Information on the processing of personal data

Information on the Processing of Your Personal Data

Below you will find information regarding the processing of your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

Data Controller

The data controller is:

VIOLET Products, s.r.o.
Na Jánské 1733/25, 710 00 Ostrava
Company ID: 09556974
VAT ID: CZ09556974

Registered with the Regional Court in Ostrava under file no. C 83434
Represented by: Mgr. Natalija Čertanova, Executive Director
Email: eshop@carevna.cz

Source of Personal Data

We obtain personal data from the following sources:

By completing a form on our website, entering details into a user account on our website, providing data when preparing contracts and related documents, and in connection with contract execution (e.g., product delivery or service provision), through personal contact, phone, email, or other communication methods (SMS messages, applications like Facebook Messenger).
From public sources (e.g., land registry, commercial register, trade register, etc.).
We also process data that you have publicly shared on the internet, especially on social networks (e.g., Facebook, Instagram, LinkedIn) and data from public registers (mainly for contract identification and verification purposes).
If specific data processing requires your consent, we process such data only with your explicit consent.

Providing data is voluntary in most cases, but in some instances, failure to provide data may prevent us from fulfilling your order (e.g., if you do not provide an address for delivery) or offering a service (e.g., certain consultancy services require specific initial data). We will always inform you in advance when providing data is mandatory under the law.

Categories of Personal Data

We process the following categories of personal data to the necessary extent:

Name, surname, address, company ID, phone number, email, IP address, cookies, information about ordered goods and services, details of past purchases and services provided, gender, profile picture, photographs from our educational events, video recordings from these events, and your interests.

Purpose of Data Processing

Personal data is processed for the following purposes:

To fulfill our informational obligations to buyers as per Article 13 of GDPR regarding the processing of buyers' personal data in relation to contract fulfillment, contract negotiations, and compliance with legal obligations of the seller. These obligations are met through a separate document.

Cookies

When browsing our website, we may record your IP address, the duration of your visit, and the website you came from. We consider the use of cookies for website traffic measurement and content customization as a legitimate interest, as it allows us to enhance our services. Advertising-related cookies are processed only with your consent. You can browse our website in a mode that does not allow data collection. You can also disable cookies on your device.

Recipients of Personal Data

If we share your personal data with third parties, we ensure its protection. We provide data to third parties only when legally required or necessary for contract fulfillment or the protection of your or our rights. Such recipients may include public authorities (courts, administrative offices), banks, tax advisors, accountants, court experts, etc.

For specific data processing operations that we cannot handle ourselves, we use specialized service providers, including:

MailerLite, SimpleShop, ComGate, WordPress, Facebook, and Google.

If we engage additional applications or processors in the future, we will ensure they meet our security standards for data protection.

Your personal data may also be transferred to third countries or multinational companies, primarily to providers of mailing/cloud services.

Data Security Measures

We guarantee secure processing of personal data and take appropriate security measures, including:

Securing access to premises storing personal data and locking documents when unattended.
Locking spaces where personal data is stored.
Protecting access to IT systems processing personal data with strong individual passwords and safeguarding these passwords.
Using antivirus software on IT equipment.
Protecting portable IT equipment and data storage devices (monitoring, password protection, controlled copying of data, etc.).
Encrypting files with large amounts of personal data or sensitive information before sending via email or storing on shared drives, and communicating passwords through a separate channel (phone, SMS).
Adhering to legal document retention periods and timely disposal of records as required.

Your Rights

You have the following rights regarding your personal data:

Right to be informed about data processing.
Right to access your personal data.
Right to data portability.
Right to rectification, supplementation, or updating of personal data.
Right to deletion or restriction of data processing.
Right to object to data processing.
Right to file a complaint with the Data Protection Authority.
Right to withdraw consent if processing is based on your consent (withdrawal does not affect the legality of prior processing).

You can exercise your rights using the contact details provided above. More information about your rights is available on the website of the Data Protection Authority: https://www.uoou.cz/6-prava-subjektu-udaj/d-27276.

For further inquiries about personal data processing, you can contact us via email at eshop@carevna.cz or send a written request to our address provided at the beginning of this document. If necessary, we may verify your identity and request in a reasonable manner before processing it.

These Personal Data Processing Principles are valid and effective as of January 6, 2023.

Login to your account