Protection of personal data

The data controller pursuant to Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") is Gabriela Lehká, with its registered office at U Srnčího dolu 2865/21, Jablonec nad Nisou, postal code 466 01 identification number: 47293888, trade license registration number 350402-14374-00 issued by the Regional Office in Jablonec nad Nisou on 3.9.1999 under file no .: ŽÚ / 01482 / 99 / VI (hereinafter referred to as the "Administrator").
The contact details of the administrator are
- address: Nerudova 20, Jablonec nad Nisou, PSČ 466 01
- e-mail: lehka@gasso.cz
- phone: +420 604 634 006
Personal data means all information about identified or identifiable natural person; identifiable natural person is a natural person who can be identified directly or indirectly, in particular by reference to a particular identifier, such as name, identification number, location, network identifier, or one or more special elements of physical, physiological, genetic, psychological, economic, cultural, or the social identity of this natural person.
The administrator did not renounved the personal data protection commemorative.

The administrator handles personal information you provided to him / or personal information that the administrator has acquired based on the performance of your order.
The administrator handles your identification and contact information and the data necessary for the performance of the contract.

The legal reason for the processing of personal data is.
- Fulfillment of the contract between you and the administrator under Art. 6, paragraph. 1 point. b) GDPR
- Fulfillment of the administrator's legal obligation under Article 6 (1) (a) c) GDPR
- Authorized interest manager to provide direct marketing (especially for business communication and newsletters) pursuant to Art. 6 paragraph. 1 point. f) GDPR
- Your consent to process for the purpose of providing direct marketing (especially for business communication and newsletter) pursuant to Article 6 (1) (a). (a) GDPR in conjunction with Section 7 (2) of Act No. 480/2004 Coll., On certain information society services, if the goods or services have not been ordered.
The purpose of processing personal data is
- processing your order and exercise of rights and obligations resulting from the contractual relationship between you and the administrator; When ordering, personal information required for successful order is required (name and address, contact), providing personal data is a necessary requirement for conclusion and implementation of the contract, without providing personal data, it is not possible to conclude a contract or by the administrator.
- Sending Commercial Communication and Treatment of Other Marketing Activities.
The administrator occurs automatic individual decision-making within the meaning of Art. 22 GDPR. With such a processing, you have provided your explicit consent.

The administrator keeps personal information
- For the time necessary for the exercise of rights and obligations arising from the contractual relationship between you and the administrator and the application of the claims of these contractual relations (for 15 years after the termination of the contractual relationship).
- For a period of time before the consent of the processing of personal data for marketing purposes, no longer than 10 years, if personal data are processed on the basis of consent.
After the Personal Data retention time, the administrator deletes personal information.

Beneficiaries of personal data are persons
- Involved in the delivery of goods / services / implementation of payments on the basis of a contract.
- Providing e-shop operations (upgates) and other services in connection with the operation of e-shop.
- Ensuring marketing services.
The administrator does not intend to transmit personal data to a third country (to the country outside the EU) or an international organization. Beneficiaries of personal data in third countries are mailing services / cloud service providers.

Under the conditions set out in GDPR you have
- Right to access their personal data according to Art. 15 GDPR.
- Right to correct personal data pursuant to Art. 16 GDPR, or restriction of processing according to Art. 18 GDPR.
- Right to delete personal data pursuant to Art. 17 GDPR.
- The right to object to processing according to Art. 21 GDPR.
- The right to portability of data pursuant to Art. 20 GDPR.
- The right to appeal consent to the processing in writing or electronically to the address or e-mail manager referred to in Art. III of these Terms and Conditions.
Furthermore, you have the right to file a complaint with the Authority of Personal Data Protection in the event that you believe that your right to protect personal information is violated, or contact the court.

The administrator declares that he has accepted all appropriate technical and organizational measures to secure personal data.
The administrator has adopted technical measures to secure data storage and storage of personal data in paper form.
The administrator declares that access to personal data only have an authorized person.

By sending an order from an online order form, you acknowledge that you are familiar with the privacy conditions and that you are entirely accepted.
With these terms, you agree to check the consent via the Internet form. By checking the consent, you confirm that you are familiar with the privacy conditions and that you are entirely accepted.
The administrator is entitled to change these conditions. The new version of the privacy conditions will be published on its website while you will send you a new version of these Terms and Conditions your e-mail address that you provided the administrator.

These conditions take effect on 1 January 2021.