Personal data processing

Basic information

Personal data administrator

BestPatron CZ s.r.o., billing address Kloboučnická 1435/24, Praha 4, 140 00, ID number 07920369, registered at Prague Municipal Court, mark C 309871, as a data administrator shall process your personal data.

Type of data processed

We process data provided by you and data obtained during ordering process.

Why we collect and process your personal data

Your personal data is processed for the following reasons:

-          Purchase of goods and services: the primary purpose of processing your data is due dispatch and delivery of your order. If a problem occurs, we know who to contact from the data you provided.

-          Customer care: if you address us with a question/issue, we have to process your personal data in order to answer/resolve it. The data may be transferred to third parties in certain cases (e.g. delivery company).

-          User account: thanks to the personal data entered in your user profile, you will be able to use a number of functions

Legal ground for processing of personal data

Conclusion and performance of agreement

A large part of your personal data are needed by us in order to conclude the purchase agreement or another contract for goods and services you intend to purchase. After the agreement is concluded, we process your personal data in order to duly deliver the purchased goods, or to render the purchased services. We process in particular billing and delivery details on the above legal grounds.

Legitimate interest

On the grounds of legitimate interest, we process particular personal data, which is processed automatically.

We may also send you e-mails and text messages on the same legal grounds.

Consent

For the purposes of e-mail marketing and telemarketing, we process your personal data upon your consent. If you grant your consent to the personal data processing, you are entitled to withdraw it at any time.

Transfer of personal data to third parties

Your personal data are transferred to third parties in one case only, it is delivery of goods. The carrier chosen by you would not be able to deliver the goods ordered unless we transfer the information on where and to whom the goods should be delivered. This data is transferred to the carrier as entered in the order. Such data includes in particular your first name and surname, delivery address, telephone number where the carrier may contact you, and the amount to be paid on delivery, as the case may be. The carrier is only entitled to process the personal data we transfer for the purposes of delivery; the carrier must delete the personal data promptly afterwards.

What is the period for processing your personal data?

We shall process your personal data for the entire duration of the contractual relationship between you and us.

In case your personal data processing is based on consent, your personal data shall be, in general, processed for 7 years or until such consent is withdrawn.

In case you subscribe to commercial communication, your personal data shall be processed for 7 years or until you express your disapproval of such communication.

Please note that the personal data necessary for the due rendering of services or for the fulfilment of all our duties, ensuing either from the contract between us or from generally binding legal regulations have to be processed regardless of whether you granted your consent for the period set out in the relevant legal regulations and in compliance therewith (e.g. tax documents must be processed for at least 10 years).

The data obtained through the user account or in a similar way are processed for the period of using our services and then usually for 5 years after cancellation. Basic identification data and the information why the user account was cancelled or information which is a part of operational advance deposits are usually stored for the relevant period.

Personal data security

Your personal data is safe with us. We have adopted adequate technical and organisational measures in order to prevent unauthorised access and misuse of your personal data.

Password security

We do not have your passwords saved to our system or any database. Your passwords are encrypted and stored at our online shop provider, neither we nor the provider know your passwords.

What are your rights related to personal data protection?

In relation to your personal data, you have in particular the right to withdraw your consent to the processing of your personal data at any time, the right to correct or supplement your personal data, the right to request restriction of processing, the right to raise an objection to or a complaint of the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data and, under certain conditions, the right to the deletion of certain personal data we process about you ("the right to be forgotten").

Changes and amendments

You control your personal data mainly through your user account, here you can delete or change the basic information about yourself.

Deletion

You may claim the deletion of your personal data (this shall not apply to data in documents that are subject to the obligation of archiving under the law (e.g. invoices or credit notes). In case we need your personal data to determine, execute or defend our legal claims, your request may be rejected (e.g. if we have an overdue invoice in your name or if the complaint procedure is in progress).

You are entitled to the deletion of data in the following cases:

-          The personal data is not needed for the purposes for which it was being processed

-          You have withdrawn your consent under which the data was processed and there is no further legal grounds for being processed

-          You have objected to the processing of personal data and you believe that after assessing your objection, it will become clear that your interest in the particular situation prevails over ours

-          The personal data has been processed unlawfully

-          The deletion obligation is stipulated by a special legal regulation

-          The deletion obligation is stipulated by a special legal regulation

Lodging a compliant

If you believe that your personal data has been processed unlawfully, you are entitled to lodge a complaint at the Office for Personal Data Protection. However, we will appreciate if you address us first and we can try to resolve your concerns. You can always easily contact us via e-mail or phone call.

This Personal Data Protection Policy including its parts is valid and effective from 1. 3. 2021