1 Personal Data Controller
1.1 The personal data controller Asociace bezpečného konopí, z.s, ID 179 06 318, registered office at Na Luhách 1559/14, Ústí nad Labem-centrum, 400 01 Ústí nad Labem, recorded in Company Register maintained by Regional Court in Ústí nad Labem, under the reference L 13553, (hereinafter referred to as the “data controller”), declares that all personal data processed by the data controller are strictly confidential. The processing of the data by the data controller follows all relevant national and EU regulations pertaining to the protection of personal data.
1.2 The data controller collects, stores and uses your personal data within the meaning of Section 6 of the Act. No. 101/2000 Coll., on the Protection of Personal Data and on the Amendment of Certain Acts, as amended (hereinafter referred to as the Personal Data Protection Act), respectively Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/ES (hereinafter referred to as the “GDPR Regulation”). The individual purposes for which the controller processes the personal data are further defined.
1.3 The data controller also collects such personal data through its website at www.bezpecnekonopi.cz (hereinafter referred to as the “Website”).
1.4 This policy is issued by the data controller so that you are sufficiently informed about what personal data the data controller processes, for what purpose, for how long, who will have access to your personal data and what rights you have. This policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or consent granted.
2 Processed data
2.1 The data controller is entitled to process the following personal data according to the purpose, according to the categories of personal data, according to the categories of the data subject, according to the categories of recipients and according to the period of collection as follows.
|No.||Purpose of processing||Categories of personal data||Retention period|
|1.||Sending commercial communications and offering products and services||Address and identification data, descriptive data||10 years|
|2.||Statistics||Address and identification data, descriptive data||10 years|
2.2 The following is meant by the individual purposes of processing:
2.2.1 performance of the contractual relationship means: the relationship between you and the data controller based on an order, registration (after signing a contract), application and participation in a contest etc.
2.2.2 distribution of commercial communications and offering of products and services means: distribution of commercial communication by e-mail, SMS or telephone call;
2.2.3 statistical purposes means: anonymised monitoring of website visitor rate, the number of pages viewed, time spent on the website, type of device used by a visitor to access a website. the data is being collected in order to improve the quality of the provided services and to offer our clients relevant contents;
2.2.4 displaying of advertisements means: displaying of advertisements and commercials on a website based on the preferences of our customers identified statistically;
2.2.5 performance of other legal duties means: providing information to law enforcement authorities, to inform other public authorities, and so on.
2.3 We process your personal data only for the time necessary for the purpose of processing i.e. protecting all rights and duties arising from a legal action at least for the time needed for the handling of an order, the implementation of a business case, the performance of a service etc. This also includes a period defined as the “obligatory retention period” pursuant to universal laws and regulations or a period based on a received consent. Otherwise, the data processing time depends on the purpose for which the personal data is being processed or based on the respective legislation.
2.4 Personal data are processed manually and automatically by the data controller. The data has the right to process certain information in an automated manner to generate statistics on the number of visitors accessing its website.
3 Personal data processed on the basis of consent
3.1 If we have obtained your consent to process your personal data, it may include any of the following purposes:
3.1.1 Sending commercial communications and doing other marketing activities;
3.1.2 Processing of your order and exercise of rights and obligations arising from the contractual relationship between you and the data controller; when ordering, personal data are required that are necessary for the successful execution of the order (name and address, contact), the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or to perform it from the data controller´s side;
3.1.3 Communication between the subject and the personal data controller.
4 Rights of the data subject
4.1 As a data subject, you have the stated rights that arise for you from legal regulations and that you can exercise at any time. It is noted about:
4.1.1 right of access to personal data, under which the data controller is obliged, without undue delay, to inform you as to whether any of your personal data is being processed by the data controller. The content of this information is set in GDPR Article 15. The data controller may charge adequate fee for the provision of the aforementioned information. (“adequate” means not exceeding the costs needed for the provision of the information; (The content of the information is determined by the provisions of Section 12 (2) of Act No. 101/2000 Coll., on the Protection of Personal Data, as amended.))
4.1.2 right to rectification or erasure of personal data, or restriction of processing, according to which you have the right to have personal data that are inaccurate or incorrect corrected. If your personal data is no longer needed for the purposes for which it was collected or is being processed illegally you have the right to request erasure. Alternatively, to temporarily restrict their processing, you can request the restriction processing;
4.1.3 right to request an explanation if you suspect that the processing of personal data by the controller is contrary to the law;
4.1.4 right to contact the Office for Personal Data Protection in case of doubt about compliance with obligations related to the processing of personal data;
4.1.5 right to data portability, i.e. right to receive the personal data concerning you, which you provided to the data controller in a structured, commonly used and machine-readable format (for more details see Art. 20 GDPR);
4.1.6 right to object to the processing of personal data that are processed for the purpose of performing a task carried out in the public interest or in the exercise of official authority or for the purpose of protecting the legitimate interests of the controller. The data controller shall terminate the processing without undue delay except where such interest/reason are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data;
4.1.7 right to withdraw your consent to the processing of personal data granted to the data controller at any time.
5.1 Cookies are short text files that a website sends to your browser. They allow the website to record information about your visit, such as the selected language etc., making your next visit to the website easier and more pleasant. Cookie files enable a better exploitation of your website and the customisation of its content to your needs. Cookies are used by nearly all websites in the world. Cookies allow you to make better use of our website and adapt its content to your needs; they are used by almost every website in the world. Cookies are useful because they increase the user-friendliness of a repeatedly visited website.
5.2 Each data controller may use the below types of cookies on its website:
5.2.1 Session (i.e. temporary) cookies allow us to link your individual activities while browsing the website. When you open your browser window, these files are activated and deactivated when you close your browser window. Session cookies are of temporary nature and deleted from your device after closing your browser.
5.2.2 Persistent cookies help us identify your computer when you visit our website again. Another advantage of persistent cookies is that they allow us to accommodate our website to your needs.
5.5.1 Google Analytics
5.5.2 Facebook pixel
5.6 In order to display targeted advertising within advertising and social networks on other websites, we transmit to these advertising and social networks data about your behaviour on the website; however, we do not pass on your identification data to them.
6 Transfers to third countries
6.1 Your personal data is not transferred to third countries.
Do you have a question?
If you have a question about data protection, please contact us at: email@example.com
This privacy statement is valid from 20. 4. 2023 and is issued by the Asociace bezpečného konopí, z.s.