Privacy Policy

I. Basic Provisions

The controller of personal data, according to Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as “GDPR"), is Karlovarská sůl s.r.o., ID 11669403, with registered office at Na Výhledě 1076/3C, Stará Role, 360 17 Karlovy Vary (hereinafter referred to as “the controller").

Controller's contact details:
Address: Na Výhledě 1076/3C, Stará Role, 360 17 Karlovy Vary
Phone: +420 793 983 909
Email: shop@karlovarska-sul.cz

Personal data means any information relating to an identified or identifiable natural person. The controller has not appointed a data protection officer.

II. Sources and Categories of Processed Personal Data

The controller processes personal data that you have provided or data obtained based on the fulfillment of your order. Primarily, identification and contact details and data necessary for the performance of the contract are processed.

III. Legal Basis and Purpose of Personal Data Processing

The legal basis for processing personal data is:

• Performance of a contract between you and the controller according to Article 6(1)(b) of the GDPR
• Legitimate interest of the controller in providing direct marketing according to Article 6(1)(f) of the GDPR
• Your consent to processing for direct marketing purposes according to Article 6(1)(a) of the GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., if no goods or services were ordered

The purpose of processing is:

• Processing your order and exercising rights and obligations arising from the contract
• Sending commercial communications and marketing activities

IV. Data Retention Period

The controller retains personal data:

• For the period necessary to exercise rights and obligations arising from the contract (for a period of 15 years)
• Until consent for marketing purposes is revoked, for a maximum of 10 years

After the retention period expires, the controller will delete the data.

V. Recipients of Personal Data

The recipients of personal data are:

We use the Shopify platform to operate our store. In connection with the provision of its services, personal data may also be processed outside the European Economic Area. Details about data transfers and the safeguards used are provided in our Privacy Policy.

VI. Your Rights

Under the conditions set out in the GDPR, you have the following rights:

• Right to access your personal data according to Article 15 of the GDPR
• Right to rectification or restriction of processing according to Articles 16 and 18 of the GDPR
• Right to erasure of data according to Article 17 of the GDPR
• Right to object according to Article 21 of the GDPR
• Right to data portability according to Article 20 of the GDPR
• Right to withdraw consent to the processing of personal data

You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that a breach of personal data protection has occurred.

VII. Conditions for Personal Data Security

The controller declares that it has adopted all appropriate technical and organizational measures to secure personal data:

• Technical measures: Use of technologies for securing data storage, encryption of access, communication, and data stored on servers.
• Organizational measures: Employee conduct rules to ensure the confidentiality of personal data.

Data is stored on servers located in the EU or countries with an equivalent level of personal data protection.

VIII. Final Provisions

By submitting an order from the online form, you confirm that you are familiar with these personal data protection principles and that you accept them in their entirety. The controller reserves the right to change these terms at any time. New terms will be published on the website karlovarska-sul.cz and, if necessary, sent to your email address.

These terms become effective on July 18, 2024.