General conditions for the processing of personal data under the GDPR

These General Terms and Conditions for the processing of personal data under the GDPR (hereinafter referred to as "General Terms and Conditions") issued by Ski a BikeCentrum Radotín s.r.o, with its registered office at Topasová 1/882, Praha 5 - Radotín, ID 272 16 764 (hereinafter referred to as "Ski a BikeCentrum Radotín") informs customers and business partners about what personal data Ski a BikeCentrum Radotín processes about natural persons obtained during the sale of products, provision of services, e-shops of Ski a BikeCentrum Radotín and during visits to the websites operated by Ski a BikeCentrum Radotín and contacts with potential customers, for what purpose and for what period of time Ski a BikeCentrum Radotín processes this personal data, to which third parties and for what reason it transfers it.
The General Terms and Conditions are effective as of 11th of May 2018 and are issued in accordance with Regulation (EU) 2016/679, on the protection of natural persons with regard to the processing of personal data ("Regulation" or "GDPR") in order to ensure the information obligation of Ski a BikeCentrum Radotín as a controller pursuant to Article 13 GDPR.

I. Collection of personal data

Personal data is any information relating to a natural person that Ski a BikeCentrum Radotín is able to identify. In connection with the sale of productsand provision of services, Ski a BikeCentrum Radotín may collect and process the following categories of personal data. For some purposes, data may be processed directly on the basis of a contract, the legitimate interest of Ski a BikeCentrum Radotín or on the basis of law, without the consent of the data subject, for others only on the basis of consent. By granting consent to the processing of personal data, Ski a BikeCentrum Radotín may continue to provide some of its services free of charge.

1. Basic personal identification data
This data is necessary for the conclusion and performance of the contract. This includes, in particular, the academic title, name and surname, date of birth, or ID number, VAT number, permanent address, contact address, address of the registered office or place of business, billing address, telephone number, e-mail address, or social network address, numbers of the submitted identification documents and, where applicable, copies thereof (data that are not necessary for the provision of the service are blacked out on copies of documents). In some cases, the identification data of the customer's representative or a contact person designated by the customer is collected.
In the case of contracts for one-off sales of products, the scope is limited to basic identification data. In the case of contracts for the provision of a one-off service, the scope of personal data is limited to that which is necessary for the provision of the agreed service. In addition, data on the products purchased or service provided, their volume and segment are processed.

2. Technical data
Ski a BikeCentrum Radotín collects information that is automatically transmitted by the customer's browser for technical reasons. This includes the following data - browser type/version, operating system used, URL of the previous page visited, name of the main computer (IP address), time stamp.
When stored, this data is anonymised and is neither linked to data from other sources. The customer's IP address is deleted soon after the end of the visit to our website.
As part of the shop search function, geographical data in the form of latitude and longitude are transmitted to the Ski a BikeCentrum Radotín website if the customer's mobile device is equipped with a location function. Before activating the location function, the customer will be asked for consent by means of a security message. The data is used exclusively for determining the customer's location and is not stored.

3. Data from communication with the customer
This data arises from communications related to the provision of products and services by Ski a BikeCentrum Radotín to the customer. It includes records of personal communication with the customer at the shops or other direct contact with the customer, written and electronic communication with the customer and records of telephone calls.

4. CCTV footage from Ski a BikeCentrum Radotín shops and premises
Ski a BikeCentrum Radotín places cameras in its stores and premises to protect its legitimate interests. The premises where cameras are placed are always properly and visibly marked with a notice.

5. Data processed on the basis of customer consent
The processing of this data enables Ski a BikeCentrum Radotín to improve its services, to focus on what customers are really interested in and, where appropriate, to inform customers about offers that are suitable for them. This data is only processed if consent is given and may be processed for marketing purposes for as long as this consent is valid:
- improving the quality of Ski a BikeCentrum Radotín services and developing new ones.
- displaying only advertisements based on the interests of a specific customer
- carrying out analyses and measurements to determine how the services of Ski a BikeCentrum Radotín are used
- analysing preferences and displaying content that meets individual customer needs
- sending commercial communications, including offers of third-party products and services (you can opt-out of receiving commercial communications in the settings of the service for which you have registered to receive such communications, or by email: [email protected]) and content newsletters.
The customer is entitled to express his/her disagreement with the above-mentioned use at any time by sending a short written communication to the address of the Ski a BikeCentrum Radotín- Topasová 1/882, Praha 5- Radotín, Postal Code 153 00, or to the e-mail address: [email protected].

II. Processing of personal data

1. Data processed without the customer's consent
Ski a BikeCentrum Radotín processes personal data for the performance of contracts, legal obligations and legitimate interests. The provision of personal data necessary for the performance of contracts, the fulfilment of legal obligations and the protection of legitimate interests is mandatory. Without providing personal data for these purposes, it would not be possible to provide services. The processing for the performance of the contract and the fulfilment of legal obligations cannot be refused. The legitimate interest of Ski a BikeCentrum Radotín is, among other things, the sending of commercial communications (blanket offers and individual offers) in accordance with Section 7 (3) of Act No. 480/2004 Coll., on certain information society services and in accordance with point 47 of the GDPR, if Ski a BikeCentrum Radotín has obtained details of electronic contact not mediated in connection with the sale of products and services to the customer (so-called direct marketing).
Ski a BikeCentrum Radotín processes personal data manually and automatically.

2. Duration of data processing
Personal data for these activities are processed to the extent necessary for the fulfilment of these activities and for the period necessary to achieve them or for the period directly provided for by law. Thereafter, the personal data are erased or anonymised. Personal data is kept for the above purposes for a period of 5 years from the date of termination of the last contract with Ski a BikeCentrum Radotín.
In the case of purchase of products, Ski a BikeCentrum Radotín is entitled to process basic personal, identification and contact data of the customer, data about the products and data from communication between the customer and Ski a BikeCentrum Radotín for a period of 5 years from the date of expiry of the warranty period for the products.
For customers of services provided by Ski a BikeCentrum Radotín, Ski a BikeCentrum Radotín is entitled to process the customer's basic personal, identification and contact data, data on products and data from communication between the customer and Ski a BikeCentrum Radotín for a period of 5 years from the date of termination of the last contract with Ski a BikeCentrum Radotín.
In the event of negotiations between Ski a BikeCentrum Radotín and a new customer on the conclusion of a contract, which have not been completed by the conclusion of the contract, Ski a BikeCentrum Radotín is entitled to process the personal data provided for a period of 3 months from the relevant negotiations.
Invoices issued by Ski a BikeCentrum Radotín are archived for 10 years from the date of issue in accordance with Section 35 of Act No. 235/2004 Coll., on value added tax. Due to the need to prove the legal reason for issuing invoices, customer contracts are also archived for 10 years from the date of termination of the contract.
For debtors, Ski a BikeCentrum Radotín retains personal data related to the debt for 10 years after any legal or administrative proceedings against the customer have been finally terminated.
Camera recordings from Ski a BikeCentrum Radotín stores and from the premises of Ski a BikeCentrum Radotín and the surroundings of Ski a BikeCentrum Radotín buildings are processed for 90 days from the date of the camera recording.

3. Processing of bank data in connection with payment and withdrawal from the purchase contract 

Ski a BikeCentrum Radotín allows payment by cash on delivery, bank transfer or credit card. All payment methods are comprehensively protected by security standards. In the case of using a payment card, Ski a BikeCentrum Radotín complies with the requirements of the Payment Card Industry Data Security Standard (PCI-DSS) and invites you to enter the Card Security Number.
In the event of withdrawal from the purchase contract for products, Ski a BikeCentrum Radotín will process the customer's bank account details. Ski a BikeCentrum Radotín will process this personal data provided only to the extent necessary (provided) and only for the time necessary to carry out the relevant monetary transaction and at the same time to prove that the purchase price paid has been refunded to the customer's bank account specified by the customer (i.e. for the purpose of protecting the rights and legally protected interests of Ski a BikeCentrum Radotín), but for a maximum of 90 days. The provision of this personal data is a prerequisite for the refund of the purchase price paid to the customer by wire transfer, and thus constitutes processing without the customer's consent.
Ski a BikeCentrum Radotín will process the customer's bank account details provided by the customer itself or, in accordance with the applicable and effective legislation, will entrust another third party with this purpose, provided that the processing must be carried out in the Czech Republic.

4. Processing of personal data in connection with the handling of complaints or other initiate
A customer may submit a product complaint via the customer service line +420 222 367 700 or email [email protected]. Ski a BikeCentrum Radotín will process personal data for the purpose of processing such a complaint in order to fulfil its contractual and legal obligations. This is a processing of personal data that does not require the customer's consent. In connection with the handling of complaints, Ski a BikeCentrum Radotín also processes personal data for the purpose of protecting its rights and legally protected interests in the event of a possible dispute arising from the complaint.
Customers and other persons can contact Ski a BikeCentrum Radotín with their questions via the customer line +420 222 367 700. In order to answer the queries, Ski a BikeCentrum Radotín will process the personal data provided by the person who raised the query. Ski a BikeCentrum Radotín will process the personal data provided in this way only to the extent necessary (provided) and only until the query or request is resolved, unless there is a need to process the personal data for another purpose (for example, to protect the rights and legally protected interests of Ski a BikeCentrum Radotín). These personal data are provided voluntarily by the customer, since without their knowledge Ski a BikeCentrum Radotín would not be able to process the request, therefore the customer's consent is not required.
The processing of the personal data provided will be carried out by Ski a BikeCentrum Radotín itself. If necessary, Ski a BikeCentrum Radotín is entitled to transfer the processed personal data to its suppliers and manufacturers for the processing and handling of the inquiry or complaint. The specific supplier or manufacturer to whom Ski a BikeCentrum Radotín may transfer personal data in this way always depends on the product that is being complained about or to which the query relates, as well as the place of purchase.

5. Processing of personal data in the event of damage
In connection with the sale of products or the provision of services, customers of Ski a BikeCentrum Radotín may incur certain damages (e.g. damage caused by a defective product). In such a context, personal data of customers and other persons connected with the damage event (e.g. witnesses, etc.) are processed to the extent of identification and contact personal data, data on the damage caused and other necessary related data. The purpose of processing personal data in this case is to resolve the damage event and to protect the rights and legally protected interests of Ski a BikeCentrum Radotín in the event of a possible dispute arising from such a damage event. This also determines the period of processing personal data for these purposes, which corresponds to the period for which Ski a BikeCentrum Radotín may need personal data in this context and when there is a possibility of a dispute regarding the damage incurred, i.e. 10 years from the date of the occurrence of the damage event. In order to resolve the claim, Ski a BikeCentrum Radotín is entitled to transfer the processed personal data to its suppliers or manufacturers.

6. Processing of data with the customer's consent for commercial purposes
With consent for commercial purposes, the customer's personal data is processed for the purpose of creating a suitable offer of products and services and in connection with contacting the customer, either by telephone, in writing (including attachments to the bill/invoice), via internet advertising and by electronic communication via contact details or service numbers. For this purpose, Ski a BikeCentrum Radotín creates type profiles of the behaviour of customers who give their consent when using Ski a BikeCentrum Radotín's products and services and stores anonymised behavioural analysis. All these activities are strictly necessary to reach customers with suitable marketing offers.
Providing consent for commercial purposes is voluntary and can be withdrawn by the customer at any time. This consent shall remain valid for the duration of the use of Ski a BikeCentrum Radotín products and services and for the following five (10) years thereafter or until revoked by the customer. If the customer withdraws his/her consent, this does not affect the processing of his/her personal data for other purposes and under other legal titles.
For business purposes, data may be processed on the basis of consent, for which the customer has given consent, for the period for which Ski a BikeCentrum Radotín is entitled to record such data for the purposes of providing services, unless the customer withdraws consent earlier.

III. Communication of personal data to third parties

Insofar as it is necessary in connection with the execution of the order, delivery and delivery of products or promotion of the offer of products and services, Ski a BikeCentrum Radotín provides personal data of the customer to partner companies for the purpose of customer care, delivery and delivery of products through third parties providing transport of delivery and fulfillment of contractual arrangements, as well as for the purpose of producing and sending advertising materials. Contracts are concluded with these third parties, which include an obligation to treat personal data in accordance with the legal provisions and to process it exclusively according to the instructions of Ski a BikeCentrum Radotín. The contracts include a prohibition to transfer the personal data of Ski a BikeCentrum Radotín customers to other persons.
Furthermore, Ski a BikeCentrum Radotín transfers personal data to attorneys, auditors, IT systems administration, and franchise partners. Each such entity to which personal data is transferred is screened and a contract on personal data processing is concluded with each of them. The list of processors is available here.
All processors are legal entities with their registered office in the Czech Republic or with their registered office in a European Union country.

IV. Technical security of personal data

1. Web-bug
Ski a BikeCentrum Radotín uses the so-called web bug (small graphics) on its website. When the page is opened, this graphic is stored by the server in the Internet, where it is registered at the same time. This shows which websites customers visit, how often they look at them, from which region they access them and what actions they take. As part of this process, in accordance with the opinion of the data protection authorities, the customer's IP address is only recorded in a shortened form, so that it is not possible to identify the specific connection in any way.

2. Use of social plugins
The Ski a BikeCentrum Radotín website contains, among other things, third-party social plugins, through which visitors to the website can share content with others. These include:
- Facebook plugin, which is managed by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA;
- YouTube plugin, which is managed by YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043;
- Instagram plugin, which is managed by Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
These social plugins are not managed by Ski a BikeCentrum Radotín and are not responsible for them. No personal data that the customer has entered on the Ski a BikeCentrum Radotín website or that is stored about the customer by Ski a BikeCentrum Radotín is transferred to social networks.

3. Cookie
In order to improve the service provided to customers, the Ski a BikeCentrum Radotín website uses cookies. The customer is not identifiable on the basis of the information obtained through cookies. Cookies help in particular:
- to the correct functionality of the website, so that the purchase process can be completed with the least possible difficulty;
- remembering customers' login details so that they do not have to enter them each time;
- to find out which pages and features customers use most often;
- finding out which ads customers view most often so that they don't see the same ads over and over again as they browse the site, or so that they don't see ads for products they are not interested in.
What cookies we use:
- Short-term "session cookies" which are only temporary and remain stored in the customer's browser;
- long-term "persistent cookies" which remain stored on the customer's device for much longer or until they are manually deleted.
The use of cookies can be set using the customer's browser. Most browsers automatically accept cookies by default. You can refuse cookies using the customer's web browser or set the use of only certain cookies.
If the customer's browser has cookies enabled, Ski a BikeCentrum Radotín will assume that you agree to our websites use of standard cookies. Click here for a list of cookies used by Ski a BikeCentrum.

4. Google Analytics and Google Adwords
Ski a BikeCentrum Radotín uses Google Analytics Premium, developed and operated by Google Inc., located at Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to analyse the website using cookies.
The analysis using Google Analytics is carried out in such a way that the information about the use of the website generated by the collected cookies is transferred to a Google server in the USA and analysed there. As a result of the IP address anonymisation set up on the Ski a BikeCentrum Radotín website, the IP address is shortened by Google before the data is transmitted to the Google server in the USA, in an EU or European Economic Area member state.
The website visitor can prevent the collection of cookies and their analysis by Google Analytics by changing the browser settings.
As part of Google Analytics, Ski a BikeCentrum Radotín also uses related advertising functions provided by Google, such as reports on impressions in the Google advertising network, enhanced reporting of anonymous demographic data (e.g. age, gender, interests) or displaying ads in the content network based on the products viewed (remarketing), including Google AdWords used to personalize advertising and improve ad targeting and remarketing.
Visitors to the Ski a BikeCentrum Radotín website can disable or modify the personalisation of advertising via their Google account using the link available here.
The controller declares that it has taken all appropriate technical and organisational measures to ensure the security of personal data. The controller declares that only persons authorised by it have access to personal data.

V. Right of access to personal data

In particular, the customer has the following rights in relation to personal data:
- the right to withdraw consent at any time;
- the right to rectify or complete personal data;
- the right to request restriction of processing;
- the right to object to or complain about processing in certain cases;
- the right to request data portability;
- the right of access to personal data;
- the right to be informed of a personal data breach in certain cases;
- the right to erasure of personal data (the right to be "forgotten") in certain cases; and
- other rights set out in the Data Protection Act and the General Data Protection Regulation 2016/679 once it comes into force.

1. Right of access to personal data
According to Art. 15 of the GDPR, the data subject will have the right to access personal data, which includes, on the one hand, the right to obtain from Ski a BikeCentrum Radotín, on the other hand, confirmation of whether it processes personal data, as well as information about the purposes of processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be made available, the planned period of processing, the existence of the right to request from the controller the rectification or erasure of personal data relating to the data subject or the restriction of their processing or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information on the source of the personal data, unless obtained from the data subject, the fact that automated decision-making, including profiling, is taking place, appropriate safeguards in the event of transfer of the data outside the EU, and, where the rights and freedoms of others will not be adversely affected, a copy of the personal data.
In the event of a repeated request, Ski a BikeCentrum Radotín is entitled to charge a reasonable fee for a copy of the personal data. The right to confirmation of the processing of personal data and to information may be exercised in writing at the address of the Ski a BikeCentrum Radotín headquarters or at the Ski a BikeCentrum Radotín shop.

2. Right to rectification of inaccurate data
The customer has the right to rectification of inaccurate personal data processed by Ski a BikeCentrum Radotín. The customer is obliged to notify Ski a BikeCentrum Radotín of changes to his/her personal data. At the same time, the customer is obliged to provide assistance if it is found that the personal data processed by Ski a BikeCentrum Radotín is not accurate. The correction shall be made without undue delay.

3. Right to erasure
The customer has the right to have the personal data concerning him or her erased, unless Ski a BikeCentrum Radotín can demonstrate legitimate grounds for processing such personal data. The customer may revoke his/her voluntary consent to the processing of personal data at any time, free of charge, by sending an email to: [email protected]. Withdrawal of consent does not affect the possibility to continue processing personal data on the basis of the customer's consent given before its withdrawal. Withdrawal of consent also does not affect the processing of personal data processed by Ski a BikeCentrum Radotín on a legal basis other than consent.

4. Right to restriction of processing
Until the complaint is resolved, the customer has the right to restrict the processing of personal data if he or she disputes the accuracy of the data, the reasons for the processing or if he or she submits a written objection to the processing.

5. Right to notification of rectification, erasure or restriction of processing
According to Article 19 of the GDPR, the customer has the right to notification in the event of rectification, erasure or restriction of the processing of personal data.

6. Right to portability of personal data
According to Article 20 GDPR, the customer has the right to the portability of the data concerning him/her provided by Ski a BikeCentrum Radotín in a structured, commonly used and machine-readable format and the right to request the transfer of this data to another controller. If the exercise of this right could adversely affect the rights and freedoms of third parties, the request cannot be granted.

7. Right to object to the processing of personal data
The customer is entitled to object in writing to the processing of his/her personal data on the grounds of legitimate interest of Ski a BikeCentrum Radotín. If the customer does not agree to receive occasional commercial communications, he/she has the possibility to object to the further processing of his/her personal data for direct marketing purposes.

8. Right to withdraw consent to the processing of personal data
Consent to the processing of personal data for commercial purposes effective from 25th of May 2018 may be withdrawn at any time after this date. The revocation must be made by an explicit, comprehensible and specific expression of will, at the address of the registered office of Ski a BikeCentrum Radotín- Topasová 1/882, Praha 5- Radotín, Postal Code 153 00, or by e-mail to: [email protected].

9. The right to contact the Office for Personal Data Protection
The customer has the right to contact the Office for Personal Data Protection (www.uoou.cz).

V. Final provisions

1. You agree to these terms and conditions by ticking the consent box via the online form. By ticking the consent box, you confirm that you are aware of the privacy policy and that you accept it in its entirety.

2. The controller is entitled to change these terms and conditions. It will publish the new version of the privacy policy on its website.

3. The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data. The controller declares that only persons authorised by it have access to personal data.

4. If you have any questions about data protection or withdraw your consent to further processing of personal data, please use the contact email [email protected] or write to us at our registered office.

5. In this context, Ski a BikeCentrum Radotín is entitled to require the customer to provide appropriate proof of identity in order to verify identity, this is a preventive security measure to prevent unauthorized persons from accessing personal data.

 

Praha, 24th of May 2018
Ski a Bike Centrum Radotín s.r.o.

 

Older version for download

General terms and conditions of personal data processing according to GDPR valid until 23.5.2018