Terms and conditions on the processing of personal data
This personal data processing policy (hereinafter referred to as the "Policy") sets out how Naturele s.r.o. with registered office at Divadelní 847, 561 51 Letohrad, ID: 17824516 protects and uses any information obtained through the web interface www.ekokoza.com (hereinafter referred to as the "Web Interface").
All information provided is used by Naturele s.r.o. only in accordance with this Policy. The protection of personal data is very important to us, so please read carefully the content of the following terms and conditions, which inform you about the handling of your personal data and the related rights and obligations.
By providing us with your personal data, you consent to the processing and management of the data. We explain the purpose and use of the data below.
Personal data controller
Naturele s.r.o., Divadelní 847, 561 51 Letohrad, Czech Republic, ID No.: 17824516, Tax ID No.: CZ17824516. The company is registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, Insert 50397.
What is personal data?
Personal data is information that can identify you as a specific natural person. Personal data means in particular (but not exclusively):
Identification data: e.g. name and surname, date of birth, birth number, gender, user account login data
Contact details: e.g. email address, mobile phone number, work phone number, permanent home address, mailing address, method of payment, bank details
Other data: IP address, type of device, browser and operating system, information obtained from cookies
When handling personal data, we act in accordance with Czech law and directly applicable European Union sources. We process personal data in accordance with Act No. 101/2000 Coll., on the protection of personal data, as amended, and Act No. 480/2004 Coll., on certain information society services, as well as in accordance with the relevant provisions of the Civil Code and the relevant EU standards.
What is the purpose of the information obtained?
We have the right to process the personal data that you provide to us in the context of ordering goods or setting up a user account without your explicit consent solely for the purpose of performing the contract, which means delivering the goods. In the event that you have not ordered the goods and have only set up a user account, we may collect and process personal data without your express consent solely for the purpose of enabling access, administration and maintenance of the user account. We also have the right to process this data in the context of fulfilling our statutory obligations, e.g. record-keeping obligations, etc.
The information collected will enable us to make the most effective use of the content of the Web interface, to ensure the performance of the contract, to communicate with you for market research purposes, to send commercial communications to your e-mail address if you have given your consent, to offer our services and goods (you can refuse to receive commercial communications at any time), for internal record keeping, to notify you of changes to our services and more.
Duration of use of personal data
We only use your personal data for the duration of the contract and legal obligations. If you give us consent to the processing of your personal data or we use your e-mail address to send you commercial communications, the data is used for the duration of the Web interface.
How do we manage, process and to whom do we transfer your personal data?
To manage your personal data securely, we secure the Web Interface and other systems with technical and organisational measures against the loss, dissemination or alteration of your personal data and against access by unauthorised persons.
If you make a purchase without registration, i.e. without creating a user account, your personal data is processed for the purpose of completing the order and its processing (forwarding the order to the carrier).
If you provide us with personal data in the context of creating a user account, you acknowledge that we will process the data and information you provide in your user account (order history and other related information). If you give us your consent, we will further evaluate your user behavior in order to display content tailored specifically for you. If you consent to receive commercial communications, we will send you newsletters, and you can unsubscribe from these at any time.
We may disclose your personal data to external companies, such as tax advisors, accountants, external marketing firms, shipping and delivery companies, IT hosting and maintenance providers and other data processors who work for us and with whom we have an appropriate contract. If you want to know who specifically processes your data, we will provide you with an answer upon enquiry.
Rights of data subjects
In connection with the processing of personal data, we inform you of the relevant legal provisions, i.e.:
The right of access to personal data (the possibility to request information on whether we process your personal data and for what purpose we process it)
The right to rectification of personal data (at your request we will correct inaccurate data and/or complete incomplete data)
The right to withdraw consent (if we process your personal data only on the basis of your consent, i.e. without any other lawful reason, you may withdraw your consent at any time by email to info@ekokoza.com, in writing by letter to our address or otherwise)
The right to erasure or the right to be forgotten (the right to request the erasure of your personal data)
The right to restriction of the processing of personal data (the right to request the restriction of your personal data)
The right to object to the processing of your personal data (you can object to the processing of your personal data at any time if we process it for direct marketing purposes)
The right to data portability (the right to request the personal data you have provided to us)
You can exercise your rights by using our contact details and we will provide you with the requested information without delay. If you are not satisfied, you have the right to contact the Data Protection Authority, which oversees data protection. You can contact the Data Protection Authority directly at any time.
We are committed to ensuring the security of your data, so we have put in place appropriate procedures to protect and secure the information we collect on the Web Interface. We store the information you provide on our secure servers.
Cookies
A cookie is a small text file stored on each Web Interface customer's computer or other device. Cookies allow us to collect information about a specific browser, the use of services (where the user came from, what content they are viewing on the Web interface, what is the IP address of the terminal, etc.). Thanks to cookies, the Web Interface remembers your preferences and the actions you have taken within it for a certain period of time, so that we are able to measure traffic and show you as a user only relevant advertisements. Cookies make it easier to browse the site once you return to the site again, thanks to cookies, previously entered information can be retrieved so that you can use all the features more easily and quickly. Session cookies do not remain on your computer after you close your browser, persistent cookies remain on your computer until you delete them or they expire. Cookies do not allow you to identify a specific person (you cannot find out names, email addresses, etc.).
We use cookies to personalize content and ads, provide social media features and analyze traffic. The information we collect enables us to create a detailed analysis, based on which we are able to provide a better service to you as a user.
Processors of personal data
Personal data can be accessed by the controller, its employees and, where applicable, by contract processors. A processor of personal data is a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller. A processor is distinguished from a controller in that, in the course of its activities for the controller, it may only carry out processing operations which the controller authorises it to carry out or which result from the activities for which the processor has been authorised by the controller.
This list is not exhaustive and may be updated.