EKOPLANT, s.r.o., ID No.: 25719602, with its registered office at Němčice 23, 561 18 Němčice, a company registered in the Commercial Register of the Municipal Court in Prague under No. C 64099 (hereinafter referred to as "we" or "the Administrator").
We do not take the protection of personal data lightly. In this policy you will find out for what purpose, for what reason and in what way we process your Personal Data. You will also find information on what your rights are in relation to the protection of personal data.
If you have any further questions about the processing of your Personal Data, please contact us:
- email info@pacho-lek.cz or
- by post to our registered office at Němčice 23, 561 18 Němčice.
We need some Personal Data for the conclusion and performance of the Contract, and we process some Personal Data on the basis of our legitimate interest. For some Personal Data, we are required to process it by law (for example, bookkeeping). In some cases, we use Processors who may have access to your Personal Data. These include, for example, accounting firms or marketing specialists. Where necessary, we will seek your consent to process your Personal Data.
When are we the controller? In relation to Users, we are the controller of Personal Data. An overview of the Personal Data we process, including the reasons for processing it, can be found below. If anything is unclear, please do not hesitate to contact us at info@pacho-lek.cz.
To make the text clearer, we will simplify your reading with a few terms we use in this Personal Data Processing Policy:
- Website - or also referred to as the Website is the e-commerce website at www.pacho-lek.cz, which is operated by the Controller;
- GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council;
- Personal Data - any information about a User from which they can be directly or indirectly identified;
- User/you - the natural person to whom the Personal Data relates, most commonly a customer or potential customer or user of our Website, also referred to as "you";
- Processor - we use other entities to process Personal Data under contract or other authority for the Controller;
- Processing of Personal Data - means any operation or set of operations on Personal Data or sets of Personal Data that is carried out with or without the aid of automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction;
- Special Categories of Personal Data - data that we understand to be more sensitive. This includes, for example, what your ethnicity is, what your sexual orientation is, whether you are in a trade union, or what your health and beliefs are. Genetic and biometric data is also considered to be a special category of data where it is processed to uniquely identify an individual. We do not process this Personal Data.
1. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU AND HOW?
How do we process your Personal Data? We process your Personal Data only to the extent necessary to achieve the purpose for which the data was collected and we follow technical and organisational security rules when processing it. The processing of Personal Data is automated, but we do not carry out profiling. The specific purposes of the data processing and the categories of Personal Data we process for each purpose are set out in the following section.
- Name and surname, contact details (in particular e-mail, telephone number)
- Order notes and other information that you provide to us in the course of communicating with us (in particular, this will include your questions and answers to your queries, communication with you)
- Invoicing details and bank details (details necessary for bookkeeping and making payments)
- Cookies and IP address, activity data (including information about your device or operating system)
- User account login and user account behaviour (in particular the data filled in by the User in the user account, purchase history, time of registration, date of last profile update)
- Information you provide to us when completing the gift questionnaire
- The comments you add to our social media posts (in particular Facebook, Instagram, YouTube, Pinterest), as well as your profile name (nickname) on these social media and the information you make publicly available on your profiles
- Special categories of Personal Data. We do not process any Personal Data of a sensitive nature about you.
A. USERS OF OUR WEBSITE
If you visit our Website, we process your Personal Data for the purposes set out in this table. If you wish, you can subscribe on the Website or via email to receive commercial communications or similar promotional material that we prepare for potential buyers of our goods. In order to subscribe to commercial communications, you must provide us with your consent to process some of your Personal Data.
| Why? | What data? | How? | For how long? |
|
Visiting the Website. To provide basic functions of our Website, analytics, to improve our services. We also process Personal Data to show you relevant content or our advertising on other websites. You can set your preferences in the cookie bar. The legal basis for processing Personal Data is consent (analytics, marketing cookies) or our legitimate interest (necessary cookies). |
Information about when and how you visit and browse our Website, this may include: your IP address, date and time you access our Website, information about your internet browser, operating system or language settings, history of your behaviour on the Website. If you visit our Website via a mobile phone, we may also process data about your phone. | Cookies or other technologies to track User behavior. | The length of processing varies according to each type of cookie. Some process data only for the duration of a session (visit), some for longer. For more information, please see the Cookie Policy. |
Communication with customer support, requests and complaints. By submitting an enquiry, you consent to the processing of Personal Data for the purpose of dealing with the enquiry. |
Name, surname, telephone number, e-mail. | We process Personal Data that is necessary for the purpose of dealing with the enquiry. Communication takes place by phone, email or directly on our Website. | Closed enquiries are periodically deleted, but no later than 3.5 years after the enquiry was made. |
Sending commercial communications (direct marketing). You have consented to receive newsletters. If you do not wish to receive the newsletter, you can unsubscribe in the footer of the e-mail. |
Name, surname, phone number and email. | We send a newsletter to inform you about our goods, services and news. | The data is processed for a period of 2 years from the last active viewing of the newsletter, unless you unsubscribe earlier. |
| We organise competitions. In order to evaluate the competition, we announce and publish the winners on our Website and on social media. You give your consent to participate in the competition. As a rule, we organise competitions on Facebook. |
Name, surname, address, telephone number, email address or other details as may be specified by the terms of the competition. |
You voluntarily provide us with Personal Information when you enter a contest on social media or on our Website. |
The data is processed for a period of 2 years from the last contest end date, unless you withdraw your consent earlier - or a different period if otherwise specified in the contest terms and conditions. |
B. CUSTOMERS
If you create a user account with us, we will process your personal data to the extent necessary for the purpose of maintaining your user account and processing your Order. If you wish, you can subscribe on the Website or via email to receive commercial communications or similar promotional material that we prepare for existing customers.
| Why? | What data? | How? | How long? |
Visiting the Website. To provide basic functions of our Website, analytics, to improve our services. We also process Personal Data to show you relevant content or our advertising on other websites. You can set your preferences in the cookie bar. The legal basis for processing Personal Data is consent (analytics, marketing cookies) or our legitimate interest (necessary cookies). |
Information about when and how you visit and browse our Website may include: your IP address, date and time you access our Website, information about your internet browser, operating system or language settings, your behavioural history on the Website. However, information about your behaviour on the Website is anonymised for your maximum privacy. If you visit our Website via your mobile phone, we may also process data about your phone. |
Cookies or other technologies to track User behavior. | The length of processing varies according to each type of cookie. Some process data only for the duration of a session (visit), some for longer. For more information, please see the Cookie Policy. |
Order processing. In order to purchase goods on our e-shop, you need to go through the Order process. By completing the Order, the Contract is concluded between us. This is the performance of the Contract. |
During the Order process, you enter your name, surname, email, telephone number, contact and delivery address, billing information, or note information. | You will provide us with these details when you complete them either as part of the registration for a user account or during the Order. | The data is processed for the duration of the Contract or until it is transferred and then for a period of 4 years from the end of the Contract. |
| Completing a questionnaire in order to receive a gift. Based on the consent you have given us, we may process some information to help us improve our services and products. If you entrust us with this data, you will receive a gift from us. | At the end of the Order Form, you can voluntarily provide us with information relating to: the breed of your dog, the problem with your dog, your experience with our products. | These details are voluntary, you can choose not to give them to us. | We will process your Personal Data for a period of 4 years unless you withdraw your consent earlier. |
User Account. If you create a user account, we will process your Personal Data to the extent necessary. We process Personal Data on the basis of a Contract. |
The data filled in during registration, in particular your email and other contact details (see above). The scope of the processing of Personal Data may vary depending on which Personal Data you fill out in your User Account. |
You provide this information to us when you create your User Account. |
We process your Personal Data for this purpose for the duration of the User Account and thereafter for a period of 4 years. |
| Dogtrace GPS App. Customers who have purchased our product can download an app that allows them to track the device. This is in fulfilment of the Contract. |
The data filled in during registration, in particular your email, first and last name. |
You will provide this information when you create a user account within the app. |
We process your Personal Data for this purpose for as long as the user account exists and then for 3 years after termination. |
Communication with customer support, requests and complaints. By submitting an enquiry, you consent to the processing of Personal Data for the purpose of dealing with the enquiry, where applicable, Personal Data is processed on the basis of a concluded Contract. |
Name, surname, telephone number, email, invoice number and user account. |
Communication with customer support is by phone, email or directly on our Website. |
Closed inquiries and complaints are periodically deleted, but no later than 3.5 years after the inquiry or complaint has been resolved. |
Direct marketing, in particular sending commercial communications. We may send newsletters to our customers based on a legitimate interest in improving and promoting our goods and services. |
Name, surname, telephone number and email. |
We send a newsletter to inform you about our goods, services and news. |
The data is processed for a period of 2 years from the last active viewing of the newsletter, unless you unsubscribe earlier. If you do not want to receive the newsletter, you can unsubscribe in the footer of the email. |
|
We run competitions. In order to evaluate the competition, we announce and publish the winners on our Website and on social media. You give your consent to participate in the competition. As a rule, we run competitions on Facebook. |
Name, surname, address, telephone number, email address or other details as may be specified by the terms of the competition. |
You voluntarily provide us with Personal Information when you enter a contest on social media or on our Website. |
The data is processed for a period of 2 years from the last contest end date, unless you withdraw your consent earlier - or a different period if otherwise specified in the contest terms and conditions. |
|
Satisfaction rating. We have a vested interest in finding out whether you were satisfied with our service and also with the goods ordered from our e-shop. |
Customer's name, surname, email and information about the goods ordered. |
Unless you have previously consented to this (e.g. as part of an Order), we will disclose certain Customer Personal Data to a third party for the purpose of evaluating customer satisfaction. |
We process the data for the duration of the customer's contractual relationship with us and subsequently for a period of 4 years after termination. |
|
Accounting. On the basis of the Contract, you pay us the purchase price of the goods and transport. We issue you with accounting and tax documents, which we then archive and continue to work with for the purposes of proper maintenance of our accounting records and compliance with legal obligations. |
Details on the invoice: name, surname, email address, billing address or other identification of the User and details of the performance under the Order. Details on the tax document: name, surname, email address, billing address or other identification of the User and details of the goods ordered. |
After filling in the payment information in the profile, we will store this information to create an invoice. We are fulfilling a legal obligation. |
We have a legal obligation to keep accounting documents and accounting records (invoices) for 5 years starting from the end of the accounting period to which they relate. We also have an obligation to keep invoices for 3 years from the end of the tax year in which the tax liability relating to the invoice arose. We also have an obligation to keep tax documents for 10 years from the end of the tax year in which the transaction took place. |
|
Compliance with legal obligations. In certain cases, we must process your personal data in order to comply with our obligations under the law. |
In particular, this may include name, surname, email address, billing information or other identification of the User. |
In this case, we process your Personal Data in order to comply with applicable law (compliance with a legal obligation). |
We process your Personal Data for the period of time specified by the applicable law. |
C. JOB APPLICANTS
| Why? | What data? | How? | For how long? |
Jobs. On our Website, you can find currently available jobs in the Careers section. |
This is the information you provide in the resume you send us. Name and surname, address, date of birth, phone number, email address, possibly a link to a social network, details of former employment, education, interests, skills, certifications. | We will look at the documents you send us that contain Personal Information and get back to you based on that. | We have a legitimate interest in retaining Personal Data of job applicants for a period of 3 years. The reason for this is that we may have an interesting job offer for you later on with us. |
2. WHO ARE OUR PROCESSORS?
Processors. We only use vetted Processors with whom we have a written contract and who provide us with at least the same guarantees as we provide to you. We have set out above the data that Processors may process, including the purpose and legal title of the processing. We will be happy to provide you with details of Processors on request.
|
Website operation and security |
Czech group, Freelo |
| Routine analysis of Website traffic | Google Analytics |
| Order processing |
Czech group, GoPay, PPL, GLS, DPD, Toptrans |
| Complaints | PPL, GLS, DPD, Toptrans, Czech group |
| Inquiry handling and communication with us |
Microsoft |
| Accounting | Money |
| Marketing | Google Ads, Ecomail, Facebook, Instagram, YouTube, Pinterest, Sklik, Heureka.cz |
| Social Networks | Facebook, Instagram, YouTube, Pinterest |
| Satisfaction ratings | Heureka |
Legal Obligations. We may transfer Personal Data to third parties other than our Processors if required to do so by law or in response to lawful requests by public authorities or at the request of a court in litigation.
3. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?
Technical and organisational measures. Security is very important to us and we therefore work continuously to ensure that your Personal Data is protected. When choosing measures, we take into account the scope of processing, the riskiness of the processing or the state of our technology.
- We regularly back up data;
- update anti-virus software systems;
- we use a secure https protocol;
- access passwords to information systems (where Personal Data will be processed) and access permissions are controlled at the individual level.
Organisational measures: we have adopted and commit to maintaining the following measures:
- Our employees are bound by confidentiality obligations;
- Our employees are properly trained and also receive further regular training on GDPR and are familiar with the rules of working safely on work equipment;
- Access to all systems including the IT system is personalised and covered by secure passwords.
4. YOUR RIGHTS AND ABILITY TO MAKE A DATA PROTECTION REQUEST
You are guaranteed the following rights in relation to data protection, which you can exercise:
- by emailing info@pacho-lek.cz or
- by post at the address of the head office Němčice 23, 561 18 Němčice.
How quickly will we deal with your request? We will respond to you within one month at the latest. If providing the information would compromise the privacy of others, or if providing it would be disproportionate to the risks or costs of providing it, we may not be able to comply. In order to deal with your request as soon as possible, we may need to verify your identity from you. In the event of a repeated request, the controller will be entitled to charge a reasonable fee for a copy of the Personal Data.
- Right of access - We will confirm whether we are processing your Personal Data. You have the right to be informed about the purposes of the processing, the categories of Personal Data, the recipients to whom it is disclosed, the duration of the processing. You have the right to know whether any right has already been exercised. It is also a prerequisite that the rights and freedoms of other persons will not be adversely affected as well as a copy of the Personal Data.
- Right to rectification - Has the right to request the rectification of inaccurate personal data. You can also rectify some data in your user profile.
- Right to erasure - If there is no other reason to continue processing the data, then we will erase or anonymise the data you have requested.
- Right to restriction of processing - Please contact us if you believe that we are processing the data incorrectly. Whether it is the reasons for the processing or its scope.
- Right to notification of rectification, erasure or restriction of processing - If you contact us with a request, we will inform you of the outcome. Sometimes we may not be able to comply (e.g. the email address from which you wrote to us no longer works).
- Right to portability - We will provide your Personal Data that you have provided to us in a structured and machine-readable format to another controller at your request.
- Right to object - If we are processing your data on the basis of a legitimate interest (e.g. sending a newsletter to Users). It is up to us to demonstrate our legitimate interest. If your objection is justified, we will stop processing the Personal Data.
- Right to withdraw consent - If you have changed your mind, please let us know. Processing relating to marketing and business purposes can be withdrawn at any time.
- Automated individual decision making including profiling - You do not want to have decisions made about you by computer? We respect your right, so we do not carry out profiling. We process Orders, so your Personal Data may be processed automatically.
5. CONCLUSION
This Personal Data Processing Policy can only be amended in writing. You will be informed of this via our Website.
If you have any questions about our Privacy Policy, please contact us at info@pacho-lek.cz.
If you are dissatisfied, you may at any time file a complaint with the Office for the Protection of Personal Data, located at Pplk. Sochor 727/27, 170 00 Prague 7 - Holešovice (more information at https://www.uoou.cz/).
This Personal Data Protection Policy is effective from 28.3.2023.
