Information on the processing and protection of personal data
-
Legal framework of processing
-
Personal data of customers and other persons (hereinafter referred to as the "datasubject ") whose personal data are processedby RaceGear s.r.o. are processed in accordance with applicable law. In particular, Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation).
-
-
Personal Data Controller
-
The controller of the personal data collected is the company RaceGear s.r.o., registered on May 2, 841, 742 13 Studénka, identification number: 09992413, registered in the commercial register maintained by the Regional Court in Ostrava, Section C, insert 84932, (hereinafter referred to as"theAdministrator").
-
-
Accuracy of personal data
-
The data subject is obliged to state his personal data (e.g. when registering, in his/her user account, when ordering from the web interface of the store) correctly and truthfully and is obliged to inform the controller without undue delay of a change in his/her personal data.
-
-
Purposes of processing and legal basis of processing of personal data
-
First name, surname (including any addendum characterising the person or business establishment of the business of the business natural person), title (if stated by the data subject), address of residence or registered office, delivery address, ID number, TAX ID, e-mail address of the data subject, telephone number and data about the purchase made are processed for the purpose of fulfilling the contract (e.g. identification of the data subject, confirmation of the order, information about the status of the order, delivery of the order, issue of a tax document); the legal basis for the processing of such data for that purpose is their necessity for the performance of a contract to which the data subject is a party or for the implementation of measures taken before the conclusion of the contract at the request of the data subject. The above personal data are further processed after the performance of the contract, if necessary to fulfil the legal obligation that
applies to RaceGear s.r.o. -
The personal data referred to in Article 4.1 and the data on the history of the data placed by the data subject of orders made, purchases made and complaints made may be processed for the purpose of keeping the data subject's internet user account; the legal basis for the processing of such data for that purpose is the consent given by the data subject.
-
The personal data of data subjects referred to in Article 4.1 may be processed for direct marketing purposes, i.e. in particular the sending of commercial communications concerning the goods and services of RaceGear s.r.o.; the legal basis for the processing of this data in this case is the legitimate interest of RaceGear s.r.o. If the data subject participates in a competition organized by RaceGear s.r.o., the data may be processed for direct marketing purposes on the basis of the data subject's consent.
-
The name, surname, bank account number, identity card number or passport of the data subject, or other identification and contact details may be required and processed by RaceGear s.r.o. for the purpose of identifying the person when returning cash or non-monetary benefits due to the termination of the contractual relationship (e.g. cancellation of the purchase contract due to withdrawal), when taking over the prize in the competition organized by RaceGear s.r.o., or when the goods are picked up, and the related protection of the parties from the issue of performance to an unauthorised person. The legal basis for the processing of this data in this case is the legitimate interest of the controller.
-
The identification data of the data subject in the form of camera footage obtained in the sales and warehouse premises of RaceGear s.r.o. may be processed by RaceGear s.r.o. in order to protect its property, the life and health of persons. In justified cases, they may be handed over to law enforcement authorities or other interested parties to fulfil the purpose of processing (e.g. insurance company). The legal basis for the processing of this data in this case is the legitimate interest of RaceGear s.r.o.
-
Using the website www.racegear. eu, www.racegear. Cz (hereinafter referredto asthe"Website ") RaceGear s.r.o. receives and records information from an internet browser that may include personal data. It uses a variety of procedures, such as so-called cookies, to collect this information; this information may include the IP address of the data subject, a unique identifier using "cookies", information about cookies and information regarding whether the data subject's device has the software needed to access certain elements, the unique identifier of the device and the type of device, domain, browser type and language, type of operating system and its settings, state and time zone, previously visited website, information about the data subject's actions on the RaceGear s.r.o. website, such as clicks, purchases made and marked preferences and access time and reference URLs.
Cookies are used by RaceGear s.r.o. to monitor how customers use the website and to understand the preferences of their customers (for example, the choice of state and language). This makes it possible to provide services to customers and improve their internet experience. It also uses cookies to obtain aggregated data about the traffic on the site and its communication, to identify trends and to obtain statistical data in order to further improve the website. Basically, it uses three categories of cookies on the website.
-
-
Functional: These cookies are required for the basic functioning of the site and are therefore always turned on; these include cookies that allow the data subject to remember when browsing the website. They help create the contents of your shopping cart and go through the payment process, as well as help in security and compliance with legal requirements.
-
Improving functionality (performance): These cookies allow you to improve the functionality of the website by monitoring racegear s.r.o.'s use. In some cases, these cookies improve the speed of response to customer requests and allow you to remember the customer choices selected for the site. If these cookies are rejected by the data subject, this may result in recommendations not being accurate and slowing down the operation of the site.
-
Social media and advertising: Social media cookies offer the possibility to connect the customer to social networks and share content from racegear s.r.o.'s website. Advertising cookies (third-party cookies) collect information that better adapts advertising to the interests of the customer, both on and outside the website of RaceGear s.r.o. In some cases, these cookies also include the processing of the customer's personal data. The rejection of these cookies may result in the display of advertising that is not as relevant to the customer, or the impossibility of effectively linking to accounts on Facebook, Instagram or other social networks, and/or not allowing the customer to share content on social media.
The legal basis for the processing of the above data for the given purposes is the consent granted by the data subject or the legitimate interest of the controller for the purpose of basic analysis of website traffic.
-
Necessity of data
-
The provision of personal data referred to in Article 4 is a contractual requirement of RaceGear s.r.o. The name, surname, address of residence, telephone number and e-mail address of the buyer who is a non-entrepreneurous natural person and first name, surname (including, where appropriate, an addendum characterising closer to the person or business establishment of the entrepreneuring natural person), the address of the registered office, id number, TAX ID (for the VAT payer), telephone number and e-mail address of the buyer who is an entrepreneur is also the data that must be entered into the contract; failure to provide such data may make it impossible to conclude a contract.
-
-
Save time
-
Personal data will be stored with RaceGear s.r.o. for the period required by applicable law, unless the period is set for as long as the legal ground of processing lasts or for the period necessary for the designated enforcement or defence of legal claims.
-
-
Categories of recipients of personal data
-
RaceGear s.r.o. may entrust the processing of personal data to a third party as a processor.
-
The Controller is entitled to provide the Name, Surname (including any addition describing the person or business establishment of the business person), the title
(if stated by the customer), the delivery address, the e-mail address and the telephone number of the customer to the entity providing the ordered goods. -
Providers of accounting tax and legal services the Controller is also entitled to provide personal data to persons providing accounting, tax and legal services to the controller for the purpose of fulfilling their legal obligations and, where necessary for the establishment, exercise or protection of legal
claims, whether in judicial, extrajudicial or administrative proceedings. -
Entities assessing the legitimacy of complaints the Controller is entitled to provide the entity providing the entity providing the controller with tax documents for the purchased goods containing, in addition to the legally required formalities, the address of the
e-mail and the customer's phone. -
Entities providing direct marketing services The Controller is entitled to provide an e-mail address and telephone number for the purpose of sending commercial communications to entities carrying
out this activity for the controller as processors. -
Entities providing the services of the issue/advertising place the Controller is entitled to provide identification and contact details, data about orders made, purchases made and complaints made to entities providing the services of the picking point
and the place for making a complaint of goods. -
Entities addressing customers in order to obtain the Controller's assessment are entitled, with the consent of the data subject, to provide information about the
order and the e-mail address to entities addressing customers in order to obtain an evaluation of the purchased goods and services provided.
-
-
The controller does not intend to transfer personal data to a third country (a non-EU country) or an international organisation.
-
-
Right of access to personal data
-
The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed and, if so, to gain access to such personal data.
-
-
Right to rectification of personal data
-
The data subject has the right to have the controller correct inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to complete incomplete personal data, including by providing an additional declaration.
-
-
Right to erasure of personal data
-
The data subject has the right to have the controller delete the personal data concerning the data subject without undue delay, and the controller is obliged to delete the personal data without undue delay if one of the reasons set out in the General Data Protection Regulation is given.
-
-
Right to restrict the processing of personal data
-
The data subject has the right to have the controller restrict the processing of his or her personal data, in the cases provided for in the General Data Protection Regulation.
-
-
Right to portability of personal data
-
Under the conditions laid down in the General Data Protection Regulation, the data subject has the right to obtain personal data concerning him or her which he has provided to the controller in a structured, commonly used and machine-readable format and the right to transfer such data to another controller without the original controller preventing it. At the same time, the data subject shall, if he requests, have the right to have the controller transfer his or her personal data in a structured, commonly used and machine-readable format to another controller, where technically feasible.
Common conditions for the application of the right to portability:-
it must be processing based on a legal reason, consent or contract,
-
processing is carried out automatically.
-
-
The exercise of the right to portability shall not adversely affect the rights and freedoms of others.
-
Right to object to the processing of personal data
-
For reasons relating to his or her particular situation, the data subject has the right to object at any time to the processing of his or her personal data processed for reasons of legitimate interest to the controller, including profiling based on the legitimate interest of the controller. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data relating to him or her for such marketing, which includes profiling in respect of such direct marketing.
-
-
Right to withdraw consent to the processing of personal data
-
The data subject has the right to withdraw the consent granted to the processing of personal data at any time. Withdrawal of consent is without prejudice to the lawfulness of processing based on consent granted prior to its withdrawal. Consent can be revoked by e-mail by notification sent to the administrator's e-mail address: info@racegear.eu, by written notification sent to the administrator's registered office address or to the administrator's data box (ID: 46hbz26). Consent to receive information about news and discount and marketing events related to the goods and services of the administrator can also be revoked via the electronic unsubscribe system by clicking on the unsubscribe link directly in the sent e-mail business communication.
-
-
Exercise of rights
-
The above rights may be exercised by the data subject via e-mail by notification sent to the e-mail address: info@racegear.eu, by written notification sent to the address of the controller's registered office or to the data box of the controller (ID: 46hbz26).
-
-
Appointee
-
The controller has not appointed a data protection officer.
-
-
Right to lodge a complaint
-
The data subject shall have the right to lodge a complaint with the supervisory authority, in particular in the EU Member State of his habitual residence, place of employment or place where the alleged breach occurred, if he considers that the processing of his or her personal data violates the General Data Protection Regulation. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection.
-