General Data Protection Regulation (GDPR)

Personal Data Protection

Information regarding to Personal Data Processing

The company VAPE spol. s r. o. with registered office at Bilanska 1647/34a, 76701 Kromeriz, Czech Republic, Identification number: 00543551,Registered in the Commercial Register kept by the Regional Court in Brno, Section C, Insert 1911 (hereinafter referred to as the „Administrator“) in accordance with Article 12 of the European Parliament and Council´s Regulation no.2016/679  General Data Protection Regulation („GDPR“)

provides following information regarding to processing and access to personal data you provide:

Administrator´s contact details:

Contact address: Bilanska 1647/34a, 76701 Kromeriz, Czech Republic

Email: vape@vape.cz

Phone number: +420 573 308 131

Personal data processed by the Administrator:

Name and surname:

Identification number/Tax identification number:

Billing address:

Mailing address:

Phone number:

Purposes of Processing Personal Data

Personal data are processed by the Administrator for the purpose of performing a contract concluded with the Administrator, ie. to inform about the status of order processing, for delivery of goods, settlement of complaints, etc.
For the purpose of delivery of the goods, the personal data will be provided by the Administrator to the shipping company (Carrier).

Furthermore, personal data are processed by the Administrator for the purpose of fulfilling its legal obligations, in particular pursuant to Act No. 235/2004 Coll., On Value Added Tax and Act No. 563/1991 Coll. on Accounting, ie. for the purpose of issuing an invoice-tax document, keeping accounting records, etc.

Who has access to personal information:

Personal data can be accessed by the respective Administrator's staff. Personal data may be provided to selected entities of the public administration and other entities authorized to do so by law (courts, Police of the Czech Republic, tax office, etc.)

TIME WHEN PERSONAL DATA WILL BE SAVED

Personal data will be stored for a period of 10 years from the end of the taxable period in which the taxable transaction took place (the period is based on Section 35 (2) of Act No. 235/2004 Coll. On VAT).

ACCORDING TO ARTICLE 12 GDPR, THE ADMINISTRATOR IS OBLIGED TO INFORM YOU ABOUT YOUR FOLLOWING RIGHTS:

RIGHT TO APPROACH PERSONAL DATA UNDER ART. 15 GDPR

You have the right to obtain confirmation from the Administrator as to whether personal data relating to you is being processed or not and, if so, you have the right to access such personal data. Upon request, the Administrator will provide you with a copy of the personal data processed free of charge. If you submit an application in electronic form, the Administrator will provide you with the information in electronic form, which is commonly used unless you request a different method.

RIGHT TO DATA CORRECTION UNDER ART. 16 GDPR

You have the right to have data correction of inaccurate personal data that concerns you without undue delay. Taking into account the purpose of the processing, you have the right to complete incomplete personal data.

THE RIGHT TO ERASE ("RIGHT TO BE FORGOTTEN") REFERRED TO IN ART. 17 GDPR

You have the right for the Administrator to delete, without undue delay, any personal data relating to you and the Administrator to delete personal data without undue delay if one of the following reasons is given:

1. personal data are no longer needed for the purposes for which they were collected or otherwise processed;
2. you have withdrawn the consent on the basis of which the data were processed and there is no other legal ground for processing;
3. personal data have been processed unlawfully;
4. personal data must be erased to comply with the legal obligation laid down in EU or Member State law applicable to the Administrator.

RIGHT TO LIMIT PROCESSING UNDER ART. 18 GDPR

You have the right to have the Administrator restrict processing in any of the following cases:

1. You deny the accuracy of your personal information for the time necessary for the Administrator to verify the accuracy of your personal information,
2. Processing is illegal and you refuse to delete your personal data and ask instead to restrict their use,
3. The Administrator no longer needs personal data for processing purposes, but you require them to determine, execute or defend legal claims.

RIGHT TO TRANSFERABILITY OF DATA UNDER ART. 20 GDPR

You have the right to obtain personal information concerning you which you have provided to the Administrator, in a structured commonly used and machine-readable format, and the right to transmit such data to another administrator without the Administrator to whom the personal data was provided.
You may exercise all of the above rights with the Administrator by email or letter sent to the above-mentioned contact addresses of the Administrator.

NOTIFICATION OF CASES OF BREACH OF PERSONAL DATA SECURITY AS REFERRED TO IN ARTICLE 2 34 GDPR

If a personal data breach is likely to result in a high risk to individuals' rights and freedoms, the Administrator is obliged to notify you of such breach without undue delay.

RIGHT TO SUBMIT A COMPLAINT TO THE SUPERVISORY AUTHORITY UNDER ART. 77 GDPR

If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection in the Czech Republic, with its registered office at

Úřad pro ochranu osobních údajů, pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

These Personal Data Protection Terms and Conditions are valid and effective from

25 May 2018, and are available electronically on the web of VAPE spol. s r. o ..