GDPR
Privacy Policy
I. Basic Provisions
- The personal data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR") is PURELAND Food s.r.o. ID No. 099 46 659 with its registered office at Korunní 2569/108, 101 00 Prague 10, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 345185 (hereinafter referred to as the "Administrator").
- The contact details of the controller are:
- address: Korunní 2569/108, 101 00 Praha 10
- e-mail: info@amazonia.cz
- Phone: 735092250
- Personal data means any information relating to an identified or identifiable natural person; An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- The controller has not appointed a data protection officer.
II. Use of cookies
- Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognises them on each subsequent visit.
- Cookies perform a variety of tasks, such as allowing you to navigate between web pages efficiently, remembering your preferences, and generally improving the user experience. They can also ensure that online advertisements are better tailored to you and your interests.
- We use the following cookies on the website:
- Necessary cookies: these are necessary for the operation of the website, for example, they allow you to log in to secure areas of the website and other basic functionalities of the website. This category of cookies cannot be disabled.
- Analytical/statistical cookies: for example, they allow us to recognise and count the number of visitors and to track how our visitors use the website. They help us improve the way the site works, for example, by making it easy for users to find what they're looking for. We only run these cookies with your prior consent.
- Advertising cookies: these are used to track preferences and allow you to display advertising and other content that best matches your interests and online behavior. We only run these cookies with your prior consent.
Please note that third parties (including, for example, external service providers) may also use cookies and/or access the data collected by cookies on the Website.
Cookies used:
You can find more information about cookies and an up-to-date list of cookies through individual web browsers, most often in the Developer Tools section.
Consent can be given via a checkbox contained in the so-called cookie bar. You can also reject cookies in the settings of your internet browser, or you can set the use of only some cookies.
For more information on managing cookies in individual browsers, please visit the following links:
- Internet Explorer - https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome - https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=cs
- Firefox - https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies
- Safari - https://support.apple.com/cs-cz/guide/safari/sfri11471/mac
- Opera - https://help.opera.com/cs/latest/security-and-privacy/
- Microsoft Edge - https://docs.microsoft.com/cs-cz/sccm/compliance/deploy-use/browser-profiles
III. Sources and categories of processed personal data
- The Controller processes the personal data that you have provided to the Controller or the personal data that the Controller has obtained on the basis of the performance of your order:
- Name and surname
- E-mail address
- address
- phone
- The Controller processes your identification and contact data and data necessary for the performance of the contract.
IV. Lawful Basis and Purpose of Personal Data Processing
- The legal reason for the processing of personal data is
- performance of the contract between you and the controller pursuant to Art. 6 para. 1 lit. b) GDPR,
- Fulfilment of the controller's legal obligation pursuant to Art. 6 para. 1 lit. c) GDPR,
- the Controller's legitimate interest in the provision of direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6 (1) of the GDPR; 1 lit. f) GDPR,
- Your consent to the processing for the purposes of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Art. 6 para. 1 lit. a) GDPR in conjunction with § 7 para. 2 of Act No. 480/2004 Coll., on Certain Information Society Services, in the event that no goods or services have been ordered.
- The purpose of the processing of personal data is to:
- processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data that is necessary for the successful execution of the order (name and address, contact) are required, the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or perform it by the controller,
- fulfilment of legal obligations towards the state,
- sending commercial communications and doing other marketing activities.
- There is no automatic individual decision-making on the part of the controller within the meaning of Article 22 of the GDPR.
V. Duration of data storage
- The Controller stores personal data
- for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims arising from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
- for the period until the consent to the processing of personal data for marketing purposes is withdrawn, no longer than 10 years, if the personal data is processed on the basis of consent.
- After the expiry of the personal data retention period, the controller will delete the personal data.
VI. Recipients of personal data (subcontractors of the controller)
- The recipients of personal data are the following persons
- involved in the delivery of goods/services/execution of payments under the contract;
- providing services for the operation of the e-shop (Shoptet) and other services in connection with the operation of the e-shop,
- providing marketing services,
- providing accounting services to the company.
- The Controller does not intend to transfer personal data to a third country (a country outside the EU) or an international organization.
VII. Personal Data Processors
- The processing of personal data is carried out by the controller, but personal data may also be processed for the controller by the following processors:
- Leadhub service provider
- Google, Seznam, GoPay, PPL, Zásilkovna and other companies involved in the processing and delivery of orders,
- or another provider of processing software, services and applications, which are not currently used by the Controller.
VIII. Your rights
- Under the conditions set out in the GDPR, you have the right to
- the right to access your personal data pursuant to Article 15 of the GDPR,
- the right to rectification of personal data pursuant to Article 16 of the GDPR, or restriction of processing pursuant to Article 18 of the GDPR,
- the right to erasure of personal data pursuant to Article 17 of the GDPR,
- the right to object to processing pursuant to Article 21 of the GDPR,
- the right to data portability pursuant to Article 20 of the GDPR, and
- the right to withdraw consent to processing in writing or electronically to the address or e-mail address of the Controller specified in Article III of these Terms and Conditions.
- You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated, or to go to court.
IX. Privacy Policy
- The Controller declares that it has taken all appropriate technical and organisational measures to secure personal data.
- The Controller has taken technical measures to secure data repositories and repositories of personal data in paper form, in particular passwords, antivirus programs, encryption, backups, etc.
- The Controller declares that only persons authorised by the Controller have access to personal data.
X. Final Provisions
- By submitting an order from the online order form, you confirm that you are familiar with the terms and conditions of personal data protection and that you accept them in their entirety.
- You agree to these terms and conditions by ticking the consent via the online form, or by sending an order, or by concluding a purchase contract. By ticking the consent box or sending the order, you confirm that you are familiar with the terms and conditions of personal data protection and that you accept them in their entirety.
- The Administrator is entitled to change these conditions. The new version of the terms and conditions of personal data protection will be published on its website and at the same time the new version of these terms and conditions will be sent to your e-mail address that you have provided to the administrator.
These terms and conditions come into effect on 1 January 2022.