1. These rules for the privacy of data protection (hereinafter referred to as the “Rules“) lay down the rules for personal data processing of buyers in the sale and purchase of goods and services (hereinafter referred to as the “Buyer“) offered by PICCOLLO spol. s.r.o., Business ID No.: 453 10 556, registered in the Commercial Register maintained by the Municipal Court in Prague under C 8789, with the registered office at Na Podkovce 281/10, Podolí, 147 00 Prague 4, Czech Republic (hereinafter referred to as the “Seller“) and stipulate the rights and obligations of the Parties.

 

  1. The Seller is the Buyers’ personal data Manager under Article 4 point 7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to personal data processing and on the free movement of such data and repealing Directive 95/46/ES as amended (hereinafter referred to as “GDPR”). The Seller processes the following personal data in accordance with legal regulations, especially GDPR:

a) of Buyers who have entered into a Purchase Agreement with the Seller.

b) visitors to the Seller’s site.

 

  1. Personal data necessary for the successful completion of the contract (in the scope of name, surname, address/seat, ID/passport number, telephone number, e-mail address, ID, VAT number) are required when entering into a sales contract. The purpose of processing personal data is to process the order, execute the rights and obligations arising from the contractual relationship between the Seller and Buyer, verify and evaluate payment discipline through debtor registers, own marketing and business purposes, including direct marketing (sending business communications, telemarketing, market surveys).
  2. The legal reason (title) for personal data processing is the fulfilment of the agreement pursuant to Article 6 (1) point b) of GDPR, fulfilment of the administrator’s statutory obligation pursuant to Article 6 (1) point c) GDPR, consent pursuant to Article 6 (1) point a) GDPR and the Seller’s legitimate interest under Article 6 (1) point f) of GDPR. The Seller’s legitimate interest is personal data processing for the purpose of verifying and evaluating payment discipline via debtor registers, direct marketing (commercial communication and telemarketing) and conducting market research. Against personal data processing for the purposes of direct marketing in the scope of name, surname, email address, telephone number, the Buyer may lodge an objection under Article 21 of the GDPR on the e-mail marko@piccollo.cz. In such a case, the Seller will not continue to process such data until the serious legitimate processing grounds are established that outweigh the interests or rights and freedoms of the data subject or for the determination, exercise or defence of legal claims.

 

  1. The Seller uses the services of sub-contractors, in particular the web host and mailing service providers (personal data is stored in the EU as well as outside the EU) to fulfil a legitimate interest. Sub-contractors are screened for the safe processing of personal data. Vendors and sub-contractors have entered into a personal data processing agreement under which the sub-contractors are responsible for the proper security of the physical, hardware and software perimeter, and therefore bear direct responsibility towards the Buyer for any leakage or intrusion of personal data. Sub-contractors based outside the EU agree to comply with at least the same level of personal data protection as set out in the GDPR by participating in the Privacy Shield.

 

  1. The Seller shall store the Buyer’s personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the Buyer and the exercise of the claims arising from these contractual relationships (for 15 years from the termination of the contractual relationship). After it expires, the data will be erased. The Seller stores the personal data of the site visitors until the consent is withdrawn.

 

  1. The Buyer has the right to require the Seller to access their personal data pursuant to Article 15 of the GDPR, the correction of personal data pursuant to Article 16 of the GDPR, or the restriction of the processing under Article 18 of the GDPR. The Buyer has the right to delete personal data in accordance with Article 17 (1) point a) and c) to f) of the GDPR. In addition, the Buyer has the right to object to the processing under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR by sending an email to the email address marko@piccollo.cz.

 

  1. The Buyer has the right to file a complaint with the Personal Data Protection Office if they consider that their right to the personal data protection has been violated.

 

  1. The Buyer is under no obligation to provide personal data. However, the provision of personal data is a necessary requirement for the conclusion and performance of the contract and without providing the personal data necessary to fulfil the contract, it is not possible for the Seller to conclude the contract or fulfil the contract.

 

  1. Personal data will be processed automatically. The Seller does not automatically make an individual decision within the meaning of GDPR No. 22.

 

  1. By filling in the contact form a visitor to the Seller’s website:
    1. agrees to the use of their personal data for the purpose of sending commercial messages, advertising materials, direct sales, market surveys and direct offers of products by the Provider and third parties, but not more than once a week, and
    2. declares that sending the information according to point a) is not considered to be an unsolicited advertisement in the sense of Act No. 40/1995 Coll. as amended, as the user expressly agrees to sending the information according to point a) in conjunction with § 7 of Act. No. 480/2004 Coll.,
    3. consent under this paragraph may be revoked by the user at any time by email to marko@piccollo.cz.

 

  1. The Seller uses so-called cookies to improve the quality of their services, personalise the offer, collect anonymous data, and for analytical purposes in their presentation. Cookie details are provided in the cookies bar on the web interface. By using the web interface the Buyer agrees to use the mentioned technology.

 

  1. The Buyer has been familiar with these rules prior to the agreement’s conclusion. By signing the purchase agreement, the Buyer expresses that they have read the rules and accepts them in full.

 

  1. The Seller is entitled to change these terms and conditions. The Seller is obliged to publish a new version of the rules on their website, without undue delay, or send a new version to the Buyer at their email address. If the change requires the consent of the data subject, the new version will be submitted to indicate whether or not they agree.

 

  1. Seller’s contact details in matters relating to these terms: marko@piccollo.cz.

 

  1. Relationships not governed expressly by these terms and conditions are governed by the GDPR and the legal order of the Czech Republic, in particular by Act No. 89/2012 Coll., The Civil Code, as amended.

 

  1. These Rules shall take effect on May 25th, 2018.