Data Protection Statement
We consider the protection of personal data to be an essential and necessary part of our systems and processes. In accordance with Regulation (EU) 2016/679 of the European Parliament and Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR"), and repealing Directive 95/46/EC (General Data Protection Regulation), we present the following declaration:
.
Administrator
THE NOTHING STORES Ltd., ID No: 19795602, located at Příkop 843/4, Zábrdovice, 60200 Brno, company registered in the commercial register maintained by the Regional Court in Brno, section C, file No. 136077 (hereinafter referred to as the "administrator").
.
Administrator's contact details
Email: info@thenothingstores.cz
Phone: + 420 775 760 072
Address: Příkop 843/4, Zábrdovice, 60200 Brno
.
Purpose of personal data processing
Offering business and services based on the consent given by the data subject according to No. 6, Section 1, Letter a) of the GDPR.
.
List of personal data
That may be processed for the purposes of offering business and services with your consent:
- Name and Surname
- Email Address
- Phone Number
- Contact Address
Messages conveyed in the form of notes in the e-shop order form
Besides the data provided within the e-shop order form, providing personal data is neither a legal nor contractual requirement necessary for the conclusion of a contract. Personal data is provided entirely voluntarily based on consent, and this consent can be withdrawn at any time.
There is no profiling based on automated processing in personal data processing. However, processing may be manual or automated.
Your personal data is not sent outside the EU.
.
Duration of storing your personal data
Your personal data is stored for a period of 10 years unless otherwise stated in the consent given below.
.
Sources of personal data acquisition
The administrator obtains personal data through the e-shop order form and the registration form for a user account. Personal data is always obtained only with the consent of the data subject.
.
Processing of personal data provided in the e-shop order form
The personal data you provide is processed for the purpose of completing a purchase and is necessary for concluding a contract between you and the administrator. Your data is archived for five years from the date the order form is sent. After this period, it is deleted.
For more information about the extent of personal data processing, you can contact the administrator using the above contact details.
Instructions:
The company, The nothing Stores Ltd., hereby informs the data subject that:
-The personal data of the data subject will be processed based on his free consent, under the above conditions, with the reason being the data subject's interest in purchasing goods from the e-shop www.thenothingstores.cz;
-The administrator did not appoint a data protection officer, did not designate a representative to fulfill the obligations under the relevant regulations, does not intend to transfer personal data of the data subject to a third country or international organization; automated decision-making or profiling will not occur during the processing of personal data of the data subject,
-The data subject has the right to withdraw consent to the processing of personal data at any time, the right to request access to their personal data, their correction or deletion, or restriction of processing, and to object to processing, has the right to data portability to another administrator, as well as the right to file a complaint with the Office for Personal Data Protection, if they believe that the administrator processes personal data in violation of the relevant legal regulations. Consent withdrawal or objections can be sent to email: info@thenothingstores.cz.
.
Recipients and processors of personal data
The third party receiving the buyer's personal data is the Administrator's subcontractors. The services of these subcontractors are strictly related to the successful completion of the purchase contract and electronic order between the administrator and the buyer.
The subcontractors of the administrator are:
- PrestaShop (e-shop system);
- Zserver s.r.o. (e-shop management);
.
What rights do you have in relation to the processing of personal data?
Right to withdraw consent to the processing of personal data
- You can withdraw previously given consent to the processing of your personal data for the purposes of offering trade and services at any time. Withdrawal can be done by email or in writing to the contact address.
- The withdrawal of consent does not affect the right to process your personal data before its withdrawal.
Right to request information and access to the processing of personal data
- You can request information about whether your personal data is being processed.
- You can request information and access to the processing of your personal data by email, or in writing to the contact address.
Right to erasure
- You can request the deletion of your personal data, when it is our obligation to do so without unnecessary delay. However, we may refuse the right to erasure for legal reasons either in case when personal data is necessary to fulfill the contract, or legal obligations or legitimate interest of the administrator require their retention.
- Request the deletion of your personal data by email, or in writing to the contact address.
Right to rectify inaccurate or incomplete personal data
- You can request correction or completion of your personal data by the administrator by email, or in writing to the contact address.
Right to restriction of processing
- You can ask the administrator to stop processing personal data by email, or in writing to the contact address.
Right to data portability
- You can request your personal data in a format necessary for further automated processing. You can request a file with your personal data by email, or in writing to the contact address