PRINCIPLES OF PROCESSING AND CONDITIONS OF PERSONAL DATA PROTECTION
These principles define the way we process personal data of our customers and persons interested in our services and products.
Personal data are all information which identify you as a customer or based on which you are identifiable, and further information saying something about you.
Processing of personal data is any operation with personal data which is performed whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing is fully or partially automated processing of personal data of a customer and non-automated only in the case that personal data are contained in a register or they are to be included in the register.
Customer is a person with whom we have or had a contractual relationship on delivery of goods or provision of services or if that person has shown a specific interest in our products or services.
During the processing of personal data, we comply with the regulation (EU) 2016/679 of the European parliament and of the Council, General Data Protection Regulation, and other applicable legal regulations.
Basic principles we adhere to during the processing of personal data are:
1) Lawfulness, Fairness and Transparency
Your personal data are processed by us in relation to you fairly and in a lawful and transparent manner.
2) Purpose Limitation
Your personal data are collected by us only for specified, explicit and legitimate purposes and those personal data are not further processed in a manner that is incompatible with those purposes.
Personal data are processed by us in an adequate, relevant and limited manner to what is necessary in relation to the purposes for which they are processed.
4) Storage Limitation
Your personal data are kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed.
We take care that your personal data processed by us are accurate and, where necessary, kept up to date. We take every reasonable step to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
6) Integrity and Confidentiality
We ensure protection of your personal data processed by us. We process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
PERSONAL DATA FOR ADMINISTRATION OF CONTRACTS AND CONTRACTUAL RELATIONSHIPS
We process personal data contained in the contracts you have concluded with us and personal data which arise from the course of performance of those contracts. They are in particular identification and contact details, data on the subject matter of the contract and data on the progress of the contractual relationship, including business communication with the customer. A contractual relationship is established also with every order of goods through our e-shop.
We must process personal data in order to comply with our obligations arising from the contracts and to exercise rights arising from those contracts and fulfil related legal obligations (e.g. book-keeping and retention of accounting records for the time specified by law).
Personal data designated for the administration of contracts and contractual relationships are received primarily from you, but they may also arise from the course of performance of the contractual relationship (e.g. information on delivery of the ordered goods from the carrier).
If you pay for our products or services by payment card, the payment is carried out trough secured payment gateway operated by ČSOB a. s. seated at Radlická 333/150, Prague 5, 15057. Our company does not have access to the personal data or other data with which the authorization of payment transactions is carried out.
Personal data are retained by us only for as long as they may be from the legal point of view relevant for a particular contractual relationship, i.e. until expiration of limitation, prescription, complaint, deposit and other similar periods stipulated by legal regulations or agreements of the contractual parties.
MARKETING AND COMMERCIAL PERSONAL DATA
Personal data are further processed by us for marketing and commercial purposes in order to inform you on our offers and news, most often in the form of sending newsletters and other commercial communications, and in order to make us informed in the case of our customers and other persons whose interest may be expected, by phone, e-mail or another similar way on their interest in our offer. We process personal data for these purposes also in order to be able to personalize our actions towards you for establishing and performance of a contractual relationship.
In order to contact you with an offer or other commercial communications, your personal data are processed by us only if there is a reasonable expectation that you are interested in our offer; particularly in the case you are or were our customer. Personal data for the purpose of personalisation of action are processed by us only in the case that you have had a commercial contact with us (in the form of purchase of goods, use of services or expressed particular interest in purchase of goods or use of services).
We may send commercial communications to your e-mail address only if you, as our customer, have notified us of the address or if you have given your consent to use your e-mail address for this purpose. Such consent may be withdrawn by you at any time, specifically in the way as defined bellow. In addition, in every e-mail commercial communication we give a simple option of refusing further sending of commercial communications in the form of an electronic withdrawal.
For this reason, we process the following types of personal data:
1) identification and contact personal data (name and surname, postal address, e-mail address, telephone, etc.)
2) your profile personal data in relation to our cooperation (eg. the history and course of commercial relations, object of purchase, object of demand)
3) data enabling to personalize communication with you.
However, personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic personal data, biometric personal data and data concerning your health or sex life or sexual orientation, shall be naturally never used as marketing and commercial.
The source of marketing and commercial personal data for us are our contractual relationships with you and messages you address to us (via online forms or social networks, telephone, etc.).
If the legal basis of the processing of your personal data is concerned, our legitimate interests in the use of the data for marketing and commercial purposes are in the interest of maintenance and development of commercial contacts and commercial activity. You may raise objections to the processing of your personal data for marketing and commercial purposes. If you raise those objections to the use of personal data for the purpose of sending commercial communications or other forms of direct marketing, we shall immediately stop further processing for these purposes. If you raise objections to the use of your personal data for the purpose of personalisation of dealing with you, we shall assess, based on the grounds of the objections, whether on our side legitimate interests for the ongoing processing of the personal data which override your interests or rights and freedoms exist, and we shall inform you whether we will satisfy the objections. If we cannot satisfy them, we shall inform you on the grounds. The way in which you may raise your objections is specified bellow.
Personal data for the purpose of contacting you with our offer or other commercial communications are processed by us for as long as your interest in our offer may be reasonably expected, unless you have already raised objections to such processing. Personal data for the purpose of personalization of the dealing with you are processed by us for 10 years of the day of the last commercial contact with you.
COOKIES, WEB BEACONS
On our website www.buvu.co.uk we use cookie technologies, i.e. storage of specific text files containing data on the access to the website via web browser in your computer; in the case of a repeated visit of the website, the stored data are sent to our web server again. Cookies serve for personalisation of the website settings and improvement of a user's experience, including storage of user presets. Cookies may be used by us also for adjustment of advertising and monitoring of the visit rate of our website.
We may also use web beacons technologies, both on our website and in e-mails sent by us. Web beacons are small graphical elements which are downloaded from our web server for the purpose of monitoring of the open rate of e-mails, or the visit rate of the website and users’ behaviour on it and subsequent optimization of electronic services for users.
This website uses the functions Google Analytics integrated with advertising in the Google Display Network and implement remarketing functions, list of displays in the Google Display Network and demographic overviews and interests overviews Google Analytics.
From the use of Google Analytics functions for advertising in the Google Display Network, you may withdraw in Ads SettingsAlso, in that part personalise the Google Display Network advertisements. The website www.buvu.co.uk collects cookies; if you do not want to share that information with the website www.buvu.co.uk you may forbid the collection of cookies in your browser.
PERSONAL DATA TRANSFERS
Your personal data are naturally confidential for us. With the exceptions described in the following points we do not transfer personal data to any third persons. We do not trade in personal data in any way.
Personal data may be transferred to entities which carry out processing of the personal data for us or which provide us with services whose necessary part is disclosure of personal data. They are especially entities who provide us with accounting services, tax advisory, information technology services, database services or e.g. legal services. Such recipients then do not process personal data independently but according to our instructions. We shall not be liable if on their side the disclosed personal data are misused and that the obligations of personal data integrity and confidentiality are concluded with them as well as other obligations which have to be concluded pursuant to applicable legal regulations.
We shall be entitled to transfer personal data to third persons also if you give your consent to it, under the conditions of the given consent. The given consent may be withdrawn by you at any time.
Your personal data may be transferred to third persons also if it is necessary for compliance with our legal obligation or if it is necessary from the nature of the case, in particular for fulfilment of the contractual relationship whose party you are (e.g. transfer of necessary personal data to carriers for the purpose of delivery of purchased goods or to operators of payment systems for the purpose of payment of the purchase price).
Your personal data are stored by us and we do not transfer them to other countries.
RIGHTS OF OUR CUSTOMERS
1) Right to be informed
You have the right to request and obtain from us confirmation whether your personal data are processed by us or not. If so you have the right to access to the personal data being processed and to information on details of the processing and sources of the personal data. If you provide us with your personal data based on your consent or in connection with compliance with your contractual obligations and if the personal data are processed by automated means, you have the right to obtain them in a structured, commonly used and machine-readable format.
2) Right to rectification, erasure and restriction of the data processing
You have the right to obtain from us without undue delay the rectification of inaccurate personal data, including the right to have incomplete personal data completed. Further you may request from us the erasure of personal data if we do not have any overriding legitimate ground for the processing (e.g. if you raise an objection to the processing of personal data for the direct marketing purposes). If required by you, instead of the erasure of personal data we shall only restrict their processing, i.e. the personal data shall be only stored, and they shall not be processed in another way without your consent.
3) Right to object
You have the right to raise an objection at any time to the processing of your personal data for the direct marketing purposes; the personal data shall be no longer processed for this purpose. If you raise an objection to the processing of your personal data in another cases when we process personal data on the ground of our legitimate interests, we shall at first assess whether on our side compelling legitimate grounds for the ongoing processing exist which override your interests or rights and freedoms and we shall inform you whether we will comply with your objections or that we are not able to do so and why.
You are authorised to exercise your rights in any form which communicate the content of your request, notification or objections, in a way easy to understand, in particular in electronic form to email@example.com. If you request adoption of a particular measure, we shall provide you with information on adopted measures without undue delay, not later than within one month of receipt of the request. The determined period may be in necessary cases extended by maximally two months, on which you have to be informed in a timely manner.
Advice on the right to access to personal data. I have the right to request from the Processor, or directly from the Controller, information on the processing of My personal data which shall be given to me without undue delay. The information shall always include the communication of (i) the purpose of the processing of My personal data, (ii) the personal data, or categories of personal data, which are the subject-matter of the processing, including all available information on their source, (iii) the nature of the automated processing in connection with its use for decision-making, if on the ground of that processing actions or decisions are taken whose content is interference with my rights and legitimate freedoms, and (iv) the recipient, or categories of recipients. For the provision of the information the Controller, or the Processor on the Controller’s behalf may charge reasonable payment not exceeding the costs necessary for the provision of the information.
Advice on other rights. If I discover or if I consider that the Controller or the Processor carries out the processing of My personal data which is in contradiction to the protection of my private and personal life or contradictory to law, in particular if My personal data are inaccurate with regard to the purpose of their processing, I am entitled to (i) request from the Controller or the Processor explanation, or (ii) request from the Controller or the Processor to rectify such state. In particular it can be blocking, rectification, completion or removal of My personal data. If my request if found to be legitimate, the Controller or the Processor shall immediately rectify the imperfect state. If the Controller or the Processor does not satisfy the request, I may contact the Office for Personal Data Protection.
Advice on the rights under the Regulation (EU) 2016/679 of the European parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter only referred to this regulation No. 2016/679 only as the 'General Data Protection Regulation' or 'GDPR'.
I confirm that I have been advised on my rights in connection with the processing of My personal data, specifically pursuant to the provisions of Articles 13, 15-22 and 34 of GDPR.
If you feel your rights have been affected in connection with the processing of your personal data by us, you may lodge a complaint to the Office for Personal Data Protection– See www.uoou.cz.
These Principles of Processing and Conditions of Personal Data Protection shall be valid and effective as of 25 May 2018.