Privacy policy

Data Controller

RAFART COMPANY s.r.o., with its registered office at Jinonická 804/80, Prague 5 – Košíře 158 00, Company ID No.: 05371627, Tax ID: CZ05371627, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 262603, (hereinafter referred to as the “controller”), hereby informs you, in accordance with Article 12 of the GDPR, about the processing of your personal data and your rights.

 

In the text below, you will learn in particular:

  • What personal data we process;
  • For what purpose and in what manner your personal data will be processed;
  • For how long your personal data will be processed;
  • To whom your personal data may be disclosed;
  • How your personal data is secured;
  • What your rights are with regard to the protection of personal data.

 

Scope of Personal Data Processing

Personal data is processed to the extent that the relevant data subject has provided it to the controller in connection with the conclusion of a contractual or other legal relationship with the controller, or to the extent that the controller has collected it otherwise and processes it in accordance with applicable laws or to fulfill the controller’s legal obligations.

  • Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  • The controller has not appointed a data protection officer.

 

Categories of Personal Data Processed

  • The controller processes personal data that you have provided to it or personal data that the controller has obtained in connection with the fulfillment of your order.
  • The controller processes your identification and contact information, as well as data necessary for the performance of the contract.

 

Data Retention Period

The controller retains personal data:

  • for the period necessary to exercise the rights and fulfill the obligations arising from the contractual relationship between you and the controller and to assert claims arising from such contractual relationships (for a period of 15 years from the termination of the contractual relationship).
  • for as long as consent to the processing of personal data for marketing purposes remains in effect, up to a maximum of 3 years, if personal data is processed on the basis of consent.

 

Recipients of Personal Data

  • persons involved in the delivery of goods/services/processing of payments under a contract,
  • providers of marketing and business services,
  • accountants,
  • financial institutions,
  • public institutions,
  • customers,
  • processors

 

How Your Personal Data Is Secured

The controller declares that it has adopted all appropriate technical, organizational, and administrative security measures to protect your personal data. These measures protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

 

Your rights

  • the right to transparent information, notifications, and procedures for exercising the data subject’s rights under Articles 12, 13, and 14 of the GDPR
  • the data subject’s right of access to personal data under Article 15 of the GDPR
  • the right to rectification of personal data under Article 16 of the GDPR
  • the right to erasure of personal data under Article 17 of the GDPR (“right to be forgotten”)
  • the right to restriction of processing under Article 18 of the GDPR
  • the right to be notified of rectification, erasure, or restriction of processing under Article 19 of the GDPR
  • the right to data portability under Article 20 of the GDPR.
  • the right to object under Article 21 of the GDPR
  • the right to withdraw previously given consent to the processing of personal data under Article 7(3)
  • the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated

 

This Privacy Policy is effective as of May 25, 2018.