Processing and protection of personal data

In the context of the European General Data Protection Regulation (GDPR) We ask you to consent to the processing of your personal data in the e-shop www.hugo-bau.eu. The purpose of the GDPR regulation is a higher level of protection of your personal data and an overview of its processing and your rights.

Your personal data is processed exclusively in accordance with applicable legislation. We process personal data only with the client’s consent. It is his/her free choice whether or not to provide his/her consent to the extent proposed by us. Providing consent is entirely voluntary and once consent has been given, it can be withdrawn at any time. We are bound by and fully respect the scope of the consent provided.

1. Purpose of processing

We will process your personal data for the purpose of fulfilling your orders, ordered services, invoicing or for the purpose of delivering orders to your contact address.

2. Scope of processing

We process the following customer data, which is necessary for the execution of orders and which you provide to us knowingly
– name
– surname
– street and registration number
– postcode
– city
– state
– landscape
– phone number
– company name
– ID NUMBER
– TIN
– VAT NUMBER
– e-mail address

Information you unknowingly provide to us:
– IP address

3. Processing time

Your personal data will be securely stored, collected, processed and archived for the purpose of keeping accounting records and documents for a period of 10 years (on the basis of Article 431/2002 Coll. on accounting, as amended) from the last completed order.

4. Cookies

For the purpose of adapting the content of our e-shop to your preferences, we use cookies. Cookies are small data files that our e-shop stores in your web browser when you visit it. If you do not agree to the use of cookies, please set your own rules for the use of cookies in the web browser on your device. If you disable the use of cookies, the functionality of the e-shop may be limited.

5. Web metrics and analytics

These are conversion or pixel tags, or small graphic images, which can be incorporated in the code of our e-shop and on the basis of which it is possible to identify the user for the purposes of recording their behaviour and measuring traffic.

We use the following systems:
Google Anylitics

Facebook Pixel

Smartsupp

6. Advertising and promotional services

In the e-shop, we use your contacts to send you advertising or commercial communications in addition to order processing. It is the processing of the following data:
– name
– surname
– e-mail address

The data of users who have subscribed to the e-shop newsletter are sent and processed by a third party outside the EU – the company he Rocket Science Group, which operates the Mailchimp service and which complies with the principles of the European Data Protection Regulation. Available at: https://www.smartemailing.cz/zasady-ochrany-osobni…

7. Right of access to data

The user of the e-shop has the right to obtain information about the purpose and scope of the processing of his/her personal data.

8. Right to data portability

It is the controller’s obligation to provide the data subject with all the information processed about him in a structured, commonly used, machine-readable format. By exercising this right, the user gains control over his or her personal data and has the possibility to sell it in the form thus obtained to another controller.

The download tool is available to the user in the “Account > Privacy (GDPR)” section of their customer account.

9. Right to rectification of data

The user has the right to request the data controller to correct the stored data in case of suspected inaccuracy. You can edit your details in the “Account” section of your customer account.

10. Right to limited data processing

The user has the right to have the controller restrict the processing of his/her personal data, or make the selected personal data unavailable, or temporarily delete the published data.

11. Right to erasure

The user has the right to have his/her personal data deleted without undue delay if they are no longer necessary for the purpose for which they were collected or processed and the lawful reason for their possible archiving has passed. Upon request for deletion of data, all irretrievably deleted and related orders (if any) will be anonymised.

12. The right to be forgotten

The user has the right to take reasonable steps, including technical measures, to delete all references to his/her personal data and copies thereof, if the lawful reason for their possible archiving has passed.

13. Right to object

The user has the right to object to the processing of personal data or, if he/she does not have the possibility, to exercise the right to erasure.

14. Right to lodge a complaint

The user has the right to lodge a complaint with a supervisory authority if he/she considers that the processing of his/her personal data is in breach of the GDPR.

15. Logging user requests

The operator of the e-shop is obliged to record all requests from users in connection with the download, correction and deletion of their data.

16. Ensuring data protection

We have modern technical and security mechanisms in place to protect processed data from unauthorised access or transmission, loss or destruction or other possible misuse.

If you do not provide your consent and personal data, we will not be able to provide you with any services under the European Data Protection Regulation.

in Tvrdošín, 18. May 2023