of time. Personal data stored in a customer account on the website will be kept there only until the termination of the account by the subject of said data (who is also entitled to ask the administrator to erase the data) or by the administrator. Some personal data (e.g. personal data on invoices made by the administrator) will be stored during the period required by law.
The processing of personal data as per this article will be done by the administrator via the administrator’s employees as practitioners. In case the goods are being delivered (as per the customer’s request) onto an address mentioned in the order, the administrator will provide the customer’s personal data to the delivering service.
In case the customer chooses to pay using the payment gateway or a credit card, the customer’s personal data essential to do so are shared with the provider of said service, namely Global Payments Europe, s.r.o. and KB Smart Pay s.r.o. on the grounds of their legal requirements.
In case the customer chooses to pay via bank transfer, the customer will receive information and bank details from the administrator to make the transfer, which is then performed by the customer via the customer’s bank following its requirements and regulations.
In case that a verification by the birth number (“rodné číslo” in Czech) if the requirements set by the bill no. 119/2002 Sb. (firearms and ammunition) were met is needed, this birth number will not be stored in any way or form.
Processing of personal data in regards to involvement in discount offers/programs
If the customers register themselves in any discount programs, additional personal data on top of the aforementioned personal data is being stored to authorize this involvement (e.g. a membership in an airsoft team, website or social media site of said team, information about the customer’s service in a unit that receives the discount, etc.). This personal data is stored as long as the customer is involved in the discount program. The processing of personal data as per this article is done by the administrator via the administrator’s employees as practitioners.
The customer is entitled to withdraw its consent in regards to the storage of said data via e-mail sent to gdpr@airsoft.cz.
The processing of personal data as per this article is done by the administrator via the administrator’s employees as practitioners.
Processing of personal data in regards to the processing of returns
If the administrator (who is the seller at the same time) is required to process a return of goods or a service, the administrator will store personal data required in order to complete said return process. The legal basis for such processing of personal data is the fulfilment of contractual obligations and duties by the administrator as the seller, and therefore it is a processing of personal data that does not require the consent of the person performing the return.
In regards to returning goods/services the administrator is also processing the customer’s personal data in order to protect the administrator’s rights and legally protected interests in case of a conflict created by the returning process. As such no consent from the customer is required in regards to the processing of personal data. The period of time, range and other aspects of processing of personal data in order to complete a return request are based on the administrator’s obligation to perform the return.
The processing of personal data as per this article is done by the administrator via the administrator’s employees as practitioners.
If necessary in order to complete the return, the administrator might provide the personal data to the administrator’s suppliers and manufacturers to process and complete the return and only to those whose product or service is involved. The information about which supplier or manufacturer is involved, is available to the customer on request via email to the administrator.
Processing of personal data in regards to the newsletter delivery
If the subject of said data is interested in receiving a newsletter or other commercial correspondence, a consent is required on the customer’s part.
The content of the newsletter might be personalized based on the personal and other data necessary for personalization provided.
The personal data provided is being processed until the given consent is withdrawn. The processing of personal data as per this article is done by the administrator via the administrator’s employees as practitioners.
The consent with this processing of personal data is voluntary, not connected to any other services and can be withdrawn anytime via an e-mail message to gdpr@airsoft.cz.
The usage of cookies and website analysis
Cookies are small data files, short texts, that are placed and stored in the internet browser of every visitor to the administrator’s website. These cookies are being used by the administrator based on the lawful interest of improving the website’s functionality, analyzing its visit rate, personalizing its contents and optimizing the supply of good.
Cookies gathered are processed by the service Google Analytics, run by the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
All the gathered cookies are then processed by the company Google Inc. in accordance to the Privacy Policy, for further information please visit policies.google.com.
If the website visitor does not agree with the gathering of cookies, this can be disabled by changing the settings of the visitor’s internet browser, namely by the option of anonymous browsing that does not allow the storage of information about websites visited.
The usage of social media plug-ins
The administrator’s website also contain third party social media plug-ins , which allow visitors to share content with their friends and other contacts. Namely these are:
-Facebook plug-in
-Twitter plug-in
-Google+ plug-in
These social media plug-ins are not managed by the administrator, therefore the administrator is not responsible for a potential processing of personal data done by administrators of said plug-ins or websites to which they are linked to; nor their functionality or any damage caused by them.
Recipients of the personal data
Processing of personal data is being done by the administrator or by trained and verified employees as practitioners and by an external accountant.
Within range necessary for the contractual relationship with the customer these are also shared with delivery services and aforementioned providers of payment and bank services.
The administration of information and communication technologies for the administrator is provided by a company CompCity s.r.o.
The data hosting services for the server www.airsoftshop.cz and the administration of the e-shop system are provided by a company a-net group, a.s.
The administration of e-mail services for the administrator is provided by a company INTERNET CZ, a.a.
The purchase feeback evaluation is provided by Heureka.cz.
Rights connected with the personal data protection
The personal data is being processed transparently by the administrator and during the whole time subjects of said data have the following rights, as informed by the administrator in accordance with the article 12 GDPR:
-the right to access the personal data as per article 15 GDPR and related information;
-the right to adjust the personal data as per article 16 GDPR;
-the right to erase the personal data as per article 17 GDPR;
-the right to limit the processing of personal data as per article 18 GDPR;
-the right to transfer the personal data as per article 20 GDPR;
-the right to complain about the processing of personal data as per article 21 GDPR.
The right to withdraw its consent to processing of personal data and other incentives and suggestions may be submitted by the subject of said data in a written form or electronically by e-mail as mentioned in article 1 of these GDPR terms and conditions.
Every subject of said data that discovers or believes that the administrator or a practitioner is processing the personal data contrary to the protection of personal and/or private life of the subject of said data or against the law (especially if the data is incorrect in regards to their purpose) is entitled to ask the administrator for explanation and demand the administrator to correct the situation, namely by blocking, correcting, adding or erasing the personal data.
If the request of the subject of said data is found justified, the administrator corrects the situation immediately. If the administrator does not comply with the request of the subject of said data, the subject of said data is entitled to inform the managing institution, which is the Office for Personal Data Protection.
The subject of said data is entitled to inform the aforementioned office even without doing the previous steps as per article 16 GDPR and related.
Conditions of security of personal data
The administrator declares that every technological and organizational means of security of personal data is being used.
The administrator adopted technological means of security of data drives and storages of personal data in written form.
The administrator declares that the access to personal data is provided only to verified persons appointed by the administrator.
Final provisions
By sending the order from the e-shop www.airsoftshop.cz customers (who are also subjects of said data) agree that they have acknowledged themselves with the conditions of the personal data protection and that they accept them.
The administrator reserves a right to change these conditions and such change will be immediately made public in the public section of the website www.airsoftshop.cz.
These conditions and declarations regarding the personal data protection are in effect since 25th May 2018. This translation is for informative purposes, the legally binding version is the original version in Czech language.
