Privacy Policy

 

      I. Basic Information

The company ADONIO INVEST s.r.o., ID No.: 17244820, with its registered office at Újezd 427/28, Malá Strana, 118 00, Prague, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. 368818 C, (hereinafter also referred to as the "Seller") becomes the controller of personal data provided by customers and visitors to its websites: https://www.adonio.cz, which also operate as an online store, i.e., e-shop (hereinafter referred to as the "Online Store").

 

The Seller publishes these Information on the Processing and Protection of Personal Data of customers and visitors to the Online Store's website (hereinafter also referred to as "Information"), i.e., all persons who search for goods from the Seller, order goods, or conclude a purchase agreement with the Seller, or also persons who contact the Seller regarding its goods and services via electronic communication (hereinafter these persons are collectively referred to as "Customers" or individually as a "Customer").

 

The Seller, ADONIO INVEST s. r.o., hereby declares that it will process the personal data provided by Customers in accordance with the principles set out in this Information. The Seller is authorized to process customers' personal data in accordance with the relevant legal regulations, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as the "GDPR Regulation"). The Seller is thus authorized to process the personal data of Customers provided to it by Customers, particularly:

 

  1. when ordering goods, or
  2. when setting up a customer account on the Online Store's website,
  3. when communicating with the Seller using electronic communication means.

 

      II. Personal Data Controller and Data Subject

 The Seller is the controller of the provided personal data within the meaning of the GDPR Regulation. The Customer is the data subject within the meaning of the GDPR Regulation. A data protection officer has not been appointed by the Seller. 

 

      III. Scope of Processed Personal Data

 The Seller will process Customers' personal data to the following extent: first name, last name, date of birth, personal identification number, email address, phone number, residential address, delivery address, payment card information enabling online payments, customer's bank account number, identification files when viewing the Online Store's website (hereinafter referred to as "Personal Data").

 

The stated scope of processed Personal Data applies as a maximum, but in specific cases, the Seller will only obtain Personal Data from Customers whose processing is necessary for the given processing purpose. 

 

      IV. Purposes of Personal Data Processing

 The Seller processes Personal Data in accordance with the legal regulations under the GDPR Regulation, especially according to the principles of Personal Data processing under Article 5 of the GDPR Regulation, and furthermore upon fulfillment of the legal grounds for Personal Data processing under Article 6 of the GDPR Regulation.  

 

The specific purposes of Personal Data processing by the Seller within the legal grounds for processing established by the GDPR Regulation are as follows: 

 

  1. providing information to Customers about the Seller, about offered goods and services based on Customer requests and inquiries,
  2. accepting orders in the Online Store or by other means of distance communication,
  3. fulfilling the Customer's order, fulfilling obligations under the purchase agreement for the sale of goods,
  4. sending information about order status, payment receipts, and goods dispatch
  5. receiving payments for goods and recording incoming payments,
  6. setting up and maintaining a customer account in the Online Store,
  7. recording goods sales within accounting,
  8. archiving for potential goods complaints and inspections by relevant authorities,
  9. sending newsletters and commercial communications to the email address provided by the Customer in connection with the sale of goods or services from the Seller.

 

The legal grounds (titles) for the processing of Personal Data by the Seller within the meaning of Article 6 of the GDPR Regulation are therefore as follows:

 

      1. Granting of consent by the Customer to the processing of Personal Data for one or more specific purposes (consent is not required if another of the legal titles listed below is fulfilled for the given purpose, or the authorization arises directly from law);

      2. Processing is necessary for the performance of a contract concluded with the Customer, or is necessary for the performance of measures taken at the Customer's request prior to entering into a contract;

      3. Processing is necessary for compliance with a legal obligation to which the Seller is subject;

      4. Processing is necessary for the purposes of the legitimate interests of the Seller.

 

      V. Period of Personal Data Processing

 

The Seller will process Personal Data for the duration of one of the above-mentioned processing purposes. The specific processing period may vary depending on the circumstances, and its length will be determined by: 

  • the time required to prepare a response to inquiries and requests concerning the Seller's goods and services,
  • the time needed to ensure measures based on the Customer's request before concluding the contract,
  • the time necessary for the fulfillment of the Seller's obligations arising from the concluded contract,
  • the duration of the relevant periods for liability for defects in goods or other periods established within the relationship arising from the concluded contract with the Customer,
  • the archiving period stipulated by legal regulations for the fulfillment of the Seller's legal obligations, e.g., the Accounting Act.

 

      VI. Method of Processing and Storage of Personal Data

 

Personal data is processed automatically by the Seller in electronic form in a secure electronic data storage; in justified cases, it may also be processed in paper form by the Seller's employees. Personal data in paper form will be stored in a lockable and secured room to which the Seller will have exclusive access. The Seller will ensure an appropriate method of further securing personal data according to the method of its processing (e.g., password-protected access, use of encryption, locking documents in a cabinet).

 

In addition to the Seller, other persons who provide services to the Seller for the operation of the Online Store will have access to the stored Personal Data, such as server landlords, data storage providers, software license providers, website and IT administrators on the Seller's side, and potentially other IT service providers.

 

     VII. Transfer of Personal Data to Other Recipients

 The Seller is authorized to transfer Personal Data to third parties under the conditions stipulated by the GDPR Regulation and other legal regulations, taking into account the stated processing purposes. In this sense, the Seller is authorized to transfer Personal Data to the necessary extent for the purpose of fulfilling a contract concluded with the Customer, especially to banks and payment service providers, carriers and freight forwarders, operators of pickup points for parcels, and other persons whom the Seller uses in fulfilling its obligations to the Customer.   

 

The Seller will also transfer Personal Data to other processors if it is necessary for the protection of its rights or the fulfillment of established obligations. In this sense, the Seller is authorized to transfer Personal Data, for example, to an accounting firm for accounting processing, to tax advisors for tax matters, to an insurance company for settling insurance claims, to legal advisors for resolving disputed or unclear rights and obligations, or to other contractual partners of the Seller in connection with one of the processing purposes.

 

The Seller will not transfer Personal Data outside the territory of the European Union, i.e., to third countries where the European Commission's decision has not confirmed an adequate level of personal data protection.

 

      VIII. Customer's Rights in Relation to Personal Data

 

  1. Right to access Personal Data and right to information

 

The Customer has the right to ask the Seller for confirmation of whether their Personal Data is being processed by the Seller, or that it is not being processed. If the processing of the Customer's Personal Data by the Seller continues, the Customer has the right to information about the categories of Personal Data processed, the purposes of their processing, information about other recipients of Personal Data, and for how long the Personal Data will be stored. The Seller can fulfill the information about the storage period of Personal Data by stating how the storage period will be determined. The Customer also has the right to information about their rights under the GDPR Regulation.

 

In a request for confirmation or information, the Customer is obliged to provide data to verify their identity so that there is no doubt as to whether the request was actually submitted by the person who is the subject of the Personal Data. The Seller will provide the requested information to the Customer upon their request, usually within a few working days of receiving the request, at the latest within 60 days. In exceptional cases, this period may be extended by the time necessary to verify the applicant's identity, to obtain statements from third parties (e.g., other recipients of Personal Data), or to obtain the opinion of the relevant supervisory authority. The Seller will provide the requested information, or the response to the Customer's request, in electronic form, unless the Customer has stated in the request that they request it in paper form.

 

In justified cases, the Seller may reject the Customer's requests for information that are completely unfounded, or such information has already been provided to the Customer and the request is repeated, or obtaining it requires disproportionate effort, or it is difficult to obtain (for example, from an external archive, or from difficult-to-access backups of electronic data). The Seller may refer the Customer to this Information, which it has published on the Online Store's website, or to other published data.

 

Customers will not be subject to decisions based solely on automated processing, including profiling, when their Personal Data is processed by the Seller.

 

 

  1. Right to Rectification of Personal Data

 

If it is found that the Seller holds Customer's Personal Data that is inaccurate, outdated, or in any way incorrect, the Customer has the right to request the Seller to correct or supplement the Customer's Personal Data. Providing information about changes to Personal Data is essential for the Seller to fulfill its obligations to the Customer and also to fulfill its duties as a Personal Data controller. The Seller will usually process the request for rectification of Personal Data within a few working days of receiving the Customer's request, at the latest within 60 days.

 

  1. Right to Erasure

 

The Customer has the right to request that the Seller erase their Personal Data if any of the following conditions are met:

  1. The Customer's Personal Data is no longer necessary for the given processing purpose.
  2. The reason for processing Personal Data was the Customer's consent to processing, and the Customer withdraws this consent, and there is no other legal basis for processing Personal Data.
  3. The Customer has objected to the processing of Personal Data with the Seller pursuant to Article 21 of the GDPR Regulation, in cases where the purpose of Personal Data processing was the performance of tasks in the public interest or the legitimate interests of the Seller, and the Seller does not demonstrate compelling legitimate grounds for further processing that override the interests, rights, and freedoms of the Customer.
  4. The Customer has objected to the processing of Personal Data with the Seller pursuant to Article 21 of the GDPR Regulation, in cases where the purpose of Personal Data processing was the Seller's marketing (e.g., in the case of sending newsletters and commercial communications).
  5. It is revealed that the processing of the Customer's Personal Data is unlawful.
  6. Personal Data must be erased within the scope of the Seller's obligation arising from the legal regulations of the Czech Republic or the European Union.
  7. The Seller obtained Personal Data in connection with the offer of information society services within the meaning of the law on these services (e.g., offering online sales of services).

 

The Customer's right to erasure of Personal Data does not apply if there is a Seller's obligation to store Personal Data, which applies to it under the law of the Czech Republic or the European Union, and further if the retention of Personal Data is necessary for the protection and assertion of legal claims. 

 

The Seller usually processes requests for deletion of Personal Data within several working days of receiving the Customer's request, but no later than 60 days. If the Customer has duly exercised their right to erasure and the stated conditions for the erasure of their Personal Data are met, the Seller will erase them to the maximum extent possible, taking into account the available technologies for removing or deleting the relevant data and the associated costs. The Seller will take steps to ensure the deletion of Personal Data by other processors. If the deletion of Personal Data is not technically possible or would involve disproportionate costs, the Seller will ensure that the processing of Personal Data is prevented and that they are not used.

 

  1. Right to restriction of processing    


The Customer has the right to restriction of processing of Personal Data in the event that:  

  1. the Customer's recorded Personal Data are inaccurate, for a period necessary to verify the accuracy of the recorded Personal Data,
  2. the processing of the Customer's Personal Data is unlawful, but the Customer requests the restriction of their processing instead of their erasure,
  3. the Personal Data are not necessary for the Seller, but the Customer requests the provision of the recorded data for the protection and assertion of legal claims,
  4. the Customer has lodged objections with the Seller against the processing of Personal Data under Article 21 of the GDPR Regulation, in cases where the purpose of processing Personal Data was the performance of tasks in the public interest or the legitimate interests of the Seller, for a period necessary to verify whether the Seller still has particularly compelling legitimate reasons for further processing.

 

The Seller usually processes requests for restriction of processing of Personal Data within several working days of receiving the Customer's request, but no later than 60 days. In the event of restricted processing, the Customer's Personal Data may only be stored and processed with the Customer's consent, or for the protection and assertion of legal claims, for reasons of public interest of the Czech Republic or the EU.  

 

If the conditions for lifting the restriction of Personal Data processing are met, the Seller will notify the Customer in advance that the restriction of processing will be lifted.

 

  1. Right to information on rectification, erasure or restriction of processing of Personal Data  

The Seller is obliged to notify the Customer that their Personal Data has been rectified or erased, or that its processing has been restricted upon the Customer exercising such rights. Upon the Customer's request, the Seller will inform about the recipients of Personal Data, if it turns out that rectification, erasure or restriction of processing is technically impossible or would require disproportionate effort.

 

The Seller will always inform the Customer within the above-mentioned deadlines for processing the relevant request. In exceptional cases, the deadline may be extended by the time required to obtain statements from third parties (e.g., other recipients of Personal Data), legal opinions or statements from the relevant authority. The Seller will provide a response to the Customer's request in electronic form, unless the Customer has stated in the request that they are asking the Seller for a response in paper form.  

 

  1. Right to data portability  

The Customer has the right to obtain from the Seller Personal Data that the Seller records about them, in a structured, commonly used and machine-readable format, provided that their processing is carried out automatically on the basis of the Customer's prior consent or in connection with a concluded contract. Based on the Customer's request, Personal Data in this form may be transferred to another personal data controller.

 

  1. Right to object  

The Customer has the right to lodge objections with the Seller against the processing of their Personal Data in these cases:  

  1. The reason for the processing of Personal Data was the performance of tasks in the public interest or the legitimate interests of the Seller and further processing is not justified, in which case the Seller cannot further process the Personal Data unless they demonstrate that they still have particularly compelling legitimate reasons for further processing.

       2. Personal Data are processed for direct marketing purposes, in which case the Seller cannot further process the Personal Data for these purposes.

 

The Customer has the right to lodge objections with the Seller in writing, in paper or electronic form via email at: info@adonio.cz or at the Seller's contact details published on www.adonio.cz.

 

  1. Right to lodge a complaint with the relevant supervisory authority  

The relevant supervisory authority within the meaning of the GDPR Regulation in the Czech Republic is the Office for Personal Data Protection. The contact details of the said supervisory authority are published on its website www.uoou.cz.

 

The Customer has the right to lodge a complaint with the Office for Personal Data Protection if the Customer believes that the processing of their Personal Data has violated the GDPR Regulation or other legal regulations. In addition to this right, the Customer has other options for legal protection under Czech law. The Office for Personal Data Protection can also be contacted for further information on the exercise of the Customer's rights in the protection of their Personal Data.

 

      IX. Electronic data and files when viewing the e-shop website

 

 Log files

 When viewing and browsing the e-shop website, the Seller receives log files from the Customer, and they are stored on the relevant servers necessary for the operation of the e-shop. The stored log files include the Customer's IP address, web requests in the e-shop, web response codes, browser identification on the Customer's side, monitor resolution, and other data of a similar nature. This information is processed for a maximum of 12 months, unless it is linked to the Customer's Personal Data, in which case the processing period for Personal Data applies to the log files, and the Customer's rights regarding Personal Data will also apply to this additional data.

 

Cookies and Personal Data

 

In the operation of the Seller's e-shop, cookie technologies are used, where they are stored on the Customer's communication device, or in the settings of the browser used by the Customer. Cookies primarily ensure the correct functioning of the e-shop website (technical cookies), or some are used for statistical purposes or for marketing purposes (analytical and marketing cookies). When visiting the e-shop, the Customer receives information about the cookies used and information about the possibility of giving consent to the use of cookies.

 

Consent to the use of cookies includes the possibility of storing them on the Customer's end device and the possibility of reading them by the Seller. The Customer has the right to grant, withhold or refuse consent to the use of cookies. The Customer has the right to withdraw their given consent at any time later.

 

With the exception of technical cookies, which are essential for the functioning of the e-shop and the sale of goods, the Customer may disable the use of other cookies (i.e., statistical and marketing cookies). The Customer may at any time later remove, i.e., delete, stored cookies from their device. In the context of using cookies, the processing of Customer's Personal Data may occur, in cases where the use of cookies allows the identification of the Customer or where cookies are linked to personal data. The use of cookies by the Seller will be associated with the processing of personal data in cases of ordering goods on the e-shop, in cases of maintaining a Customer account or in cases of granting consent to the use of cookies. In these cases, the processing period for Personal Data applies to the processing of cookies, and the Customer has the same rights as in the case of Personal Data.

 

      X. Contacts and final provisions

 For any further questions regarding the processing and protection of Personal Data, Customers can contact the Seller at the contacts listed below:

 

email: info@adonio.cz

www.adonio.cz

 

 

These Information on the processing and protection of personal data of the company become effective upon their publication on the e-shop website (the current version was published on October 5, 2022).

 

 Attachment - Personal Data Protection Terms and Conditions for download

 

ADONIO INVEST s.r.o.