Privacy Policy - GDPR

If you are our customer or visitor to our website/ e-shop, you give us your personal information by visiting or purchasing goods. Our company is responsible for their protection and security in accordance with the principles and rights deriving from the GDPR (Personal Data Protection Regulation).

Privacy Policy Manager
The administrator of personal data is company ArtCrystal Tomeš s.r.o. based in Palackého 3145/41, 46604 Jablonec nad Nisou, Czech Republic, company ID: 04517091. Company ArtCrystal Tomeš s.r.o. as a www.artcrystal.cz web / e-shop operator, processes your personal data as an administrator, determines how the personal data will be processed and for how long will be processed. Eventually choose any other providers.

Contact information
If you wish to contact us during the processing of your data, please contact us by phone +420 739 551 115 or by e-mail: novakova@artcrystal.cz

Declaration
We as the administrator of your personal data declare that, we comply all legal obligations required by applicable law, in particular, the Personal Data Protection Act and the GDPR, and that:

1. we will process your personal data only on the basis of a valid legal reason, in particular, the legitimate interest, performance of the contract, legal obligation or consent
2. we comply with Article 13 of the GDPR with the obligation to provide information prior to the processing of personal data,
3. we will allow you to fulfill your rights under the Personal Data Protection Act and the GDPR.

The scope of personal data and purpose of processing
We process your personal information to fulfill the following purposes:

1. To provide services and performance of the order/contract
your personal data to the extent of billing information, e-mail, telephone number, correspondence address we necessarily need to fulfill the order/contract - sending of goods, spare parts, fulfillment of warranty conditions.

2. Bookkeeping
If you are a customer, we need your personal data (billing information) to comply with the statutory obligation to issue and record tax documents.

3. Marketing - sending newsletters
We use your personal information (email and name), what you click on in the e-mail, and when you open it most often, we use it for direct marketing - sending business information.

If you are our customer, we send you business information in a legitimate interest because we reasonably believe that you are interested in our news, for 5 years from the last order.

If you are not our customer, we will send you newsletters only after your consent, for a period of 5 years from the email agreement.

In both cases, you can cancel your consent by using a sign-out link, that is inserted in each newsletter email from us.

4. Photos and Videos
We make a photo or video documentation, during some of our installation by customers. In case of customers confirmation, we use these photos and videos in promotional materials, on web/e-shop / social networks or printed promotional materials. You will never find the names and the location by these promotional materials unless it is a customer reference and it is based on customers consent.

We retain your personal information for the duration of the limitation period. Unless the law provides a longer period for its retention or we have not stated in specific cases.

Cookies
We record your IP address, while you are browsing our on web/e-shop to recognize how long you stay on the page and from what internet site you come from. We use cookies to track web/e-shop traffic and customization of website views as our legitimate interest because we believe we can offer you better services thanks to this tracking.
Ads targeting cookies will be used only on the base of your consent.
Our web/ e-shop can be browsed also in a mode without collecting personal data. You can disable the use of cookies on your computer in your internet browser.

Security and Privacy policy
We protect your personal data as much as possible using modern technologies that correspond to the level of actual technical development. We have made and maintained all possible (currently known) technical and organizational security measures that prevent your personal data misuse, damage or corruption.

Passing of personal data to third parties
Access to your personal data have our employees and co-workers, who signed a nondisclosure agreement and who are trained in the security of personal data processing.
In order to provide some specific processing operations that we can not provide ourselves, we use the services and applications of providers that specialize in these processes and are in compliance with the GDPR.

Third-party providers of platforms and services:
Schenker - distribution of consignments
PPL - distribution of consignments
DHL - distribution of consignments
Balík po Evropě - distribution of consignments application
Ecomail - an email communication application
Raynet - CRM system, a database of contacts
SpolehliveRecence.cz - eKomi - customer satisfaction surveys
Facebook - FB pixel
Google - Google Analytics, AdWords
Seznam.cz - Sklik
Katerina Kuzelova - bookkeeping

It is possible that we will use other applications or providers to improve processing in the future. In this case, we always select companies in accordance with GDPR.

Transmission of data outside the European Union
We process data only in the European Union or in countries that provide an adequate level of protection on the basis of the European Commission's decision.

Personal data protection rights
Please contact us via e-mail: novakova@artcrystal.cz if you wish to use any of these rights.

The right for information - is already covered by this information page with the principles of personal data processing.

Right to access information - you can make a claim and we will provide you all your personal data and reasons for their processing within 30 days.

The right to completion and change - You have the right to add and change your personal information if something changes or you find your personal data outdated or incomplete.

Right to Limit Processing - You can restrict the scope of your personal data or processing purposes if you think we process your inaccurate data or you do not agree with processing of your personal data (for example you can log-out the newsletter and restrict the purpose of sending business information to you).

Right to be deleted (be forgotten)
In this case, we will delete all your personal data from our system and from third-party systems and backups. We need 30 days to secure this right to erase. In legitimate cases, we are bound by a statutory duty. We must record the issued tax documents after the deadline stipulated by the law. In this case, we will delete all personal data that is not bound by any other law. We will notify you by e-mail about the completion of the deletion.

Complaint at the Office for Personal Data Protection
You have the right to address your complaint to the Office for Personal Data Protection at any time.

Unsubscribe from newsletters and business announcements
Emails with inspiration, articles or information about products and services are sent to you if you are our customer. It is based on our legitimate interest. We send you these emails just after your consent if you are not our customer yet. In both cases, you can stop subscribing our newsletters by clicking the log-out link in each email which we send to you.

Confidentiality
Our employees and co-workers, who will process your personal information, are required to maintain your personal data confidentially and safely. This confidentiality persists even after the termination of the cooperative obligations.

This Privacy Policy applies from May 24, 2021