Personal data management

Consent and conditions of personal data processing

By submitting the form or checking the consent, you agree that the Administrator and the operator of the website (e-shop) will automatically and manually process the personal data you have filled in, including profiling, according to the conditions stated in this document.

Who is the administrator of your personal data

OREN s.r.o.

Droužkovická 324

431 41 Údlice, Czech Republic

VAT No.: 60279591

hereinafter referred to as the "Administrator".

Definition of the personal data

Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as name, identification number, e-mail, address, location data, IP address. The administrator did not appoint a data protection officer.

What data do we process?

We only process personal information so that we can deliver your order to you, provide our services and customer support, comply with our legal obligations, and protect our legitimate interests.

If you provide the administrator with your contact details - name, surname, email, telephone and address, the administrator processes these for the purpose of performing business activities, consisting mainly in order delivery and direct marketing consisting of contact and creating and sending a return offer by the administrator.

Consent to the processing of your contact details for marketing and business purposes is voluntary. This consent remains in effect until you revoke it.

How it can be deleated

You can cancel your registration on our website (e-shop) at any time and delete your account yourself. You can use the button  „to deleate the account“ after logging in to your customer section.

You can revoke your consent to the sending of business offers at any time by clicking on the unsubscribe link, usually located at the end in the footer of the email.

Legal (legitimate) claim and purpose of the processing

The administrator is entitled to process your identification data and contact information for the purpose of concluding and fulfilling the contract even without your consent. The administrator is also entitled to process your identification data without your consent in order to fulfill its legal obligation arising from legal regulations (eg Act No. 235/2004 Coll., The Value Added Tax Act, Act No. 253/2008 Coll., Act on Certain Measures against Money Laundering and Terrorist Financing, etc.).

The Administrator's legitimate interest is to inform you about news concerning the administration of your contract and to offer you related services and products. Furthermore, conducting market research and customer satisfaction surveys of the products and services used.

Your rights

According to the GDPR, you have the right to access your personal data pursuant to Article 15 of the GDPR, the right to correct personal data pursuant to Article 16 of the GDPR, or restrictions on processing pursuant to Article 18 of the GDPR. The right to delete personal data according to Article 17 of the GDPR. The right to object to the processing pursuant to Article 21 of the GDPR and the right to data portability pursuant to Article 20 of the GDPR. The right to withdraw the consent to processing in writing or electronically to the address or email of the administrator specified in the header of these conditions. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

We provide all communications and statements about your rights free of charge. However, if the request is manifestly unfounded or disproportionate, in particular because it is repeated, we are entitled to charge a reasonable fee taking into account the administrative costs associated with providing the requested information. We will provide you with a statement and, if necessary, information on the measures taken as soon as possible, but no later than within one month. We are entitled to extend the deadline by two months if necessary and given the complexity and number of applications.

Data retention period

The administrator retains the data for the period of exercising the rights and obligations arising from the contractual relationship (for a period of 15 years from the termination of the contractual relationship). Until the consent is revoked, the data are processed on the basis of the consent. After this time, the Administrator will delete your data.

Use of Cookies

Our website uses cookies for its functionality. Cookies are short text files that our website sends to your browser. Allows the site to record information about your visit, such as your preferred language, cart content, and other settings. If you have cookies enabled in your web browser, the administrator processes records of your behavior on the administrator's website in order to improve the operation of the administrator's website and also for direct marketing. The storage of cookies can be disabled in the web browser settings. By disabling cookies, some website functions may become unavailable.

Security of personal data

The administrator declares that he has taken all technical and organizational measures to maximize the security of your personal data. For this purpose, it uses a secure server solution, SSL secure connection and only authorized persons have access to personal data.

Who can access the personal data

The Administrator, its employees and, where applicable, the contractual service suppliers have access to personal data. Above all, they are providers of transport and postal services (Czech Post, PPL, etc.) for personal data to the extent necessary for the delivery of consignments. Recipients of personal data are persons involved in the delivery of goods / services / execution of payments on the basis of a contract and other services in connection with the operation of the website (e-shop and providing marketing services).

Final provision

By submitting the online form, you confirm that you are familiar with the conditions of personal data protection and that you accept them in full.

You give your consent within the meaning of Article 6, paragraph 1, letter ma) REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) and you represent that all information provided by me is true.

The conditions of personal data protection are valid from 25 May 2018.