Personal data processing policies

The commercial company UNIMAGNET s.r.o., with its registered office at Dvořeckého 628/8, Prague-Břevnov, Czech Republic, IČ: 28155831, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 260539 (hereinafter referred to as the "controller") hereby, in accordance with the provisions of Article 12 et seq. Regulation (EU) 2016/679 of the European Parliament and of the Council, effective from 25.5.2018, informs its customers about the processing of their personal data in the event that they use their services.

Personal Data

The following personal data will be processed by the controller:

• Name and surname,
• address,
• phone number,
• e-mail,
• in the case of entrepreneurs, company registration number (IČ), tax identification number (DIČ) (hereinafter referred to as “personal data”)

Purpose of processing

The purpose of processing personal data is to fulfill the administrator's legal obligations arising from the content of the concluded contract between you as the buyer and the administrator as the seller, and to fulfill the administrator's legal obligations arising from generally binding legal regulations.

Recipients of personal data

The administrator may, in justified cases, transfer personal data processed for the fulfillment of obligations arising from special legal regulations to law enforcement authorities. The administrator may also provide the personal data provided by you to the following entities:

• Data transfer related to information system administration:
  • wpj s.r.o., CZ28860608
  • Smartsupp.com, s.r.o., CZ03668681
• Data transfer related to order processing depending on the chosen payment and delivery method may occur with the following companies:
  • Touchstore, s.r.o., CZ26414201
  • Česká pošta, s.p., CZ47114983
  • DHL Express (Czech Republic) Ltd., CZ25683446
  • General Logistics Systems Czech Republic Ltd., CZ26087961
  • Zásilkovna Ltd., CZ28408306
  • PPL CZ Ltd., CZ25194798
  • GOPAY Ltd., CZ26046768
• Data transfer related to marketing services:
  • Facebook Ireland Ltd., IE9692928F
  • Google Ireland Ltd., IE6388047V
  • Heureka Shopping Ltd., CZ02387727
  • Seznam.cz, Inc., CZ26168685
  • UAB "MailerLite", LT100007448516

The legal basis is the fulfillment of obligations from the concluded contract with the data subject, as well as the legitimate interests of the controller or a third party. Personal data belonging to the group of special categories of personal data are not transferred.

Obligation to provide personal data

Personal data must be provided to the controller for the purpose of fulfilling the rights and obligations arising from the content of the concluded contract.

Processing period

Personal data may be processed by the controller for the period necessary to fulfill the rights and obligations arising from the concluded contract, or for the period necessarily required to resolve disputes originating from the concluded contract.

Information for the data subject

UNIMAGNET s.r.o. informs its customers that they have the right:

1. to obtain from the Controller confirmation as to whether or not personal data concerning them are being processed, and if so, they have the right to access these personal data and the following information: purposes of processing, categories of personal data concerned, recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, the planned period for which the personal data will be stored, or if it is not possible to determine it, the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data concerning the data subject or restriction of processing or to object to such processing, the right to lodge a complaint with a supervisory authority.
2. that the Controller shall rectify inaccurate personal data concerning them without undue delay. Taking into account the purposes of processing, they have the right to supplement incomplete personal data, including by means of a supplementary statement.
3. that the Controller shall erase personal data concerning them without undue delay, and the Controller shall be obliged to erase personal data without undue delay if one of these reasons is given: personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the customer withdraws consent and there is no other legal basis for their processing, personal data have been processed unlawfully, personal data must be erased in order to fulfil a legal obligation established in Union or Member State law applicable to the controller.
4. that the Controller shall restrict the processing of their personal data if they dispute their accuracy for the period of verification of this fact by the Controller, the processing is unlawful, and the Controller requests restricted processing instead of erasure, the data are no longer needed for the purpose of processing, but they are needed for the determination, exercise or defence of legal claims.
5. that the Controller shall transfer their personal data to another Controller designated by them at their request.
6. raise an objection to the processing of my personal data with the Controller.
7. in case of doubts as to whether their personal data are processed by the Controller within the meaning of the above legal regulations, contact both the Controller and the Office for Personal Data Protection

In Prague on 1. 7. 2020.