PRIVACY POLICY
The operator of the e-shop MadaCraft s.r.o., available at www.mada-craft.cz, Company ID: 11823879, VAT ID: CZ11823879, with its registered office at Lidická 700/19, 60200 Brno - Veveří, processes personal data provided by the buyer for the purpose of fulfilling and confirming the Terms and Conditions, processing electronic orders, delivering goods, payment transactions, and necessary communication between the contractual parties for the time required by specific legal regulations.
BASIC PROVISIONS
1. The controller of personal data under Section 5 letter o) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter referred to as the "Act"), is MadaCraft s.r.o., Company ID: 11823879, with its registered office at Lidická 700/19, 60200 Brno - Veveří (hereinafter referred to as the "Controller").
2. The controller's contact details are: E-mail: info@mada-craft.cz tel. +420 721 285 705, +420 721 285 705
3. Personal data means all information that identifies a natural or legal person.
SOURCES OF PROCESSED PERSONAL DATA
1. The controller processes personal data that the buyer has provided with consent and that has been obtained in connection with the performance of a Purchase Agreement and the processing of an electronic order on the e-shop www.mada-craft.cz.
2. The controller processes only identification and contact data necessary for the fulfillment of the Purchase Agreement.
3. Personal data is processed for delivery, payment processing, and essential communication between the contractual parties for the time required by specific legal regulations. Personal data will not be made public or transferred to other countries.
PURPOSE OF PROCESSING PERSONAL DATA
The controller processes the buyer's personal data for the following purposes:
1. For registration on the website www.mada-craft.cz in accordance with Section 13(1)(a) of Act No. 18/2018 on the Protection of Personal Data.
2. For processing the buyer's electronic order (name, address, email, phone number).
3. For fulfilling the rights and obligations arising from the contractual relationship between the buyer and the Controller.
4. Providing personal data is a necessary requirement for the performance of the Purchase Agreement. Without providing personal data, the agreement cannot be concluded.
DATA RETENTION PERIOD
1. The controller retains personal data for the time necessary to exercise the rights and obligations arising from the contractual relationship between the buyer and the Controller and for a period of 3 years after its termination.
2. After the data retention period expires, the Controller is obliged to delete the data.
RECIPIENTS AND PROCESSORS OF PERSONAL DATA
Third parties who may receive personal data of the buyer are subcontractors of the Controller. The services of these subcontractors are essential for the successful performance of the Purchase Agreement and electronic order between the Controller and the buyer.
The Controller's subcontractors are:
- Webnode AG (e-shop platform provider)
- Zásilkovna (delivery service)
- Google Analytics (website traffic analysis)
BUYER'S RIGHTS
According to the conditions set out in the Act, the buyer has the right to:
1. Access their personal data
2. Correct personal data
3. Delete personal data
4. Object to processing
5. Data portability
6. Withdraw consent to the processing of personal data in writing or electronically to the e-mail address: info@mada-craft.cz
7. File a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.
DATA SECURITY
1. The Controller declares that all appropriate technical and organizational measures necessary to secure the buyer's personal data have been implemented.
2. The Controller has taken technical measures to secure data storage and personal data, especially by securing access to computers with a password, using antivirus software, and performing regular computer maintenance.
FINAL PROVISIONS
1. By submitting an electronic order on the website www.mada-craft.cz, the buyer confirms that they have been informed of the terms and conditions of personal data protection and that they accept them in full.
2. The buyer agrees to these rules by ticking the checkbox in the order form.
3. The Controller reserves the right to amend this Privacy Policy at any time. The new version must be published on the Controller's website.
This Privacy Policy is effective as of May 11, 2022.
