Privacy Notice
Karolina Šafránková, with registered office at Argentinská 868/5, 170 00, Prague 7 – Holešovice, ID No.: 03499651, declares that all personal data is considered strictly confidential and is treated in accordance with applicable law.
The security of your personal data is a priority for us and we pay due attention to personal data and its protection. In this privacy notice you will find all relevant information, in particular what personal data we collect about you, on what legal basis we process it, for what purposes we use it, how long we keep it, to whom we may transfer it and what rights you have in relation to the processing of your personal data.
Karolina Šafránková, registered office Argentinská 868/5, 170 00, Prague 7 – Holešovice, ID No.: 03499651, has not appointed a data protection officer.
1. Sources and categories of personal data processed
Buying goods
The most common data you provide us with is the data collected through the order form on our website. This is mainly data that is necessary for the conclusion and performance of the purchase contract. If you make a purchase from us, we collect:
– Identification data – first and last name or ID number and VAT number;
– Contact data – email address, postal address, billing address, telephone number, bank account and payment details;
– Data arising from the duration of the contract – products purchased, customer segment, volume of services provided;
country and preferred language;
Sending commercial communications
We also process your personal data in the case of sending commercial (marketing) communications if you give us your consent. In this case, we collect the following personal data:
– Identification data – first and last name;
– Contact data – email address, telephone number;
– Demographic data – derived from your settings and behaviour on the website, which means your preferred language.
You can withdraw your consent at any time and unsubscribe from receiving commercial communications.
Visiting our website
We continue to collect your personal data when you visit our website. During your visit, we collect various information such as your IP address, browser and language preference settings, the websites you visit including the time of your visit. We also monitor your movement around the website, or what links you click on, so that we can tailor the content you see as much as possible and offer you products and content that you will appreciate.
When you visit our website, we store and then read cookies on the browser and device you use, which we discuss in a separate section of this notice.
However, in addition to cookies, we also process data about your behaviour on the website, your IP address, the data provided by your browser, specifically the resolution, the operating system of your device, including its version and language settings.
2. Lawful basis and purpose of processing personal data
Provision of services and their improvement
In order to provide the services we offer and improve them to your satisfaction, we process your personal data, namely:
– processing of orders for goods – the legal reason is the performance of the purchase contract and, for selected data, the performance of legal obligations (e.g. accounting documents);
– communication – we use the collected data for the purpose of communication (by phone, e-mail or other form) with you and its individual adaptation, the legal reason is the performance of the purchase contract, or, where applicable, the performance of the purchase contract. our legitimate interest;
– service improvement – we use the data to continuously improve our services and systems, including adding new features, and to make informed decisions using aggregate analytics and business intelligence, the lawful reason being our legitimate interest.
Protection, Security and Dispute Resolution
We may also process data for legitimate interest, which is to ensure the protection and security of our systems and our customers, to detect and prevent fraud, to resolve disputes, to enforce our agreements on the basis of legitimate interest or for the purposes of any inspections by public authorities.
Marketing offers
We may process your personal data for the purpose of sending you commercial communications on the basis of your consent. We process it on the basis of your consent where we do not process it on the basis of legitimate interest or for the performance of a contract.
Right to object
You have the right to object to these processing operations at any time free of charge. Contact details are provided at the beginning and end of this notice.
Processing of cookies from our website
If you have cookies enabled in your web browser, we process behavioural records from cookies placed on websites operated by the operator for the purposes of ensuring better operation of the operator’s website and for the purposes of the operator’s internet advertising. For more information, please refer to a separate section of this document.
3. Transfer of personal data to third parties
In most cases, we process your personal data for our own purposes as its controller, which means that we set out the above purposes for collecting your personal data, determining the means of processing and their proper execution.
We only provide your personal data to our partners if this is necessary for the performance of the purchase contract, e.g. to arrange payment or transport. We also transfer your personal data to our processors, who process it according to our instructions, and your rights are not affected by this processing.
We may transfer your personal data to the following entities:
– companies and processors on the basis of the performance of the purchase contract;
– payment service companies for the purpose of payment processing and banks on the basis of your order, performance of the purchase contract;
– shipping companies for the purpose of delivery of products ordered by you and handling complaints, including withdrawal from the contract;
– other service providers, third parties involved in data processing;
– third parties, e.g.
– to technology and cloud service providers;
– to legal or financial representatives, courts or other public authorities for the purpose of processing tax documents, recovering debts or other reasons arising from our legal obligations.
If third parties use the data within the scope of their legitimate interest, we are not responsible for these processing operations. Such processing is governed by the data processing policies of the respective companies and persons.
4. Security of personal data and retention period
Security of personal data
The personal data we collect and process about you is transmitted to us in an encrypted form, using the SSL (secure socket layer) encryption system. We secure our website and other systems we work with with appropriate technical and organisational measures against the loss and destruction of your personal data, as well as against unauthorised access to, alteration or dissemination of your personal data.
We are continuously improving this security and we also require our processors to demonstrate that their systems comply with the GDPR.
Processing period
We process your personal data primarily for the duration of our contractual relationship – the purchase contract.
We are obliged to process those personal data that are necessary for the performance of all our obligations, whether these are obligations arising from a contract between us or from generally binding legal regulations, for the period of time specified by or in accordance with the relevant legal regulations.
If you give us consent to receive commercial communications, this consent is valid for a period of 5 years or until it is revoked. Prior to the expiry of the 5-year period for which you have given your consent, your consent will be automatically renewed in the event of the purchase of additional goods, for a period of 5 years in each case. You may withdraw your automatic consent at any time.
In other cases, the duration of the processing of your personal data results from the purpose of the processing or is determined by generally binding data protection legislation. After the expiry of the specified processing periods, your personal data is automatically deleted.
5. Rights of data subjects
Just as we have rights and obligations when processing your personal data, you also have certain rights that you can exercise. These rights include:
Right of access
You have the right to request free information about the processing of your personal data – what data we process about you, for what purpose and for how long, where we obtain your data and to whom we transfer it. As part of your right of access, you can also ask us to send you a structured, machine-readable format of the data we process. We will be happy to generate a copy for you after proper identity verification, just send your request to info@ksafran.com.
Right to rectification
If you find that the personal data processed is incorrect or incomplete, you have the right to request its rectification. We will be happy to correct or complete your data without undue delay. Simply send your request to info@ksafran.com.
Right to erasure
In some cases, you can exercise your right to erasure of the personal data we process about you. We will delete or anonymise your personal data without undue delay. However, this does not apply to those personal data that we need to fulfil our legal obligations and which we are required to retain by law (e.g. to process an order that has already been placed) or to protect our legitimate interests. Personal data will also be destroyed if the data is no longer required for the stated purpose or if the storage of your personal data is inadmissible for other statutory reasons. You can request the deletion of your personal data by emailing info@ksafran.com.
Right to restriction of processing
In some cases, you can also exercise your right to restrict the processing of personal data we process about you. You can request that the personal data marked by you is not subject to further processing for a limited period of time. You can request restriction of processing of your personal data by emailing info@ksafran.com.
Right to portability
You have the right to obtain from us any personal data you have provided to us that we process on the basis of your consent. We will provide you with the personal data in a structured and machine-readable format. We will be happy to generate the data for you in this format, just send your request to info@ksafran.com.
Right to object to processing
You have the right to object to the processing of your personal data on the basis of our legitimate interest. If the processing is for marketing purposes, we will stop processing the personal data without undue delay. However, in other cases we will do so according to a reassessment of our legitimate interests and your rights and grounds. You can object to the processing by sending a request to info@ksafran.com.
Right to lodge a complaint
The exercise of the rights and procedures set out above does not limit your right to lodge a complaint with the relevant supervisory authority. The entity responsible for handling customer complaints is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, ID No. 70837627.
6. Website
Cookies
Our website uses cookies to make our offer relevant, interesting and user-friendly. Cookies are small text files that are stored on your computer, smartphone or other device and are used by your browser. We inform you about the use of cookies on our website on the Cookie Policy webpage at the following link: https://ksafran.com/cookie-policy-eu/.
Links
Our website may contain links to other websites that are practical and contain information. Please note that these sites may be owned and operated by other companies and organizations and have different security and privacy policies. Our company has no control over and assumes no responsibility for any information, material, products or services contained on or accessible through this website.
7. Contact us
If you have any questions, comments, or requests regarding this notice, please contact us at the mailing address listed at the beginning of this notice or via email at info@ksafran.com.