top of page

PERSONAL DATA PROTECTION INFORMATION

This information on personal data protection is issued by Krkonošská Bajkovna sro, with its registered office at no. 125, Špindlerův Mlýn, 543 51, identification number: 14290782, entered in the Commercial Register kept at the Regional Court in Hradec Králové, file number 48956 (hereinafter "KB") in connection with the processing of personal data of KB customers who participate in various activities or services provided by KB, or purchase goods or services through the website KB  www.krkonosskabajkovna.cz .

This document takes into account the rights and obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation). (hereinafter referred to as the "GDPR Regulation").

The company Krkonošská Bajkovna sro   is the administrator of personal data in the above cases. This document also applies to cases where KB is a processor of personal data received from another entity (administrator) and the obligations and rights contained therein are applied by analogy.

If the activity / service is ordered for third parties - participants (company events for employees, gift certificates, etc.), the client is obliged to acquaint the selected participant in detail with these conditions of personal data protection and to secure its consent, if necessary.

Persons under the age of 18 may participate in the activity or purchase goods only with the express consent of a parent or legal guardian. Such consent must include an understanding of these terms and conditions of personal data protection.

1. TYPE OF PERSONAL DATA PROCESSED

  1. If a KB customer (participant in activities, buyers in an online store, etc.) orders any goods or services from KB, KB will collect and process data that are marked as mandatory in the ordering process (depending on the type of services or goods provided, it is mainly name and surname, delivery address, e-mail address, age and data related to the payment of goods / services).

  2. When ordering goods or services, it is also possible to fill in optional data (telephone number, job positions, skills and interests, basic body dimensions for the purpose of renting sports equipment, photographs). These help to fulfill the concluded contract better and more efficiently. Optional data are provided voluntarily.

  3. In the case of various activities, photographs of individual participants can also be taken, which in certain circumstances may also become personal data.

  4. When a customer visits the KB website, KB may collect additional information about customers, such as the IP address and type of device from which the website is viewed, the type of products viewed, etc. KB also processes cookies automatically. This information is used to improve the offer of goods and services for the customer.

2. REASONS FOR PROCESSING

  1. Personal data is processed by KB for the following reasons:

    1. Purchase of goods and services: for the proper processing and delivery of the order;

    2. Provision of appropriate services (activities): for the purpose of proper preparation and conduct of the activity, which will be adapted with regard to the age, gender, experience or health status of the customer;

    3. Customer care: in order to solve a customer inquiry / problem;

    4. User account: registration and maintenance of a user account allows registered customers to take advantage of the associated benefits (pre-filled data, delivery notification, etc.);

    5. in the case of photographs of participants in activities, it is the documentation of the activity or use for KB's promotional activities;

    6. Marketing activity:

      • E-mail marketing: e-mail business messages are sent by KB based on the explicit consent of customers or on the basis of KB's legitimate interest. It is easy to unsubscribe from commercial communications in the manner specified therein.

      •  

      • Telemarketing: marketing calls are made by KB in order to offer goods and services, and related marketing communications. The legal title for processing the phone number is either the customer's consent or KB's legitimate interest.

    7. Exercise of KB's rights and legal claims (for example, an unpaid receivable from a customer) and control of public authorities.

3. PERMISSION TO PROCESS PERSONAL DATA

KB's authorization to process personal data stems from the following facts:

  1. conclusion and performance of the contract (purchase contract, activity contract, or other contract concluded between KB and the customer) pursuant to Article 6 (1) (b) of the GDPR Regulation;

  2. KB's legitimate interest pursuant to Article 6 (1) (f) of the GDPR Regulation, which is, for example, sending commercial communications to KB customers who have already purchased goods or services, without the customer's consent. If personal data are processed on the basis of this legal reason, the customer concerned may object to such processing.

  3. Customer consent. For the purposes of sending business messages (e-mail marketing and telemarketing) or using photos of individuals for promotional purposes, KB is entitled to process personal data on the basis of customer consent. This consent may be revoked at any time.

4. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES

  1. Personal data of customers are passed on to third parties in the following cases:

    1. transfer to a personal data processor which is the following company:

      • Wix.com Ltd. providing comprehensive online software.

      • KB has a contract with these processors, obliging processors to comply with their obligations under the GDPR Regulation;

    2. Delivery of goods: Personal data such as surname, first name, address and telephone number are passed on to the carrier of the purchased goods in order to be able to deliver the ordered goods. In relation to the transferred personal data, the carrier is entitled to process them only for the purpose of delivery of goods and then delete the personal data without delay.

    3. Provision of services related to the ordered activity / service: In the event that other services provided by third parties (accommodation, transport, insurance) are connected with the activity ordered by the customer, KB is entitled to provide these parties with selected personal data necessary to perform such third party services. parties. The terms of use of this personal data are governed by the terms and conditions issued by these third parties, which are available on their websites.

    4. Business messages: in the case of sending business messages (eg by e-mail, via SMS message or telemarketing), KB may use the services of a third party for distribution or telephone calls. This entity is bound by a duty of confidentiality and may not use personal data for any other purpose.

5. PERIOD OF PERSONAL DATA PROCESSING

  1. Personal data will be processed for the entire duration of the contractual relationship between KB and the customer and for the duration of the warranty period for the delivered goods. They will also be processed for the duration of the limitation period + 1 year, ie 4 years from the end of the contractual relationship between KB and the customer.

  2. In the case of processing personal data for which consent has been granted (especially for marketing purposes), personal data will generally be processed for a period of 10 years, or until such consent is revoked.

  3. Personal data that are necessary for the proper provision of services, respectively. In order to fulfill all obligations, whether these obligations arise from the contract between KB and the customer or from generally binding legal regulations, KB is obliged to process regardless of the granted consent for the period specified by the relevant legal regulations or in accordance with them (eg for tax documents for a period of at least 10 years).

  4. The data obtained through the user account will be for the duration of the user account and further for the duration of the limitation period + 1 year, ie 4 years from the cancellation of the user account.

  5. Any recordings of telephone calls are kept for a period of 10 years.

  6. After the above deadlines, personal data will be deleted or shredded.

6. PERSONAL DATA SECURITY

  1. KB is obliged technically and organizationally to ensure the protection of processed personal data so that unauthorized or accidental access to data, their change, destruction or loss, unauthorized transfers, their other unauthorized processing, as well as other misuse, cannot occur.

  2. KB will take such technical and organizational measures that correspond to the level of risk. The protection of personal data is subject to KB's internal security regulations. Only authorized KB persons and persons listed in Article 4 above will have access to personal data.​

7. CUSTOMER RIGHTS

  1. Every customer whose personal data is processed by KB has the following rights in connection with the processing:

    • the right to request access to your personal data from KB

    • the right to ask KB or the processor for an explanation;

    • the right to rectify, supplement, delete or restrict the processing of personal data;

    • the right to object to the processing of personal data;

    • the right to data portability;

    • the right to withdraw its consent to processing at any time if the processing is based on the customer's consent;

    • the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection;

    • the right to be informed that automated decision-making is taking place, including profiling.

  2. These rights can be exercised in writing by sending a letter to the address of KB's registered office, by e-mail to KB's e-mail address info@krkonosskabajkovna.cz

 

This information on personal data protection is valid from 21.3.2022

Krkonošská Bajkovna sro

bottom of page