Processing of personal data and GDPR
INFORMATION ON PERSONAL DATA PROCESSING
In this document, we would like to familiarise you with all important information concerning personal data processing for the operation of the www.travellect.com website.
The website’s operator and the personal data controller and processor is Travellect s.r.o., business ID number: 25625586, registered office: Libeň 191, Libeř, postcode: 252 41 (hereinafter the “Company”).
Below you will find answers to the following questions, in particular.
- Who can you contact concerning matters related to personal data processing?
- For what purpose does the Company process personal data?
- What personal data does the Company process and what is its authority to do so?
- Where does the Company obtain personal data from?
- To whom does the Company hand personal data over?
- How can you learn that the Company processes your personal data and what rights can you exercise in relation to personal data protection?
The company takes a responsible approach to personal data processing and, in particular, ensures their security, all in accordance with generally binding legal regulations.
1. Who can you contact concerning matters related to personal data processing?
In the first instance, you can always contact the Company directly; it is the controller of the personal data it processes in connection with its business, in particular the operation of the www.travellect.com website.
Delivery address: Libeň 191, Libeř, postcode: 252 41
E-mail address: info@travellect.com
All contact details can be found on the website www.travellect.com
2. For what purpose do we process personal data?
2.1 We process personal data in order to provide you with our services.
In order for us to enter into a purchase contract with you, e.g. for you to make purchases in our e-shop, we generally need to know your identification and contact details. We do not need your consent to process personal data for this purpose; the lawful reason in this case is the performance of a contract (and, where applicable, the taking of pre-contractual measures).
We also process your personal data for the purpose of further performance resulting from the services we provide.
2.2 In addition, we process personal data for marketing purposes.
In most such cases, we need your consent for such processing. If you give us your consent, we may contact you, in particular by e-mail, with an offer of our services. You may rescind your consent to such processing of your personal data at any time.
Another typical example of such personal data processing is the registration of a customer on the travellect.com website, where we provide various benefits to registered customers and inform them about interesting discounts and offers. We need your consent for such processing.
2.3 We may send commercial communications (e.g. in the form of a newsletter) to customers to whom we have provided our services, i.e. to whom we have sold goods in the e-shop.
We do not need your consent to do this as it is a legitimate Company interest to offer additional services to its customers. But of course we don’t want to bother anyone if they don’t want it. You can cancel the sending of commercial messages by clicking on the link at the very end of a message.
2.4 We are interested in your opinion of our e-shop and the services we provide.
If you give your consent, you will be sent a questionnaire regarding your satisfaction with the use of the travellect.com website.
2.5 We are entitled to process your personal data in order to protect our rights and legitimate interests, typically in the event of any dispute. In such case, we do not need your consent to process your personal data.
2.6 The processing of some personal data is directly required by law, e.g. we are obliged to keep tax documents for the legally prescribed period of time.
3. What personal data does the Company process?
We process only the necessary basic data, i.e. identification data (first name and surname, date of birth, residential address, possibly also delivery address) and contact data, i.e. your e-mail address and telephone number.
We also process data about your purchase or the services provided, including any communications, in particular if they concern a complaint, return of goods or the exercise of your rights.
4. What authorisations do we have to process your personal data?
We always process personal data on the basis of one of the legal grounds for each processing purpose.
4.1 In the vast majority of cases, the processing of personal data is necessary for the conclusion and performance of a contract. In such case, we do not need your consent for processing.
4.2 In some cases, we process personal data on the basis of our legitimate interest. This includes, for example, sending commercial communications or where the Company is asserting its claims or protecting its rights and legitimate interests.
4.3 Another lawful reason for processing personal data is a legal duty imposed on us by generally binding legal regulations.
4.4 In some cases, personal data processing is based on your consent, in particular for our marketing activities, in order to provide various benefits to our registered customers or for the purpose of evaluating the quality of our services.
5. To whom do we hand over personal data?
The Company carefully considers and assesses whether the handover of personal data to another recipient is necessary and, in particular, whether a potential recipient is able to ensure adequate protection of the personal data handed over. Personal data is handed over exclusively on the basis of a written contract for personal data processing.
The Company hands over personal data to:
5.1 the marketing agency B Creative s.r.o. business ID number: 03486605, registered office: Jugoslávských partzánů 679/16, Bubeneč, 160 00 Prague 6;
5.2 the accounting firm LAUTIA, s.r.o. business ID number: 65412419, registered office: Královická 1618/35, Strašnice, 100 00 Prague 10;
5.3 payment service providers and payment processors to ensure the transfer of funds;
5.4 postal and shipping service providers if we need to deliver anything to you via a carrier;
5.5 certain personal data may be handed over to the competent public authorities on request.
The persons to whom the data is transmitted are not authorised to process the data for any other purpose or to transmit them to any other person without the Company’s consent or instruction, unless they have a lawful reason to do so.
6. Do we hand your data over to another country outside the European Union?
We do not hand your personal data over to a country outside the European Union (or outside the EEA, i.e. the European Economic Area) where a sufficient standard of protection of personal data would not be ensured. Nor do we intend to hand personal data over outside the European Union.
7. Are you interested in what personal data we process about you?
In such case, you can contact us at any time to request details of the processing of your personal data and we will provide you with detailed information free of charge or provide you with a copy of the data processed.
This is your right to access your personal data.
However, we must advise you that in the event of repeated or unjustified requests, we are entitled to charge the costs of providing information or to refuse to provide information.
8. What other matters can you contact us about?
8.1 You have the right to rectification of your personal data, i.e. you may contact the Company with a request for rectification if the data held about you by the Company is inaccurate, incomplete or out of date.
8.2 You have the right to have your personal data erased, i.e. you may contact the Company to request that your personal data processed by the Company be erased. In order for data to be erased, one of the following cases must apply: (i) the data is not necessary for the purpose for which they were processed, (ii) you have rescinded your consent to the processing of the data, (iii) the data was processed unlawfully, (iv) the data must be erased to comply with a legal duty, or (v) the data was collected in gathered with the offering of information society services.
8.3 You have the right to restrict the processing of your personal data, i.e. you can ask the Company to restrict the processing of your personal data. In order for data processing to be restricted, one of the following cases must apply: (i) you contest the accuracy of your personal data, or (ii) the processing of the data is unlawful, but you refuse the erasure of such personal data, or (iii) you request the processing of personal data for the purpose of pursuing your claims even though the purpose for which the Company processed the data has already been fulfilled, or (iv) you have objected to the processing and it has not yet been verified whether the Company’s legitimate interests outweigh your legitimate interests.
8.4 You have the right to have your personal data handed over, i.e. you can ask the Company to provide you with your personal data in a structured, commonly used and machine-readable format or to have them handed over directly to another controller. Data can only be handed over if the processing is based on a contract or your consent and is also automated processing.
8.5 You may rescind the consent you have given to the processing of your personal data at any time.
9. When is it possible to object to personal data processing?
You have the right to object in the following cases.
(a) You may object to personal data processing carried out by the Company on the basis of its legitimate interest. In this case, your personal data will no longer be processed unless the Company demonstrates to you that its legitimate interest takes precedence over your interests.
(b) You may object to the processing of your personal data if we process your personal data for direct marketing purposes. In such case, your personal data will no longer be processed.
10. How long will we process your personal data?
The period for which we will process your personal data is determined by our duties under the contract we have entered into with you and other duties imposed on us by law, such as the duty to archive statutory documents.
In some cases, the duration of personal data processing depends on the duration of your consent to processing.
In other cases, personal data processing depends on the duration of our legitimate interest.
In any case, we destroy data that are not necessary to achieve a purpose or for which we have no legal grounds for processing.
11. What can you do if you think the Company is processing your personal data unlawfully?
You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, registered office: Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, business ID number: 708 37 627, www.uoou.cz.
If any of your questions have not been answered above, you can contact us using the above contact details.