1. WHO WORKS WITH YOUR DATA?
Company Owen Stitch Studios s.r.o. (Kejbaly 343/5, Brno, 639 00, Czech republic, identification number: 10910298, registered in the Commercial Register of the Regional Court in Brno, file no. C 123565) is within the meaning of the General Data Protection Regulation / 679 (GDPR), as an operator of the internet store located under the website www.owenstitch.com and www.owenstitch.cz, the administrator of your personal data, i.e. it collects, stores and uses (and otherwise processes) your personal data for the performance of its business activities for which personal data processing is further defined. Owen Stitch Studios s.r.o. may also entrust the processing of your personal data to a third party (the processor) with a clear purpose and under clearly defined rules.
Administrator appoints a Data Protection Officer who can be contacted by email at firstname.lastname@example.org.
2. WHAT DATA DO WE PROCESS?
We process only personal information you provide us with in connection with the use of our services (e.g. ordering one of our goods, or subscribing to newsletters), respectively concluding a contract for the use of this service. This is the most common information you provide when signing up for one of our services:
- first name and surname;
- contact and/or delivery address (for order delivery);
- phone number (for order status information);
- payment information (payment card number);
and further information we obtain from the use of our services:
- IP address;
- company ID, VAT number;
- cookies (for online services);
- possibly another online identifier.
3. WHY IS YOUR PERSONAL DATA PROCESSED?
We use them for statistics, and to make our relationship with you as positive as possible. But also we can ensure safety and constantly increase the security of our services and thus your data. We further process your data for:
- performance of the contractual relationship (name and surname, address, e-mail, phone, ID and VAT, payment details);
- for accounting and tax purposes (purposes) and other legal obligations;
- improving the quality of our services and developing new ones;
- performing analyses and analytic measurements to discover the performance of our services (cookies, IP address);
- analysis of your preferences and display of content that corresponds to your individual needs (cookies, IP address);
- gaining advantages in marketing campaigns developed by us (name and surname, e-mail address);
- participation in consumer competitions (name and surname, e-mail, address);
- sending business messages and newsletters (e-mail, first name and surname, phone).
Your personal data is processed manually as well as automated. Company Owen Stitch Studios s.r.o. is authorized to collect, store and use certain information through automated means such as statistical information whenever you visit our website.
4. WHO WILL HAVE ACCESS TO YOUR DATA?
Your data is safe with us. We carefully choose our partners to whom we entrust your data and who are able to provide you with the technical and organisational security of your data to prevent unauthorized access to your data or other misuse. Protecting your data is our priority. All our partners are bound by the confidentiality obligation and must not use the data provided for any other purpose than agreed. The third parties that may have access to your personal data by the nature of the service you use or have used are:
- the persons we provide data to analyse the traffic to our sites;
- those who provide technical services to us for certain services or technology operators that we use for our services;
- people who provide us with the security and integrity of our services and sites for us and who are regularly testing this security;
- payment gateway providers (payment card providers);
- shipping service providers who deliver your orders to you;
- providers of technical solutions for easy delivery of your order and notification of order delivery;
- technical solution operators, thanks to which we can show you relevant content and advertising tailored only for you.
5. WHAT ARE COOKIES AND WHAT TYPES DO WE USE?
Cookies are text files that contain a small amount of information that can be downloaded to your computer, mobile, or other device when you visit a website. Subsequently, each time you visit this site, cookies are sent back to the original website or to another page that recognizes cookies.
Another group is third-party cookies (such as Google Analytics for analysis of the traffic of a specific website or certain services or cookies of the advertising system operators on our site). These cookies are managed by third parties and we do not have access for reading and writing of those information. Simply to show you the things you're interested in, more easily and quickly. Many browsers automatically accept cookies by default, but you can usually reject or selectively accept only some cookies using your browser settings. However, if you completely disable cookies, some of our site functions may not be accessible or may not display properly. Another option is to browse pages in “anonymous mode” where cookies are not stored at all. Detailed information for all browser types can be found here: aboutcookies.org. If your browser has cookies enabled, we will assume that you agree to the use of standard cookies on our sites. If you do not want to store these cookies, you can block them here. You as a user can reject cookies. However, it is possible that in some cases it will not be possible to display a certain service without using cookies.
6. HOW LONG DO WE STORE YOUR DATA?
We process and store your personal data for as long as it is necessary to ensure all the rights and obligations arising from the contract, i.e. at least for the duration of your order's execution and for the duration of Owen Stitch s.r.o. as a trustee in accordance with generally binding legal regulations or for which you have given us consent for processing them. In other cases, the processing time is the direct result of processing type or is given by the data protection legislation. We process the personal data according to the purpose:
- performance of the contractual relationship - until cancellation;
- improvement of the quality of the services provided and development of the new ones - max 2 years;
- implementation of analyses and measurements, analysis of your preferences and display of content - max 6 months;
- obtaining and delivering prizes in consumer competitions - to appeal;
- sending business messages and newsletters - to appeal;
- accounting and tax purposes 10 years from the following calendar year after performance of the performance;
- other legal obligations fulfilment - max. 5 years;
- processing of personal data on the basis of consent - to appeal.
7. CAN WE STORE AND PROCESS YOUR PERSONAL DATA WITHOUT YOUR CONSENT?
Yes, we may process your personal information without your consent, but only for the purpose of providing a service or product (fulfilment of a contract between you and us, the agreement also constitutes the actual use of a particular service without the need to sign anything); fulfilment of the legal obligations that result from us from generally binding legal regulations (e.g. we are obliged to keep operational and localisation data on the basis of Act No. 127/2005 Coll., on electronic communications); or processing that is necessary for the purposes of our legitimate interests (e.g. direct marketing, security of our sites). The possibility and legality of such processing results directly from applicable legal regulations, and your consent to such processing is not necessary.
8. BASE ON WHAT DO WE WORK WITH YOUR PERSONAL DATA?
We may process your personal information on the basis of your consent, but also for our legitimate interest (in particular processing for the purpose of direct marketing) or for the fulfilment of the contracts between us, to the extent which is necessary to achieve this. Last but not least, this is the reason for us to process your personal data without your consent to comply with our statutory obligations. Specific purposes of individual data processing are stated above.
9. ARE PERSONAL INFORMATION SAFE?
All personal information you provide to us is secured by standard procedures and technologies. In this regard, we assure you that we regularly check, that the system does not have any vulnerabilities and is not exposed and that we use such safety precautions to prevent unauthorised access to your personal data, and to provide sufficient security with respect to the state of the art. The security measures adopted are then regularly updated.
To protect your personal data better, access to these data is password-protected, and sensitive data is encrypted when transferred between your browser and our website.
However, without your help and responsible behaviour, we are not able to fully guarantee the security of your data. So help us ensure the security of your data by keeping your unique passwords and other access information for our services secret and please follow the basic security guidelines.
10. HOW YOU CAN REVOKE YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?
Your voluntary consent of the processing of your personal data may be revoked at any time free of charge by sending an e-mail to: email@example.com. If you revoke the consent about the processing of your personal data there is a possibility to continue processing your personal data based on your consent that was given prior to its revocation. Revocation of consent also has no effect on the processing of personal data that we process on a legal basis other than consent (i.e., in particular, if the processing is necessary to fulfil the contract, legal obligations or for other reasons stated in the applicable legislation).
11. AM I OBLIGED TO PROVIDE MY PERSONAL DATA? WHAT HAPPENS IF I DO NOT PROVIDE MY PERSONAL DATA?
You are providing us with your personal information on a voluntary basis (however, for some services, some personal information is required to make the service available, i.e. if you do not provide it, you will not be able to use the service).
Processing your personal information, often only in anonymised form, without being able to identify you as an individual, enables us to provide you with our services and to continually improve them. If you do not give us your consent, or may subsequently recall it, it may happen that we will no longer be able to provide you with some of our services or we will not be able to provide the service in its full or quality. However, you are not obliged to use our free services.
12. WHAT ARE ALL THE RIGHTS I HAVE WITH THE PROTECTION OF PERSONAL DATA?
As a data subject, you have the rights listed below, which you may derive legally and you can apply any time. You have the right of:
- access your personal data;
- correcting inaccurate or false personal data;
- clarification request whether there is a suspicion that the processing of personal data is detrimental to the protection of personal and private life or that personal data is being processed inconsistently;
- contact with the Office for the Protection of Personal Data;
- deletion of personal data if personal data are no longer required for the purposes for which they were collected or otherwise processed, if they were unlawfully processed;
- limitation of the processing of personal data;
- the right to data portability;
- the right to object after which your personal data will stop being processed, if it is not proven that there are serious legitimate prevail over the interests or rights and freedoms of the data subject, in particular, if it is the case for the enforcement of legal claims;
- right to access personal data: If you want to know whether we are processing your personal data or not, you have the right to obtain information from us if your personal data are processed. if they are, you have the right to access your personal data. In case of the repetitive requests, we are allowed to request an adequate fee for this service.
- right to correct inaccurate and false personal data: If you feel we are working or storing inaccurate and/or false personal data you have a right to request the change the data. we will edit the data without delays with respect to the technical options;
- right to require explanation: If you are concerned that our processing of your personal data does not protect your personal and private life, or that your personal data are not processed in conflict with the legislation, you may require an explanation;
- right to appeal to the personnel of the Office for the Protection of Personal Data: if you are concerned about the handling of your personal data you have a right to refer to the office for personal data protection (www.uoou.cz);
- right of deletion: if your personal data are not required for the purposes of which they have been collected or otherwise processed, or if they were used in conflict with the legislation, you have the right to request the deletion of those informations;
- right to limit the processing of personal data: if you do not want to delete the data, but only to limit the processing of your personal data, you may request the limitation of the processing of your personal data.
- right for data transferring: if you want to submit your personal information to the third parties, you may use your data transferring rights. in the event that this could lead to the offence of the law or the freedom of the third parties, we will not be liable for your submission;
- the right to object: you have a right to object to the personal data processing. either developed for fulfilling the purpose of public interest or the public work or for the protection of our eligible interests. if we fail to prove a significant and appropriate grounds for such data processing, which remains before your interests or rights and freedoms, the data processing will be stopped without any delay;
- right to withdraw the consent: if you agreed with personal data processing, you can withdraw this consent at any time.
12 . HOW CAN YOU CAN CONTACT US?
In case of any personal data protection request or withdrawal of consent to further processing of your personal data, please send an e-mail to firstname.lastname@example.org or send us a letter at our address: Owen Stitch Studios s.r.o., Kejbaly 5, Brno, 639 00, Czech republic.
We would like to inform you that we may want you to prove your identity to us in an appropriate way so that we can verify your identity. This is a precautionary security measure to prevent unauthorized persons from accessing your personal data. In order to increase the quality of service and keep records of our statutory obligations, all communications with you are monitored.