IX. Protection of personal data (GDPR)
The seller processes the buyer’s personal data in accordance with EU Regulation No. 2016/679 (hereinafter referred to as “GDPR”) and the legislation of the Czech Republic.
The seller acts as a controller of personal data. Personal data will be processed for the purpose of fulfilling the contractual relationship between the Seller and the Buyer and for the purpose of direct marketing (especially sending business messages). The legal reason for processing is the performance of the contract, the fulfillment of legal obligations and a legitimate interest (direct marketing).
The personal data of the buyer will be processed in the range of: name and surname, registered office, email address, telephone number, identification number and tax identification number.
The seller uses the services of subcontractors as processors for the performance of the contract, in particular the provider and administrator of the ordering software, the provider of accounting software and the provider of mailing services (personal data is stored in the EU and outside the EU). Subcontractors are checked for the secure processing of personal data. The Seller and the subcontractors have entered into a contract for the processing of personal data, according to which the subcontractors are responsible for the proper security of the physical, hardware and software perimeter, and are therefore directly liable to the Buyer for any leakage or breach of personal data. Subcontractors based outside the EU (mailing service providers) with participation in the legal framework of Privacy Shield, they have undertaken to maintain at least the same level of personal data protection as provided by the GDPR.
The Seller has taken legal, organizational and technical measures for the protection of processed personal data so that unauthorized or accidental access to the data, their change, destruction or loss, unauthorized transfers cannot occur, to their other unauthorized processing, as well as to other misuse, and that all obligations of the processor of personal data arising from legal regulations are secured in a personnel and organizational manner for the duration of the data processing.
The provision of personal data is a legal and contractual requirement.
The client’s personal data will be processed for the period of performance of the contract and legal deadlines. Personal data will be processed in electronic form in an automated manner.
The Buyer has the right to request from the Seller access to his personal data according to Article 15 of the GDPR, correction of personal data according to Article 16 of the GDPR, or restrictions on processing according to Article 18 of the GDPR. The user has the right to delete personal data according to Article 17, paragraph 1, letter a), and c) to f) GDPR. Furthermore, the user has the right to object to the processing according to Article 21 of the GDPR and the right to data portability according to Article 20 of the GDPR. These rights can be exercised and any privacy questions can be sent to info@dandadoo.com. In the event that the Buyer believes that his right to personal data protection has been violated, he has the right to file a complaint with the Office for Personal Data Protection.
The seller uses so-called cookies in its presentation to increase the quality of services, personalize the offer, collect anonymous data and for analytical purposes. By using the web interface