Privacy policy

Privacy Policy Controller, company

Indahouze s.r.o.
IČO:08307377

based Na Poříčí 1071/17, Nové Město, 110 00 Praha 1
(E)info.soclose@gmail.com

I. Basic provisions
1. Personal data means any information about an identified or identifiable natural person; An identifiable natural person is a natural person who can be directly or indirectly identified, in particular by reference to an identifier, such as a name, an identification number; location data, network identifier or on one or more specific elements physical, physiological, genetic, psychological, The economic, cultural or social identity of this natural person.
2. The controller did not appoint a data protection officer.

II. Sources and categories of personal data processed
1. The controller shall process the personal data you provide to him or the personal data that the controller has obtained on the basis of the performance of your order.
2. The administrator processes your identification and contact data and data necessary for the performance of the contract.

III. Legal reason and purpose of processing personal data
1. The legal reason for processing personal data is
• Performance of the contract between you and the administrator pursuant to art. 6 par. 1 letter b) GDPR,
• Legitimate interest of the AIFM in providing direct marketing (in particular for sending business communications and newsletters) as referred to in article. 6 par. 1 letter f) GDPR,
• Your consent to processing for the purpose of providing direct marketing (in particular for sending business communications and newsletters) as referred to in article. 6 par. 1 letter a) GDPR in conjunction with § 7 para. 2 of Act No. 480/2004 Coll., on certain services of the information society in the event that there was no order of goods or services.
The purpose of personal data processing is
• The execution of your order and the performance of the rights and obligations arising from the contractual relationship between you and the administrator; The personal data required for the successful execution of the order (name and address, contact) are required when ordering; the provision of personal data is a necessary requirement for the conclusion and performance of the contract, Without providing personal data, it is not possible to conclude a contract or to implement it by the controller;
• Sending business communications and doing other marketing activities.

IV. Data retention period
1. The controller stores personal data
• For the period necessary for the exercise of the rights and obligations arising from the contractual relationship between you and the administrator and the application of the entitlements to those contractual relations (for 15 years after the termination of the contractual relationship).
• For a maximum of 10 years, until the consent to the processing of personal data for marketing purposes is revoked, if the personal data is processed on the basis of consent.
1. After the end of the retention period, the controller shall delete the personal data.

V. Recipients of personal data (sub-contractors of the controller)
Recipients of personal data are in the context of processing your third-party order
• Participating in the supply of goods and services (transport companies)
• Providing e-shop services (Shopify) and other e-shop services (facturoid);
• Providing marketing services (Salon24, Mailchimp).
We do not transmit any personal data to a third party for the purpose of their further processing.

WE. Your rights
1. Under the conditions set out in the GDPR, you have
• The right to access your personal data according to the article. 15 GDPR,
• Right of rectification of personal data pursuant to art. 16 GDPR, or restriction of processing pursuant to Art. 18 GDPR.
• Právo na výmaz osobních údajů dle čl. 17 GDPR.
• The right to object to the processing pursuant to art. 21 GDPR a
• The right to data portability pursuant to art. 20 GDPR.
• Right to withdraw consent to processing in writing or electronically to the address or email of the administrator referred to in article. III of those conditions.
1. You also have the right to lodge a complaint with the personal data protection office if you believe that your personal data protection right has been violated.

VII. Privacy policy
1. The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data.
2. The administrator has taken technical measures to secure data repositories and personal data repositories in documentary form, in particular in the form of encryption and antivirus programs.
3. The controller declares that only the persons in charge of it have access to personal data.

VIII. Final Provisions
1. By sending an order from the online order form, you confirm that you are familiar with the privacy conditions and that you accept them in full.
2. You agree to these terms by checking your consent via the Internet form. By ticking the consent, you confirm that you are familiar with the privacy policy and that you accept it in its entirety.
3. The administrator is entitled to amend these conditions. A new version of the privacy policy will be published on its website and will also send you a new version of these terms and conditions to the email address you have provided to the administrator.

Those conditions enter into force on 1.10. 2020