Terms of personal data protection

9.1. The administrator of personal data, i.e. the person who determines the purposes and means and decides on the processing of the Buyer's personal data, is the Seller's company, i.e.: Granát, družstvo umělecké výroby, Turnov, with registered office Výšinka 1409, 511 01 Turnov, ID number: 00030091, and contact person for personal data protection is Iva Tomešová, telephone: 481 357 212, email: centrum@granat.cz and the company owning the e-shop (www.granat-shop.cz), providing technical support for the operation of the e-shop is Jan Čermák TOPFOTO Radostná 670 LIBEREC 25 463 12, ID number: 164 121 25,  the contact person for personal data protection is Jan Čermák, telephone: 603 802 903, email: info@topfoto.cz.

9.2. When processing personal data, the Seller is governed by the relevant legal regulations, in particular the General Data Protection Regulation ("GDPR"). The processing of the Buyer's personal data is necessary for the fulfilment of the purchase contract concluded through the Seller's e-shop. The processing of personal data takes place in order for the Seller to be able to provide performance arising from the purchase contract and to inform the Buyer about it. All personal data is processed based on the purchase contract for the purchase of goods and its processing is necessary for the fulfilment of such contract. The Seller also processes the personal data for the purposes of possible complaints or exercising other rights of the Buyer as a consumer in accordance with the relevant legal regulations.

9.3. Personal data is processed for the period from the moment the goods are ordered to the moment the warranty period expires. After that, only those personal data of the Buyer that are further necessary for exercising the rights and fulfilling the obligations of the Seller, or for which other legal regulations require it, are kept, however, no longer than three years from the expiration of the warranty period. There is no automated decision-making or profiling during the processing of personal data. 

9.4. The Seller only processes the personal data obtained directly from and provided by the Buyer in the order, in particular first and last name, telephone number, E-mail, address, or delivery address, company, ID number and VAT number and any other data provided by the Buyer in connection with the fulfilment of the purchase contract, such as the account number. Personal data is included in the database of the Seller's customers, further recorded in this database, and other data about the ordered goods and the chosen method of transport is assigned to them. Without providing this personal data, the Seller cannot deliver the selected goods provide other services to the Buyer. The provision and processing of the above-mentioned personal data is therefore a necessary condition for concluding and fulfilling the purchase contract.9.5. The Seller handles the Buyer's personal data with due care and in accordance with applicable legal regulations. Personal data is protected to the maximum extent possible, which corresponds to the technical level of available resources. In the internal structure of the Seller, there are strict rules stipulating which employee or department can have access to personal data and which personal data can be processed.

9.6. Personal data is transferred by the Buyer to other entities to the extent necessary to ensure the fulfilment of the purchase contract, especially for the purpose of transporting and receiving the goods in the manner chosen by the Buyer when placing the order. In addition, personal data is generally not transferred to anyone outside the Seller's company, except in cases where:

9.6.1. Express consent of the buyer is given

9.6.2. The Seller is required to do so or authorized to do so by law (for example, in the case of requests from law enforcement authorities).

9.7. Personal data is not transferred to countries outside the European Union.9.8. In relation to their personal data, the Buyer has the following rights, which they can exercise against the Seller:9.8.1. The right to obtain a confirmation of (non)processing of personal data by the Seller and to access all personal data relating to the Buyer and processed by the Seller9.8.2. The right to correct or supplement personal data if it is inaccurate or incomplete9.8.3. The right to delete or limit the processing of personal data, if the conditions set by legal regulations are met9.8.4. The right to object to the processing of personal data9.8.5. The right to transfer personal data to another controller.9.9. In order to exercise the rights to the protection of personal data according to Article 9.8., which the Seller fully respects and enables their exercise, the Buyer can apply in writing, electronically or by telephone.9.10. If the Buyer believes that the processing of their personal data is in violation of legal regulations, they have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, ID: 70837627, with headquarters in Plk. Sochora 27, 170 00 Prague 7, www: https://www.uoou.cz.