No products in the cart.
🎁 Get 10% off for your first purchase. Just use the code HELLO10
Privacy Policy and Information on Personal Data Processing (Hereinafter Referred to as the “Policy”)
Regulation (EU) 2016/679 (GDPR) represents the legal framework for personal data protection applicable throughout the EU, which safeguards the rights of its citizens against unauthorized handling of their data and personal information. GDPR adopts all previous principles of data protection and processing on which the EU system of personal data protection is based and confirms that protection travels across borders together with personal data.
Accordingly, the General Regulation further develops and strengthens the rights of individuals affected by the processing, in both components: to have (obtain) information about which of their data are being processed and why, and to seek enforcement of the rules, including remedies. GDPR systematically emphasizes the enforceability of individuals’ rights and the obligations of data controllers (those responsible for processing).
1 Introductory Provisions
For the purposes of this Policy, the following terms shall be understood:
1.1 Operator
• – Business name: AG ART co s.r.o., Čs. armády 371/11, Bubeneč (Prague 6), 160 00 Prague, ID No.: 27596869, a company registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 117815
• – Web application: wallever.store
• – This Policy takes effect on: 1.11.2023
• – The Operator operates the above Web application. Within the Web application, the Operator processes the Personal Data listed in Section 3.2 for the purposes stated below in Section 3.3.
1.2 Validity of Provided Data and Activities
The Policy includes labeled valid and invalid statements. The statements are structured as unnumbered lists.
1.3 Controller
• – The Controller is the person who manages, deletes, forgets, edits, transfers, and ensures deletion from all backups.
Name: Tamara Moroz, Email address: info@wallever.store
• – As the Controller of Personal Data, the Operator hereby informs about the method and scope of Personal Data processing, including the scope of the Subject’s rights (as defined below) related to the processing of their Personal Data.
2 Related Documents
List of related documents.
This Policy supplements the Terms and Conditions, which are available at: https://wallever.store/podminky
3 Personal Data Protection and Processing Information
3.1 Subject
The Subject is a natural person whose personal data is being processed (hereinafter the “Subject”). A Subject is not a legal entity. Data relating to legal entities are not considered personal data.
3.2 Personal Data means
For the purposes of this Policy, Personal Data means:
• – Email
• – First and last name
• – User’s physical mailing address
• – Telephone
• – Purchase information (goods, price, quantity, cart contents)
• – Upon login, we record information about the Subject's visit to a particular page and the content viewed in the Web application
• – IP address of the computer or computer network
• – Information on the use of the site by logged-in users (URL, time on page, etc.)
• – Business ID and VAT ID of self-employed individuals
3.2.1 Sensitive Data
Sensitive data are not processed.
3.3 Purpose of Personal Data Processing
Subjects’ personal data are used for the following purposes (services):
• – Business activity – order fulfillment of the e-shop for a period of: 5 years. If the Subject does not provide their Personal Data, it is not possible to conclude a contract with the Operator and/or provide services resulting from it. Personal Data are necessary for the provision of a specific service or product by the Operator. For legal obligation of archiving accounting documents based on Act No. 563/1991 Coll., on Accounting, as amended, Personal Data (except for email and phone number) will be processed and stored for 5 years starting from the year following the year in which the contract between the Operator and the Subject was concluded.
• – Registration for: order fulfillment of the e-shop for the purpose of concluding a contract, during the term of the contractual relationship.
• – Commercial communication, Newsletter – sending offers for goods or services, and messages leading to a sale until the Subject unsubscribes from commercial communication. Email and Name are stored by the processor Mailchimp for potential future sending of updates related to the requested service and requested commercial communication for a period: until the Subject requests deletion. Personal Data will be processed for marketing and commercial communication purposes for 5 years from the consent being granted.
• – Improving our services and content of the Web application (e.g., for proposing adjustments to the Web application) for a period: 2 years
• – Sending information about changes to your registration account, activities related to your activity (e.g., response to your comment, information on price change of tracked goods…) for a period: 2 years
• – Remarketing – inclusion in remarketing audiences; cookie processing is done by a third party, usually Google, Sklik, Facebook. Remarketing is used to show advertisements to visitors of the site for a period: 30 days
3.4 Processors
Who are the processors used by controllers to process personal data and third-party companies:
• – Internal data recording tools: information system, e-shop admin at the address of the Web application for the above purposes.
• – Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – Data: Cookies for remarketing to re-engage Subjects who have previously visited the Web. Ads may be shown as they browse other sites in the Google Display Network. Remarketing. The Operator uses G Suite and Google Cloud Platform, which are compliant with European data protection standards.
• – Seznam.cz, ID: 26168685 – Data: Sklik is a Czech PPC system that allows ad display in Seznam search and major websites. Visitors coming via Sklik ads are recognized via a cookie stored in their device with 30-day validity. Remarketing. Subject acknowledges that cookies may be stored by the company on their device.
• – Facebook Inc., Menlo Park, California, USA – Data: Stores Cookies to customize and measure ads and create a safer environment. More info: https://www.facebook.com/policies/cookies/ – Remarketing.
• – Heureka Shopping s.r.o. – Data: Purchase info, Email – Purpose: sending an email with a request to review a purchase. Email system: the company does not send bulk emails. Only emails related to order processing and complaints are sent.
3.5 Acceptance / Consent to Personal Data Processing
Subjects express their consent to personal data processing in the following ways:
• – Consent is given by entering personal data and submitting them (i.e., clicking the appropriate button). Information on personal data processing is provided on the page. Consent follows from the context and process. The Subject acknowledges that by submitting the completed registration form, the processing of Personal Data by the Operator begins.
• – Logging in with registration credentials
• – I have retroactively documented all necessary consents for EU citizens (e.g., consent to commercial communication). Consent is recorded: in the e-shop database
• – If the Subject does not provide their Personal Data, the Operator cannot provide the services mentioned in Section 3.3. Personal Data are necessary for the provision of the specific service or product by the Operator.
3.6 Non-Personal Data
For clarity, here are non-personal data we record, for which Subject’s consent is not required:
• – Cookies necessary for the operation of the Web application
• – Anonymous site visits (e.g., URL, browser, geolocation, visitor's operating system)
3.7 Rights and Obligations
• – The Operator will make every effort to prevent unauthorized processing of Personal Data.
• – The Subject is obliged to provide the Operator only with true and accurate Personal Data.
• – The Subject has the right to withdraw their consent (in cases where processing is based on consent) to the processing of Personal Data at any time by email to the Controller’s address. Consent withdrawal does not affect processing carried out before the withdrawal. Withdrawal also does not affect processing based on a legal ground other than consent (e.g., necessary for contract performance, legal obligation, etc.).
The Subject further has the right to:
• – access Personal Data;
• – correct provided Personal Data;
• – delete provided Personal Data;
• – restrict the processing of Personal Data;
• – file a complaint with the Office for Personal Data Protection.
If the Subject believes that the Operator is processing their Personal Data contrary to their privacy or applicable laws, especially if the data are inaccurate for the purpose of processing, they may:
• – request an explanation from the Operator by email to the Controller’s address
• – object to the processing and request, via email, that the Operator remedy the situation (e.g., by blocking, correcting, supplementing, or deleting personal data). The Operator will decide on the objection promptly and inform the Subject. If the Operator does not comply, the Subject has the right to contact the Office for Personal Data Protection directly. This does not affect the Subject's right to contact the authority independently.
• – Upon request, the Operator must provide information about the extent or method of processing their Personal Data promptly, no later than one month after receiving the request at the Controller’s address.
• – If the Subject exercises their right to access Personal Data electronically, the Operator will provide the information in electronic form unless requested otherwise.
• – The Operator may charge a reasonable administrative fee in case of repeated and unfounded requests for physical copies of processed Personal Data.
• – The buyer agrees to the storage of cookies on their computer. If it is possible to complete a purchase on the website and fulfill the seller’s obligations without storing cookies, the buyer may withdraw consent at any time.
Final Provisions
• – All legal relationships arising in connection with the processing of Personal Data are governed by the laws of the Czech Republic, regardless of where access originated. Czech courts have jurisdiction for disputes related to privacy between the Subject and the Operator.
• – Regarding this Web application, Personal Data may be transferred across international borders to server locations supporting the Website.
• – Subjects providing their Personal Data via registration forms for the purpose of entering into a contract or giving consent to processing do so voluntarily, on their own behalf, and their activity is not directed by the Operator.
• – The Operator may change or supplement the Policy. The Operator will inform Subjects of such changes by email at least 30 days before the change becomes effective.
• – This Policy takes effect on the date stated in Section 1.
