Processing of personal data

Dana Rohová, Identification No. (IČ): 45875359, with registered office at Návršní 344, 251 68 Kamenice – Nová Hospoda, operating the online store KvětinyOnline (hereinafter referred to as the “Controller”), processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as the “GDPR”), and related applicable legislation.

We process personal data only to the extent necessary to process and fulfil orders, deliver goods, communicate with customers and recipients, comply with our legal obligations, protect our rights and, where permitted by law, for marketing purposes.

1. Controller of Personal Data

The Controller of personal data is:

Dana Rohová
Identification No. (IČ): 45875359
Návršní 344
251 68 Kamenice – Nová Hospoda

Online store: KvětinyOnline
E-mail: kvetiny@kvetinyonline.cz

If you have any questions regarding the processing of personal data, you may contact us at the e-mail address stated above.

2. Whose Personal Data We Process

We primarily process the personal data of:

persons placing orders and customers of the online store,
recipients of goods where the recipient is a person other than the person placing the order,
persons who communicate with us in connection with an order, complaint or other request.

Where the recipient of the goods is different from the person placing the order, we generally obtain the recipient’s personal data from the person placing the order.

3. What Personal Data We Process

Depending on the circumstances, we may process in particular your first and last name, e-mail address, telephone number, billing or delivery address, information concerning orders and purchases made, information necessary for the delivery of goods, payment-related information and information contained in communications exchanged with us.

We process only personal data that is necessary for the specific purpose concerned.

4. Personal Data of the Recipient of Goods

Where a person placing an order requests delivery of goods to another person, they provide us with the information necessary for delivery, in particular the recipient’s name, telephone number and delivery address.

We use this information primarily to arrange and carry out delivery, communicate in connection with the delivery, resolve any issues arising in connection with the handover of the goods and, to the extent necessary, deal with an unpaid order.

We may also use selected information relating to a previous order, in particular the recipient’s name, to a reasonable extent for the purpose of personalising communications sent to the person who placed the order, for example to remind them of a similar occasion or a previous order.

We do not use the recipient’s contact details to send marketing communications to the recipient unless the recipient has given us consent to do so.

5. Why We Process Personal Data

We process personal data primarily for the purposes of:

receiving, processing and fulfilling orders,
processing payments,
delivering goods,
communicating with the person placing the order and the recipient,
handling complaints and other requests,
complying with accounting, tax and other legal obligations,
protecting our rights and legal claims,
assessing customer satisfaction through the Ověřeno zákazníky programme,
marketing where permitted by applicable law.

Depending on the circumstances, the legal basis for processing is primarily the performance of a contract, compliance with a legal obligation, the legitimate interests of the Controller or a third party and, where required, the consent of the data subject. Our legitimate interests include, in particular, the protection of our legal claims, ensuring the proper delivery of goods and direct marketing to existing customers, including reasonable personalisation of communications based on previous orders.

6. Marketing and Commercial Communications

If you are an existing customer, we may use your e-mail address to send you commercial communications concerning our own similar goods and services, subject to the conditions laid down by applicable law.

You may opt out of receiving commercial communications at any time by using the unsubscribe link included in each commercial communication or by contacting us at kvetiny@kvetinyonline.cz.

In other cases where consent is required for the processing of personal data for marketing purposes, we process personal data for such purposes only on the basis of that consent. Consent may be withdrawn at any time.

For the purpose of personalising commercial communications sent to the person who placed the order, we may also use, to a reasonable extent, information concerning their previous orders, including the recipient’s name, where relevant for reminding them of a previous order or a similar occasion.

7. Who May Have Access to Personal Data

To the extent necessary, personal data may be disclosed to our contractual partners or other recipients involved in the operation of the online store and the fulfilment of orders.

These include in particular:

providers of IT and hosting services,
providers of e-mail and other communication services,
carriers and contractual partners responsible for delivering goods,
payment service providers,
accountants and tax advisers,
operators of customer satisfaction verification programmes,
legal advisers.

Depending on the nature of their activities, these parties process personal data either as our processors or as independent controllers, and only to the extent necessary for the relevant purpose.

8. How Long We Retain Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected.

Data relating to an order is retained for the period necessary to perform the contract and subsequently for the period necessary to protect our rights and address any potential claims. Accounting and tax records are retained for the periods prescribed by applicable law.

Personal data used for marketing and the personalisation of marketing communications is processed for no longer than 3 years from the date of the most recent order, or until you object to such processing, unsubscribe from commercial communications or withdraw your consent, whichever occurs first.

We retain the personal data of the recipient of the goods for the period necessary to deliver the order and subsequently to deal with any issues, complaints or legal claims and, to a reasonable extent, also for the purpose of reminding the person who placed the order of a previous order or a similar occasion in marketing communications addressed to that person.

9. Special Categories of Personal Data

We do not require personal data falling within the special categories of personal data under the GDPR in order to fulfil an order, such as data concerning health, religious beliefs or political opinions.

We therefore ask customers not to include such information unnecessarily in order notes, messages accompanying an order or other communications unless it is necessary to do so.

10. Your Rights

In connection with the processing of your personal data and subject to the conditions laid down in the GDPR, you have the right:

to access your personal data,
to rectification of your personal data,
to erasure of your personal data,
to restriction of processing,
to data portability,
to object to processing based on legitimate interests,
to withdraw your consent where the processing is based on consent.

If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for those purposes.

Where personal data is processed on the basis of consent, you may withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You may exercise your rights by contacting us at kvetiny@kvetinyonline.cz.

If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů).

11. Use of Artificial Intelligence Tools

We may use artificial intelligence tools when creating and editing texts, images, graphics and other content published on our website, in advertising or in communications with customers.

Personal data of the person placing the order or the recipient of the goods is not transferred to artificial intelligence tools for this purpose.