Privacy policy

This English version is a translation provided for information only. The legally binding version is the Czech one: Czech version.

Privacy policy

This privacy policy (the “Policy”) describes how personal data obtained through the web interface www.zdravybatoh.cz (the “web interface“)

Personal data controller:

ONKEL family s.r.o., registered office at Nové sady 988/2, Staré Brno, 602 00 Brno

Company ID: 065 04 795

VAT ID: CZ06504795

registered in the Commercial Register kept by the Regional Court in Brno, section C, file 102474

Contact details of the personal data controller:

delivery address: Areál HOMOLA - ONKEL family s.r.o., Vratimovská 624/11, 718 00, Ostrava

phone number: +420 603 593 006

contact e-mail: info@zdravybatoh.cz

Protecting personal data is very important to us. Please read this Policy carefully; it contains important information about how we handle your personal data and about related rights and obligations.

INTRODUCTORY PROVISIONS

What rules do we follow when handling personal data?

When handling personal data we act in accordance with the legal order of the Czech Republic and directly applicable European Union regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “Regulation”), Act No. 110/2019 Coll., on the processing of personal data, as amended, Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts, as amended, and Act No. 127/2005 Coll., on electronic communications and on amendments to certain related acts (Electronic Communications Act), as amended.

What is personal data?

Personal data means any information that identifies or can identify a specific natural person. Personal data includes in particular (but not exclusively):

identification data, such as first name and surname, company ID, tax ID, date of birth, gender, user account login name;
contact data, such as home address (or delivery address), phone number, e-mail address;
other data, such as information obtained through cookies, IP address (network identifier) including browser type, device and operating system, time and number of visits to the web interface and other similar information.

OBTAINING AND USING PERSONAL DATA

How do we obtain your personal data?

You provide us with your personal data mainly when filling in an order (or a contact form), or when creating a user account or posting reviews. If any of your personal data changes, please let us know.

When you visit and use the web interface, some personal data may also be obtained and stored through cookies. You can read more about cookies in Article 5 of this Policy.

On what basis and for what purposes do we process your personal data?

Personal data entered when making an enquiry (in particular through the contact form) and ordering goods or services may be processed without your explicit consent on the basis of and for the purpose of concluding and and performing the contract, i.e. to deliver the goods or provide the service. We may also process this data on the basis of and for the purpose of fulfilling our legal obligations (in particular record-keeping obligations, archiving of tax documents, etc.) and on the basis of our legitimate interest for the purpose of protecting our legal claims.
Personal data entered when creating a user account may be processed without your explicit consent on the basis of contract performance and solely for the purpose of enabling access to, administering and maintaining the user account.
Personal data entered when publishing reviews on the web interface may be processed without your explicit consent on the basis of a legal obligation, in particular for the purpose of verifying the authenticity of reviews.
Your e-mail address may be used without your explicit consent on the basis of our legitimate interest for sending commercial communications concerning our goods or services similar to those you have ordered from us. You can refuse commercial communications at any time (including when ordering goods or services).
If you give us your consentby confirming it on the web interface, we may process your personal data entered on the web interface, in particular when filling in an order or creating a user account, for the purpose of sending commercial communications and direct marketing, or for other purposes you have explicitly agreed to. If you are under 15, consent must be given by your legal representative. In case of doubt we may ask for confirmation of your age.
We find out how satisfied you are with your purchase through e-mail questionnaires within the Ověřeno zákazníky (Verified by Customers) programme, in which our e-shop participates. We send them to you every time you buy from us, unless you refuse them. We process personal data for sending questionnaires within the Ověřeno zákazníky programme on the basis of our legitimate interest, for the purpose of checking and improving our services and goods and finding out how satisfied you are with your purchase from us. To send questionnaires, evaluate your feedback and analyse our market position we use a processor, the operator of the Heureka.cz portal, to whom we may pass information about the purchased goods or service and your e-mail address for these purposes. When sending e-mail questionnaires, your personal data is not passed to any third party for its own purposes. You can object to receiving e-mail questionnaires within the Ověřeno zákazníky programme at any time by refusing further questionnaires via the link in the questionnaire e-mail. If you object, we will not send you the questionnaire any more.
If you agree to the transfer of personal data for the purpose of rating your purchase, we will forward information about your order together with your e-mail address to Seznam.cz. It may then use them to obtain an independent rating of our products and services. The personal data transferred will be kept only for as long as necessary for this use.
If through cookies personal data is processed, we process this personal data on the basis of and for the purpose of concluding and performing the contract (necessary cookies only) or on the basis of your consent (which you give in the relevant bar on the web interface; without this consent these cookies cannot be collected), in particular for the purposes of providing user support, improving our services, including analysing user behaviour and marketing.

We may use your personal data for a purpose other than that for which it was obtained only on the basis of your consent.

How long do we use the data?

Personal data entered when making enquiries and ordering goods or services, or during registration, is used only for as long as necessary to perform the contract and fulfil legal obligations, or to protect our legal claims.

If you give us explicit consent to process personal data, or if we use your e-mail address to send commercial communications and/or to check and improve our services and goods in accordance with the previous article, the data will be used for as long as the web interface operates and offers services or goods similar to those you have ordered from us, or for the period stated in the consent.

YOUR RIGHTS REGARDING PERSONAL DATA

Right to withdraw consent to the processing of personal data

If we process your personal data only on the basis of your consent (i.e. without another legal ground), you can withdraw this consent at any time.

You can withdraw your consent to the processing of your personal data at any time:

by e-mail sent to our contact e-mail address;
by phone at our contact phone number;
in writing by a letter sent to our delivery address;
for the relevant cookies – in the settings of the web interface or of your internet browser;
for commercial communications – in the way stated in every e-mail containing a commercial communication (by clicking the unsubscribe link or otherwise).

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Right of access to personal data

You have the right to ask us whether we process your personal data. If we process your data, you have the right of access to this personal data and in particular to the following information:

the purpose of processing;
the categories of personal data processed;
the recipients or categories of recipients to whom the personal data will be disclosed;
the period for which the personal data will be stored.

At your request we will provide you with a copy of the data processed. For further copies we may charge an administrative fee not exceeding the costs of making and providing them.

Right to rectification

If your personal data is inaccurate or incomplete, you have the right to request that it be corrected without undue delay, i.e. that inaccurate data be corrected and/or incomplete data be completed.

Right to object to processing

You have the right to object at any time to the processing of your personal data if we process it for direct marketing purposes, including any automated processing of personal data. Once you object, we will stop processing your personal data for these purposes.

Right to erasure (“right to be forgotten”)

You have the right to request that we erase your personal data if:

the personal data is no longer necessary for the purposes for which it was collected or processed;
you have withdrawn your consent to processing;
you have objected to the processing of personal data;
the personal data has been processed unlawfully.

If there are no legal grounds for refusing erasure, we are obliged to comply with your request.

Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if:

you contest the accuracy of your personal data;
the processing is unlawful and you request restriction of processing instead of erasure;
we no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims;
you object to the processing.

When processing is restricted, we are only entitled to store your personal data; further processing is possible only with your consent or on legal grounds.

If the processing of personal data is restricted because of an objection to processing, the restriction lasts for as long as necessary to determine whether we are obliged to comply with your objection.

If the processing of personal data is restricted because the accuracy of the data is contested, the restriction lasts for as long as necessary to verify the accuracy of the data.

Right to data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to have it transmitted to another controller.

How can you exercise your rights?

You can exercise your rights regarding personal data using our contact details. All information and actions will be provided to you without undue delay.

We will do our utmost to accommodate you in protecting your personal data. However, if you are not satisfied with how your request has been handled, you have the right to contact the competent authorities, in particular the Office for Personal Data Protection (http://www.uoou.cz), which supervises the protection of personal data. This provision does not affect your right to contact the Office for Personal Data Protection directly.

If, in particular, your place of residence, place of work or the place of the alleged infringement of personal data protection is outside the Czech Republic in another member state of the European Union, you can contact the competent supervisory authority in that member state.

ADMINISTRATION AND PROCESSING OF PERSONAL DATA

Who processes your personal data?

We are the personal data controller within the meaning of the Regulation.

To the extent necessary for performing the contract or other obligations, we are entitled to pass your personal data to other persons, e.g. carriers, cloud storage providers, e-mail campaign administrators, the company providing the “Ověřeno zákazníky” certificate, external accountants or other persons involved in performing the contract or our obligations. We may also appoint other processors and recipients of personal data. On request we will also tell you who specifically processes your personal data.

Your personal data will not be transferred to countries outside the European Union, unless this is necessary for performing the contract or for another reason in accordance with the rules for such transfers laid down by the Regulation.

How do we process personal data?

Personal and other data obtained are fully secured against misuse. Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner.

COOKIES

What are cookies?

Cookies are text files stored on the computer or other electronic device of every visitor to the web interface that allow the web interface to work.

Not all cookies collect personal data; some only enable the web interface to work properly. You can refuse the use of cookies by choosing the relevant setting in your internet browser.

Please note that if you refuse cookies, you may not be able to use all the functions of the web interface fully.

Which cookies does the web interface use and for what purposes?

The web interface uses session (temporary) cookies, which are automatically deleted when you finish browsing the web interface. It also uses persistent cookies, which remain on your device until they expire or until you delete them.

The cookies used by the web interface are as follows:

first-party cookies – these cookies are assigned to our website's domain; they are necessary cookies and performance cookies, which we use to conclude and perform the contract (in particular necessary cookies), or on the basis of the consent mentioned above. These cookies may be temporary or persistent;
- necessary cookies – enable navigation on the web interface and use of its basic functions; as a rule they do not identify you and are not personal data;
- performance cookies – are used to analyse how the web interface is used (number of visits, time spent on the web interface, etc.); the data obtained by these cookies is usually anonymous; these cookies are collected on the basis of your consent (which you give in the relevant bar on the web interface; without this consent these cookies cannot be collected);
third-party cookies – these cookies are assigned to a domain other than our website's domain, even when you are on our website; on the basis of your consent (which you give in the relevant bar on the web interface; without this consent these cookies cannot be collected), they allow us in particular to analyse our website and show you tailored advertising; these are functional cookies and targeting and advertising cookies;
- functional cookies – are used to personalise content by remembering login details, geolocation, etc.; personal data may be obtained and processed through them;
- targeting and advertising cookies – are used to display targeted advertising on and outside the web interface; personal data may be obtained and processed through them. We may also share information about how you use our website with our social media, advertising and analytics partners.
- Services used that work with cookies

The web interface uses Google Analytics and possibly other services provided by Google LLC (“Google”), the Facebook Pixel service provided by Facebook Inc. and the Sklik service provided by Seznam.cz, a.s. These services work with information obtained through cookies.

Google Analytics is used to obtain statistical information about your use of the web interface. Cookies obtained by this service expire depending on your browser settings, at most after 2 years, or until you remove them manually.

Google Ads is used to identify you within Google's advertising network and to re-target advertising (retargeting and remarketing). Cookies obtained by this service expire depending on your browser settings, at most after 18 months, or until you remove them manually.

Facebook Pixel is used to identify you within the advertising network of Facebook Inc. and to re-target advertising (retargeting and remarketing). Cookies obtained by this service expire depending on your browser settings, at most after 2 years, or until you remove them manually.

Sklik.cz is used to identify you within the advertising network of Seznam.cz and to re-target advertising (retargeting and remarketing). Cookies obtained by this service expire depending on your browser settings, at most after 18 months, or until you remove them manually.

If you'd like to know how Google uses the data it receives from us, and how to adjust or disable the processing, you can find this information by clicking the following link: How Google uses data when you use our partners' sites or apps.

How to set up and refuse cookie processing

Instructions on how to correctly set up and manage cookie processing in your internet browser can be found here:

Google Chrome - https://support.google.com/accounts/answer/61416?hl=cs

Internet Explorer - https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge - https://support.microsoft.com/cs-cz/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy

Mozilla Firefox - https://support.mozilla.org/cs/kb/vymazani-cookies-dat-stranek?redirectlocale=cs&redirectslug=vymazani-cookies

Opera - https://help.opera.com/cs/latest/web-preferences/#cookies

Safari - https://support.apple.com/cs-cz/guide/safari/sfri11471/mac

This Policy is valid and effective from 6 January 2023.