Privacy protection principles

  1. Preliminary Provisions
    1. The Seller, eMan s.r.o., IČO (business registration number) 27203824, registered office at U Pergamenky 1145/12, Holešovice, 170 00 Prague 7, is regarded in relation to the processing of personal data described in these principles as the controller of personal data (hereinafter referred to as “the Controller”).
    2. The Controller can be contacted in writing at the address of its registered office, by e-mail at the address [info@minialarm.com], or by telephone at the number [+420 222 202 204].
    3. The present Privacy Protection Principles form an integral part of the Terms for the Sale of Goods in the form of the device named “Minialarm” available at minialarm.com/en/terms-and-conditions/. The terms used in the present document have the same meaning as the terms defined in the Terms mentioned in the previous sentence.
  2. Processing of Personal Data
    1. Personal data of the Buyer, i.e. his or her identification data, contact data, access data, as well as data related to orders, payments and settings, can be processed by the Seller as the Controller of personal data without the Buyer’s consent for the purpose of creating and administrating his or her User Account, processing orders and delivering the Product, as well as exercising other rights and obligations arising from contractual relations where Article 6(1)(b) of the General Data Protection Regulation (hereinafter referred to as “the GDPR”) forms the legal basis for the processing operation.
    2. Personal data, as defined in Article 2.1 of the present Principles, can also be processed by the Seller as the Controller for the purpose of the fulfilment of their legal obligations pursuant to Article 6(1)(c) of the GDPR and for the purpose of the legitimate interests of the Seller as the Controller to protect their rights and property pursuant to Article 6(1)(f) of the GDPR.
    3. The source from which the data is obtained is generally the Buyer him- or herself, the provision of the data on their part constituting a contractual requirement. Failure to provide the necessary data may result in the impossibility to perform the contract, or, in an extreme case, in the termination of the contractual relationship.
    4. The Buyer is obliged to inform the Controller of any change in their personal data without undue delay.
    5. On the part of the Controller there is no automated individual decision-making, including profiling.
  3. Duration of Processing
    1. For the purposes of Article 2.1 of the present Principles, personal data can be processed by the Controller for the duration of the relevant contractual relations.
    2. For the purpose of the fulfilment of legal obligations, personal data can be processed by the Controller for the duration laid down by law. For the purposes of the protection of the legitimate interests of the Controller, personal data can be processed for the duration necessary for the fulfilment of their purpose, but not after 10 years since the termination of contractual relationships or until the Buyer raises legitimate objections.
  4. Recipients
    1. The recipients of the data shall be mainly authorized employees of the Controller. Other recipients can include companies involved in delivering the Product or in the processing of claims (transporters, payment services etc.), in the provision of Services, or the suppliers of IT solutions.
    2. Personal data can be transmitted by the Controller, to the extent strictly necessary, to the USA and other third countries, but only on the basis of appropriate safeguards, normally standard contractual clauses.
  5. Rights
    1. In relation to the processing of personal data carried out by the Controller, the Buyer has, if the relevant conditions laid down by law are fulfilled, the following rights:
  • Right of access to personal data, i.e. the right to request the confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, the right to obtain information about the processing and, if applicable, a copy of the personal data undergoing processing;
  • Right to rectification of personal data, i.e. the right to request that his or her personal data which are inaccurate are rectified or the right to have incomplete personal data completed;
  • Right to erasure of personal data, i.e. the right to request the data undergoing processing to be erased without undue delay, where one of the grounds laid down by law applies;
  • Right to restriction of processing of personal data, i.e. the right to request a temporary restriction of processing, where one of the grounds laid down by law applies;
  • Right to object to processing of personal data, i.e. the right to object to processing of personal data on the legal basis of legitimate interests or for direct marketing purposes;
  • Right to portability of personal data, i.e. the right to request the personal data undergoing processing in a structured, machine-readable format, where one of the grounds laid down by law applies;
  • Right to lodge a complaint with the supervisory authority (ÚOOÚ).
    1. The Buyer can exercise his or her rights by sending a request using the Controller’s contact data.
  1. Cookies
    1. For the purpose of operating the website of the Shop and for the analysis of its traffic, the Controller uses cookies (so-called essential and analytical cookies). If the device or the browser of the website visitor make it possible, cookie files will be stored on his or her device. These can include cookies stored by the Controller or third-party cookies (Google, Facebook etc.). Cookie files do not contain personal data as such, but, in particular in combination with other data, can become personal data in nature. In this case, these personal data are processed on the basis of the legitimate interests of the Controller for the user-friendliness of the website, pursuant to Article 6(1)(f) of the GDPR. Consent with storing cookies can be withdrawn at any time using individual settings of the end device (internet browser). However, blocking or erasing cookie files can have an impact on the correct functioning of the Shop website.
  1. Commercial Communications
    1. The Controller is entitled to use the contact data of the Buyer obtained in relation with the sale of the Product (e-mail address, mobile phone number etc.) for electronic communication in order to send him or her commercial communications pursuant to Act 480/2004 Sb., on some information society services. In such case, personal data of the Buyer are processed for the purpose of the legitimate interests of the Controller, consisting of communicating with his or her customers, pursuant to Article 6(1)(f) of the GDPR. The Buyer can refuse any further use of his or her contact data in such a way by the Controller at any time in the manner described in every communication sent to them.