Privacy Policy

PRIVACY POLICY

I. Basic Provisions

1. The data controller pursuant to Article 4, point 7 of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) is DaSty Stav s.r.o., Company ID: 23152559, with registered office at Masarykova 752/111, 252 19 Rudná (hereinafter referred to as the “Controller”).

2. Controller’s contact details:
   Address: Masarykova 752/111, 252 19 Rudná
   Email: info@dasty-stav.cz
   Phone: +420 725 935 088

3. Personal data refers to all information relating to an identified or identifiable natural person.

4. The Controller has / has not appointed a Data Protection Officer. If appointed, contact details of the DPO are: […]

II. Sources and Categories of Personal Data

1. The Controller processes data provided by you or obtained during the fulfillment of your order.

2. These include identification and contact details necessary to fulfill contractual obligations.

III. Legal Basis and Purpose of Processing

1. Legal grounds for processing:

   • Fulfillment of a contract (Article 6(1)(b) GDPR)

   • Legitimate interest in direct marketing (Article 6(1)(f) GDPR)

   • Consent for marketing communication (Article 6(1)(a) GDPR with § 7(2) of Act No. 480/2004 Coll.)

2. Purpose of processing:

   • Fulfilling your order and contractual obligations

   • Sending marketing offers and newsletters

3. No automated decision-making is used / used only with your explicit consent (Article 22 GDPR).

IV. Retention Period

1. Personal data is stored:

   • For up to 15 years after termination of the contractual relationship

   • Until consent for marketing purposes is withdrawn, for no longer than [insert period]

2. After expiration, personal data will be deleted.

V. Recipients of Personal Data

1. Data may be shared with:

   • Service providers (e.g., payment processors, hosting, e-commerce platform Shoptet)

   • Marketing service providers

2. The Controller does / does not intend to transfer data outside the EU. In such cases, data is shared only with GDPR-compliant processors.

VI. Your Rights

Under the GDPR, you have:

• Right of access (Article 15)

• Right to rectification (Article 16)

• Right to erasure (Article 17)

• Right to restriction of processing (Article 18)

• Right to data portability (Article 20)

• Right to object (Article 21)

• Right to withdraw consent at any time via email or postal address provided above

You also have the right to lodge a complaint with the supervisory authority (Úřad pro ochranu osobních údajů – Czech Data Protection Office).

VII. Data Security

1. The Controller has implemented appropriate technical and organizational measures to secure your data.

2. These include securing digital and physical storage systems.

3. Only authorized persons have access to personal data.

VIII. Final Provisions

1. By submitting your order via our website, you confirm that you have read and agree with this Privacy Policy.

2. Consent is granted by ticking the checkbox on the contact form.

3. The Controller reserves the right to modify this Privacy Policy. Changes will be published on our website and/or sent to your email address.

Effective from: May 25, 2018