Privacy Policy

 

      I. Basic information

ADONIO INVEST s.r.o., ID No.: 17244820, with its registered office at Újezd 427/28, Malá Strana, 118 00, Prague, registered in the Commercial Register kept by the Municipal Court in Prague under file No. 368818 C, (hereinafter also referred to as the "Seller") becomes the controller of personal data provided by customers and visitors to its website: https://www.adonio.cz, which also functions as an online store or e-shop (hereinafter also referred to as the "Online Store").

 

The Seller publishes this Information on the processing and protection of personal data of customers and visitors of the Internet shop website (hereinafter also referred to as "Information"), i.e. all persons who search for goods from the Seller, order goods, or conclude a purchase contract with the Seller, or also persons who contact the Seller regarding its goods and services via electronic communication, (hereinafter all these persons are collectively referred to as "Customers" or individually "Customer").

 

The Seller, ADONIO INVEST s. r.o., hereby declares that it will process the personal data provided by the Customers in accordance with the principles set out in this Information. The Seller is entitled to process the personal data of the Customers in accordance with the relevant legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, General Data Protection Regulation (hereinafter referred to as "GDPR"). The Seller is thus entitled to process the personal data of the Customers provided by the Customers, in particular:

 

1. when ordering goods, or
2. when setting up a customer account on the Online Shop website,
3. when communicating with the Seller using electronic means of communication.

 

      II. Personal data controller and data subject

The Seller is the controller of the personal data provided within the meaning of the GDPR. The Customer is the data subject within the meaning of the GDPR. The Seller has not appointed a data protection officer. 

 

      III. Scope of personal data processed

The Seller will process the personal data of Customers in the following scope: name, surname, date of birth, birth number, email address, telephone number, home address, delivery address, information about the payment card enabling online payments, customer's bank account number, identification files when viewing the Internet shop website (hereinafter referred to as "Personal Data").

 

The stated scope of processed Personal Data applies as a maximum, but in specific cases, the Seller will obtain from Customers only those Personal Data whose processing is necessary for the purpose of processing in a given case. 

 

      IV. Purposes of processing Personal Data

The Seller processes Personal Data in accordance with the legal regulation under the GDPR, in particular in accordance with the principles of processing Personal Data under Article 5. GPDR and furthermore, when the legal grounds for processing Personal Data pursuant to Article 6. GPDR Regulation.  

 

The specific purposes of the processing of Personal Data by the Seller under the legal grounds for processing set out in the GDPR are as follows: 

 

1. providing information to Customers about the Seller, the goods and services offered based on Customer requests and inquiries,
2. accepting orders in the Online Shop or by other means of remote communication,
3. fulfillment of the Customer's order, fulfillment of obligations under the purchase contract for the sale of goods,
4. sending information about the status of orders, receipt of payments, and shipment of goods
5. receiving payments for the price of goods and registering incoming payments,
6. setting up and maintaining a customer account in the Online Shop,
7. records of sales of goods within the accounting system,
8. archiving in case of claims and inspections by the competent authorities,
9. sending newsletters and commercial communications to the email address provided by the Customer in connection with the sale of goods or services from the Seller.

 

The legal grounds (titles) for the processing of Personal Data by the Seller are therefore within the meaning of Article 6. GPDR Regulation are as follows:

 

      1. The Customer's consent to the processing of Personal Data for one or more specific purposes (consent is not required if another of the following legal titles is met for the purpose, or the authorisation arises directly from the law);

      2. The processing is necessary for the performance of a contract concluded with the Customer, or is necessary to carry out measures taken at the Customer's request prior to the conclusion of the contract;

      3. The processing is necessary to comply with a legal obligation to which the Seller is subject;

      4. The processing is necessary for the purposes of the legitimate interests of the Seller.

 

      V. Period of processing of Personal Data

 

The Seller will process Personal Data for the duration of any of the above processing purposes. The specific processing period may vary depending on the circumstances and will be determined by: 

• time to prepare a response to questions and requests sent to the Seller's goods and services,
• the time required to provide the measures based on the Customer's request before the conclusion of the contract,
• the time necessary for the performance of the Seller's obligations under the concluded contract,
• the duration of the relevant periods for liability for defects in the goods or other periods provided for in the contract with the Customer,
• the archiving period stipulated by legal regulations for the fulfilment of the Seller's legal obligations, e.g. the Accounting Act.

 

      VI. Method of processing and storage of Personal Data

 

Personal data are processed on the Seller's side in an automated electronic form in a secure electronic data storage, in justified cases they may also be processed in paper form by the Seller's employees. Personal data in paper form will be stored in a locked and secure room to which the Seller will have exclusive access. The Seller shall ensure appropriate further security of the personal data according to the way it is processed (e.g. password security, use of encryption, locking of documents in a cabinet).

 

In addition to the Seller, other persons who provide services to the Seller for the operation of the Online Shop, such as server lessors, data storage providers, software license providers, web and IT administrators on the Seller's side, and possibly other IT service providers, will have access to the stored Personal Data..

 

     VII. Transfer of Personal Data to other recipients

The Seller is entitled to transfer Personal Data to third parties under the conditions set out in the GDPR and other legal regulations with regard to the stated purposes of processing. In this sense, the Seller is entitled to transfer Personal Data to the extent necessary for the performance of the contract concluded with the Customer, in particular to banks and payment service providers, carriers and freight forwarders, operators of dispatch points for the collection of shipments and other persons used by the Seller in the performance of its obligations to the Customer.   

 

The Seller will further transfer Personal Data to other processors if necessary to protect its rights or to fulfil its obligations. In this sense, the Seller is entitled to transfer Personal Data to, for example, an accounting firm when processing accounting, tax advisors when dealing with tax affairs, an insurance company when dealing with an insurance claim, legal advisors when dealing with disputed or unclear rights and obligations, or other contractual partners of the Seller in connection with one of the purposes of processing.

 

The Seller will not transfer Personal Data outside the European Union or to third countries where an adequate level of personal data protection is not confirmed by a decision of the European Commission.

 

      VIII. Customer's rights in relation to Personal Data

 

1. Right of access to Personal Data and right to information

 

The Customer has the right to ask the Seller to confirm whether his Personal Data is processed by the Seller or that it is not processed. If the processing of the Customer's Personal Data by the Seller continues, the Customer has the right to information about the categories of Personal Data processed, the purposes of processing, information about other recipients of Personal Data and for how long the Personal Data will be stored. The information on the storage period of Personal Data may also be fulfilled by the Seller by providing information on the basis of which the storage period will be determined. The Customer is also entitled to be informed of its rights under the GDPR.

 

In the request for confirmation or information, the Customer is obliged to provide information to verify the identification of his/her person, so that there is no doubt whether the request was actually made by the person who is the subject of the Personal Data. The Seller shall provide the requested information to the Customer at the Customer's request, usually within a few working days of receipt of the request, but no later than 60 days. In exceptional cases, this time limit may be extended by the time necessary to verify the identification of the applicant, to obtain statements from third parties (e.g. other recipients of Personal Data) or to obtain the opinion of the competent supervisory authority. The requested information or the response to the Customer's request shall be provided by the Seller in electronic form, unless the Customer has indicated in the request that he/she is requesting the provision in paper form.

 

The Seller may, in justified cases, refuse the Customer's requests to disclose information that is completely unjustified, or such information has already been provided to the Customer and the request is repeated, or requires unreasonable effort to obtain, or is difficult to obtain (for example, from an external archive or from difficult to access electronic data backups). The Seller may refer the Customer to the following Information published on the Internet Shop website or to other published data.

 

Customers will not be subject to decision-making based solely on automated decision-making, including profiling, in the processing of Personal Data by the Seller.

 

 

2. Right to rectification of Personal Data

 

In the event that the Seller discovers that the Seller has stored Customer Personal Data that is inaccurate, outdated or in any way incorrect, the Customer has the right to request the Seller to correct or supplement the Customer Personal Data. The submission of information on the change of Personal Data is necessary for the performance of the Seller's obligations towards the Customer and also for the performance of its tasks as a Personal Data controller. The Seller shall process the request for correction of Personal Data usually within a few working days of receipt of the Customer's request, but no later than within 60 days.

 

3. Right to erasure

 

The Customer has the right to request that the Seller delete their Personal Data if any of the following conditions are met:

1. Customer's personal data is not necessary for the purpose of the work.
2. The reason for the processing of Personal Data was the Customer's consent to the processing and the Customer withdraws this consent and there is no other legal reason for the processing of Personal Data.
3. The Customer has lodged an objection with the Seller to the processing of Personal Data pursuant to Article 21 of the GDPR where the purpose of the processing of the Personal Data was the performance of tasks in the public interest or the legitimate interests of the Seller and the Seller does not demonstrate that it continues to have particularly compelling legitimate grounds for further processing.
4. The Customer has objected to the Seller's processing of Personal Data pursuant to Article 21 of the GDPR Regulation if the purpose of the processing of Personal Data was the Seller's marketing (e.g. in the case of sending newsletters and commercial communications).
5. It becomes apparent that the processing of the Customer's Personal Data is unlawful.
6. Personal data must be deleted as part of the Seller's obligation under the laws of the Czech Republic or the European Union.
7. The Seller has obtained Personal Data in connection with an offer of information society services within the meaning of the Information Society Services Act (e.g. an offer to sell services online).

 

The Customer's right to erasure of Personal Data shall not apply in the event of the existence of an obligation of the Seller to store Personal Data that applies to it under the law of the Czech Republic or the European Union and in the event that the storage of Personal Data is necessary for the protection and assertion of legal claims.. 

 

The Seller will usually process the request for deletion of Personal Data within a few working days of receipt of the Customer's request, but no later than 60 days. If the Customer has duly exercised the right to erasure and the above conditions for the erasure of his Personal Data are met, then the Seller shall carry out their erasure to the maximum extent possible taking into account the available technologies for the removal or erasure of the relevant data and the associated costs. The Seller shall take steps to ensure that the erasure of Personal Data is carried out by other processors. Should erasure of Personal Data not be technically feasible or involve disproportionate costs, the Seller shall ensure that the processing of Personal Data is no longer prevented and no use is made of the Personal Data.

 

4. Right to restriction of processing    

The Customer has the right to restrict the processing of Personal Data in the event that: 

1. the Customer's recorded Personal Data is not accurate, for the time necessary to verify the accuracy of the recorded Personal Data,
2. the processing of the Customer's Personal Data is unlawful, but the Customer requests a restriction on the processing of the Personal Data instead of deleting it,
3. Personal data are not necessary for the Seller, but the Customer requests the provision of recorded data for the protection and exercise of legal claims,
4. The Customer has lodged with the Seller an objection to the processing of Personal Data pursuant to Article 21 of the GDPR Regulation in the event that the purpose of the processing of Personal Data was the performance of tasks in the public interest or the legitimate interests of the Seller, for the time necessary to verify whether the Seller continues to have particularly compelling legitimate grounds for further processing.

 

The Seller will usually process the request for restriction of processing of Personal Data within a few working days of receipt of the Customer's request, but no later than 60 days. In the event of restriction of processing, it applies that the Customer's Personal Data may continue to be stored and processed only with the Customer's consent, or for the protection and exercise of legal claims, for reasons of public interest of the Czech Republic or the EU.  

 

If the conditions for lifting the restriction on the processing of Personal Data are met, the Seller will notify the Customer in advance that the restriction on processing will be lifted.

 

5. Right to information about rectification, erasure or restriction of processing of Personal Data 

The Seller is obliged to notify the Customer that corrections or deletions of his Personal Data have been made or limitations on their processing when the Customer exercises such rights. At the Customer's request, the Seller shall inform the recipients of the Personal Data if it proves technically impossible or would require disproportionate effort to carry out the correction, erasure or restriction of processing.

 

The Seller will inform the Customer in this way always within the aforementioned time limits for the processing of the respective request. In exceptional cases, the time limit may be extended by the time required to obtain the opinions of third parties (e.g. other recipients of Personal Data), legal opinions or the opinion of the competent authority. The Seller shall provide a response to the Customer's request in electronic form, unless the Customer has indicated in the request that it is asking for the Seller's response in paper form. 

 

6. Right to portability of Personal Data 

The Customer has the right to obtain from the Seller the Personal Data that the Seller records about him in a structured, commonly used and machine-readable format, provided that their processing is automated on the basis of the Customer's prior consent or in connection with the concluded contract. At the Customer's request, the Personal Data may be transferred in this form to another data controller.

 

7. Right to object 

The Customer has the right to object to the processing of his Personal Data with the Seller in the following cases: 

1. The reason for processing the Personal Data was the performance of tasks in the public interest or the legitimate interests of the Seller and further processing is not justified, in which case the Seller cannot further process the Personal Data unless it demonstrates that it continues to have particularly compelling legitimate grounds for further processing.

       2. Personal Data is processed for direct marketing purposes, in which case the Seller cannot further process the Personal Data for these purposes.

 

The Customer has the right to file objections with the Seller in writing in paper or electronic form via email at: info@adonio.cz or at the Seller's contact details published at www.adonio.cz.

 

8. Right to lodge a complaint with the competent supervisory authority 

The competent supervisory authority within the meaning of the GDPR in the Czech Republic is the Office for Personal Data Protection. The contact details of this supervisory authority are published on its website www.uoou.cz.

 

The Customer has the right to lodge a complaint with the Office for Personal Data Protection if the Customer believes that the processing of their Personal Data has violated the GDPR or other legal regulations. In addition to this right, the Customer has other options for legal protection under Czech law. The Office for Personal Data Protection may also be contacted to obtain further information on the exercise of the Customer's rights in the protection of their Personal Data.

 

      IX. Electronic data and files when viewing the Online Shop website

 

Protocol files

When displaying and browsing the Internet Shop website, the Seller receives log files on the Customer's side and stores them on the relevant servers necessary for the operation of the Internet Shop. The log files stored include the IP address on the Customer's side, web requests in the Online Shop, web response codes, browser identification of the Customer, monitor resolution and other data of a similar nature. This information is processed for a maximum period of 12 months, unless it is linked to the Customer's Personal Data, in which case the log files will be subject to the Personal Data processing period and the Customer's rights regarding Personal Data will also apply to this additional data.

 

Cookies and Personal Data

 

Within the operation of the Seller's Internet shop, cookie technologies are used, where they are stored in the Customer's communication device or in the browser settings used by the Customer. Cookies primarily ensure the proper functioning of the Internet Shop website (technical cookies), or some are used for statistical or marketing purposes (analytical and marketing cookies). When visiting the Online Shop, the Customer receives information about the cookies used and information about the possibility of giving consent to the use of cookies.

 

Consent to the use of cookies includes the possibility of storing them on the Customer's end device and the possibility of reading them by the Seller. The Customer has the right to grant, withhold or refuse consent to the use of cookies. The Customer has the right to revoke the consent at any later time.

 

With the exception of technical cookies, which are necessary for the functioning of the Online Shop and the sale of goods, the Customer may prohibit the use of other cookies (i.e. statistical and marketing cookies). The Customer can delete the stored cookies from his/her device at any later time, i.e. delete them. Within the framework of the use of cookies, the Customer's Personal Data may be processed in the event that the use of cookies enables the identification of the Customer or if cookies are linked to Personal Data. The use of cookies by the Seller will be associated with the processing of Personal Data in cases of ordering goods on the Online Store, in cases of maintaining a Customer Account or in cases of consent to the use of cookies. In these cases, the processing of cookies is subject to the Personal Data processing period and the Customer is entitled to the same rights as in the case of Personal Data.

 

      X. Contacts and final provisions

For any further questions regarding the processing and protection of Personal Data, Customers may contact the Seller at the contacts listed below:

 

email: info@adonio.cz

www.adonio.cz

 

 

This Information on the processing and protection of personal data of the Company becomes effective upon its publication on the Internet Shop website (the current version was published on 5 October 2022).

 

Attachment - Privacy Policy download

 

ADONIO INVEST s.r.o.