Personal data protection • printshop REPRESS.eu

About

Personal data protection

pursuant to Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”)

I. ADMINISTRATOR

The controller of your personal data is the company:

REPRESS, spol. s r.o., ID No.: 469 69 951, VAT No.: CZ46969951, with registered office at Plucárna 3594/10, 695 01 Hodonín, registered in the Commercial Register kept at the Regional Court in Brno, Section C, Insert 7144 /hereinafter also referred to as “Company”/.
The company has not appointed a data protection officer.
As a natural person, you are the subject of the personal data that is processed. Personal data means any information or combination of information that enables the identification of a specific natural person.
The processing of your personal data is carried out by the Company. Processing of personal data means any operation or set of operations with personal data or sets of personal data which is carried out with or without the aid of automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction.
The processing is carried out at its premises, branches and headquarters by individual authorised employees, its partners or statutory body or processors. Processing is carried out by computer technology or, where appropriate, manually for personal data in paper form, in compliance with all security principles for the management and processing of personal data. The Company makes every effort to ensure that your privacy is protected when using its services. The Company has taken technical and organizational measures to protect your data from loss, manipulation and unauthorized access. The Company continuously adapts its security measures in line with technological advances and developments.
Because we want to provide you with the highest possible comfort in using our website and professional service in our marketing activities, we cooperate with companies to process your personal data in the following areas:
- Faster CZ, spol. s r.o., ID: 60722266;
- FIRMADAT s.r.o, ID: 26939576;
- Google, List, Facebook, Heureka
Processors are subject to the same data protection rules as the data controller.

II. PERSONAL DATA PROCESSED

You are under no obligation to provide personal data to the Company. However, the provision of your personal data is a requirement for the Company to enter into a contract with you or to provide another service. The Company only requires your personal data for the Company’s purposes (for the reason, purpose and duration as detailed below). In no event will the personal information you provide be sold to others or used in any other commercial manner.
In particular, the Company processes your following personal data:
1. in case a contract is concluded with you
  - Name and surname;
  - Address;
  - Email address (IP address);
  - Phone;
  - Bank connection;
  - ID number and tax identification number (for an entrepreneurial FO);
  - Contact details for your employees;
  - Other data necessary for the performance of the contract;
  - Data provided in excess of the applicable laws processed under your consent;
2. for the case of sending commercial communications where you are not a customer of the Company, i.e. you have not entered into any contract with the Company, or where you have only registered with the Company
  - Name and surname;
  - E-mail address;
3. for the case when you are just making a question, comment, review
  - Name and surname;
  - E-mail address;
The Company will obtain the personal data processed either directly from you (by providing it, for example, as part of the registration for the service or from individual correspondence with you) or from publicly accessible registers, lists and records (e.g. the commercial register, trade register, public telephone directory, etc.).

III. COOKIES

“Cookies” are used on our website. The first time you come to our site you will be asked to consent to their use.
“Cookies” are small files that are stored on the user’s computer or other device and can be used to analyse data about the user’s movements and preferences on the website.
We divide the cookies used on our website into two basic types. Short-term cookies, which are used only temporarily and remain stored on your device only until you close your browser, and long-term cookies, which remain stored on your device for longer.
We use cookies on this website for various purposes:
- Necessary – to ensure the functionality of the website
- Analytical – for web usage analysis and performance monitoring
- Advertising – for personalizing the content of ads and targeting them correctly
Cookies are not intended to identify an individual, but some of the data they collect may be considered “personal data” and therefore we provide protection and ensure that they are used in an anonymised way.
You can deactivate cookies in your browser settings, which vary according to the specific manufacturer. However, we must warn you that deactivating cookies may cause problems with the functionality of our website. At the same time, if you want to use cookies to browse the website, but do not want to leave the cookies on your computer after you leave, you can delete them in your browser settings.
- Setting the blocking and enabling of cookies for individual browsers:
  - Google Chrome: https://support.google.com/accounts/answer/61416
  - Mozilla Firefox: https://support.mozilla.org/cs/kb/blokovani-cookies

IV. LAWFUL BASIS AND PURPOSE OF THE PROCESSING OF PERSONAL DATA

Personal data must be processed:
1. for the purpose of making a contract with you – for the purpose of creating an offer, concluding a contract and fulfilling it, or maintaining the status of your customer account, and for the purpose of fulfilling related contractual or legal obligations, such as archiving tax documents and handling any complaints.
  The lawful basis for processing is therefore:
  - performance of the contract (pursuant to Article 6(1)(b) GDPR),
  - compliance with a legal obligation (pursuant to Article 6(1)(c) GDPR),
  - legitimate interest (according to Article 6(1)(f) GDPR), i.e. in particular direct marketing, where the Company also processes your personal data for the purpose of disseminating commercial communications relating to its own similar services, satisfaction questionnaire, sending birthday or PF wishes and to perform simple analytics (e.g. measuring website traffic, etc.),
  - granting consent (pursuant to Article 6(1)(a) GDPR), e.g. for sending commercial communications that do not fall under direct marketing, i.e. in particular sending commercial communications relating to the offer of goods or services of third parties;
2. in the case of sending commercial communications in the situation that you are not the Company’s customers, i.e. you have not entered into any contract with the Company, or in the case where you have only registered with the Company, the legal basis for processing is your consent (pursuant to Article 6(1)(a) of the GDPR). In the case of consent, processing is carried out for the purpose of offering services, sending commercial communications and informing about the Company’s events, etc.
3. in the case where you only make a question, comment, review, the legal reason for processing is the fulfilment of a (pre)contractual obligation (according to Article 6 (1) (b) GDPR).

V. STORAGE PERIOD OF PERSONAL DATA

Your personal data will be processed only for the necessary period of time:
- in the event that a contract is concluded, your personal data will be processed for the period determined by the performance of the contract and the subsequent storage of tax receipts for the ordered and delivered service or goods; however, you have the right to object to the processing of your personal data for direct marketing purposes at any time,
- if you give your consent, your personal data will be processed for a period of 3 years, but no longer than until you withdraw your consent to the processing of your personal data,
- in the case where you have only filled in the contact form, if there is no subsequent conclusion of a contract, for a period of 3 years, if your personal data is processed for this reason, you have the right to object to further processing.
You may send your objection to the processing of your personal data to the Company in writing to the Company’s address or by e-mail to gdpr@repress.cz.

VI. OTHER RECIPIENTS OF PERSONAL DATA

The processing of your personal data is carried out by the Company, i.e. the data controller, but personal data may also be processed for the Company by other persons, which may be:
- suppliers of external services to the Company (typically programming or other technical support services, server services, etc.),
- operators of backup servers or operators of technologies used by the Company, who process them in order to ensure the functionality of the relevant Company services.
Where you have entered into a contract with the Company, they may also process your personal data:
- to the extent necessary, tax advisors, auditors, attorneys of the Company who process personal data for the purpose of providing consulting services,
- companies in the same group as the Company,
- personal data relating to debtors with overdue debts may also be disclosed to debt insurance companies or collection agencies for the purpose of collecting or recovering debts owed to the Company,
- payment gateway providers,
- Transporter,
- personal data may also be transferred to public authorities on request or in the event of suspected infringements,
- possibly other providers of similar services, which are not currently used by the Company.
The Company does not intend to transfer your personal data to a third country (a country outside the EU) or an international organisation.

VII. YOUR RIGHTS

In the context of the processing of personal data by the Company, you have the right to:
- request information about what personal data the Company processes,
- request an explanation from the Company regarding the processing of your personal data,
- to request access to your personal data from the Company and have it updated or corrected (“Access to personal data” means the right to obtain information (confirmation) from the controller as to whether or not your personal data is being processed and, if it is being processed, the right to obtain such personal data and the following information: the purposes of the processing, the category of personal data concerned, the list of recipients or categories of recipients to whom the personal data have been or will be disclosed, the intended period for which the personal data will be stored, the existence of the right to request the controller to rectify or erase the personal data, the right to object, the right to lodge a complaint with a supervisory authority, any available information on the source of the personal data, unless obtained from the data subject, the fact that automated decision-making, including profiling, is taking place),
- to correct inaccurate personal data concerning you,
- require the Company to erase your personal data or restrict its processing (You have this right if at least one of the following conditions is met: the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, you withdraw consent and there is no further legal basis for the processing, you object to the processing and there are no overriding legitimate grounds for the processing, the personal data was processed unlawfully, the personal data must be erased to comply with a legal obligation),
- transfer your personal data to another controller (in other words, you have the right to data portability, or the ability to obtain personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format under certain conditions, and the right to transfer that data to another controller without hindrance. You also have the right, if you request it, to have us transfer your personal data in a structured, commonly used and machine-readable format to another controller, if technically feasible, under the following conditions: the processing is based on a legal ground, consent or contract and the processing is carried out by automated means. We must not adversely affect the rights and freedoms of other persons in complying with the right to portability),
- withdraw the consent given for the processing of your personal data,
- in the case of processing on the grounds of legitimate interest of the Company, to object (After objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests or rights and freedoms or for the establishment, exercise or defence of legal claims.),
- in case of any doubts about compliance with the obligations related to the processing of your personal data, contact the Company or the Office for Personal Data Protection, located at Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice, tel. 234 665 111; www.uoou.cz.
We do not want to disappoint the trust you have placed in us by providing us with your personal data, and we promise to do everything in our power to provide the highest possible level of security for your data.
Your data will only be processed by those of our employees or suppliers who absolutely need it for their activities so that we can always provide you with the best services and goods. Other employees will not have access to your data.
At the same time, we take for granted the highest possible level of technical security, which we will continuously increase so that we can always provide your personal data with the highest standard of security.

April, 1st. 2024
REPRESS, spol. s r.o., ID: 469 69 951