The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR") is Motoreno Pavel Babušík, Company ID 43385087, registered at Brněnská 29/22, 664 51 Šlapanice, Czech Republic (the "controller").
Controller contact details: address Brněnská 29/22, 664 51 Šlapanice, Czech Republic; email info@motoreno.eu; phone +420 603 218 479.
Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The controller has not appointed a data protection officer.
The controller processes personal data that you have provided, or personal data the controller has obtained on the basis of fulfilling your order.
The controller processes your identification and contact details and data necessary for the performance of the contract.
The legal basis for processing personal data is the performance of the contract between you and the controller under Article 6(1)(b) GDPR; the controller's legitimate interest in providing direct marketing under Article 6(1)(f) GDPR; and your consent to processing for the purpose of direct marketing under Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll.
The purpose of processing personal data is to fulfil your order and exercise the rights and obligations arising from the contractual relationship between you and the controller, as well as sending commercial communications and other marketing activities.
The controller does not carry out any automated individual decision-making within the meaning of Article 22 GDPR.
The controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship (15 years from termination of the relationship) and until consent to processing for marketing purposes is withdrawn, for a maximum of 10 years. After the retention period expires, the controller deletes the personal data.
Recipients of personal data are persons involved in the delivery of goods/services/processing of payments, those involved in operating services, and those providing marketing services. The controller does not intend to transfer personal data to a third country outside the EU, except to providers of mailing/cloud services.
You have the right to access your personal data (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR), the right to object (Art. 21 GDPR), the right to data portability (Art. 20 GDPR), and the right to withdraw consent to processing in writing or electronically to the controller's address or email. You also have the right to lodge a complaint with the Office for Personal Data Protection.
The controller declares that it has adopted all appropriate technical and organisational measures to secure personal data, including securing data storage and physical documents, and that only authorised persons have access to personal data.
By submitting an order via the online order form you confirm that you are aware of the terms of personal data protection and accept them in full. The controller is entitled to change these terms and will publish the new version on its website.
These terms take effect on 1 January 2020.