Privacy Policy

1. Basic provisions 
2. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is Andrew Janousek.ID: 73853518with registered office Filipova 2014/2, Prague 4 - Chodov (hereinafter: "Administrator"). So we as operators www.shop.wayunki.com
3. Contact details for us as administrator are:

Address: Prokopova 14, Prague 3, 130 00

E-mail: [email protected]

Phone: +420 777 870 609

3. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 
4. We, as the data controller, have not appointed a data protection officer. Thus, we do not pass the responsibility on to anyone. We just play fair.
5. Sources and categories of personal data processed
6. We, as the controller, process personal data that you have provided to us or personal data that we have obtained from you as a result of the fulfilment of your order. This means the data necessary for the processing and delivery of your order, such as name, address, e-mail and telephone.
7. We, as the data controller, only process your identification and contact data for the necessary performance of the purchase contract, which is your order with us in our e-shop.

III. Lawful basis and purpose of the processing of personal data

1. The lawful basis for processing your personal data is:

• the performance of the contract between you and us, i.e. the data controller pursuant to Article 6(1)(b) GDPR,
• the controller's legitimate interest in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) GDPR, but only if you want to receive the newsletter and you subscribe to it yourself when ordering goods from us. Otherwise, we will not send you anything and we will not bother you with advertising. 
• your consent to processing for the purpose of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services in the absence of an order for goods or services. This means that if you do not order anything from us but only subscribe to our newsletter.

2. The purpose of processing personal data is:

• the processing of your order and the exercise of the rights and obligations arising from the contractual relationship between you and us as data controller; when placing an order, the personal data required for our successful processing of your order (name, surname, address and contact details in the form of a telephone number) are required. The provision of personal data is a necessary requirement for the conclusion and performance of the contract - i.e. your order. Without the provision of personal data, it is not possible for us as data controller to conclude or properly execute the contract,
• sending you commercial communications and doing our other marketing activities, but only if you wish to do so. Otherwise we will not send you anything. 

3. There is no automatic individual decision-making by us as the controller within the meaning of Article 22 GDPR. Again and still we play fair-play.
4. Data retention period
5. As the controller, we store your personal data:

• only for as long as necessary to exercise the rights and obligations arising from our contractual relationship between you and us as data controller and for the exercise of claims arising from that contractual relationship (for a period of 15 years from the end of the contractual relationship, as ordered by the tax authority). 
• only for as long as your consent to the processing of personal data for marketing purposes is withdrawn and for a maximum of 5 years if the personal data is processed on the basis of your consent.

2. After the retention period has expired, we, as the controller, will irreversibly delete the personal data. 
3. Recipients of personal data (our subcontractors and partners)
4. Recipients of personal data are persons:

• involved in the delivery of goods, services and the execution of payments under the contract, such as a carrier, bank or payment gateway or payment card provider
• providing e-shop operation services (WordPress as the platform on which the e-shop runs) and other services in connection with the operation of the e-shop (web hosting provider)
• providing marketing services ( for example, Google, Seznam, Heureka and others), but only if you give your consent. Again, we play fair. We won't give anyone your data without your consent to bother you with advertising you don't want.  
• From 1.12. 2024 By using profiling (marketing) cookies, you as a user also give the right to use a new type of data

2. We, as the data controller, do not intend to and will not transfer your personal data to a third country ( non-EU country ) or international organisation. 
3. Your rights
4. Under the conditions set out in the GDPR you have:

• the right of access to your personal data under Article 15 GDPR,
• the right to rectification of personal data pursuant to Article 16 GDPR or restriction of processing pursuant to Article 18 GDPR.
• the right to erasure of personal data pursuant to Article 17 GDPR.
• the right to object to processing under Article 21 GDPR
• the right to data portability under Article 20 GDPR.
• the right to withdraw consent to processing in writing or electronically to the address or email of the controller referred to in Article I, point 2 of these Terms and Conditions.

2. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

VII. Personal Data Security Terms and Conditions

1. We, as the controller, declare that we have taken all appropriate technical and organisational measures to secure your personal data.
2. We, as the controller, have taken technical measures to secure data storage and storage of personal data in paper form.
3. We, as the controller, declare that your personal data can only be accessed by persons authorised by us to process your order.

VIII. Final Provisions

1. By submitting an order from the online order form - eshop, you confirm that you have read the terms and conditions of personal data protection and that you accept them in their entirety.
2. You agree to these terms and conditions by ticking the consent box via the online form when you place your order. By checking the consent box, you confirm that you have read the privacy policy and accept it in its entirety.
3. We, as the administrator, are entitled to change these terms and conditions. We will post the new version of these privacy policy on our website. We are also obliged to send you the new version of these terms and conditions to the email address you have provided to us as the controller.

 

These terms and conditions shall take effect on the date of 1.12.2024.