Privacy Policy
This Personal Data Protection Policy (hereinafter also referred to as the “Policy”) of the Seller mr. belefit s.r.o., with the registered office at Holečkova 40, 150 00 Prague 5, company ID number: 05779677 (hereinafter also referred to as the “Seller”), as the controller of the personal data of the Users of the website www.wearparalel.com (hereinafter also referred to as the “E-shop”), hereby informs about the processing of personal data and the privacy policy described below when visiting the E-shop, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
If the User needs to clarify the information below, needs advice or to discuss the processing of his/her personal data, he/she may contact the Seller, as the data controller, via the email address richard@wearparalel.com, or at the Seller’s postal address Holečkova 40, 150 00 Prague 5.
1. SCOPE OF THE PERSONAL DATA PROCESSING
When ordering goods through the E-shop, the Users will be asked to fill in certain personal information regarding themselves. This information may include, but is not limited to:
a) User’s first name and surname;
b) the User’s business name;
c) the User’s address or registered office;
d) company ID number and tax identification number;
e) telephone number;
f) email address;
g) favourite products that the User indicates as favourite;
h) data regarding the order;
i) setting up newsletters and loyalty program memberships,
j) data related to making a payment through the Barion payment gateway or Google Pay or Apple Pay payment systems.
Users are not tracked on the E-shop, so the Seller only obtains the personal data of Users that the User explicitly discloses to the Seller.
2. PURPOSE OF PROCESSING AND LICENCE TO PROCESS
The personal data provided by the Users of the E-shop are processed by the Seller in order to enable the Users to be sent the ordered goods and to fulfil the obligation arising from the purchase of the goods on the E-shop.
The legal basis for this processing of personal data is the performance of the contract. The provision of personal data for the purpose of the implementation of the Purchase Contract is a contractual
requirement of the Seller and failure to provide thereof may result in the failure to conclude the Purchase Contract.
Furthermore, the Seller collects such personal data in order to be able to contact the User back and provide him/her with the information he/she has requested. The legal basis for processing in this case is also the performance of the contract or a legitimate interest. The provision of personal data for the purpose of responding to the questions raised or information requested by the User is a contractual and legitimate requirement of the Seller and failure to provide them may result in the failure to respond to the questions raised by the User.
The personal data that the Seller obtains from the User during each visit to the E-shop or each Order is necessary for the use of the services offered to the User by the Seller on the E-shop and/or for the processing of the Order and its service providers. This activity includes the detection of online payment fraud, the prevention and settlement of payment deficiencies (including outstanding payments), and the preservation of the Seller’s rights in the course of its business activities.
The Seller may also collect statistical information in order to learn how visitors use the E-Shop (frequency of visits to individual pages of the E-Shop, sales statistics, where visitors come to the E-Shop from, etc.) in connection with the cookies according to Article 7 of the Policy below.
Information relating to the User accounts of visitors to the E-shop is retained by the Seller and is intended solely for internal use, primarily for the purpose of conducting market research.
Another purpose of retaining and processing personal data of the Users is the compliance with legal obligations. If the personal data of the Users are processed by the Provider for this reason, the Provider does not need to obtain the consent of the Users for such processing. On this legal basis, the Provider processes Users’ identification and contact data, order data, in order to comply with the following laws, in particular:
– Act no. 89/2012 Sb., the Civil Code,
– Act no. 634/1992 Sb., on the Consumer Protection,
– Act no. 235/2004 Sb., on the Value Added Tax,
– Act no. 563/1991 Sb., on Accounting,
– Act no. 499/2004 Sb., on Archiving and Records Management,
– Act no. 112/2016 Sb., on Registration of Sales.
3. SENDING MARKETING COMMUNICATIONS
The name, surname and e-mail address of the user is processed by the Seller in order to send commercial communications (newsletters) to the Users who request it. Sending commercial communications means informing the User about promotions, events, publications or services provided by the Seller that may be of interest to the User, via the email address provided by the User. The Seller sends these commercial communications only to its clients on the basis of legitimate interest or after consent given to receive such commercial communications.
The processing of personal data for the purpose of sending commercial communications may be refused by the User at any time and it shall not affect other mutual relations between the Seller and
the User. Unsubscribing from receiving the commercial communications may be done via the link entitled “Unsubscribe from commercial communications” provided in the footer of the email containing the commercial communication. It is also possible to unsubscribe by sending an e-mail with the relevant request to the e-mail address richard@wearparalel.com or other address wherefrom the User received the Seller’s commercial communications. This unsubscription from commercial communications shall be deemed to be a withdrawal of consent to the processing of personal data.
4. ACCESS TO THE PERSONAL DATA
Users’ personal data are processed on the basis of the processing licences set out above, for the purposes of processing personal data as defined above. All the personal data collected from the Users are processed by the Seller.
Where necessary, Users’ personal data may be provided to subcontractors of the Seller, but always in accordance with the Seller’s personal data protection policy and other relevant confidentiality and security measures. Such subcontractors include, in particular, providers of IT services, cloud services, web services, legal services and accounting services.
The Seller also shares the Users’ personal information with companies, organizations or individuals outside the Seller to the extent necessary when the Seller believes in good faith that such sharing is necessary to comply with any applicable laws or regulations and for the legal proceedings to comply or enforceable requests of public authorities, to detect, prevent or otherwise act against fraud, technical difficulties or security problems.
Other than as set forth herein, personal information collected from the Users by the Seller is not shared with anyone. Should there be a need to share the personal data of the Users with entities other than those mentioned above, the User shall always be informed. The User is always able to exercise his/her legal rights as defined in Article 7 of the Policy.
5. Personal data retention period
The personal data of the Users shall be processed by the Seller exclusively for the period of time during which the Seller’s services will be provided or obligations arising from the mutually concluded contract will be fulfilled, or for the period of time necessary for the fulfilment of archiving obligations under applicable legal regulations, such as Act No. 563/1991 Sb., on Accounting, as amended, Act No. 499/2004 Sb., on Archiving and Records Management, Act No. 112/2016 Sb., on Registration of Sales, as amended, Act No. 89/2012 Sb., the Civil Code, as amended, or Act No. 235/2004 Sb., on Value Added Tax, as amended, but for no longer than 10 (ten) years.
Personal data processed for the purpose of sending commercial communications in connection with the above specified provisions are processed for a maximum period of 10 (ten) years as of the date of collection or until the consent to the processing of personal data is withdrawn.
6. RIGHTS ARISING FROM THE PROCESSING OF PERSONAL DATA
In relation to the processing of the Users’ personal data, Users have the following rights:
i. The right of access and information means that the User may at any time request to be informed whether or not personal data concerning the User are being processed and, if so, for what purposes, to what extent, to whom they are disclosed, for how long they will be processed, whether the User has the right to rectification, erasure, restriction of processing or to object, where the personal data were obtained from and whether automated decision-making, including possible profiling, is taking place on the basis of the processing of the User’s personal data.
ii. The right to rectification means that the User may at any time request the Seller to rectify or complete the Users’ personal data should it be inaccurate or incomplete.
iii. The right to erasure (“right to be forgotten”) means that the Seller must erase the Users’ personal data if:
– They are no longer needed for the purposes for which they were collected or otherwise processed;
– the processing is unlawful;
– the User withdraws his/her consent to the personal data processing;
– the User objects to the processing and there are no overriding legitimate grounds for the processing, or
– the Seller is under a legal obligation to do so.
iv. The right to restriction of processing means that until any disputed issues regarding the processing of the User’s personal data have been resolved, the Seller must restrict the processing of the User’s personal data.
v. The right to object means that the User may object to the processing of their personal data. If the processing for direct marketing or profiling purposes is objected to, the User’s personal data will no longer be processed for these purposes.
vi. The right to lodge a complaint regarding the processing of personal data with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
vii. The right to data portability which means that you have the right to obtain personal data concerning you that are processed by automated means and on the basis of consent or contract, in a structured, commonly used and machine-readable format, and the right to have that personal data transferred directly to another controller.
All rights may be exercised by contacting the Seller at the email address richard@wearparalel.com, or at the postal address Holečkova 40, 150 00 Prague 5. The Seller is obliged to respond to the asserted right within 1 (one) month from the date of assertion.
7. USE OF COOKIES
A cookie is a small file that is sent to the User’s browser from the Seller’s web server when browsing the E-shop and is stored on the hard drive of the User’s device. The cookie can read data from the User’s disk or read cookies created by other sites. Cookies do not harm the User’s system or device in any way. Cookies allow the Provider to recognize the User when returning to the Seller’s E-shop using the same computer and web browser. Cookies contain a number that can uniquely identify the User’s computer or device, even if the location or IP address of the user’s device changes.
Cookies also provide information that includes, but is not limited to, the location from which the User accesses the Provider’s E-shop, the length of the visit to the website, the name of the network from which the User connected, how the E-shop was accessed, the type of device and connection (mobile or fixed), including the operating system and browser used, the most visited websites, the link the User accessed the E-shop from and the number of clicks and information about the User’s online behaviour.
The E-shop is accessible without cookies being enabled on the User’s browser, but disabling cookies may prevent proper access, display or provision of services on the E-shop.
Authorisation to use cookies
In accordance with the notice regarding the use of cookies in the footer of the E-shop and the Policy, the User expressly agrees to the use of cookies as described below, except in cases where the User changes his/her browser settings to reject the use of cookies.
Types of cookies used on the E-shop:
Cookies are used by the Provider to facilitate the use of the E-Shop and also to ensure efficient loading of content. In addition, personalised cookies are used to collect statistics about Users’ activity on the E-Shop in order to improve the service and analyse content browsing habits.
Examples of the use of cookies:
– Analytical and statistical purposes within Google Analytics and other measurement tools.
– Measuring the effectiveness of the Seller’s actions, e.g. in Google’s advertising program or partner programs.
– Preparation of content advertising on Google or Facebook (remarketing).
The E-shop uses some of the Google’s analytics and advertising systems. Information on how Google uses cookies can be found here: https://www.google.cz/intl/cs/policies/technologies/cookies/
How to disable cookies?
Allowing or rejecting cookies is based on the User’s internet browser settings. Allowing the storage of cookies may be cancelled by selecting the appropriate configuration options on the User’s internet browser. The Provider recommends that you consult the help page for the specific internet browser you are using to assist the User in configuring the desired privacy settings:
Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=cs
Firefox: https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies
Internet Explorer: https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorerdelete-manage-cookies
Android: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=cs
Safari: https://support.apple.com/cs-cz/guide/safari/manage-cookies-and-website-data-sfri11471
Microsoft Edge: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
8. REPORTING AND NOTIFICATION OF SECURITY INCIDENTS
Should a security incident involving the leakage of personal data, or their damage or degradation occur, the Seller shall always report the security incident to the supervisory authority, which is the Office for Personal Data Protection, within 72 hours at the latest. At the same time, each data subject whose personal data has been affected by the security incident shall be notified that a security incident has occurred. At the same time, the Seller shall publish the notification of the security incident on its website.
This Policy is effective as off September 2021
