Personal data processing principles
1. General provisions
This Personal Data Processing Policy (hereinafter referred to asthe “Personal Data Processing Policy“) has been issued by il’Vivere s.r.o., with its registered office at Kurzova 2222/16, Stodůlky, 155 00 Prague 5, ID No.: 21256314, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 398443 (hereinafter referred to asthe “Company“). These T&C describe how the Company collects, processes and shares information of users (hereinafter referred to as“User“) of the https://vivereamare.cz/ website , as well as customers (hereinafter referred to as“Customer“) using its services.
The Company is both the controller and processor of the personal data of customers who provide it when ordering services, the Company may use other processors listed below to process personal data.
We encourage you to read the entire ZZOZ and make sure you fully understand the information provided. If you have any questions about this TOS or the Company’s collection, processing and sharing of personal information, please contact us at info@vivereamare.cz.
2. What data will be processed
The company processes data collected through the use of the website and through cookies. In order to better target advertising campaigns and improve the website, the Company uses information about the user and the pages viewed, or about the links clicked and other activities on the website, such as filling in order and contact forms. This data is collected automatically through the Company’s tools and those of the data processors listed below. If you have enabled the storage of cookies on your device, this data is also collected through these files.
The company primarily processes the data you provide in the contact form or in the order. Some personal data is necessary for filling in the form (name and e-mail address) and serves for basic identification of the user. The data processed by the Company may be as follows:
- Name and surname or name of the company;
- Business Identification Number (BIN);
- Tax identification number (TIN);
- Other information necessary for the conclusion and performance of the contractual relationship, such as:
- Permanent address;
- Correspondence address;
- Electronic mail address (e-mail);
- Phone number.
3. For what purposes the personal data will be used
The Company always processes personal data solely for the purposes for which it was collected, based on a legitimate interest, legal obligation or consent. We process personal data for various purposes, in particular:
- order fulfillment and execution;
- fulfillment of legal obligations in the area of bookkeeping, taxation, or as required by other applicable laws and regulations, or as required by any legal process or administrative authority;
- communication with customers, including sending information about current services and products, updating terms and conditions and for marketing and promotional purposes;
- sending a reply to a query from a website user;
- responding to a specific job offer;
- analytics of website traffic to improve services and offerings;
- marketing outreach via electronic contact;
- for transaction processing and fraud detection;
- targeting potential customers through online advertising. To better target advertising and optimise the website, the Company uses information about user activity on the website. This information includes data collected through the use of cookies.
4. Processors who have access to the data
Personal data is processed primarily by the Company and its employees who are bound by the obligation of confidentiality, as well as by suppliers of the Company’s services if they are processed in connection with the performance and implementation of contracts and orders (e.g. attorneys).
The Company may also use for the processing of personal data the so-called. processor. These entities may only process personal data for the purposes and in the manner specified by the Company and may not disseminate it without further consent. We only pass on to processors the data that they necessarily need to provide their services. The Company uses the following as processors:
- Google LLC (web analytics and online marketing tools);
- Facebook Ireland Ltd. (online marketing tools);
- Seznam.cz, a.s. (tools for online marketing).
- In justified cases, the Company may transfer personal data to other entities (processors).
Personal data may be transferred to these processors:
- processors who process personal data according to the Company’s instructions in the area of public relations, electronic data management or accounting;
- public authorities and other entities if required by applicable law;
- other entities in the event of an unexpected event in which the disclosure is necessary to protect life, health, property or other public interest or is necessary to protect our rights, property or safety.
5. The period for which the data will be retained
Personal data for the purposes set out in 2. Point 2.1 is processed to the extent necessary for the fulfilment of these purposes and for the period necessary to achieve them or for the period directly provided for by law. Thereafter, the personal data shall be erased or anonymised.
After this period, personal data may be kept only for the purposes of the National Statistical Service, for scientific purposes and for archival purposes
The basic time limits for processing personal data are available below.
The company processes personal data of registered customers until their registration is cancelled. Customer contact details are processed for the duration of the business relationship or until the customer updates the details.
In the case of service customers, the Company is entitled to process their basic personal, identification, contact, service and communication data with the Company for a period of 10 years from the date of termination of the last contract.
Invoices issued by the Company are archived for 10 years from the date of issue in accordance with Section 35 of Act No. 235/2004 Coll., on value added tax. Due to the need to prove the legal reason for issuing invoices, contracts are also archived for 10 years from the date of termination of the contract.
The data collected for marketing purposes are processed for the entire duration of the consent, i.e. also for as long as the user allows storage within the cookie settings on the website or in his browser. The processing may also continue after the withdrawal of consent, at the latest until the expiry of the relevant type of cookie.
Sales and marketing communications via electronic contact are sent until the consent is withdrawn or until unsubscription.
6. Withdrawal of consent
Customers may unsubscribe from any marketing and commercial communications at any time, including:
- by clicking on the relevant link in the footer of each commercial communication;
- on the dedicated website;
- by sending a request to the contact details above.
7. Methods of processing and storage of personal data
The processing of personal data is carried out manually and automatically in electronic information systems, in electronic or paper form, always with high technical, organisational and personnel security in accordance with the requirements of generally binding legal regulations.
All persons who come into contact with personal data in their work position (or as part of their contractual obligations) are trained and bound by confidentiality obligations.
8. Rights of the data subject
The data subject will have the following rights if he or she is an identifiable natural or legal person and proves his or her identity:
- Right of access to personal data
According to Art. 15 GDPR, the data subject has the right to access personal data, which includes the right to obtain from the Company:
- confirm whether it processes his/her personal data;
- information on the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the intended duration of the processing, the existence of the right to request the controller to rectify or erase personal data relating to the data subject or to restrict or object to the processing, the right to lodge a complaint with a supervisory authority, any available information on the source of the personal data if not obtained from the data subject, the fact that automated decision-making, including profiling, takes place, appropriate safeguards in the event of transfer of the data outside the EU;
- if the rights and freedoms of others will not be adversely affected, a copy of the personal data.
According to Art. 16 of the GDPR, you have the right to correct inaccurate personal data that the Company processes about you. You also have the obligation to notify changes to your personal data and to provide evidence that such changes have occurred. You are also obliged to cooperate with the Company if it is found that the personal data it processes about you is not accurate. We will make the correction without undue delay, but always taking into account the technical possibilities.
Right to erasure
According to Art. 17 GDPR, you have the right to erasure of personal data relating to you unless the Company demonstrates legitimate grounds for processing such personal data. The Company has mechanisms in place to ensure the automatic anonymisation or erasure of personal data when it is no longer needed for the purpose for which it was processed.
Right to restriction of processing
According to Art. 18 of the GDPR, the data subject has the right to restrict processing until the complaint is resolved if he or she contests the accuracy of the personal data, the reasons for processing or if he or she objects to the processing in writing to the Company’s registered office.
Right to notification of rectification, erasure or restriction of processing
According to Art. 19 GDPR, the data subject has the right to be notified by the Company in the event of rectification, erasure or restriction of the processing of personal data. If personal data are rectified or erased, the Company will inform the individual recipients, except where this proves impossible or requires disproportionate effort.
Right to portability of personal data
According to Art. 20 of the GDPR, you have the right to the portability of the data concerning you that you have provided to us as the controller in a structured, commonly used and machine-readable format. You also have the right to ask us to transfer this data to another controller. If the exercise of this right could adversely affect the rights and freedoms of third parties, your request cannot be granted.
Right to object to the processing of personal data
According to Art. 21 GDPR you have the right to object to the processing of your personal data by the Company. If the Company does not demonstrate that there is a compelling legitimate reason for the processing which overrides the interests or rights and freedoms of the data subject, the Company will terminate the processing without undue delay on the basis of the objection.
Right to withdraw consent to the processing of personal data
If you give the Company your consent to the processing of your personal data, you can withdraw it at any time. Revocation must be made by an express, intelligible and specific expression of will, either in writing to the Company’s registered office or by email to info@vivereamare.cz.
Automated individual decision-making including profiling
The data subject shall have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The company states that it does not carry out automated decision-making without the influence of human judgement with legal effects on data subjects.
Right to apply to the Office for Personal Data Protection
You have the right to file a complaint regarding our processing of your personal data with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. The website of the Office: www.uoou.cz.
9. Security
The Company is committed to protecting personal data and other information about its customers and users of its services. To do so, it uses a variety of security technologies and measures designed to protect information from unauthorized access, use or disclosure. The measures it uses are designed to provide a level of security appropriate to the risk of misuse of personal information. The Company s security of personal information is regularly tested and protection is continually improved. However, please keep in mind that the Internet cannot be guaranteed to be 100% secure. All personal data in electronic form is stored in databases and systems that can only be accessed by those who have an immediate need to handle the personal data for the purposes set out in this policy, and only to the extent necessary.
10. Contact
If you have any questions about this processing of personal data or if you wish to exercise your rights, please contact us at info@vivereamare.cz.
The controller of your personal data is il’Vivere s.r.o., with registered office at Kurzova 2222/16, Stodůlky, 155 00 Prague 5, ID No.: 21256314, registered in the Commercial Register maintained by the Municipal Court in Prague, file number C 398443.
11. Update of the Personal Data Processing Policy
Please note that we may modify or update this Personal Data Processing Policy at any time.
Any changes to this Policy will become effective when posted at the following link: https://vivereamare.cz/ochrana-osobnich-udaju/.
This Personal Data Processing Policy is effective from 1. 9. 2024.