Privacy Policy

These personal data protection rules (hereinafter the “Rules”) set out the rules for processing personal data in accordance with legal regulations, in particular EU Regulation No. 2016/679, the General Data Protection Regulation (hereinafter “GDPR”). The purpose of these rules on the processing of personal data is to enable you to exercise control, ensure you are informed, and familiarize you with which personal data we collect, why we collect it, and how we use it.

The plain-language summary is provided only to facilitate reading and is not legally binding. To get a full picture of your rights and obligations, please read the complete text of these Rules. By filling in the web form, you confirm that you have read these Rules, that you agree with their content, and that you accept them in full.

The controller of your personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) is Martina Pražáková, Company ID (IČ): 86984063, with registered office at Valašská Bystřice 54, 756 27 Valašská Bystřice (hereinafter the “controller”).

Please direct any questions regarding the processing of your personal data to the controller’s contact address podpora@martinaprazakova.cz.

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The controller has not appointed a data protection officer.

The controller processes your personal data that you have provided to it, or personal data that the controller has obtained on the basis of your having filled in an order or other relevant form.

The controller processes your identification and contact details and data necessary for the performance of the contract, i.e. first name, surname, e-mail address, telephone number, and, if necessary, also the company ID, tax ID, and address of registered office or place of business.

The legal basis for the processing of personal data is the performance of a contract between you and the controller pursuant to Art. 6(1)(b) GDPR, and your consent to processing for the purposes of direct marketing (in particular for sending commercial communications and newsletters) pursuant to Art. 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services, in cases where no order for goods or services has been placed.

The purpose of processing personal data is to process your order and to exercise the rights and obligations arising from the contractual relationship between you and the controller; when placing an order, the personal data required for successful order processing (name and address, contact details) are requested; providing personal data is a necessary requirement for concluding and performing the contract, and without providing personal data it is not possible to conclude the contract or for it to be performed by the controller; and furthermore, for sending commercial communications and carrying out other marketing activities.

The controller does not carry out any automated individual decision-making within the meaning of Art. 22 GDPR.

The controller retains your personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims arising from such contractual relationships (for 15 years from the termination of the contractual relationship), and further for the period until consent to processing for marketing purposes is withdrawn, for a maximum of 5 years. After the retention period expires, the controller will delete your personal data.

1. Recipients of personal data are persons involved in the delivery of services / execution of payments under the contract, providing e-mailing services and other services related to the operation of the website, providing accounting, tax and legal services, and providing marketing services.

2. The controller intends to transfer personal data to a third country (a country outside the EU) or an international organization. Recipients of personal data in third countries are providers of mailing and cloud services.

1. Under the conditions set out in the GDPR, you have the right of access to your personal data under Art. 15 GDPR, the right to rectification of personal data under Art. 16 GDPR, or restriction of processing under Art. 18 GDPR, the right to erasure of personal data under Art. 17 GDPR, the right to object to processing under Art. 21 GDPR, the right to data portability under Art. 20 GDPR, and the right to withdraw consent to processing in writing or electronically to podpora@martinaprazakova.cz. You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been violated.

2. As a person interested in using our services, by filling in the contact web form you agree to the use of your personal data for the purposes of the electronic sending of commercial communications, advertising materials, direct sales, market research and direct product offers by the controller, and you further declare that you do not consider the sending of information under the preceding point to be unsolicited advertising within the meaning of Act No. 40/1995 Coll., as amended, since you expressly consent to the sending of information under the preceding point in conjunction with Section 7 of Act No. 480/2004 Coll. You may withdraw your consent under this paragraph at any time in writing to jsem@martinaprazakova.cz, or unsubscribe from commercial communications.

In order to increase user-friendliness and for analytics purposes, the controller uses so-called cookies for the operation of the website – text files that are stored on the computer of a visitor to the website when the website is visited. These cookies do not fall within the scope of the GDPR. A website visitor may disable the storage of cookies in their browser settings.

The controller undertakes that the processing of your personal data will be secured in particular in the following manner: your personal data is processed in accordance with legal regulations and for the performance of all activities necessary for the provision of services.

The controller shall ensure, technically and organizationally, the protection of processed personal data so that unauthorized or accidental access to your personal data, its alteration, destruction or loss, unauthorized transfers, other unauthorized processing, as well as other misuse cannot occur, and so that all obligations relating to personal data arising from legal regulations are continuously secured, both in terms of personnel and organization, throughout the period of data processing.

The technical and organizational measures adopted correspond to the level of risk. Through them, the controller ensures ongoing confidentiality, integrity, availability and resilience of processing systems and services, and restores the availability of and access to personal data in a timely manner in the event of a physical or technical incident.

Only authorized persons of the controller and of subcontractors under these Rules have access to personal data; such persons have agreed with the controller on the conditions and scope of data processing and are obliged to maintain confidentiality regarding personal data and the security measures, the disclosure of which would jeopardize their security.

1. By completing and submitting the order web form or other relevant form and checking the box “I agree with the Rules”, you confirm that you are familiar with these personal data protection rules, that you agree with them, and that you accept them in full.

2. The controller is entitled to amend these Rules. The controller shall publish the new version of the Rules on its website and shall also send you the new version of these terms to the e-mail address you have provided to the controller.

These terms take effect on 12 February 2020.