The Administrator processes personal data only for the purpose of:

1. 1. the performance of the contractual relationship between the Administrator and its customer (i.e. order processing, complaint handling, answering questions);
2. 2. for the purpose of sending commercial offers to customers (i.e. marketing actions and storing purchase history for the purpose of targeting offers);
3. 3. improving the functionality of the website and providing a better user experience for customers.

Personal data is processed by the Administrator to the extent in which it has been provided, in connection with the customer’s order and the subsequent conclusion of a purchase contract, or in connection with the granting of consent to the processing of personal data for the purpose of sending commercial offers or to fulfill the legal obligations of the Administrator.

The Administrator only processes data about customers that are necessary for the performance of obligations arising from the concluded purchase contract, from the consent given to send commercial offers or for the legitimate interest of conducting business by improving the functionality of the website and providing a better user experience for customers.
In particular, the Administrator processes the following categories of personal data:

• name and surname,
• residential address,
• e-mail address
• telephone number,
• bank account number,
• IP address,
• type of internet-enabled device,
• where applicable, the delivery address,
• where applicable, the identification number and tax identification number.

The Customer provides the Administrator with his/her personal data voluntarily. Failure to provide personal data may, however, affect the Administrator’s ability to provide the Customer with services that are based on necessary knowledge of the Customer’s information, including personal data.

The Administrator processes personal data only for the necessary period of time, which varies according to the purpose of processing:

• fulfilment of the contractual relationship – no longer than 2 years from the date of issue of the tax document;
• sending commercial offers – until the consent to such sending is withdrawn, or no longer than 3 years after the end of the sending.

If the processing of personal data is based on the data subject’s consent, the data subject may withdraw his or her consent to the processing at any time by sending an electronic message to info@sensezoom.eu or via the link provided in the commercial communication. Withdrawal of consent does not affect the processing of personal data carried out by the Administrator on the basis of another legal title, in particular for the purpose of fulfilling a contract, or the lawfulness of processing based on consent up to the moment of its withdrawal.

The Administrator does not share personal data with anyone and does not provide them to any third parties. The recipients of personal data are only the Administrator’s processors who process personal data for the Administrator for the purposes stated above.

Raiffeisenbank, a.s. (Prague, Nusle), ID No. 49240901, processes personal data to ensure payment transactions for the Administrator.

The Administrator and, where applicable, its processors process personal data manually (in paper and electronic form) and electronically by automated means.

All processors of personal data to whom personal data may be disclosed respect the data subjects’ right to privacy and are obliged to comply with applicable data protection legislation.

The data subject has the following rights:

Right to access to personal data

The data subject has the right to obtain confirmation from the Data Administrator as to whether or not the personal data concerning him or her are being processed and, if so, to obtain access to such personal data and to the following information:

• processing purposes;
  the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• the intended period of time for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period;
• the existence of the right to request from the Administrator the rectification or erasure of personal data concerning the data subject or the restriction of their processing or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
  any available information about the source of the personal data, unless it is obtained from the data subject.

The data subject also has the right to request from the Administrator a copy of the personal data processed, provided that the rights and freedoms of other persons are not adversely affected. The Data Administrator may charge a reasonable fee based on administrative costs for additional copies at the request of the data subject. Where the data subject makes a request in electronic form, the information shall be provided in the electronic form commonly used, unless the data subject requests otherwise.

Right to request clarification and correction

Any data subject who discovers or believes that the Administrator or one of its processors is carrying out processing of his or her personal data that is contrary to the protection of the private and personal life of the data subject or contrary to the law, in particular if the personal data are inaccurate with regard to the purpose of their processing, may ask the Administrator or the processor for an explanation or may request that the Administrator or the processor remedy the situation; in particular, this may involve blocking, rectifying, supplementing or destroying the personal data. The data subject shall then have the right to have inaccurate personal data concerning him or her rectified by the Administrator without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing an additional declaration.

Right to erasure (right to be forgotten)

The data subject has the right to have the Administrator erase the personal data concerning the data subject without undue delay, and the Administrator is obliged to erase the personal data without undue delay if one of the following reasons applies:

1. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
2. the data subject withdraws the consent on the basis of which the personal data were processed and there is no further legal basis for the processing;
3. the data subject objects to the processing of personal data for direct marketing purposes;
4. the personal data have been unlawfully processed;
5. the personal data must be erased to comply with a legal obligation under European Union or Czech law;
6. personal data have been collected in connection with the offer of information society services on the basis of consent given by the child under the terms of Article 8 (1) of the GDPR.

Right to restriction of processing

The data subject shall have the right to have the Administrator restrict the processing in any of the following cases:

1. for the time necessary for the Administrator to verify the accuracy of the personal data if the data subject denies the accuracy of the personal data,;
2. the processing is unlawful and the data subject refuses the erasure of the personal data and requests instead the restriction of their use;
3. the Administrator no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims;
4. the data subject has objected to the processing pursuant to Article 21 (1) of the GDPR, pending verification that the legitimate grounds of the Administrator outweigh the legitimate grounds of the data subject.

Right to portability of personal data

The data subject has the right to obtain personal data concerning him or her that he or she has provided to the Administrator, in a structured, commonly used and machine-readable format, and the right to transmit such data to another administrator, without hindrance from the Administrator, if:

1. 1. the processing is based on consent to the processing of personal data or is based on the processing of special categories of personal data pursuant to Article 9 (2) (b) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR;
2. the processing is carried out by automated means.

In exercising his or her right to data portability, the data subject has the right to have the personal data transmitted by the Administrator directly to another administrator, if technically feasible. The right to data portability shall not adversely affect the rights and freedoms of other persons.

The exercise of the right to data portability is without prejudice to the data subject’s right to erasure. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator.

Right to object

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her if the processing is carried out on the basis of the titles in Article 6 (1) (e) and (f) of the GDPR – simply, if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator, or if the processing is necessary for the purposes of the legitimate interests of the Administrator.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling (i.e. any form of automated processing of personal data consisting of the use of personal data for the purpose of evaluating certain personal aspects relating to the data subject) insofar as it relates to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right not to be subject to automated decisions, including profiling

The data subject shall have the right not to be subject to any decision based solely on automated processing, including profiling (i.e. any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to the data subject), which has legal effects concerning him or her or similarly significantly affects him or her. This right does not apply if the automated decision is necessary for entering into, or performance of, a contract between the data subject and the Administrator, if it is permitted by European Union or Member State law to which the Administrator is subject and which also provides for appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or if it is based on the data subject’s explicit consent; however, in these cases, the data subject has the right to human intervention in the automated decision by the Administrator, the right to express his or her point of view and the right to contest the automated decision.

Right to submit a complaint to the supervisory authority

The data subject has the right to complain against the processing of his/her personal data by the Administrator to the supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7.

• SenseZOOM s.r.o.
• Jindřišská 939/20, Nové Město, 110 00 Prague
• info@sensezoom.eu
• +420 725 530 579