personal data protection terms

1. FUNDAMENTAL PROVISIONS
   
   1. The administrator of the personal date as per Article 4, Point 7 of the European Parliament Ordinance and the Council of Europe No. 2016/679 on the protection of personal data of physical persons in connecting with personal data processing and free movement of this data (hereinafter referred to as „GDPR“ only) is Brokis Ltd., seated at the address of Španielova 1315/25, Řepy – 163 00, Prague 6, registered in the Trade registry maintained by the Municipal Court in Prague, Section C, Inset 327085 (hereinafter referred to as „the Administrator“ only).
   2. The contact information of the Administrator are as follows:
      
      The operation premises:
      Sídliště Janštejn 39, 588 52 Horní Dubenky
      e-mail: info@brokis.cz
      telephone: +420 567 211 517
   3. The personal data refers to all information on the identified or identifiable physical person; an identifiable physical person is a physical person, which can be directly or indirectly identified, in particular with reference to a specific identifier or one or more special elements of physical, physiological, genetic, psychologic, economic, cultural or social identity of this physical person.
   4. The Administrator has not appointed a special commissioner for personal data protection.
2. THE SOURCES AND CATEGORIES OF THE PROCESSED PERSONAL DATA
   
   1. The Administrator processes personal data, which were provided to him, or personal data which he had acquired based on your order:
      
      1. name and surname
      2. email address
      3. postal address
      4. telephone
   2. The Administrator processes your identification and contact data and information necessary for the implementation of the contract.
3. THE LEGAL CAUSE AND THE PURPOSE OF PERSONAL DATA PROCESSING
   
   1. The legal cause of the personal data processing is
      
      1. the implementation of the contract between you and the Administrator as per Article 6, Clause 1, Letter B of the GDPR,
      2. the fulfilment of the legal duty of the Administrator as per Article 6, Clause 1, Letter C of the GDPR,
      3.  justified interest of the Administrator to provide direct marketing (in particular distribution of commercialinformation and newsletters) as per Article 6, Clause 1, Letter F of the GDPR, 
      4. Your consent with data processing for the purpose of providing direct marketing (in particular distribution of commercial information and newsletters) as per Article 6, Clause 1, Letter A of the GDPR in connection with § 7, Clause 2 of Law No. 480/2004 on Certain Services of Information Companies in case no order of goods or services took place.
   2. The purpose of personal data processing is
      
      1. handling of your order and the implementation of rights and duties following from the contractual relationship between you and the Administrator; when placing an order, personal data [name, address, contact] is required in order to successfully handle the order; the provision of personal data is a necessary requirement for the execution of any contract, it is not possible to enter into a contractual relationship or implement it on part of the Administrator without the provision of the personal data of the other contractual party, 
      2. fulfilment of legal duties vis-a-vis the state authorities,
      3. distribution of the commercial information and other marketing activities
         
   3. On part of the Administrator there is no automatic individual deliberation as per Article 22 of the GDPR.
4. THE TERM OF THE PERSONAL DATA STORAGE
   
   1. The Administrator stores personal data
      
      1. for a period necessary for implementing the rights and duties following from the contractual relationship between you and the Administrator and for putting into effect pertinent claims following therefrom (for a period of 5 years after the termination of the contractual relationship).
      2. for a period ending by a recall of the consent to process personal data for the purposes of marketing, 5 years at maximum, in case the personal data is processed based on a consent.
   2. The Administrator shall erase the data once the term for the personal data storage has expired.
5. THE RECIPIENTS OF THE PERSONAL DATA (SUBCONTRACTORS OF THE ADMINISTRATOR)
   
   1. The Recipients of the Personal Data are the following
      
      1. taking part in the delivery of goods, services or realizations of payments based on the contract,
      2. ensuring the services of e-shop operation and other services connected thereto, 
      3. ensuring the marketing services.
   2. The Administrator has no intent of transferring the personal data to a third country (outside the EU) or to any international organization.
      
6. PERSONAL DATA PROCESSORS
   
   1. The processing of the personal data is done by the Administrator, however, personal data may be processed on his behalf also by the following processors:
      
      1. the company BROKIS Ltd., seated at the address of Španielova 1315/25, Řepy – 163 00, Prague 6, Business Identification No. 64940799,
      2. or, pertinently, other providers of processing software services and applications, which are not currently used by the Administrator.
7. YOUR RIGHTS
   
   1. Under GDPR your rights are as follows
      
      1. the right to access your personal data as per Article 15 GDPR,
      2. the right to correct personal data as per Article 16 GDPR, or, pertinently, to limit the processing of your personal data as per Article 18 GDPR,
      3. the right to delete your personal data as per Article 17 GDPR, • the right to raise an objection to personal data processing as per Article 21 GDPR,
      4. the right to transmission of data as per Article 20 GDPR and
      5. the right to recall your consent with the personal data processing in writing or electronically by means of an email of the Administrator listed in Article III of these conditions.
   2. Likewise, you have the right to submit a complaint to the Personal protection Data Authority in case you suspect that your personal data protection rights has been violated, or you can file a suit at a court of justice.
8. PERSONAL DATA PROTECTION TERMS
   
   1. The Administrator hereby represents that he had adopted all the appropriate technical and organizational measures to protect the personal data.
   2. The Administrator had implemented technical measures for securing the data repositories as well as the archives containing personal information in the printed form.
   3. The Administrator represents that personal data may be accessed only by authorized persons.
9. CLOSING PROVISIONS
   
   1. By sending an order via the internet order form you confirm that you have been acquainted with personal data protection terms and to have accepted them in full.
   2. Your consent with these terms is expressed by marking off yourconsent on the electronic form. Having marked off your consent, you confirm to have been acquainted with the personal data protection terms and to have accepted them in their full extent.
   3. The Administrator is entitled to change these terms. He shall publicize the new version of the terms on its web page and, at the same time, he shall send that version to your email address, which you have provided to the Administrator

‍

These terms come into effect as of October 1, 2020.