Personal Data Processing Policy
The company Angel Company s.r.o., registered office: Dobrovodská 2054/53a, České Budějovice 5, 370 06 České Budějovice (hereinafter referred to as “registered office address”), Company ID: 26084805, VAT ID: CZ26084805, a company registered in the Commercial Register of the Regional Court in České Budějovice under file no. C 13051 (hereinafter referred to as “we” or “controller”).
We do not take the protection of personal data lightly. In this policy, you will find out for what purpose, for what reason, and how we process your personal data. You will also find information about your rights regarding personal data protection.
If you have any further questions regarding the processing of your personal data, please contact us at info@resinstudio.cz.
We need some personal data to conclude and fulfill the Contract, we process some personal data based on our legitimate interest. For some personal data, the law requires their processing (e.g., bookkeeping). In some cases, we use processors who may have access to your personal data. These include accounting companies or marketing specialists. Where necessary, we will ask for your consent to process personal data.
When are we the controller? In relation to Users, we are the controller of personal data. An overview of the personal data processed, including the reasons for their processing, can be found below. If anything is unclear, do not hesitate to contact us at info@resinstudio.cz.
To make the text clearer, we will simplify your reading with some terms used in this Privacy Policy:
|
Website |
or simply Web refers to the e-shop website at www.resinstudio.cz, operated by the controller; |
|
GDPR |
Regulation (EU) 2016/679 of the European Parliament and of the Council; |
|
Commercial Communication |
usually an email or SMS sent to the User for the purpose of promoting similar products and services; |
|
Personal Data |
any information about a User that can directly or indirectly identify them; |
|
User / you |
a natural person to whom the Personal Data relate, most often a customer or a potential customer, or a user of our Website, also referred to as “You”; |
|
Processor |
we use other entities that process Personal Data based on a contract or other authorization for the controller; |
|
Processing of Personal Data |
is any operation or set of operations performed on Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; |
|
Special Categories of Personal Data |
we do not process these personal data. These are data that we understand to be more sensitive. For example, they concern your ethnic origin, sexual orientation, union membership, health status, and religious beliefs. Special categories of data also include genetic and biometric data if processed for the purpose of uniquely identifying a natural person. |
- WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU AND HOW?
How do we process your personal data? We process your Personal Data only to the extent necessary to achieve the purpose for which the data was collected, and we adhere to security technical and organizational rules when processing them. The processing of Personal Data is automated, but we do not perform profiling. The specific purposes for processing data and the categories of personal data processed for each purpose are detailed in the following section.
|
→ Name and surname, contact details (especially email, phone number) → Personal data that you provide to us in the context of our competitions (especially name and surname, social network nickname, email, phone number) |
→ Order note and other information that you provide to us in the context of communication with us (especially your questions and answers to your inquiries, communication with you) |
|
→ Billing details and bank details (data necessary for accounting and payment processing) |
→ Cookies and IP address, activity data (including information about your device or operating system) |
|
→ Login to the user account and behavior in the user account (especially data filled in by the User in the user account, purchase history, registration time, date of last profile update) |
→ Comments you add to our posts on social networks (especially Facebook, Instagram), as well as the name (nickname) of your profile on these social networks and publicly accessible information on your profiles |
Special Categories of Personal Data. We do not process any sensitive Personal Data about you.
- USERS OF OUR WEBSITES
If you visit our Website, we process your Personal Data for the purposes specified in this table. If interested, you can sign up on the Website or via email to receive commercial communications or similar promotional material that we prepare for potential customers. To sign up for commercial communications, you need to provide us with certain personal data for processing with your consent.
|
Why? |
What data? |
How? |
How long? |
|
Website visit. Ensuring basic functions of our Website, analytics, improving our services. We also process personal data to display relevant content or our advertisements on other websites. You can set preferences in the cookie banner. The legal basis for processing Personal Data is consent (analytics, marketing cookies) or our legitimate interest (necessary cookies). |
Information about when and how you visit and browse our Website, such as: IP address, date and time of access to our Website, information about your internet browser, operating system or language settings, your browsing history on the Website. If you visit our Website via mobile phone, we may also process data about your phone. |
Cookies or other technologies for tracking User behavior. |
The duration of processing varies by individual types of cookies. Some process data only during the session (visit), some for a longer period. More information can be found in the Cookie Policy. |
|
Communication with customer support, requests and complaints. By submitting an inquiry, you express your consent to the processing of Personal Data for the purpose of handling the inquiry. |
Name, surname, phone number, email. |
For the purpose of handling the inquiry, we process Personal Data necessary for its resolution. Communication takes place via phone, email, or directly on our Website. |
Closed inquiries are regularly deleted, but no later than 3.5 years after the inquiry was made. |
|
Sending commercial communications (direct marketing). |
Name, surname, phone number, and email. |
We send newsletters in the form of email and SMS, informing about our goods, services, and news. |
Data are processed for 3 years from the last active viewing of the newsletter unless you unsubscribe earlier. If you unsubscribe only from SMS newsletters, we will only send commercial communications via email. If you do not wish to receive the newsletter via email either, you can unsubscribe in the footer of each email or write to us, and we will arrange it. |
|
Sending a free e-book and commercial communications. You have given consent to receive the e-book. If you do not wish to receive the e-book, you can unsubscribe in the footer of the email. |
Name, surname, phone number, and email. |
We send an e-book that informs about working with our goods. |
Data are processed for 5 years from the last opening of commercial communication, unless you unsubscribe earlier. |
|
We organize competitions. By registering for the competition, you express your consent to the processing of Personal Data for the purpose of organizing the competition. |
Name, surname, social network nickname, phone number, and email. |
To register and evaluate competition participants and subsequently contact the winners. |
Data are processed for the duration of the competition and for 1 year after the end of the competition. |
Why do we process the personal data? For ensuring the basic functions of the Website, sending commercial communications (newsletters), competition registration, and customer support inquiries.
How do we process the personal data? Personal Data is processed via cookies, forms, and communication through email, phone, or directly on the Website.
How long do we process the personal data? The data processing duration depends on the specific purpose and user actions, as detailed in the table above.
- NEWSLETTER SUBSCRIBERS
If you subscribe to our newsletters, we will process your Personal Data for the purpose of sending commercial communications. You can subscribe on the Website or by email. To subscribe, you need to provide us with Personal Data necessary for processing with your consent.
|
Why? |
What data? |
How? |
How long? |
|
Sending commercial communications (direct marketing). |
Name, surname, phone number, and email. |
We send newsletters in the form of email and SMS, informing about our goods, services, and news. |
Data are processed for 3 years from the last active viewing of the newsletter unless you unsubscribe earlier. If you unsubscribe only from SMS newsletters, we will only send commercial communications via email. If you do not wish to receive the newsletter via email either, you can unsubscribe in the footer of each email or write to us, and we will arrange it. |
Why do we process the personal data? To send newsletters with information about our products, services, and updates.
How do we process the personal data? Via email and SMS communications.
How long do we process the personal data? For 3 years from the last active interaction with the newsletter, unless you unsubscribe earlier.
- ORDERS IN OUR E-SHOP
If you place an order in our e-shop, we process your Personal Data for the purposes of fulfilling the order, payment processing, and delivery. We also process Personal Data for legal compliance, such as tax obligations and accounting.
|
Why? |
What data? |
How? |
How long? |
|
Processing orders and deliveries. |
Name, surname, delivery address, phone number, email, payment details. |
We process Personal Data to manage the order and delivery process, ensuring products are delivered to you. |
Data are processed for the duration of the order fulfillment and for a period required by legal regulations (e.g., accounting and tax records for 10 years). |
|
Customer support and handling inquiries. Handling your inquiries, complaints, and requests related to your orders. |
Name, surname, contact details, and any additional information you provide in your inquiries. |
We process Personal Data to respond to your inquiries and provide necessary support. |
Data are processed for the duration of handling your inquiry and for 3.5 years after resolution. |
|
Legal compliance. |
Name, surname, contact details, order details, payment details. |
We process Personal Data as required by law for tax and accounting purposes. |
Data are processed for 10 years as required by legal regulations. |
Why do we process the personal data? For order fulfillment, customer support, and legal compliance.
How do we process the personal data? Via e-shop management systems, communication tools, and accounting software.
How long do we process the personal data? For the duration of order fulfillment and legal retention periods, typically 10 years.
- SUPPLIERS
If you are a supplier, we process your Personal Data for the purpose of managing our business relationship, including order management, communication, and payment processing.
|
Why? |
What data? |
How? |
How long? |
|
Business relationship management. |
Name, contact details, business details, payment details. |
We process Personal Data to manage orders, communicate with suppliers, and process payments. |
Data are processed for the duration of the business relationship and for the period required by legal regulations (e.g., accounting records for 10 years). |
Why do we process the personal data? For managing business relationships, order processing, communication, and payments.
How do we process the personal data? Via business management systems, communication tools, and accounting software.
How long do we process the personal data? For the duration of the business relationship and legal retention periods, typically 10 years.
- OTHER DATA PROCESSING
In some cases, we may process Personal Data for other purposes, such as when you give us consent for a specific use or where it is necessary to protect our legitimate interests. This could include activities such as analyzing Website usage to improve our services, preventing fraud, ensuring security, and conducting internal audits.
What are our legitimate interests?
Our legitimate interests include ensuring the security of our services, improving our services, and conducting internal audits and analyses. When processing Personal Data based on our legitimate interests, we always carefully consider your rights and interests.
Do we use automated decision-making?
We do not use Personal Data for automated decision-making processes that produce legal effects concerning you or similarly significantly affect you.
How do we protect your data?
We have implemented various security measures to protect your Personal Data, including technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction of your data. We also require our partners to comply with appropriate data protection standards.
What are your rights?
As a data subject, you have the following rights under data protection laws:
- The right to access the Personal Data we process about you.
- The right to request rectification of incorrect or incomplete Personal Data.
- The right to request erasure of your Personal Data in certain circumstances.
- The right to object to the processing of your Personal Data for direct marketing purposes or based on our legitimate interests.
- The right to request restriction of the processing of your Personal Data in certain circumstances.
- The right to data portability, allowing you to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- The right to withdraw your consent at any time if the processing is based on your consent.
- The right to lodge a complaint with a supervisory authority if you believe that the processing of your Personal Data violates data protection laws.
If you wish to exercise any of these rights, you can contact us at [Contact Information]. We will respond to your request in accordance with applicable data protection laws.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our Website, and the revised policy will indicate the date of the latest revision.
This Privacy Policy is effective as of [Effective Date].
Thank you for trusting us with your Personal Data. We are committed to protecting your privacy and ensuring the security of your Personal Data.
Accounting.
Based on the concluded Agreement, you will pay us the purchase price for goods and shipping. We issue accounting and tax documents, which we subsequently archive and work with for the proper management of our accounting and compliance with legal obligations.
Details on the invoice: name, surname, email address, billing address, or other identification of the User and details of the performance according to the Order. Details on the tax document: name, surname, email address, billing address, or other identification of the User and details of the ordered goods.
After filling in the payment information in the profile, we will store this data to create an invoice. We fulfill legal obligations.
We are legally obligated to archive accounting documents and accounting records (invoices) for 5 years starting from the end of the accounting period to which they relate. We also have an obligation to retain the invoice for 3 years from the end of the tax period in which the tax obligation related to the invoice arose. We are also required to archive tax documents for 10 years from the end of the tax period in which the performance was completed.
Compliance with Legal Obligations.
In certain cases, we must process your personal data to fulfill obligations stipulated by law.
This may include name, surname, email address, billing details, or other identification of the User.
We process your Personal Data in this case to comply with applicable legal regulations (fulfillment of a legal obligation).
We process your Personal Data for the period specified by the relevant legal regulations.
- WHO ARE OUR PROCESSORS?
Processors. We use only vetted Processors with whom we have a written agreement and who provide at least the same guarantees as we do to you. The data that Processors may process, including their purpose and legal basis for processing, is stated above. We will gladly provide details about processors upon request.
|
Website Operation and Security |
|
|
General Website Traffic Analysis |
|
|
Order Processing |
|
|
Complaints |
|
|
Handling Inquiries and Communication with Us |
|
|
Accounting |
|
|
Marketing |
|
|
Social Media |
|
|
Customer Satisfaction Ratings |
Legal Obligations. We may, apart from our Processors, disclose personal data to third parties if protection of your data by using Standard Contractual Clauses or other mechanisms as prescribed by GDPR to ensure that your data is adequately protected.
- WHAT ARE YOUR RIGHTS?
Right to Access. You have the right to access your personal data that we process. You can request information about the purpose of processing, the categories of personal data, the recipients, the planned retention period, and other information.
Right to Rectification. You have the right to request the correction or completion of inaccurate or incomplete personal data.
Right to Erasure. You can request the erasure of your personal data if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent on which the processing is based, if you object to the processing, or if the data has been unlawfully processed.
Right to Restriction of Processing. You have the right to request the restriction of processing in certain cases, such as when you contest the accuracy of the data or object to the processing.
Right to Data Portability. You can request to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.
Right to Object. You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent. If we process your data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint. You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data infringes applicable data protection laws.
- HOW TO EXERCISE YOUR RIGHTS?
To exercise your rights, you can contact us via email at info@resinstudio.cz or by mail at our registered address.
- CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time. Any changes will be communicated to you through our website or by email.
- CONTACT US
If you have any questions about this privacy policy or our data processing practices, please contact us at info@resinstudio.cz.