GDPR

Privacy Policy

Basic information

Personal data manager

We are the company Kobram s.r.o., operator of the Canis Lab e-shop, Janáčkova 1024/18, Ostrava 702 00, ID: 26904390 VAT: CZ26904390.

What personal data we process

Personal information you provide to us

We process personal data that you provide to us yourself.

Personal data that we obtain other than directly from you

As part of joint marketing campaigns, your personal data may be processed by us and a third party (for example, the executor of the marketing campaign). We can combine them for the purposes of marketing campaigns or for the purposes of proper fulfillment of the contract.

Your personal data may be transferred to another entity, for example for the purpose of a marketing campaign. If someone transfers your personal data to us, they must also inform you in advance.

Personal data of third parties that you provide to us

If you provide us with personal data of third parties, it is your responsibility to inform the person concerned about this and to ensure their agreement to these terms of personal data protection.

More information

Personal data that we process automatically

When you visit our website, we may collect certain information about you, such as: IP address, date and time of access to our website, information about your Internet browser, operating system or your language settings. We may also process information about your behavior on our website, i.e. which links on our website you visit and which goods are shown to you. However, information about your behavior on the website is anonymized for the sake of your maximum privacy, and therefore we cannot even assign it to a specific user, i.e. a specific person.

If you access our website from a mobile phone or similar device or through one of the mobile applications, we may also process information about your mobile device (data about your mobile phone, any records of application failures, etc.)

Cookies

We also process cookies automatically.

Versions for mobile phones and mobile applications

If you access our website from a phone, tablet or similar device, we optimize it for these devices. In such a case, we process your personal data in a similar way as in the case of access from a computer.

We can also use the data collected in this way to send you tailor-made commercial messages. If you don't want it, you can easily unsubscribe completely from receiving commercial messages. Similarly, you may be shown personalized content directly on our website.

Why we collect and process your personal data

We process your personal data for the following reasons:

• Purchase of goods and services: primarily we process your personal data in order to properly process and deliver your order. If any problems arise, thanks to your personal data we know who to contact.
• Customer care: if you contact us with a question/problem, we need to process your data to answer/solve it. In some cases, personal data may also be transferred to third parties (e.g. freight carriers).
• User account: thanks to the personal data you provide us in your user profile, you will have access to a number of useful functions (for example, if you provide your phone number, we can easily inform you when your order will be delivered). You can change the data you entered at any time, with the exception of the e-mail address that is used to access your user account.
• Marketing activity:
• E-mail marketing: we send you e-mail commercial communications based on your consent. You can easily unsubscribe from business communications.
• Telemarketing: we make marketing calls for the purpose of offering our goods and services and related marketing communications. The legal title for processing your phone number is either your consent or at least our legitimate interest in conventional direct marketing.
• Retargeting: in some cases we use retargeting techniques and you have the right to refuse retargeting.
• Improving our services: using your order history and website behavior, we can offer more relevant offers for other goods. Therefore, in certain places we display such products that are directly for you and correspond to your needs and interests. We can also use tools for testing different variants (so-called A/B testing), Google Analytics, Facebook Analytics, etc., to optimize elements on the website and off the website (personalized advertising on third-party websites).
• Customer reviews of goods and services: after you purchase goods or services from us, you may be asked to rate them. Evaluations can also be entered on one's own initiative.
• Exercise of rights and legal claims and control by public authorities: we may also process your personal data for the reason that we need them to exercise our rights and legal claims (e.g. in the event that you have an unpaid claim against us or in the event of proof of delivery of the ordered goods ). We can also process your personal data for the reason that we need it for the purposes of checks carried out by public authorities and for other similarly serious reasons.

We process personal data on these legal bases

Performance and conclusion of the contract

We need a large part of your personal data in order to be able to conclude a purchase or other contract with you regarding the goods or services you want to purchase from us. Once the contract is concluded, we process your personal data in order to properly deliver the purchased goods to you, or to properly provide you with the purchased services. On the basis of this legal reason, we mainly process invoicing and delivery data.

Legitimate interests

We also use your personal data to provide you with relevant content, i.e. content that is interesting to you. On the basis of legitimate interest, we process in particular personal data that we process automatically and cookies in this way.

For the same legal reason, we may send you e-mails and text messages as our customers.

Agreement

For the purposes of sending commercial messages (e-mail marketing) and telemarketing, we process your personal data based on your consent. If you do not give us your consent and you are our customer, we can send you commercial messages (or call you as part of telemarketing) even without you giving us your consent. In any case, however, you can simply disable such marketing communications from us.

Transfer of personal data to third parties

In these cases, we transfer your personal data to third parties (ie, in relation to these personal data, we act as their administrator):

• Goods delivery: the carrier chosen by you would never be able to deliver the ordered goods to you, if we did not, among other things, provide them with information on where and to whom they should deliver the goods. We pass this data on to the carrier according to how you fill it in the order. The data transmitted in this way includes primarily your first and last name, delivery address, phone number at which the carrier can contact you, and if the goods have not been paid for in advance, the amount that must be paid when taking over the goods. In relation to the personal data that we pass on to him, the carrier is entitled to process them only for the purpose of delivering the goods and then to delete the personal data without delay.
• Delivery of goods stored for us by the contractual partner: if you order goods from us that are in the warehouse of our contractual partner, we must transfer your personal data to this contractual partner, who will process the order, in order to complete the order. The data transmitted in this way includes primarily your first and last name, delivery address, telephone number at which the carrier can contact you and, if the goods have not been paid for in advance, the amount that needs to be paid when taking over the goods. This contractual partner must then pass on the mentioned personal data to the carrier who will deliver the goods, because otherwise the carrier would not be able to deliver the goods to you. Both the contractual partner who stores the goods for us and the carrier, in relation to the personal data we pass on to them, are obliged to use this personal data only for the purpose of storing/delivering the goods and then to delete them immediately.
• Credit cards: our company does not have data about the payment cards you use to pay with us (if it is not stored, see the next paragraph below). Only the secure payment gateway and the relevant banking institution have access to your payment card data.
• If you have your payment card saved to speed up further purchases on our online store, we only have incomplete data about your payment card (the first and last few digits of the payment card assigned to your user account).

More information

• Business communication: in the case of sending commercial messages (e.g. by e-mail or SMS message) or telemarketing, we may use a third party to send messages or make phone calls. This entity is bound by a duty of confidentiality and may not use your personal data for any other purpose.
• State authorities: in the case of enforcement of our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the legal system or a state authority (e.g. Police of the Czech Republic) imposes an obligation on us to hand over your personal data, we must do so.

How long do we process your personal data?

First of all, we will process your data for the entire duration of the contractual relationship between us.

In the case of the processing of personal data for which consent has been granted, your personal data will generally be processed for an indefinite period or until such consent is withdrawn.

If you sign up to receive commercial communications, we will process your personal data for an indefinite period of time, or until you express your disapproval of their further sending.

We also point out that the personal data that are necessary for the proper provision of services, or to fulfill all our obligations, whether these obligations result from a contract between us or from generally binding legal regulations, we must process regardless of your consent for the period specified by the relevant legal regulations or in accordance with them (e.g. for tax documents, this period is at least 10 years).

We process data obtained through a user account or in another similar way for the duration of the use of our services and usually for 5 years after their cancellation. Subsequently, only basic identification data and information on the reason for which the user account was canceled or data forming part of operational backups are usually stored for a reasonable period of time.

Security of personal data

Your personal data is safe with us. In order to prevent unauthorized access and misuse of your personal data, we have implemented adequate technical and organizational measures.

The protection of your personal data is very important to us. That's why we not only regularly check their security, but also continuously improve their protection. All communication between your device and our web servers is encrypted. Login details are encrypted and all your data is stored on servers in secure data centers with limited, carefully controlled access.

We try to use such security measures that, taking into account the current state of technology, provide sufficient security. The security measures taken are then regularly updated.

What rights you have in relation to the protection of your personal data

In relation to your personal data, you in particular have the right to withdraw your consent to the processing of personal data at any time, the right to correct or supplement your personal data, the right to request restriction of their processing, the right to raise an objection or complaint against the processing of your personal data, the right to access your personal data , the right to request the transfer of your personal data, the right to be informed about a breach of the security of your personal data and, under certain conditions, also the right to delete some of the personal data that we process in connection with you (the so-called right to be "forgotten").

Editing and additions

You are in control of your personal data primarily through your user account. You can set them here, or change basic information about you and change settings regarding the sending of business communications (or unsubscribe from business communications), etc.

Alternatively, you can contact us via the email address listed on our website

Repair

If you believe that the personal data we are processing about you is incorrect, you can contact us via email address. However, for the sake of speeding up the correction of your personal data and your comfort, we recommend that you edit your personal data in your user profile.

According to the amendment to Act No. 235/2004 Coll., on value added tax, it is not possible to change the data in an already issued invoice from 1 January 2013. The data on the invoice can only be changed if you have not yet received or paid for the goods.

Access (Portability)

You can ask us to send you an overview of your personal data. If you have your user account with us.

At the same time, you have the right to access the following information regarding your personal data:

Deletion

You can also request that we delete your data (however, the deletion does not affect the data on documents that we have to keep by law (e.g. invoices or credit notes). If we need your personal data to determine, exercise or defend our legal claims, your request rejected (e.g. if we register an unpaid claim for you or in the case of an ongoing complaint procedure).

Please note that your payment card information is not stored with our company when paying without a payment card, but with a payment gateway provider (third party). Therefore, this data cannot be deleted from our side and you need to contact the payment gateway through which you made the payment. Only basic payment card information is stored with our company if you store your payment card with us.

Except for the cases mentioned above, you have the right to erasure in the following cases:

1. Personal data are no longer needed for the purposes for which they were processed
2. You have withdrawn your consent on the basis of which the data were processed and there is no other legal reason for their processing
3. You have objected to the processing of personal data. data and you consider that during the assessment of the objection it will become clear that in a specific situation your interest prevails over our interest in the processing of these os. data
4. Personal data is processed illegally
5. The obligation to delete is established by a special legal regulation

Objection

We process some of your personal data based on our legitimate interest (see previous chapters). If there are specific reasons on your side, you can object to the processing of your personal data.

Restriction of processing

If (a) you dispute the accuracy of your personal data, (b) your personal data is processed unlawfully, (c) we no longer need your personal data for the purposes of the processing, but you need it to establish, exercise or defend your legal claims, or if you (d) raised an objection according to the previous point, then you have the right to restrict the processing of your personal data.

In this case, we can process your personal data only with your consent (with the exception of storing or backing up the personal data in question).

Filing a complaint

If you believe that we are processing your personal data illegally, you also have the right to file a complaint with the Office for Personal Data Protection. However, we will be happy if you solve the missteps with us first. You can always contact us easily via our contact form or by phone.

These Terms of Personal Data Protection, including their parts, are valid and effective as of 10/30/2020, and are available electronically at www.canislab.eu.