If the customer is a person (natural person), he/she acknowledges that the supplier will process his / her personal data in accordance with the General Data Protection Regulation (Regulation 2016/679). Personal data means all information about an identified or identifiable natural person (data subject). An identifiable natural person is one that can be identified directly or indirectly, for example by reference to a particular identifier (name, identification number, indication of the position he / she holds, etc.). The controller is any natural or legal person, public authority, etc., which determines the purpose and means of processing personal data.


Under this Regulation, each controller is obliged to provide the data subject with the following information:

a) the administrator is the supplier, his identification is in the introductory part of these terms and conditions,

b) the Data Protection Officer has not been appointed

c) the purpose of the processing is to fulfil the purchase contract, the processing of personal data is also necessary to fulfil the legal obligation to which the controller applies,

d) the legitimate interest of the controller arises from the obligation to perform the contract to which the data subject is party and to fulfil legal obligations,

e) the recipient of the personal data of the data subject may be the tax administrator and other control bodies stipulated by law;

f) the controller has no intention of transferring personal data to a third country or an international organisation,

g) the period of storage of personal data is determined by legal regulations, after which the administrator shall dispose of personal data,

h) the data subject has the right to access personal data concerning him,

i) the legal title of the processing of personal data is not the consent of the data subject. The processing of personal data is necessary for the performance of the contract to which the data subject is a party and for the fulfilment of the legal obligation to which the controller is subject,

j) in the Czech Republic, the Supervisory Authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. If the data subject is dissatisfied with the processing of his / her personal data carried out by the controller, he / she can file a complaint directly to him / her or contact the Office for Personal Data Protection,

k) the provision of personal data is a legal and contractual requirement for their processing by the controller. If the data subject requires performance which is the subject of the contract concluded between him and the controller, he shall provide the necessary personal data. If the data subject fails to provide the necessary personal data, the controller has the right to terminate the contractual performance,

l) there is no automated decision-making when processing personal data.


In addition to the right to information, the data subject has other rights, in particular:

a) the right to obtain confirmation from the controller whether or not the personal data concerning him are being processed. If it is processed, it has the right to obtain such personal data. The administrator shall provide a copy of the processed personal data free of charge. The administrator may charge a reasonable fee not exceeding administrative costs for further copies at the request of the data subject,

b) the right of the controller to correct inaccurate data concerning him without undue delay. It also has the right to complete incomplete personal data. The administrator is not obliged to actively search for inaccurate personal data. If he / she finds out that the processed personal data are incomplete or inaccurate, he / she is obliged to correct or complete them, 

c) the right to delete their personal data. The controller is obliged to delete personal data without undue delay, especially if it is no longer necessary for the purposes for which it was processed. The right of erasure may be exercised by the data subject only after the period for which the controller is obliged to keep personal data.


In order to assert its rights, the data subject may use the sample application provided by the seller, which is enclosed to the Ts&Cs.