Terms of personal data protection
INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA
of the company INFINITE MedStyle s.r.o., ID number: 077 70 634, with registered office at Svatojánská 678/11, Třebeš, 500 11 Hradec Králové, registered in the commercial register maintained by the Regional Court in Hradec Králové, section C, entry 43982 (hereinafter referred to as "The Seller"), as the controller of personal data, hereby informs about the processing of personal data carried out in connection with the operation of the online store available at www.infinitemedstyle.cz (hereinafter referred to as the "E-shop"), concluding purchase contracts with customers of the E-shop ( hereinafter "Buyer") and by registering Buyers in the E-shop. This document also includes information on the rights that data subjects have in connection with the above-mentioned processing.
For any questions regarding the protection of privacy and the exercise of your rights, use this contact:
- e-mail: info@infinitemedstyle.cz
1. For what purpose, on the basis of what titles and what personal data do we process?
- Closing and purchase contracts
In order for the Seller to be able to negotiate and conclude a purchase contract with the Buyer regarding the goods offered in the E-shop, the Seller needs the following personal data of the Buyer - a natural person:
- identification data of the Buyer (name, surname, date of birth, in the case of an entrepreneur, also ID number, VAT number, registered office address),
- contact details of the Buyer (e-mail, telephone number, delivery and billing address),
- depending on the chosen method of payment for the ordered goods, also the bank account number and other payment data,
- information from communication with you, information about the conclusion of the performance of the purchase contract.
Without the above-mentioned data, it is not possible to conclude or fulfill the purchase contract. The legal title of the processing of this data is the conclusion and fulfillment of the purchase contract at the request of the Buyer.
- Registration and maintenance of a user account in the E-shop
The Seller allows Buyers to register and create a user account in the E-shop (hereinafter referred to as "User Account"). If the Buyer registers and creates a user account, a contract for registration and maintenance of the user account is concluded. For the purposes of fulfilling this contract, we then process the data specified in paragraph 1.1 and, in addition to that, the access data of the Buyer - a natural person (username and password in encrypted form).
The above-mentioned data are necessary for the registration of the Buyer and the establishment and management of his User account, without which it is not possible to conclude or fulfill the contract for the registration and management of the user account. The legal title of the processing of this data is the conclusion and fulfillment of the contract at the request of the Buyer.
- Contact form and social networks
Through the Seller's E-shop interface, the Buyer is entitled to ask the Seller questions. For this purpose, a contact form is available in the E-shop interface.
In the event that the Buyer decides to contact the Seller in the above manner, the Seller will process the following personal data, depending on whether the Buyer chooses to contact the Seller anonymously or not:
In the case of contacting the Seller anonymously, this will mainly be information from communication with the Buyer.
In the event that the Buyer chooses to contact the Seller through an account based on the social network Facebook - a social network operated by Meta Platforms Ireland Limited, the Seller will receive, based on the Buyer's consent, the following data from Meta Platforms Ireland Limited in particular:
- information from the Buyer's public profile stored on Facebook (e.g. first name, last name, gender, profile picture, email address);
- social network numeric ID;
- information from communication with the Buyer.
The purpose of the processing of the above-mentioned personal data is to record and process the answer to the question asked by the Buyer, which concerns the future performance of the contract. Without providing personal data, the Seller cannot process the Buyer's inquiry. The legal title of the processing of this personal data is the implementation of measures before the conclusion of the contract at the request of the Buyer.
- Compliance with legal obligations
The seller must process personal data in cases where it is required by law. For this purpose, the Seller mainly processes personal data to the extent required by the relevant legal regulations in connection with the Seller's obligation to handle Buyers' complaints, keep accounts and in the fulfillment of related tax obligations, or for the fulfillment of obligations imposed by the Archiving Act.
- Legitimate interests of the Seller
In justified cases, the Seller may process personal data also on the basis of a legal title, which is the protection of its legitimate interests. However, the seller always consistently assesses and ensures that the interest in processing your data for this purpose does not unreasonably interfere with your privacy.
Identification of persons acting on behalf of the Buyer – legal entity: These are typically members of statutory bodies, employees or other authorized persons who are not parties to the contract with the Seller, but conclude the contract on behalf of the Buyer, communicate with the Seller and otherwise deal with the Seller on behalf of the buyer. We need the personal data of these persons in order to be able to communicate and deal with the Buyer for the purpose of concluding a purchase contract or a contract for registering and maintaining a user account with the Buyer, its further performance, or exercising the Buyer's rights. We usually process the name, surname, e-mail, telephone number, delivery address, job position or other relationship with the Buyer and data from communication with these persons.
Proof of acceptance of the terms and conditions: In the case of concluding a contract with the Buyer online (by electronic means), we store the data necessary to identify the Buyer as a contractual party, so that in case of later doubts or disputes, we have a time stamp available as proof of the conclusion of the contract and of agreement with our terms and conditions in a specific wording.
Personalization of business communications:
On the basis of order history and identification data, we personalize commercial communications according to our estimate of the Buyer's interests.
Defense and exercise of legal claims: We process personal data for the purposes of protecting our legitimate interest, which is to ensure the possibility of our defense in the context of possible legal disputes, proceedings before a court or during inspections by state authorities or other public administration authorities (typically ČOI, etc.). We process data in order to be able to prove, if necessary, that we have acted in accordance with our contractual obligations and legal regulations. In this context, we typically process the identification and contact data of the Buyer, or persons dealing with us on behalf of the Buyer, data on concluded contracts, their fulfillment and communication with the Buyer, or persons acting on behalf of the Buyer.
- Sending commercial messages
In the case of Buyers with whom we concluded a purchase contract or who registered in the E-shop and established a user account and in connection with this we obtained their e-mail and/or telephone number, or in the case of other persons who actively and have voluntarily subscribed to our newsletters, we process the personal data of these persons in the range of e-mail and telephone number for the purpose of sending information and news about our services and products (commercial communications).
In the case of Buyers with whom we have concluded a purchase contract or who have a user account, the title of personal data processing for the purpose of sending business communications is the Seller's legitimate interest in being informed about the Seller's latest offers.
By the title of processing personal data for the purpose of sending commercial communications, in the case of persons who actively subscribed to the newsletter without us entering into a contract with them, their consent, which was granted just by signing up for the subscription to commercial communications.
In the event that you no longer wish to receive these messages from us, you have the option of unsubscribing free of charge at any time, following the procedure specified in each commercial message sent, or within the scope of your user account, or you can contact us at any time at the contact e-mail provided earlier in this document.
2. From whom do we receive personal data and to whom do we pass it on?
We obtain personal data primarily from data subjects. We do not collect any other data about you, except for those that you give us yourself, or which are created by your activity within the E-shop. You are required to provide us with only accurate information and if your personal information changes, you must update the information.
We can transfer personal data under the conditions set by law to public administration bodies where the law requires us to do so, or if the given body requests it within its competences.
We use the following processors for data processing:
- Shoptet, a.s., IČO 289 35 675,
- Zásilkovna s.r.o., IČO: 28408306,
- WEDOS Internet, a.s., IČO: 28115708,
- Eva Vašková, IČO: 71769536
Personal data may also be transferred to our business partners, who act as independent personal data administrators with respect to your personal data. These are in particular operators of the payment gateway through which online payments are made possible in the Internet Shop, or cooperating carriers used for the delivery of goods.
Personal data is not transferred outside the EU, unless otherwise stated above.
3. How do we process personal data?
We process your personal data primarily in electronic form by automated means in our IT systems, or in the systems of our individual processors. Personal data may also be processed manually in accordance with the relevant purpose where manual processing is necessary or appropriate.
When managing your data, our employees or other persons working for us may act, among other things, for the purpose of eliminating errors, inaccuracies, etc. However, these persons may process personal data only under the conditions and to the extent stated above and are bound by the obligation to maintain confidentiality about personal data data and about security measures, the disclosure of which would endanger the security of personal data.
We always process personal data in accordance with the relevant legal regulations and ensure proper care and protection. We make sure that you do not suffer damage to your rights, especially the right to maintain human dignity and your private and personal life.
4. How long do we process personal data?
- Purchase agreement and user account registration and management agreement
We process personal data processed for the purpose of concluding and fulfilling the contract with the Buyer for the duration of the conclusion and fulfillment of the given Contract (i.e. for the period necessary to fulfill the obligations arising from the purchase contract, or for the duration of your registration in the E-shop).
Even after that, we may process personal data for the following purposes:
- Contact form and social networks
We process the personal data provided by the Buyer in the contact form or via the social network for the time necessary to process the inquiry, but no longer than one month after the inquiry has been completed.
- Compliance with legal obligations
We process personal data processed as part of our legal obligations within the time limits set by these laws.
We must process personal data that is required by the legal regulation governing the tax and accounting obligations of the Seller (typically invoicing data and information about the performance provided) for the purposes of accounting and the fulfillment of tax obligations. The processing period is 5 years from the end of the accounting period, in the case of documents relevant for VAT payments, it is 10 years from the end of the tax period in which the performance took place. We archive relevant personal data in accordance with the requirements of the Act on Archiving for the period specified therein. We keep the data processed for the purpose of processing complaints for the duration of the period for exercising rights from defective performance, or for the duration of the warranty period.
- Legitimate interests
Even after the termination of the contract with the Buyer, we process personal data for the protection of our legitimate interests (i.e. defense against potential claims of the Buyer or third parties, including before the court) for the duration of the relevant limitation periods. If the appropriate procedure is not initiated, we store this data for a period of 5 (five) years from the termination of the contractual relationship with the Buyer.
- Sending commercial messages
We send commercial communications as stated above and process personal data for these purposes until you unsubscribe from them in accordance with the procedure specified in paragraph 1.6 of this document.
- Longer processing
Personal data may be processed even longer than stated above, in the event that a relevant reason for further processing arises, typically an administrative or judicial proceeding is initiated for which the personal data are relevant.
5. What are your rights?
First of all, you have the right to ask us for access to your personal data, including making a copy of all your personal data. You can do this by using the email listed in the header of this document.
Withdraw consent to processing: If we process your personal data on the basis of your consent, you can revoke your consent to their processing at any time freely and free of charge, through your user account, the contact email listed above, or otherwise, as stated elsewhere in this document. In this case, we will no longer process your personal data processed on the basis of consent.
In the case of personal data that is not processed on the basis of consent, it is not possible to revoke the consent to processing. However, based on your request, we will always assess whether it is necessary to still process your personal data for any of the above-mentioned purposes.
Your other rights:
We will always inform you about:
- the purpose of personal data processing,
- personal data, or categories of personal data that are the subject of processing, including all available information about their source,
- the nature of automated decision-making, including profiling, and information regarding the procedure used, as well as the meaning and anticipated consequences of such decision-making for the data subject,
- recipients, or categories of recipients to whom personal data has been or will be transferred, and in the case of transfer of personal data to a third country, also about appropriate guarantees applicable to the transfer to ensure the security of personal data,
- the planned period for which personal data will be stored, or if it cannot be determined, the criteria used to determine this period,
- all available information about the source of personal data, if not obtained from you.
Your other rights include:
- ask us for an explanation,
- demand that we remove the resulting situation, in particular it may be blocking, correction, addition, restriction of processing or disposal of personal data (right to be forgotten),
- request a copy of the processed personal data, or request personal data relating to you in a structured, commonly used and machine-readable format, and transfer this data to another administrator, without us preventing this in any way,
- ask a question or complaint to the Office for Personal Data Protection,
- object to the processing of personal data concerning you.
6. How we protect your personal data
We protect your data. The following security means are used for this in particular: implementation and enforcement of internal regulations for the protection of personal data, anti-virus protection, firewalls, encryption, control of access to personal data and authorization data, backups, physical means of protection and others.
