(hereinafter referred to as the “Policy”)
1. This Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). The purpose of this Policy is to provide Participants with basic information regarding the processing of personal data.
2. For the purposes of this Policy, the following terms shall mean:
Operator: TI S TĚMA AUTÍČKAMA s.r.o., Company ID No. 291 45 023, with its registered office at U Kuchyňky 180/2, Podklášteří, 674 01 Třebíč, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno under File No. C 129920, e-mail: info@menscrisis.com
Participant: a natural person who provides or makes their personal data available to the Operator;
Personal Data: first name and surname, residential address, e-mail address, telephone number, identification number of a self-employed natural person and tax identification number of a self-employed natural person.
The Operator, as the controller of Personal Data, hereby provides information on the manner and scope of Personal Data processing, including the scope of the Participant’s rights related to the processing of Personal Data.
3. The Operator operates the website https://www.shop.menscrisis.cz/, which includes an online store. As part of this service, the Operator processes Personal Data:
to the extent in which such data has been provided in connection with:
for the purposes specified below.
4. The Operator is the controller of Personal Data. Personal Data is also processed, based on your consent, the legitimate interests of the Operator or for the purpose of fulfilling a contract entered into with you, by the following entities:
1. The Operator processes Personal Data for the following purposes:
Participants are subject to Act No. 110/2019 Coll., on Personal Data Processing, as amended (ZZOO), and other applicable legislation.
The Participant acknowledges that the processing of Personal Data by the Operator will commence upon the submission or disclosure of such Personal Data.
If the Participant does not provide their Personal Data, it will not be possible to conclude a contract with the Operator or provide the services arising therefrom. Personal Data is necessary in this context for the provision of a specific service or product of the Operator.
The provision of Personal Data to the Operator is generally a contractual and statutory requirement. With regard to the provision of Personal Data for purposes that do not constitute the performance of contractual or statutory obligations or the protection of the controller’s legitimate interests, the Participant’s consent is required. If the Participant does not grant the Operator consent to the processing of Personal Data for such purposes, this does not mean that the Operator will refuse to provide all of its services as a consequence.
Personal Data will be processed for the duration of negotiations concerning the conclusion of a contract between the Operator and the Participant, for the purpose of concluding the contract, as well as for the duration of the contractual relationship or for the period specified in the consent.
If a contract is concluded in accordance with the Operator’s Terms and Conditions, Personal Data will be processed and stored for the following 36 months in the event of a dispute concerning the relationship between the Operator and the Participant, for the purpose of protecting the Operator’s legitimate interests.
For the purpose of complying with the statutory obligation to archive accounting documents under Act No. 563/1991 Coll., on Accounting, as amended, Personal Data (except for the e-mail address and telephone number) will continue to be processed and stored for a period of 5 years starting from the year following the year in which the contract between the Operator and the Participant was concluded.
After the expiry of the periods specified in Article III, paragraphs 5, 6 and 7, the Operator shall dispose of the Personal Data.
The Participant is obliged to provide the Operator only with true and accurate Personal Data.
The Operator shall make every reasonable effort to prevent unauthorised processing of Personal Data.
Participants’ Personal Data may be transferred to third parties, to a third country or to an international organisation.
Personal Data is and will be processed electronically by non-automated means.
The Participant acknowledges that their Personal Data is stored in data centres and processed by entities in third countries (countries outside the European Union), whose operations comply with European personal data protection standards.
1. The Participant has the right to withdraw their consent to the processing of the Personal Data provided at any time (in cases where Personal Data is processed on the basis of consent). However, consent to the processing of Personal Data cannot be withdrawn to the extent and for purposes required for the Operator to comply with a statutory obligation.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Withdrawal of consent also does not affect the processing of Personal Data carried out by the controller on a legal basis other than consent (i.e. in particular where processing is necessary for the performance of a contract, compliance with a legal obligation or for other reasons stipulated by applicable legislation).
Consent may be withdrawn by sending a withdrawal notice to the Operator’s registered office or by using the link provided in e-mail communications.
2. The Participant also has the following rights:
The Participant is entitled to request information from the Operator as to whether Personal Data is being processed.
If Personal Data is being processed, the Participant has the right to request information from the Operator, in particular regarding the identity and contact details of the Operator, its representative and, where applicable, the data protection officer; the purposes of processing; the categories of Personal Data concerned; the recipients or categories of recipients of the Personal Data; the legitimate interests of the Operator; a list of the Participant’s rights; the possibility of contacting the Office for Personal Data Protection; the source of the Personal Data being processed; and automated decision-making and profiling.
If the Operator intends to further process the Participant’s Personal Data for a purpose other than that for which it was obtained, the Operator shall provide the Participant, prior to such further processing, with information about that other purpose and other relevant information.
The Participant is entitled to request information from the Operator as to whether their Personal Data is being processed and, if so, has the right to access information regarding:
The Participant has the right to obtain copies of the Personal Data being processed. However, the right to obtain such a copy must not adversely affect the rights and freedoms of other persons.
If, for example, the Participant changes their place of residence, telephone number or another fact that may be considered Personal Data, the Participant has the right to request that the controller rectify the Personal Data being processed.
In addition, the Participant has the right to have incomplete Personal Data completed, including by providing an additional statement.
In certain specified cases, the Participant has the right to request that the Operator erase the Participant’s Personal Data.
Such cases include, for example, situations where the processed data is no longer necessary for the purposes mentioned above.
The Operator automatically erases Personal Data once the period for which it is necessary has expired; however, the Participant may contact the Operator with a request at any time.
The Participant’s request will then be assessed individually (despite the Participant’s right to erasure, the controller may have an obligation or legitimate interest requiring it to retain the Participant’s Personal Data), and the Participant will be informed in detail about how the request has been handled.
The Operator processes the Participant’s Personal Data only to the extent strictly necessary.
However, if the Participant believes, for example, that the Operator is exceeding the purposes specified above for which Personal Data is processed, the Participant may submit a request for their Personal Data to be processed solely for the most essential statutory reasons or for the Personal Data to be blocked.
The Participant’s request will then be assessed individually and the Participant will be informed in detail about how it has been handled.
The Participant may at any time submit a complaint or other filing concerning the processing of Personal Data to the supervisory authority, namely the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, website: https://www.uoou.cz/
3. If the Participant believes that the Operator is processing their Personal Data in a manner that is contrary to the protection of their private and personal life or contrary to applicable legislation, particularly where Personal Data is inaccurate in relation to the purpose of its processing, the Participant may:
The Operator shall decide on the objection without undue delay and inform the Participant.
If the Operator does not uphold the objection, the Participant has the right to contact the Office for Personal Data Protection directly. This provision does not affect the Participant’s right to submit a complaint directly to the Office for Personal Data Protection.
4. The Participant may exercise the rights specified above in writing at:
TI S TĚMA AUTÍČKAMA s.r.o.
U Kuchyňky 2/180
674 01 Třebíč
or electronically at info@menscrisis.com.
5. If the Participant requests information about the scope or manner of processing of their Personal Data, the Operator is obliged to provide this information without undue delay, but no later than within one month of receiving the request at the Operator’s address, U Kuchyňky 2/180, 674 01 Třebíč.
6. If the Participant exercises the right of access to Personal Data in electronic form, the Operator shall also provide the requested information in electronic form, unless the Participant requests another method of providing the information.
7. In the event of repeated and unfounded requests for a physical copy of the Personal Data being processed, the Operator is entitled to charge a reasonable fee to cover the associated administrative costs.
8. Personal Data is not automatically evaluated.
By ticking the checkbox, you give your explicit consent to the Operator to process, in accordance with the GDPR and ZZOO, the following Personal Data:
which we have obtained directly from you for the following purposes of the Operator, carried out either by the Controller itself or by persons authorised by it:
This consent is granted for an indefinite period, until it is withdrawn.
This consent is voluntary and may be withdrawn at any time by sending a withdrawal notice in e-mail communication to info@menscrisis.com.
You acknowledge that withdrawal of consent does not affect the lawfulness of Personal Data processing based on consent prior to its withdrawal.
By ticking the checkbox, you confirm that:
All legal relationships arising in connection with the processing of Personal Data shall be governed by the laws of the Czech Republic, irrespective of the location from which access to such data was made.
The Czech courts shall have jurisdiction to resolve any disputes arising in connection with privacy protection between the Participant and the Operator.
Participants who provide their Personal Data through the registration form for the purpose of concluding a contract with the Operator or who provide consent to the processing of Personal Data do so voluntarily and in their own name, and the Operator does not direct their actions in any way.
The Operator may amend or supplement the wording of this Policy. The Operator shall inform Participants of every such amendment by e-mail at least 30 days before the amendment takes effect.
This Policy shall take effect on 1 June 2023.