GDPR

Personal data protection

Love & Passions s.r.o (hereafter referred to as "we") protect all personal data you provide to us when registering, ordering or purchasing (name, surname, address, telephone, e-mail) from misuse and process it in accordance with current legislation. We would like to inform you about some new rules and information in connection with the new European legislation for the protection of personal data (GDPR, which is effective in the European Union, and therefore also in the Czech Republic, from 25 May 2018), because the security of your personal data is our priority and we want you to continue to use all our services without any restrictions.

In this document, you will find basic and clear information about what personal data we process about our customers for the purposes of order processing and registration in our e-shop, on what legal basis we process the data, for what specific purposes we use it, to whom we may transfer it and what rights you have in connection with the processing of your personal data. You can also find all the details, in particular about the other purposes and methods of processing, the processing period as well as your rights in connection with the processing of your personal data, in the bottom bar of our e-shop website in the section "Privacy Policy".

What personal data do we process?

We process the following personal data:

1. identification data, which means in particular first and last name, username and password;

2. contact data, which means personal data that enables us to contact you, in particular your email address, telephone number, postal address and your social media profile;

3. your preferences, which means the information in your account, in particular your saved addresses and profiles and your ratings of products and services;

4. your order details, which are in particular details of the goods and services you have ordered, the method of delivery and payment, including your payment account number, details of complaints;

5. data about your behaviour on the website, in particular the goods and services you view, the links you click on, the way you move around our website and scroll the screen, and data about the device from which you view our website such as the IP address and its derived location, the identification of the device, its technical parameters such as operating system, its version, screen resolution, the browser used and its version, as well as data obtained from cookies and similar technologies to identify the device;

6. derived data, which means personal data derived from your settings, data about the goods and services you place an order for with us, data about your behaviour on the site; in particular, data about your purchasing behaviour and your relationship with various goods and services.

If you visit our website

When you visit our website, we store small files such as cookies on your device and then read them from your device. A cookie is a small file of letters and numbers that we store in your internet browser or on your computer's hard drive. Some cookies allow us to link your browsing activities on our site from the moment you open your web browser window to the moment you close it. These cookies are deleted the moment you close your browser window. Others remain on your device for a set period of time and are activated each time you visit the website that created that particular cookie. We also use pixel tags (also known as web beacons), which are small images that have a similar function to cookies. Unlike cookies, which are stored on your computer's hard drive, pixel tags are a fixed part of a website. For simplicity, we will refer to all of these technologies as cookies throughout this document. We not only store cookies on your device, but we also read the cookies that our website has placed on your device. For simplicity, we will only refer to storage in the rest of this document.

Some cookies are placed on your device directly by our website. These cookies help us to

● to identify you when you move between pages of our website and return visits, for example, to prevent your basket from being deleted when you make a purchase, to remember your login from a particular device and not ask you repeatedly for your email and password, or to save which version of our website to show you if the website offers more than one version at any given time;

● to record that you have given us your consent under this document or, for example, whether you have offered to take part in a particular survey;

● to ensure security, for example to check whether someone has abused your connection to our website and is acting instead of you;

● to record, investigate and troubleshoot malfunctions and non-functioning parts of our website.

Such cookies and other files are necessary for the operation of our website. If you block these cookies in your browser, our website may not function properly and we may not be able to provide you with our products and services.

Further to your device:

● we store cookies from our website that allow us to

● track traffic to our website, its individual pages, generate statistics and reports and measure the effectiveness of advertising;

● show you different variations of our site when we are testing new functionality;

○ customize the content of our site for you, for example, to show you products you have already viewed as a priority and to show you other customized offers on our site;

● allow us to store cookies for third parties to use

○ to collect data about your behaviour on our website and other websites;

○ to display personalised offers and targeted advertising within advertising networks on websites other than our website;

○ to connect with social networking sites such as Facebook, including automatically logging you in, providing features such as the "Like" button, and displaying customized offers and targeted advertising on those social networking sites and websites other than our website.

You can refuse the storage of this information directly on the www.sour-belts.cz website by clicking on the "Cookie Settings" link in the footer of the page.

We do not only obtain data about your behaviour on the website from cookies. We also supplement it with data such as

● The IP address of your device (the address of the device you use to communicate with other devices on the internet),

● MAC address (the address of the device you use to communicate with other devices on your local network),

● the operating system of your device, its version and language settings;

● the browser you are using on your device, its version and language settings;

● the address of the website (URL) from which you are accessing our website.

We process this data about your behaviour on the website on the basis of our legitimate interest (i.e. without your consent) in order to:

● to obtain information on the basis of which we can improve the website for you in the future; our legitimate interest here is to improve our services to you;

● compiling statistics and reports, in particular tracking traffic to our website, its individual pages and measuring the effectiveness of advertising; our legitimate interest here is to measure the effectiveness of our website and advertising spend; we may collect and use other derived data from your behaviour on the website for this purpose;

● testing new features and applications prior to deployment, in particular to prevent problems with the functionality of these new features in actual operation that could impair your experience of using our services; our legitimate interest here is the smooth functionality of our services for you;

● preventing attacks on our website and compromising its functionality and the security of your data; our legitimate interest here is the smooth functionality of our services for you and the security of your data.

For these purposes, we use personal data for as long as necessary. You have the right to object to this processing.

If you give us your consent when you visit the website, we may also use data about your behaviour on the website to personalise our website and display targeted advertising, as described in the section Sending tailored offers and targeted advertising, and we may also transfer it to social and advertising network operators for the purpose of displaying targeted advertising, as described in the section Transferring data and displaying personalised advertising on social and advertising networks.

A.1.1 Sending tailored offers and targeted advertising

If you give us your consent when you visit our website without having an account or placing an order with us, we will only use data about your behaviour on the website for the purposes described. If you log in to your account at the same time, we will combine this information with your other personal information.

A.1.2 Data transfer and display of personalised advertising on social media

A.1.3 Who we share data with

If you give us your consent, we will share your web behaviour data or your personal data with companies:

● Seznam.cz, a.s., Radlická 3294/10, 150 00 Prague 5, Czech Republic

● Google LLC, 1600 Amphitheatre Parkway, CA 94043 Mountain View

● Facebook Ireland Limited, located at 4 Grand Ca

● Zásilkovna s.r.o, Lihovarská 1060/12, 190 00 Prague 9

Why do we process personal data and what entitles us to do so?

1. If you register with us, place an order or make a purchase with us

2. If you register on our e-shop at www.sour-belts.cz, place an order with us or make a purchase with us, we process your identification and contact data, data about your orders, your settings (if you have an account with us) primarily for the purpose of fulfilling our contractual obligations (delivery of the products ordered), i.e. without your consent.

3. In the case of registration, order or purchase, we also process your identification and contact data, as well as data about your orders, your settings (if you have an account with us) and data about your behaviour on the website on the basis of our legitimate interest (i.e. without your consent), for the purpose of creating tailored offers and targeted advertisements that we display to you on the website. Our legitimate interest here is to make the most personalised and effective offer to you. We also use analytics to enrich the aforementioned data for the purpose of creating personalised offers and targeted advertisements and obtain derived data from your settings, data about the goods and services you order from us and data about your behaviour on the website. We may also use data about your behaviour on the site that we have legitimately collected before you have created an order or registered for it and may collect data about your behaviour on the site even if you do not log in (e.g. when we identify you using a cookie or similar technology). We also categorise our users into different groups based on this data.

4. For a better understanding, here is an example: if you have viewed our products on our website, we may display this type of product on the first page of our website on your next visit. Based on the type of product you have viewed, we can also determine which customer group you belong to and, accordingly, offer you other products on the website that we think you might be interested in.

You have the right to object to this processing. Sending offers

If you do not opt-out of receiving offers when you provide your contact details or at any later time, we may use your contact details to send you offers by email, text message, social media, by telephone or other electronic means, or we may send them to you by post. These offers will relate to our products and services.

Your personal data that you provide to us in the context of ordering goods or services, creating and using an account, or when communicating with us, for example, in the call centre, as well as data about your orders, your web profile, your movements on the website or reading newsletters, are processed on the basis of our legitimate interest (i.e. without your consent) in order to create the most appropriate messages about discount promotions or other offers, messages and advertisements that appear on ............?..............

We also supplement the contact data for this purpose with data about goods and services that you create an order with us. We may also use information about your movements on the Site that we have received from you before you have placed an order or registered, and we may also collect information about your movements on the Site even if you do not log in through your Club profile (e.g., if we identify you using a cookie or similar technology). This data also allows us to match you to the correct profile group when sending you our special promotional offers. So, for example, if you browse our mystery offerings on our website or through our newsletter, we will show you the latest titles in that genre the next time you visit our website.

Of course, you have the right to refuse the use of this personalised service. Who processes your personal data and to whom do we pass it on?

All the personal data mentioned above is processed by us as the controller. This means that we determine the above-defined purposes for which we collect your personal data, determine the means of processing and are responsible for its proper execution. We also use the services of other processors for the processing of personal data, who only process personal data according to our instructions and for the purposes described in section B. Why do we process personal data and what authorizes us to do so?" These processors are:

1. cloud service providers and other technology and support providers;

2. operators of marketing tools that help us to optimise the site and personalise content

3. operators of marketing tools who help us to optimise the site and personalise content and offers for you;

4. providers of SMS communication and chat tools, where they process personal data to facilitate our communication with you;

5. service providers in connection with the processing of mailings (catalogues and other communications), including in particular their deliverers.

From what sources do we obtain personal data?

In most cases, we process personal data that you provide directly to us in the context of ordering goods or services, creating and using an account, or communicating with us, for example, at a call centre. We also obtain personal data directly from you by tracking your behaviour on our website and when you read messages.

Transfer of data outside the EU

As part of the transfer of data to the recipients listed in section C. Who processes your personal data and to whom do we transfer it? We may also transfer your data to third countries outside the European Economic Area, including countries that do not provide an adequate level of data protection. We will only make any such transfers if the relevant recipient agrees to comply with the standard contractual clauses issued by the European Commission, available at http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32010D0087.

What rights do you have when processing personal data?

Right of access: you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it outside of us and what other rights you have in relation to the processing of your personal data. You can find out all of this in this document and on the website www.sour-belts.cz in the "Privacy Policy" section. However, if you are unsure which personal data we process about you, you can ask us to confirm whether or not personal data relating to you is being processed by us and, if so, you have the right to access that personal data. As part of your right of access, you may ask us for a copy of the personal data we are processing, and we will provide you with the first copy free of charge and subsequent copies on payment of a fee.

Right to correction: To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay. Right to erasure: In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met: we no longer need your personal data for the purposes for which we processed it; you withdraw your consent to the processing of your personal data, where the data is data for which your consent is necessary and we have no other reason why we need to continue to process the data; you exercise your right to object to processing in respect of personal data which we process on the basis of our legitimate interests and we find that we no longer have such legitimate interests to justify such processing or you consider that our processing of the personal data is no longer in accordance with generally applicable law. This right does not apply if the processing of your personal data is still necessary for compliance with our legal obligation or for the establishment, exercise or defence of our legal claims.

Right to restriction of processing: in some cases, in addition to the right to erasure, you can exercise the right to restriction of processing of personal data. This right allows you in certain cases to request that your personal data be marked and not subject to any further processing operations - in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We have to restrict the processing of personal data when: you dispute the accuracy of the personal data before we agree what data is correct; we process your personal data without sufficient legal basis (e.g. beyond what we have to process) but you would prefer only to restrict the processing before erasing such data (e.g. if you expect to provide us with such data in the future anyway); we no longer need your personal data for the above processing purposes, but you require it for the establishment, exercise or defence of legal claims or you object to the processing. For the period we investigate, if your objection is justified, we are obliged to restrict the processing of your personal data.

Right to object to processing: you have the right to object to the processing of your personal data on the basis of our legitimate interest. If it is for marketing activities, we will stop processing your personal data without further processing; in other cases, we will do so unless we have compelling legitimate grounds to continue such processing.

Right to lodge a complaint: exercising your rights in the above manner does not affect your right to lodge a complaint with the competent supervisory authority. You can exercise this right in particular if you believe that we are processing your personal data unlawfully or in breach of generally binding legal regulations. You can file a complaint against our processing of personal data with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.

You can contact us in all matters related to the processing of your personal data, whether it is a question, exercising a right, filing a complaint or anything else:

1. by e-mail: complaints@sour-belts.com, if you have communicated with us electronically.

2. We will deal with your request without undue delay, but within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.

These terms and conditions will take effect on 1.12.2024