Privacy
Privacy Policy
/ Principles and instructions on personal data protection/
provided by the operator to the data subject when obtaining personal data from the data subject of the hombu.store Online Store
Operator
1. The Operator hereby, in accordance with Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation"), provides the Data Subject, from whom the Operator obtains personal data concerning them, with the following information:
Identity and contact details of the Operator:
Business name: Madlife s.r.o.
Registered office: Jaurisova 515/4, 140 00 Prague 4, Czech Republic
Registered in the Commercial Register of the Municipal Court in Prague, File No. C 276476
Company ID: 061 20 407
Bank account: CZ78 2010 0000 0029 0123 2019
The seller is not a VAT payer /Value Added Tax/
(hereinafter also “Seller”)
2. References
These principles and instructions on personal data protection form an integral part of the General Terms and Conditions published in the Seller's Online Store.
3. Processed personal data
3.1. The Operator processes the following personal data: name, surname, address, email address, telephone number, data obtained from cookies, IP addresses.
4. Identity and contact details of the Operator's representative:4.1. No representative of the Operator is appointed. The Operator is also the Seller within the meaning of the term established in the General Terms and Conditions of the online store.
5. Contact details of the responsible person:
5.1. No responsible person is appointed.
6. Purposes of processing the personal data of the Data Subject:
6.1. The purposes of processing the personal data of the Data Subject are:
6.1.1. processing of accounting documents
6.1.2. keeping records of contracts and clients for the purpose of concluding and fulfilling contracts
6.1.3. archiving of documents in accordance with legal regulations
6.1.4. marketing activities of the operator
7. Legal basis for processing the personal data of the Data Subject
7.1. The legal basis for processing the personal data of the Data Subject will be, depending on the specific personal data and the purpose of its processing, the consent of the Data Subject to the processing of personal data, the fulfillment of a legal obligation of the operator, the fulfillment of a contract to which the data subject is a party.
8. Recipients or categories of recipients of personal data
The recipients of the Data Subject's personal data will be or at least may be:
8.1. statutory bodies or members of the Operator's statutory bodies
8.2. employees of the Operator
8.3. commercial representatives of the operator and other persons cooperating with the Operator in the performance of the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator based on an employment contract or agreements on work performed outside employment will be considered employees of the Operator.
8.4. Recipients of the Data Subject's personal data will also be the Operator's collaborators, its business partners, suppliers and contractual partners, in particular: an accounting company, a company providing services related to software development and maintenance, a company providing legal services to the Operator, a company providing consulting services to the Operator, companies providing transport and delivery of products to buyers and third parties.
8.5. Recipients of personal data will also be courts, law enforcement agencies, tax authorities and other state authorities, in cases prescribed by law.
9. Information on the intended transfer of personal data to a third country:
Not applicable – The Operator does not intend to transfer personal data to a third country.
10. Personal data retention period:
Personal data will be stored in accordance with legal regulations for the necessary time, for which they will be needed for the purposes of contract fulfillment and their subsequent archiving.
11. Instruction on the existence of relevant rights of the Data Subject:
The Data Subject has, among other things, the following rights:
11.1. the right of the Data Subject to access data according to Article 15 of the Regulation, the content of which is:
11.1.1. the right to obtain from the Operator confirmation as to whether or not personal data concerning the Data Subject are being processed;
-
if the Data Subject's personal data are being processed, the right to access the processed personal data and the right to obtain the following information:
-
information on the purposes of processing;
-
information on the categories of personal data concerned;
-
information on the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
-
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
-
the existence of the right to request from the Operator rectification or erasure of personal data or restriction of processing concerning the Data Subject or to object to such processing;
-
the right to lodge a complaint with a supervisory authority;
-
where the personal data are not collected from the Data Subject, any available information as to their source;
-
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject;
11.1.2. the right to be informed of the appropriate safeguards pursuant to Article 46 of the Regulation relating to the transfer of personal data if personal data are transferred to a third country or international organization;
11.1.3. the right to be provided with a copy of the personal data undergoing processing, provided that the right to be provided with a copy of the processed personal data does not adversely affect the rights and freedoms of others;
11.2. the right of the Data Subject to rectification according to Article 16 of the Regulation, the content of which is:
11.2.1. the right to obtain from the Operator without undue delay the rectification of inaccurate personal data concerning the Data Subject;
11.2.2. the right to have incomplete personal data of the Data Subject completed, including by means of providing a supplementary statement by the Data Subject;
11.3. the right of the Data Subject to erasure of personal data (the right “to be forgotten”) according to Article 17
of the Regulation, the content of which is:
11.3.1. the right to obtain from the Operator the erasure of personal data concerning the Data Subject without undue delay if one of the following grounds applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
-
the Data Subject withdraws consent on which the processing is based, and where there is no other legal ground for the processing of personal data;
-
the Data Subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing;
-
or the Data Subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation;
-
the personal data have been unlawfully processed;
-
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Operator is subject;
-
the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation;
11.4. the right to request that the Operator, who has made the Data Subject's personal data public, taking into account available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers who are processing the personal data that the Data Subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data;
it applies that the right to erasure of personal data with the content of rights according to Article 17(1) and (2) of the Regulation [i.e., with the content of rights according to (i) and (ii) of this letter c) point J. of this document] will not arise if the processing of personal data is necessary:
11.4.1. for exercising the right of freedom of expression and information;
11.4.2. for compliance with a legal obligation which requires processing by Union or Member State law to which the Operator is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Operator;
11.4.3. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation;
11.4.4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the Regulation in so far as the right referred to in Article 17(1) of the Regulation is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
11.4.5. for the establishment, exercise or defence of legal claims;
11.5. the right of the Data Subject to restriction of processing of personal data according to Article 18 of the Regulation,
the content of which is:
11.5.1. the right to obtain from the Operator restriction of processing where one of the following applies:
-
the accuracy of the personal data is contested by the Data Subject, for a period enabling the Operator to verify the accuracy of the personal data;
-
the processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead;
-
the Operator no longer needs the personal data for the purposes of the processing, but they are required by the Data Subject for the establishment, exercise or defence of legal claims;
-
the Data Subject has objected to processing pursuant to Article 21(1) of the Regulation pending the verification whether the legitimate grounds of the Operator override those of the Data Subject;
11.5.2. the right that where processing of personal data has been restricted according to point (i) of this letter d) point J. of this document, such restricted processed personal data shall, with the exception of storage, only be processed with the Data Subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State;
11.5.3. the right to be informed by the Operator before the restriction of processing is lifted;
11.6. the right of the Data Subject to notification obligation regarding rectification or erasure of personal data or restriction of processing according to Article 19 of the Regulation, the content of which is:
11.6.1. the right to have the Operator communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 of the Regulation to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort;
11.6.2. the right to have the Operator inform the Data Subject about those recipients if the Data Subject requests it;
11.7. the right of the Data Subject to data portability according to Article 20 of the Regulation, the content of which is:
11.7.1. the right to receive the personal data concerning them, which they have provided to the Operator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Operator, where:
-
the processing is based on consent pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation or on a contract pursuant to Article 6(1)(b) of the Regulation; and simultaneously
-
the processing is carried out by automated means, and simultaneously
-
the right to receive the personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the Operator shall not adversely affect the rights and freedoms of others;
11.7.2. the right to have the personal data transmitted directly from one controller to another, where technically feasible;
11.8. the right of the Data Subject to object according to Article 21 of the Regulation, the content of which is:
11.8.1. the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation;
11.8.2. [in the event of exercising the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation] the right to have the Operator no longer process the Data Subject's personal data unless the Operator demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims
11.8.3. the right to object at any time to processing of personal data concerning them for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing; it applies that if the Data Subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes;
11.8.4. (in connection with the use of information society services) the right to exercise the right to object to processing of personal data by automated means using technical specifications;
11.8.5. the right to object, on grounds relating to their particular situation, to processing of personal data concerning them for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the Regulation, unless the processing is necessary for the performance of a task carried out for reasons of public interest;
11.9. the right of the Data Subject related to automated individual decision-making according to Article 22 of the Regulation, the content of which is:
11.9.1. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, with the exceptions according to Article 22(2) of the Regulation [i.e. with the exception of cases where the decision is: (a) necessary for entering into, or performance of, a contract between the Data Subject and the Operator, 11.9.2. authorized by Union or Member State law to which the Operator is subject and which also lays down suitable measures to safeguard the Data Subject's rights and freedoms and legitimate interests or (c) based on the Data Subject's explicit consent].
12. Instruction on the right of the Data Subject to withdraw consent to the processing of personal data
12.1. The Data Subject is entitled to withdraw their consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
The Data Subject is entitled to withdraw their consent to the processing of personal data at any time – in whole or in part. Partial withdrawal of consent to the processing of personal data may concern a certain type of processing operation(s), while the lawfulness of processing personal data in respect of the remaining processing operations shall remain unaffected. Partial withdrawal of consent to the processing of personal data may concern a specific purpose(s) of processing personal data, while the lawfulness of processing personal data for other purposes shall remain unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in writing to the address of the Operator registered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data or in electronic form via electronic means (by sending an e-mail to the Operator's e-mail address indicated in the Operator's identification in this document or by completing an electronic form published on the Operator's website).
13. Instruction on the right of the Data Subject to lodge a complaint with a supervisory authority
13.1. The Data Subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if the Data Subject considers that the processing of personal data relating to them infringes the Regulation, all without prejudice to any other administrative or judicial remedy.
The Data Subject has the right to be informed by the supervisory authority to which the complaint has been lodged on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the Regulation.
14. Information on the existence/non-existence of the Data Subject's obligation to provide personal data
14.1. The Operator informs the Data Subject that the provision of the Data Subject's personal data is necessary for the conclusion and fulfillment of the purchase agreement. The Operator informs the Data Subject that the Data Subject is not obliged to provide personal data nor is obliged to grant consent to its processing. The consequence of not providing personal data and/or not granting consent to the processing of personal data will be that the Operator will not be able to conclude and fulfill the purchase agreement.
15. Information related to automated decision-making including profiling:
15.1. Not applicable. - As the Operator's processing of the Data Subject's personal data does not involve automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation, the Operator is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, i.e., information on automated decision-making including profiling and on the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject.
16. Personal data protection and use of cookies - What is a cookie?
In connection with the EU e-Privacy Directive, we offer a brief explanation of the function of cookies. Cookies are text files that contain a small amount of information that is downloaded to your computer, mobile, or other device when you visit a website. Cookies are useful because they allow the website not only to recognize the user's device but also to allow the user access to functions on the site.
In principle, we divide cookies into two types.
Persistent cookies – these cookies remain on the user's device for the period specified in the cookie. They are activated each time the user visits the website that created that cookie.
Session cookies – these files allow the website operator to link user activities when the user opens the browser window and ends when closing the browser window. Session cookies are created temporarily. All session cookies are deleted when the browser is closed.
16.1. What are COOKIE files?
A cookie is a small text file that a website stores on your computer or mobile device when you browse it. Thanks to this file, the website retains information about your steps and preferences (such as login name, language, font size, and other display settings) for a certain period, so you do not have to re-enter them on your next visit to the site or when browsing its individual pages.
16.2. How do we use COOKIE files?
Our Online Store uses cookies to store:
-
your display preferences, such as color contrast or font size settings;
-
the fact that you have already responded to a survey appearing in a separate window (pop-up) through which you can express your opinion on the content of the page (it will not reappear);
-
the fact whether you have consented (or not consented) to our use of cookies on this website.
-
remarketing
Similarly, some subpages that are part of our sites use cookies to anonymously collect statistical data on how you got there and which video clips you watched.
Enabling the use of cookies is not strictly necessary for the proper functioning of the website, but it will provide you with a better user experience when working with it. You can delete or block cookies. However, in such a case, some functionalities of the website may not work as they should.
The information stored in cookies will not be used for your personal identification and the data structure is fully under our control. Cookies are not used for purposes other than those specified in this text.
16.3. Do we also use other COOKIE files?
Some of our pages or sub-sites may use additional or different cookies than those listed above. In such a case, detailed information on their use will be provided on the relevant page in a separate cookie notice.
16.4. How to control COOKIE files?
You can control and/or delete cookies as you wish – see details on aboutcookies.org. You can delete all cookies stored on your computer and set most browsers to prevent them from being stored. However, in such a case, you will probably have to manually adjust some settings each time you visit the website, and some services and functions will not work.
17. Final provisions
These Principles and instructions on personal data protection form an integral part of the General Terms and Conditions and the Complaints Policy. The documents – General Terms and Conditions and Complaints Policy of this online store are published on the Seller's Online Store domain.
These privacy policy comes into force and effect on their publication in the Seller's Online Store on 20.2.2021.