You are here Galerie Pastelka Customer Care Privacy Policy
Privacy Policy
The business company: OBHAJOBA PASTELKY s.r.o.
with its registered office at: Malé náměstí 11, Praha 1, 110 00
Identification Number: 284 72 179
registered in the Commercial Register: Spisová značka: C 1459026 vedená u Městského soudu v Praze
E-mail address: info@galeriepastelka.cz
This document provides you with information regarding your rights related to the processing of your personal data and its protection. This document will be updated regularly.
We process the personal data you provide to us transparently, fairly, and in accordance with legal regulations, in particular the GDPR regulation and the Personal Data Processing Act.
We only process children's personal data if the child was able to act independently, or if their parent or other legal representative acted on their behalf first. As a parent or other representative acting on behalf of a child, you are responsible for ensuring that the provision of the child's data does not conflict with their interests, and that you clearly inform the child about our processing of their personal data as well as their rights.
We guarantee that the processing of personal data is secured using standard procedures and technologies. In connection with the processing of personal data, we regularly check for potential vulnerabilities, while evaluating incidents and implementing such security measures as can be reasonably required to prevent unauthorized access, alteration, or deletion of the processed data. We regularly update the adopted security measures.
Processed Personal Data
We process the following categories (scope) of personal data for the given purpose and on the specified legal basis (lawfulness):
| Category of Personal Data | Purpose | Legal Basis (Lawfulness) | Retention Period |
|---|---|---|---|
| Client identification data (name, surname, address, Company ID, Tax ID, and others if applicable) |
|
|
For the duration of the contract and for a further minimum of 3 years, unless the data continues to be required |
| Client contact details (e-mail, phone number) |
|
|
For the duration of the contract and for a further minimum of 3 years, unless the data continues to be required |
| Client e-mail |
|
|
5 years, or until consent is withdrawn |
| IP addresses |
|
|
For the duration of the contract and for a further minimum of 3 years, unless the data continues to be required |
| Technical cookies (anonyous data) |
|
|
For the duration of the session |
| Advertising network and statistical cookies (Anonymous data for: Google Analytics, Google Adwords, Sklik, Facebook) |
|
|
12 months |
| Access logs (IP addresses, web requests, browser data) |
|
|
6 months |
Recipients of Data
We have established strict rules determining which employee or department may have access to your personal data and what personal data they are permitted to process. As a matter of principle, we do not transfer your personal data to third parties, except in cases where we have your consent, where it is necessary for the provision of services (such as domain registration, certificate registration, etc.), or where we are required or authorized to do so by a legal regulation or our legitimate interest (for example, in the case of suppliers, requests from law enforcement agencies, processing and evaluation of operations, etc.).
As part of processing website traffic data and evaluating our business activities, we utilize cookie files and systems of the following third parties to process the collected data. Your data remains anonymous, and any transfer involves only data collected by the tracking codes of the respective systems. Please note that some providers may be established in third countries.
- Statistical and analytical systems (Google Analytics)
- Advertising systems (Google Adwords, Sklik, Facebook)
Retention Period
In accordance with applicable legislation (e.g., Act No. 499/2004 Coll., on Archiving and Records Management; Act No. 235/2004 Coll., on Value Added Tax; Act No. 563/1991 Coll., on Accounting, etc.), we are required to retain documents for specified periods and in compliance with data retention principles. Upon expiration of the defined periods, your personal data will be irreversibly deleted and destroyed.
If the retention period is not established by a legal regulation, but the data is processed for the purpose of performing a contract or based on our legitimate interest, the retention period will correspond to the duration of the contract extended by an adequate period for exercising any potential claims arising from it, or the retention period will last for the duration of our legitimate interest, taking industry standards into account.
Any personal data that we process solely on the basis of your consent will be processed only until the moment we receive your written withdrawal of consent, or until you utilize an automated tool on our website (e.g., unsubscribing from the newsletter).
What if you do not want to or cannot provide your data?
You may refuse to provide the personal data we request from you. However, if it involves data that is necessary for us to provide our services, we will not be able to provide you with the related service.
Access Logs
When you visit our website, our servers (like most websites) automatically record requests made to our website. These server logs typically include information about your web request, IP address, browser type, browser language, and the date and time of the request. Furthermore, they may also contain one or more cookies that uniquely identify your browser. Access to this information is restricted to administrators only, and this data will never be used for direct identification (it serves to detect technical problems).
Your Rights
Right of access to the data we process about you
You have the right to access your data and receive other related information regarding its processing. However, the rights of third parties must not be affected by this. As a matter of principle, we will provide your data to you in electronic form via extracts, following a verifiable verification of your identity, in order to maintain the protection of other data subjects.
Right to rectification
In the event that your data is incorrect or inaccurate, you have the right to request its rectification. Taking into account the purposes for which the data is processed, you also have the right to have incomplete data completed.
Right to erasure (right to be forgotten)
You have the right to the erasure of your personal data if it is no longer required, if you have withdrawn your consent, if you have raised a justified objection against marketing, if our processing is unauthorized, or if we are required by law to erase it, unless there are other grounds for further retention.
Right to restriction of processing
You have the right to request the restriction of the processing of your data if any of the grounds specified in Article 18 of the GDPR arise. If you achieve restriction of processing, we will continue to store your data, but we will not perform any other actions with it without your consent or a compelling reason.
Right to data portability (only in case of automated processing)
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit this data to another controller, provided that the processing is based on your consent or for the performance of a contract, and is simultaneously carried out by automated means.
Right to withdraw consent
In cases where we require your consent to process your data, you are entitled to withdraw this consent at any time. The withdrawal of consent does not affect the processing of your data during the period for which this consent was validly granted by you, nor does it affect the processing of your data based on other legal grounds, if applicable (e.g., compliance with legal obligations or for the purposes of our legitimate interests).
Do you want to restrict marketing?
If you have granted us your consent for marketing purposes, or if you receive commercial offers from us based on another legitimate ground, you may withdraw your consent or unsubscribe from receiving offers at any time in the following ways:
- Directly within our commercial communications, where an option to stop their distribution is embedded;
- By writing to us to state that you are withdrawing your consent.
Please note that if you restrict marketing, we may still contact you regarding the fulfillment of your orders. Therefore, we may still use your contact details to send information related to placed orders and for purposes other than marketing.
Visitors to our website may withdraw their consent to the processing of cookies using the procedure outlined on the website.
Your Protection
If you believe that any personal data we hold about you is incorrect or incomplete, or if you wish to exercise any of your rights, please contact us using the contact information provided in the header.
If you believe that your personal data has not been handled appropriately in accordance with the law, you may contact the Office for Personal Data Protection and file a complaint.
Privacy and personal data protection are supervised by:
The Office for Personal Data Protection
Address: Pplk. Sochora 27, 170 00 Prague 7
Tel.: +420 234 665 111 Web: https://www.uoou.cz/
Cookies
What are "cookies"?
"Cookies" are small data files used as unique identifiers in the communication between applications and your web browser. A cookie file contains anonymous information. The vast majority of websites utilize cookies for their operation.
Cookies may be set by the website you are visiting ("first-party cookies"), or they may be set by an organization that does not own the website you are viewing ("third-party cookies"). For instance, they can be set by other websites that run content on the page you are viewing, or by an independent analytics company. Websites may use third-party advertising networks to deliver targeted advertising. These cookies may have the ability to track your browsing activity across various sites.
How we use cookies
We use cookies to improve your user experience on the website by enabling the website to identify your browser, either for the duration of your visit (using session cookies) or for repeat visits (using persistent cookies).
This enables functions such as displaying the shopping cart, browsing history, hiding commercial communications, logging in, etc.
Our website also uses cookies for behaviorally targeted advertising, which allows us to customize advertising and ensure it is relevant to you, based on the areas you view on our website and the geographic location of your IP address. These cookies are placed by third-party advertising networks with our consent.
What we use cookies for
We use the following cookies on our website:
- Technical – first-party, short-term. They ensure the basic technical functionality of the website, i.e., logging in, remembering settings, utilizing services, etc.
- Statistical and diagnostic (e.g., Google Analytics) – first-party, long-term. They are used to generate anonymous statistics about website usage.
- Advertising – first and third-party. They are used for behavioral advertising targeting based on interests. Since advertisements must be displayed (as the primary revenue for the website and its content creation), we want users/readers to see offers that might actually interest them.
How you grant consent to cookies
In order to utilize statistical and diagnostic cookies, we require your consent. Likewise, the use of advertising and third-party cookies is only enabled after you consent to their usage. You grant your consent via the cookie banner at the bottom of the browser or through your browser settings. Technical cookies do not require your consent; however, they can be disabled via your browser settings, though the website will not function correctly without technical cookies.
We use Google Analytics
This website uses the Google Analytics service provided by Google, Inc. (hereinafter referred to as "Google"). The Google Analytics service uses cookies. Information about the use of the website along with the content of the cookie file will be transmitted by Google and stored on servers in the USA. Google will use this information for the purpose of evaluating website usage, creating reports on website activity for us as the operator, and providing other services relating to website activity and internet usage in general. Google may also provide this information to third parties if required to do so by law, or if such third parties process this information for Google.
The Google Analytics service is extended by related advertising features provided by Google, namely:
- Google Display Network Impression Reporting;
- Remarketing (displaying advertisements in the content network based on products viewed);
- Google Analytics Demographics and Interest Reporting (reporting of anonymous demographic data). More information about data processing and usage can be found in Googl's terms of service.
We use Advertising Partners' cookies
Thanks to the DoubleClick cookie, Google and its partners can display advertisements to users based on their visits to our website and other sites across the internet. You can opt out of the use of the DoubleClick cookie for interest-based advertising through the Ads Settings.
- How Google uses cookies in advertising and general use of cookies
- Types of cookies used by Google (Category of use: Advertising)
- DoubleClick cookies
- Privacy policy nebo here.
When displaying advertisements from the Google Network, cookies from other vendors or third-party advertising networks may also be used. You can visit these third-party websites and opt out of the use of cookies for interest-based advertising (if the vendor or advertising network offers this option).
Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising and participates in programs that offer the option to opt out of this type of advertising. You can express your disagreement with the use of cookies for all participating companies via the following websites:
- Digital AdvertisingAlliance
- Digital AdvertisingAllianceofCanada
- EuropeanInteractive Digital AdvertisingAlliance
Seznam.cz
Seznam.cz, a.s. utilizes cookies for behaviorally targeted advertising. Behavioral advertising consists of displaying advertisements on websites based on users' online behavior (the topics of the websites they visit), with the goal of showing only such advertisements that might actually interest a specific user. Behavioral advertising operates with information stored in web browser cookies. The data stored in these files is later divided into several characteristic interest categories (for example, Automotive, women's lifestyle websites, etc.). Therefore, a football fan who regularly checks match results should not encounter advertisements for ballet classes.