Introduction
This Privacy Policy (hereinafter referred to as the “ Policy ”) describes the method of obtaining, using and further handling of personal data obtained through the web interface. https://megbrand.cz (hereinafter referred to as the " web interface ").
These Principles are governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “ Regulation ”) and Act No. 110/2019 Coll., on the processing of personal data (hereinafter referred to as the “ Act ”).
By the operator of the e-shop on the web interface https://megbrand.cz is:
- MEG dream sro , company ID 04626168, VAT number CZ04626168, with registered office at Libušina 514/34, Karlovy Vary 360 01.
For the purposes of these Principles, the buyer is understood to be the person with whom a purchase contract is concluded for the purchase of goods offered on the e-shop of the web interface.
Basic provisions
- The controller of personal data in accordance with the Act is MEG dream sro, Company ID 04626168, VAT No. CZ04626168, with its registered office at Libušina 514/34, Karlovy Vary 360 01 (hereinafter referred to as the " Controller ");
- The administrator's contact details are: e-mail: megbrand@meg.cz , phone: +420 774 444 104;
- Personal data means any information that identifies or can identify a specific natural person. Personal data includes, but is not limited to:
- identification data, such as first and last name, date of birth, identification number, tax identification number, user account login name;
- contact details, such as residential address (or delivery address), telephone number, e-mail address;
- electronic data, such as information obtained using cookies, IP address (network identifier) including browser type, device and operating system, time and number of accesses to the web interface and other similar information,
- other data that you provide to the Administrator or that the Administrator collects in connection with the processing of your order or the conclusion and performance of the purchase contract.
- The Administrator does not process any special categories of personal data within the meaning of Article 9 of the GDPR.
- The legal basis for processing personal data is as follows:
- consent of the data subject pursuant to Article 6(1)(a) GDPR,
- performance of a contract pursuant to Article 6(1)(b) GDPR,
- fulfillment of a legal obligation pursuant to Article 6(1)(c) GDPR,
- legitimate interest pursuant to Article 6(1)(f) GDPR.
- Providing personal data is a necessary requirement for the performance of the purchase contract. The purchase contract cannot be concluded without providing personal data.
Resources
- The administrator processes personal data provided by the buyer and obtained by the administrator based on the performance of the purchase contract and the processing of an electronic order on the web interface in the MEG Bio bachovky online store.
- When you visit and use the web interface, some personal data may also be collected and stored through cookies. Cookies are small text files that are sent to your browser from a web server and stored on your computer's hard drive. Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain on your computer and allow us to recognize your computer on your next visit (so-called "persistent cookies"). Our web interface processes the following cookies:
- Necessary (technical) – are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously. These cookies cannot be disabled and do not require user consent;
- Functional – help perform certain functions, such as sharing website content on social media platforms, collecting feedback, and other third-party functions;
- Performance – they are used to understand and analyze key website performance indicators that help provide visitors with a better user experience;
- Analytical – They are used to understand how visitors interact with the website. These cookies help provide information about visitor metrics, bounce rate, traffic source, etc.
- Without your consent, the Administrator only processes necessary cookies; the Administrator always processes other categories of cookies only on the basis of your express consent.
Purpose of processing
- The Administrator processes personal data for the purpose of delivering goods, clearing payments and for necessary communication between the contracting parties for the period required by special legal regulations. Personal data will not be published and will not be transferred to other countries.
- The Administrator processes the Buyer's personal data for the following reasons:
- for the purpose of registering on the website www.megbrand.cz ;
- for the purpose of sending commercial communications;
- for the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Buyer and the Administrator;
- in order to fulfill the Administrator's statutory obligations (in particular, registration obligations, archiving of tax documents, etc.);
- in order to ensure the functioning of the website.
Retention period
- The administrator processes personal data to the extent necessary to fulfill the specified purpose and only for the period necessary to achieve it, but no longer than for the period specified by and in accordance with the relevant legal regulations.
- After the expiry of the personal data retention period, the Administrator is obliged to delete the personal data.
Recipients and processors
- The third party that receives the buyer's personal data is the Administrator's subcontractors. The services of these subcontractors are unconditionally related to the successful fulfillment of the purchase contract and electronic order between the Administrator and the buyer.
- The buyer's personal data will not be transferred to countries outside the European Union, unless this is necessary for the performance of the purchase contract or for another reason in accordance with the rules for such transfer set out in the Act or Regulation.
Subcontractor
- Zásilkovna sro , Company ID: 28408306, with its registered office at Českomoravská 2408/1a, Libeň, 190 00 Prague 9 (delivery service);
- Google Analytics (website analysis);
Buyer's rights
- Under the conditions set out in the Act, the buyer has the following rights:
Right to access your personal data
The controller shall inform the customer, upon request, whether he/she processes personal data concerning him/her and shall provide it electronically, via e-mail. In such a case, the customer has the right to request the following additional information pursuant to Article 15 of the GDPR.
Right to rectification of personal data
The Administrator shall promptly correct personal data if they are inaccurate or incomplete. The Administrator shall promptly correct the personal data after discovering the inaccuracy or incompleteness of the personal data.
Right to erasure of personal data
If there are no legal grounds for refusing to delete personal data, the Administrator will comply with the buyer's request.
Right to object to processing
The Buyer has the right to object at any time to the processing of personal data if the Controller processes them for direct marketing purposes. In such a case, the Controller is obliged to stop processing the Buyer's personal data for these purposes.
Right to data portability
The Buyer has the right to obtain the personal data provided to the Controller in a structured, commonly used and machine-readable format and to transmit them to another personal data controller.
Right to withdraw consent to the processing of personal data
The Buyer has the right to withdraw the consent granted to the Administrator to process his/her personal data, in writing or electronically at the following e-mail address: megbrand@meg.cz . If the buyer has given consent to the sending of commercial communications, he/she may revoke this consent in the manner specified in each e-mail containing commercial communications (by clicking on the unsubscribe link or in another manner).
The withdrawal of consent does not affect the lawfulness of data processing carried out until the withdrawal of consent to processing.
Right to restriction of processing
The Buyer may request the Administrator to restrict the processing of his/her personal data if
- the buyer denies the accuracy of his personal data;
- the processing is unlawful and the buyer requests restriction of processing of personal data instead of deletion;
- The Administrator does not need the Buyer's personal data for processing purposes, but the Buyer requires it for the establishment, exercise or defense of legal claims;
- the buyer objects to the processing.
When restricting processing, the Administrator is only entitled to store the buyer's personal data; further processing is possible only with the buyer's consent or for legal reasons.
If the processing of personal data is restricted due to an objection to the processing, the restriction lasts for the period necessary to determine whether the Administrator is obliged to comply with the buyer's objection.
If the processing of personal data is restricted due to a dispute over the accuracy of the data, the restriction lasts for the duration of the verification of the accuracy of the data.
The right to file a complaint with the Office for Personal Data Protection
If the buyer believes that his right to personal data protection has been violated, he has the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection.
Personal data security
- The Administrator declares that it has taken all appropriate technical and organizational measures necessary to secure the Buyer's personal data.
- The administrator has taken technical measures to secure personal data storage, in particular securing access to the computer with a password, using an antivirus program and regular maintenance of computers.
Final provisions
- By submitting an electronic order on the website www.megbrand.cz The buyer confirms that he has been familiar with these Principles and that he accepts them in their entirety.
- The Administrator is entitled to change these Policies at any time. The Administrator will publish the new version of the Policies on the web interface.