Terms of personal data protection

Policy for working with your data

Michaela Holečková, with registered office at Františka Malíka 988/53, Most, 43401, ID number 19895593, e-mail malvy@malvy.cz

We operate an e-shop on the website www.malvy.cz

For the provision of our services, the sale of goods and the operation of our website, we process some personal data.

The processing of personal data is regulated in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation personal data) ("GDPR")

· Processing of personal data

· Processing of personal data when using the contact form

If you inquire about our products and services, we will work with your contact information that you provide us, mainly through the inquiry form. They are name, surname, address, purchased goods.

For what reason?

We will contact you through them for further arrangements regarding the goods

On what legal basis?

This is processing on the basis of Article 6 paragraph 1 letter b) GDPR – contract negotiation, or implementation of pre-contractual measures at your request.

How long will we process personal data?

If we do not establish further cooperation, we will process your data for a maximum of 12 months from our last communication.

· Processing of personal data in case of purchase

If you buy from us, we will work with the data you fill in for us. These are mainly invoicing data: name, surname, address, telephone number.

For what reason?

We need to process personal data to fulfill our contract - to deliver our goods to you. We will also communicate with you via the contact details regarding the status of your order, possibly regarding complaints or your questions.

We will continue to process personal data to fulfill our obligations arising from the law (mainly for accounting and tax purposes, possibly for processing complaints and others).

On what legal basis do we process personal data?

This is processing on the basis of Article 6 paragraph 1 letter b) GDPR – fulfillment of the contract and Article 6 paragraph 1 letter c) GDPR – fulfillment of our legal obligation.

How long will we process personal data?

For the duration of our service and then 12 months after the last provision of such service or delivery of goods.

3. Newsletters (business communications)

If you are a shopping customer and you did not opt ​​us out at the time of purchase, we will use your email address to send our newsletters.

On what legal basis?

§ 7, paragraph 3 of Act No. 480/2004 Coll., on certain information society services, allows us to do this, if you did not prohibit us from doing so during the purchase.

How long will we process personal data?

1 year/years since your last purchase. You can unsubscribe from the newsletter at any time by e-mail or contact us at malvy@malvy.cz

II. WHO CAN ACCESS THE DATA?

Your data will remain with us. Nevertheless, some companies or other persons work for us and get access to the data because they help us run our e-shop. They are:

• operator of the Webnode e-shop platform (with registered office at Hlinky 995/70, Břevnov, 60300 Brno Staré Brno, ID number 289 35 675, the company is registered at the Municipal Court in Prague, section B file 25 395)

• companies participating in the shipment of goods – Zásilkovna, PPL, Hermes

• companies participating in payment forwarding - Shoptet Pay

• e-mail service provider Google

We process personal data only on the territory of the European Union.

III. WHAT ELSE YOU SHOULD KNOW

We do not have a designated personal data protection officer in our company.

Our company does not make decisions based on automatic processing or profiling.

If you have any questions about personal data, please contact us at malvy@malvy.cz

IV. USE OF COOKIES

Cookies are text files containing a small amount of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognizes them on each subsequent visit.

Cookies perform various tasks, for example enabling efficient navigation between web pages, remembering your preferences and overall improving the user experience. They can also ensure that the advertisements displayed online are better tailored to you and your interests.

We use the following cookies on the website:

• Necessary cookies: they are necessary for the operation of the website, for example, they allow you to log into secure parts of the website and other basic functionality of the website. This category of cookies cannot be disabled.

• Analytical/statistical cookies: for example, they allow us to recognize and determine the number of visitors and to track how our visitors use the website. They help us improve the way the site works, for example by making it easier for users to find what they're looking for. We only run these files with your prior consent.

• Advertising cookies: used to track preferences and allow you to display advertising and other content that best matches your interest and online behavior. We only run these files with your prior consent.

Please note that third parties (including e.g. external service providers) may also use cookies and/or access data collected by cookies on the website.

You can find more information about cookies and their current list via individual internet browsers, most often in the Developer Tools item.

Consent can be expressed through a check box contained in the so-called cookie bar. You can subsequently refuse cookies in the settings of your Internet browser, or set the use of only some of them.

V. YOUR RIGHTS IN CONNECTION WITH THE PROCESSING OF PERSONAL DATA

The GDPR regulation gives you, among other things, the right to contact us and ask for information about how we process your personal data, to request access to this data from us and have it updated or corrected, or to request a restriction of processing, you can request a copy of the processed personal data, request us in certain situations erasure of personal data and in certain cases you have the right to their portability. You can object to processing based on legitimate interest.

If you think that we are not handling the data correctly, you have the right to file a complaint with the Office for Personal Data Protection, or take your claims to court.

These conditions are effective from 1/11/2023