Personal data processing policies

Information on the processing of personal data of customers in connection with the sale of goods and provision of services through the e-shop www.inflorita.com/en/eshop of the company
INTEGRA METAL SYSTEMS s.r.o.

 

1. The activity of the INTEGRA METAL SYSTEMS s.r.o. company

1.1 The business of INTEGRA METAL SYSTEMS s.r.o., with its registered office at Řecká 1289, Nehvizdy, 250 81, Company ID: 262 06 528, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 79675, is the production, in this case, of aluminum flower pots of the inFlorita brand.

1.2 In order to offer the above-mentioned products and services, INTEGRA METAL SYSTEMS s.r.o. operates an online store at www.inflorita.com/en/eshop, where it is possible to purchase individual products via remote means of communication. An integral part of operating an online store is the processing of personal data of customers who have purchased individual products through this channel.

2. Administrator or processor?

2.1 INTEGRA METAL SYSTEMS s.r.o. is the administrator of personal data.
The company INTEGRA METAL SYSTEMS s.r.o. is also referred to in the text as “our company” or “we”.

2.2 Our company informs that it is not required to have a data protection officer appointed within the meaning of the GDPR regulation. If the need for one arises, we will inform you in a timely manner.

2.3 Please address any questions regarding the processing of your personal data in connection with the purchase of goods in our e-shop to the following address:inflorita@inflorita.cz.

3. What do we have to fulfill in order to be able to process your data?

3.1 Our company, as a personal data controller, is obliged to comply with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the Act on the Processing of Personal Data (hereinafter referred to as "applicable legislation") when processing personal data. Our company regularly checks the compliance of its procedures with applicable legal regulations and approaches the fulfillment of these obligations responsibly, with an emphasis on preserving the privacy of individuals and protecting their data. It also ensures the necessary protection for third-party cooperating persons who act or may act as personal data controllers or their other controllers, processors or recipients of personal data in connection with the processing of personal data.

4. What data do we process about you, for what purposes and on what legal basis?

4.1 Basic personal contact data and contractual data of our customers are processed only for the purpose of maintaining the contractual relationship and fulfilling the obligations arising from it, implemented through our e-shop.

4.2 Personal data is further processed for the purpose of fulfilling legal obligations, in particular tax obligations, obligations towards other administrative or judicial authorities, towards supervisory authorities, etc.

4.3 Personal data is also processed on the basis of our company's legitimate interest, in particular in connection with the enforcement of our company's legitimate claims.

4.4 Naše společnost zpracovává osobní údaje smluvních partnerů a zákazníků v souvislosti s prodejem zboží prostřednictvím e-shopu konkrétně k následujícím účelům:

  1. concluding a purchase contract
  2. fulfilling the contract and providing services
  3. fulfilling statutory obligations in connection with the contract, if the legal regulations require the fulfillment of such obligations
  4. billing contractual claims and fulfilling payment obligations
  5. fulfilling accounting and tax obligations
  6. collecting receivables and exercising other claims through courts or other independent institutions
  7. basic customer contact

4.5 Our company, as the personal data administrator, maintains an electronic database (CRM system) in which it records basic personal and contact details of customers/business partners, solely for the purpose of implementing the contractual relationship concluded through our online store.

4.6 Customer personal data is processed to the following extent:

  1. identification data: name, surname,
  2. contact details: permanent address, billing and delivery address, telephone, e-mail address

4.7 The following data is processed for legal entities or natural persons doing business:

  1. identification data: company name, first name, surname, VAT number, registered office, place of business
  2. contact details: billing and delivery address, telephone, e-mail address
  3. other personal data: bank account number, telephone number, e-mail address

5. How does data get into our database?

5.1 We obtain new data into our database (CRM system) directly from our customers/contractual partners.

5.2 We enter data into our customer database:

  1. obtained from concluded contracts (where our company is a contracting party to the contract)

6. Which persons have access to your personal data, to whom do we pass them on?

6.1 All personal data is processed exclusively by our company as administrator.

6.2 The customer database is not shared with another personal data controller.

6.3 We may share processed personal data to a limited extent with processors who perform certain activities for us, such as:

  1. accounting and tax processing
  2. providing invoicing services
  3. law firms

6.4 We may also share customer contact details to a limited extent with companies that provide us with transport, storage or inspection of sold goods, collection and disposal of unused sold goods and packaging, or with a contractual insurance company, only to the necessary extent and for the necessary period of time.

6.5 We provide IT services related to data processing through a supplier company that provides service and maintenance of websites and e-shops.

6.6 Processing of personal data for our company may be carried out by processors exclusively on the basis of a personal data processing contract, i.e. with guarantees of organizational and technical security of this data and with a definition of the purpose of processing, while processors may not use the data for other purposes.

6.7 Personal data may be disclosed in connection with the fulfillment of legal obligations within the framework of the cooperation provided by administrative authorities, bodies active in criminal proceedings, supervisory authorities, courts, etc., always only to the extent stipulated by law and based on their legitimate request.

7. How long do we keep them?

7.1 We store the personal data of customers in connection with the sale of goods and services for the entire duration of the contractual relationship in order to be able to fulfill the contract and the contractual obligations arising from it and exercise the rights arising from it. For the purposes of fulfilling the contract, we may process the necessary personal data even without the consent of the data subject.
For the purposes of archiving and fulfilling statutory archiving and control obligations and enforcing our company's legitimate claims, we store the personal data of data subjects for at least another 10 years after the termination of the contractual relationship. If legal regulations stipulate a shorter period for fulfilling archiving obligations or control obligations, especially in relation to the tax office, the data is stored for this shorter period stipulated by legal regulations.

7.2 If the purpose of processing ceases, all data of data subjects, or data that served the given purpose, are deleted from our database.

8. What are the rights of natural persons in the processing of their personal data?

8.1 The natural person who is the subject of the data we process has the right to:

  1. access to personal data according to Art. 15 GDPR
  2. correct incorrect personal data according to Art. 16 GDPR
  3. request deletion of your personal data according to Art. 17 GDPR
  4. object to processing according to Art. 21 GDPR
  5. right to limited processing according to Art. 18 GDPR
  6. to data portability to the extent specified by applicable legal regulations pursuant to Art. 20 GDPR
  7. file a complaint with the Office for Personal Data Protection - more information at www.uoou.cz in case her rights arising from applicable legal regulations are violated.

8.2 If you have any questions or require an explanation regarding personal data protection, please contact us by e-mail: inflorita@inflorita.cz, or by phone: +420 271 743 400.

9. Consequences of not providing personal data

9.1 Failure to provide personal data results in the impossibility of concluding a contractual relationship and the resulting impossibility of fulfilling contractual obligations.

10. Transfer of personal data outside the European Union

10.1 Personal data are not transferred to third parties based outside the European Union.

 

Valid from 1.10.2024

INTEGRA METAL SYSTEMS s.r.o.