DATA PROTECTION AND PERSONAL DATA PROCESSING POLICY
These personal data processing and protection policy (“Policy“) represents the basic principles according to which the company Beach and Golf s.r.o., registered at Jana Palacha 888, Zelené Předměstí, 530 02 Pardubice, Registration Number (IČO): 191 28 002, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, File No. C 50883 (“Company“) is guided when acquiring and processing personal data. These Policy provisions implement the rights and obligations of the Company arising in particular from the following generally binding legal regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR“);
- Act No. 480/2004 Coll., on certain information society services and amending certain laws (Act on certain information society services), as amended (“Electronic Commerce Act“); and
- Act No. 127/2005 Coll., on electronic communications and amending certain related laws (Act on electronic communications), as amended (“Electronic Communications Act“).
PERSONAL SCOPE
These Policy provisions apply to all persons visiting the Company’s website www.accomdirect.com (“Website“), regardless of whether they are in any contractual relationship with the Company or not (“Data Subjects“).
By using the Company’s Website, you acknowledge this Policy and explicitly consent to its application.
In accordance with GDPR, personal data means any information relating to an identified or identifiable natural person (not a legal person). In principle, this is any information that, either on its own or combined with other information, can serve to identify a specific natural person (“Personal Data“).
WHAT PERSONAL DATA ARE COLLECTED
The Company processes in particular the following Personal Data:
- name and surname;
- contact and/or delivery address;
- telephone number;
- email address;
- IP address;
- cookies;
- purchased goods, date;
- data for identity verification (only voluntarily at the request of the Data Subject) – copy of ID card/passport, authorization document to act on behalf of a legal entity.
USE OF PERSONAL DATA
The Company processes Personal Data for the following purposes:
- identification of contracting parties;
- provision of products and services of the Company;
- recording of orders, respectively concluded contracts for the provision of the Company’s products and services;
- internal evaluation of services provided and potential improvement of products and services provided; and
- protection of the legitimate interests of the Company.
If you consent to this, the Company will be entitled to use your Personal Data for the purpose of providing marketing information and offers.
Beyond the above, the Company is entitled to send Data Subjects business communications under the conditions laid down in the Electronic Commerce Act, i.e., if the Company obtains from the Data Subject the details of their electronic contact for electronic mail in connection with the sale of a product or service.
PROVISION OF PERSONAL DATA
The Personal Data that the Company obtains about Data Subjects may be further provided to third parties to whom the Company is authorized (for example, to a district court in case of a dispute) or obligated (for example, to bodies engaged in criminal proceedings) to provide Personal Data in accordance with generally binding legal regulations.
The Company further declares that Personal Data will be provided to entities whose services are necessary to achieve one of the purposes listed above. Such entities include: (i) carriers, to whom the Personal Data of buyers are provided to the minimum extent necessary for the delivery of goods, (ii) providers of rating services, to whom the Personal Data of buyers are provided to the minimum extent necessary for the implementation of ratings, (iii) payment gateway providers, to whom the Personal Data of buyers are provided to the minimum extent necessary for payment of the order.
MEANS OF PROTECTION OF PERSONAL DATA
For the purpose of protecting and minimizing the risk of unauthorized access to Personal Data, the Company has implemented organizational and technical measures.
These measures include:
- organizational restrictions limiting the range of persons authorized to access Personal Data; and
- technical protection of the Company’s servers and Website against unauthorized manipulation.
Persons who come into contact with Personal Data are also bound by confidentiality in accordance with Article 28(3)(b) GDPR.
PERIOD OF RETENTION OF PERSONAL DATA
The Company retains Personal Data for the period of time necessary to provide services, but for at least 3 years after the last provision of services to the respective Data Subject.
CONTACT DETAILS
The Company, as the controller of Personal Data, hereby in accordance with Article 14(1)(a) GDPR provides Data Subjects with its contact details:
Company Beach and Golf s.r.o., registered at Jana Palacha 888, Zelené Předměstí, 530 02 Pardubice.
For the purpose of communication with the Company regarding these Policy provisions, the Data Subject may further use info@accomdirect.com, +420 737 992 300.
RIGHTS OF DATA SUBJECTS
Data Subjects have the following rights:
- the right to withdraw consent to the processing of Personal Data, if processing is based on such consent;
- the right to request access to Personal Data and information specified in Article 15(1) GDPR;
- the right to rectification of inaccurate Personal Data and, if necessary, also to supplement incomplete Personal Data;
- the right, under the conditions laid down in Article 17 GDPR, to erasure of Personal Data;
- the right, under the conditions laid down in Article 18 GDPR, to restriction of processing of Personal Data;
- the right, under the conditions laid down in Article 20 GDPR, to receive the Personal Data concerning you, which you have provided to the Company, in a structured, commonly used and machine-readable format, and the right to transmit this data to another person;
- the right to be informed, under the conditions laid down in Article 34 GDPR, of a breach of security of Personal Data;
- the right, under the conditions laid down in Article 21 GDPR, to object to the processing of Personal Data; and
- the right to lodge a complaint with the supervisory authority, i.e., the Office for Personal Data Protection, at the address Pplk. Sochora 27, 170 00 Prague 7, or by means of a data box at the address qkbaa2n.
LIMITATION OF LIABILITY
The Company is not responsible for the correctness or completeness of the content of the Website that has been obtained from third parties (in particular from advertisers using the Website).
The Company is not responsible for any damage suffered by a Data Subject in connection with the use of the Website.
The Company reserves the right to modify the content of the Website at its discretion and without the need to give prior notice to Data Subjects.
The Company is entitled to update and amend these Policy provisions at any time. Data Subjects will be informed of any changes by publication of a new version of the Policy on the Website. Significant changes may also be announced by email or through notifications on the Website.