Protection of personal data of customers

In Léčebné konopí sro., IČ: 04263995 (hereinafter referred to as "we"), we pay great attention to the protection of personal data. In this document you will find information about what personal data we process, especially about our customers and users of our website, whether we process data on the basis of consent or other legal reason, for what purposes we use it, to whom we may pass it and what you have in connection with processing of your personal data rights.

What personal data do we process?

When you use our services, we collect various types of information, such as your username and password, your contacts and other settings. We monitor what products you view on our website and from what device, which of our offers sent by e-mail you are interested in, and we derive additional information about you from it, so that we can show you tailor-made offers and further improve our website in the future. If you buy from us or create an account, we also work with the name and surname, your orders and the data you set up in your account.

We process the following personal data:

identification data, which means in particular name and surname, username and password, or identity card number, if you are buying in installments, ID number and VAT number, if you are an entrepreneur;

contact details, which means personal data that allows us to contact you, in particular your e-mail address, telephone number, delivery address, billing address and your contact on social networks;

your settings, which means the data in your account, in particular stored addresses and profiles, newsletter settings, membership in loyalty programs, shopping lists, watched products (so-called watch dogs), your evaluation of products and services and completed questionnaires;

details of your orders, which are in particular details of the goods and services you have ordered, the method of delivery and payment, including the number of the payment account, and details of complaints;

information about your behavior on the website, including when you view it through our mobile application, in particular the goods and services you view, the links you click on, how you navigate our website and scroll the screen, as well as information about the device from which you you view our website, such as IP address and location derived from it, device identification, its technical parameters such as operating system and its version, screen resolution, browser used and its version, as well as data obtained from cookies and similar technologies for device identification;

information about your reading behavior that we send you, especially the opening times of messages and also information about the device on which you read messages, such as IP address and derived location, device identification, its technical parameters such as operating system and its version, resolution screens, browser used and its version;

derived data, which means personal data derived from your settings, data about goods and services that you purchase from us, data about your behavior on the website and data about your behavior when reading e-mails that we send you; in particular, information about your gender, age, financial situation, shopping behavior and relationship to various goods and services;

data related to the use of the call center or a visit to the store, which are mainly records of telephone calls with the call center, identification of messages that you send us, incl. identifiers such as IP addresses and recordings from camera systems in stores.

If you visit our website

Use of cookies and other technologies, transfer of data to advertising and social networks

When you visit our website, we store and then read small files such as cookies on your device. A cookie is a small set of letters and numbers that we store in your internet browser or on your computer's hard drive. Some cookies allow us to link your activities while browsing our site from the moment you open a web browser window to the moment you close it. The moment you close the internet browser window, these cookies will be deleted. Others remain on the device for a set period of time and are activated each time you visit the website that created the particular cookie. We also use pixel tags (also known as web beacons), which are small images that have a similar function to cookies. Unlike cookies, which are stored on your computer's hard drive, pixel tags are an integral part of websites. For simplicity, we will refer to all of these technologies in this document as cookies. We not only store cookies on your device, but we also read those cookies that our website has stored on your device. Later in this document, we will only talk about saving for simplicity.

If you buy from us

In order to purchase from us, you must visit our website, so the processing described in the section If you visit our website applies to you. If you buy from us, then we also perform the following processing:

If you purchase from us as an individual, we process your personal data in order to process your order, your identification and contact data and information about your orders. If you have a user account with us, we may also use your settings for this purpose.

If you purchase from us as a legal entity, we process the same data for the same purpose based on our legitimate interest in concluding and performing a contract with the person you represent.

Processing on the basis of fulfillment of legal obligations

We too must comply with certain statutory obligations. If we process your personal data for this very reason, we do not need to obtain your consent for such processing. On this legal basis, we process your identification and contact data, order data, in order to comply with the following laws in particular:

Act No. 89/2012 Coll., Civil Code,

Act No. 634/1992 Coll., on consumer protection,

Act No. 235/2004 Coll., on value added tax,

Act No. 563/1991 Coll., on Accounting.

We use personal data for this purpose for a maximum of 8 years from the issuance of the last document to your order.

Who processes your personal data and to whom do we pass it on?

We process all the mentioned personal data as an administrator. This means that we determine the purposes for which we collect your personal data as defined above, determine the means of processing and are responsible for their proper execution.

We may also pass on your personal data to other entities in the role of administrator, namely:

partners operating payment systems for the needs of securing payment, especially in connection with payment by card, especially the companies Československá obchodní banka, as IČO: 00001350, as, ID 26168685

Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, D02 X525, Ireland;

Google Ireland Limited (registration number: 368047), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland

satisfaction service provider Verified by customers and intermediary of our sales company Heureka Shopping sro, ID: 023 87 727;

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we collect your personal data, to whom we transfer it, who processes it outside of us and what other rights you have related to the processing of your personal data. You can find out all of this in this "Customer Privacy" document. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not the personal data concerning you are being processed and, if so, you have the right to access this personal data. . As part of the right of access, you can ask us for a copy of the personal data being processed, with the first copy being provided free of charge and the other copies already free of charge.

Right to delete data

In some cases, you have the right to have your personal information deleted. We will delete your personal data without undue delay if any of the following reasons is met:

we no longer need your personal data for the purposes for which we processed it;

you withdraw your consent to the processing of personal data, which are data for the processing of which your consent is necessary and at the same time we have no other reason why we need to continue processing this data;