Personal data processing policies
We are DECOLED s.r.o, ID number 25683853, with our registered office at Fráni Šrámka 18, Prague 5, 150 00, registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 60918, (“we”). We are the controller of your personal data.
We operate an e-shop at www.decoled.cz and an e-shop for selling tickets to Events at https://storyoflights.eu/ (“e-shop”).
We have prepared this Privacy Policy (“Policy”) to inform you about what personal data we process and how we work with it. Here you can read why and how we work with your personal data when you visit our e-shop or order our goods. We also dedicate a section of the Policy to cookies and how we work with them. You will also learn about your rights in connection with the processing of your personal data.
If you have any questions about the processing of your personal data, you can contact us using the following contact details:
Address: DECOLED s.r.o, Kladenská 37, 252 61 Dobrovíz
Email: [email protected]
Phone: +420 721 221 122
We process personal data in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("Regulation") and Act No. 110/2019 Coll., on the processing of personal data, as amended.
How do we obtain your personal data?
You provide us with some personal data yourself, for example when you order our goods, event tickets through the e-shop or as part of our email communication.
Sometimes we also obtain your personal data from public registers, lists and records. For example, we use the commercial and trade register when issuing invoices or checking the accuracy of information.
What personal data do we process?
We process the following categories of personal data:
basic identification data – used to identify you (e.g. name and surname, date of birth, if provided, identification number and address of registered office or residence);
contact details – telephone number and email address;
information from mutual communication and data about your user account – information from emails, the content of our communication, data about purchase contracts that we conclude together if you order our goods;
billing and banking data – this mainly concerns information appearing on invoices, agreed billing conditions, bank details and received payments;
cookies – we use them to measure e-shop traffic, create statistics regarding traffic and visitor behavior on the e-shop, and for advertising targeting. You can read more about cookies in this Policy.
If you have entered into a contract with us and ordered our goods, we may send you newsletters for a period of 3 years, unless you opt-out by clicking directly in the newsletter or by sending an e-mail. This is permitted by our legitimate interest.
Do you have to provide us with your personal data?
In some cases, you must provide us with your information. For example, if you want to order our goods, we need your personal information so that we can conclude a contract with you and deliver the goods to you. Unfortunately, this is not possible without it.
Why do we actually process your personal data?
We process your personal data for several reasons. However, each of these reasons must be permitted by law.
We process your personal data for the following reasons:
Performance of a contract or negotiations prior to entering into a contract – we process personal data for this reason so that we can deliver our goods to you and so that we can contact you and communicate with you regarding your inquiry and contract.
Protection of our legitimate interests – we also process your personal data because our legitimate interest allows us to do so. This allows us to send you our newsletter or to take appropriate steps to defend our legal claims.
Compliance with legal obligations – we also process your personal data because we are required to do so by law. For example, under the Accounting Act, we are obliged to keep tax documents – invoices, which may also contain your personal data.
You give us your consent – in some cases, you may give us your consent to process your personal data. If you give us your consent to process it, you have the right to withdraw it at any time, for example by email. However, even after the period for which you have agreed to the processing of your personal data has expired, we are not obliged to delete all of your personal data. We may retain the data for which our legitimate interest allows us to do so or where we are required by law to do so. If you withdraw your consent, this does not affect the lawfulness of the processing of your personal data before its withdrawal.
How long will we keep your personal data?
Personal data will be processed and stored for the duration of the contract. Then for a period of 3 years from the end of this contractual relationship, unless otherwise stated. We will therefore process personal data for a period of 3 years from the delivery of the goods or from the moment you refuse to accept the goods.
Personal data processed for the purpose of defending our legal claims in judicial, extrajudicial and enforcement proceedings will be processed for a period of 15 years from the end of the business relationship between us and you, which corresponds to the longest possible limitation period set by law.
Personal data processed on the basis of the obligation to fulfill our legal obligations arising from accounting, tax and other legal regulations are retained for the period specified therein; for example, we retain personal data related to accounting matters for 5 years from the end of the business relationship and personal data related to tax matters for 10 years from the end of the relevant tax period.
If you are our customer, we are entitled to send you our newsletters for a period of 3 years, unless you refuse this either by clicking directly in the newsletter or by sending an email.
Personal data processed based on your consent will be processed for the period of consent.
What about cookies?
We use cookies (at least electronic ones) to ensure the proper functioning of the e-shop. These are small text files that can record certain specific information from your visits to the e-shop. We divide cookies into necessary, functional, analytical and marketing.
Necessary cookies are necessary for the e-shop to function at all. Because they are essential for the e-shop to function, you do not have to agree to them and you cannot refuse them here.
Analytical cookies are used to compile statistics and reports. They are used to track the number of visitors to the e-shop and where you came from. If you do not agree to their use, you can refuse them here.
Marketing cookies allow us to tailor our offer to your needs. For example, they allow us to offer our products through targeted advertising, including third-party advertising tools. However, we need your consent to do so. You can refuse these cookies here.
What specific cookies do we use?
Type of cookie
Required
Required
Required
required
Necessary
Required
Required
Required
Required
We use two types of cookies. Our own, which are used directly to run the e-shop. We store favorite products, products added to the cart or products in comparison. We also use third-party cookies, which store information about visiting the e-shop anonymously. These can then be used for analytical or marketing purposes. All information in the cookies that we store is anonymous.
Who else has access to your personal data besides us?
We also involve other entities in the processing of your personal data. As part of this, your personal data may also be processed.
In addition, your personal data is transferred to third parties who are involved in the processing of personal data of the organizer's customers (e.g. processors who provide us with server, web, cloud and IT services). Alternatively, these personal data may be made available to them for another reason in accordance with the law. Before any transfer of your personal data to a third party, we will always conclude a written contract with this person, in which we will adjust the processing of personal data so that it contains the same guarantees for the processing of personal data that we ourselves observe in accordance with our legal obligations.
The e-shop is connected to several third-party applications that further process data for their own purposes. A complete overview of third-party applications that our e-shop uses can be found in your account in the Privacy section.
If you have not submitted an order and have not created a personal account, the e-shop has not transferred any personal data to third-party applications. We collect information about your computer through third-party applications. This data is anonymous. It cannot identify you as a person and is used only to create statistics and their subsequent analysis.
However, you don't need to worry about your personal data or privacy, as our suppliers become so-called personal data processors and can only handle your data within the scope of the activities and services they provide to us. We will also always be the ones who decide what happens to your personal data.
Such persons to whom we transfer your personal data are, for example, providers of IT, marketing or accounting services.
Specifically, these are the following persons and entities:
Google Analytics 4;
Google Ads;
Meta Ads (Facebook and Instagram);
CJ.com affiliate;
Ecomail;
Heureka – Verified by customers;
Zboží.cz / Sklik (Seznam.cz);
Favi.cz / Favi.sk;
Odoo ERP;
Balikobot ;
payment gateway GoPay sro;
and SOLARIS.media sro;
Vitezslav Polacek.
What rights do you have in relation to the processing of personal data?
Our duty as a personal data controller is also to ensure that your personal data is processed properly and securely. We then guarantee you the rights described in this article. You can exercise these rights with us in writing, by email or by telephone at the contacts listed above.
You can request that we tell you what personal data we process about you, and if you ask us to do so, we must also provide you with access to it.
You can request us to correct incorrect data or to supplement incomplete data.
Under certain conditions, we are also obliged to erase your personal data or restrict its processing if you ask us to do so.
If you suspect that your personal data is being processed unlawfully, you have the option of filing a complaint with the Office for Personal Data Protection.
You also have the right to object if we process your personal data based on our legitimate interest. You can submit this objection by sending it to our contact address or by e-mail. We will then evaluate it no later than one month after receipt.
Furthermore, you have the right to withdraw your consent to the processing of analytical and marketing cookies at any time within the cookie bar or by unsubscribing your email address from the newsletter.
What security practices do we use regarding the storage of personal data?
The Provider has adopted and maintains such technical and organizational measures to prevent unauthorized or accidental access to personal data, its alteration, destruction or loss, unauthorized transfers, its other unauthorized processing, as well as other misuse of personal data.
- Anonymization of personal data.
- The ability to restore the availability and access to personal data in a timely manner and in the event of physical or technical incidents.
- The process of regularly testing, assessing and evaluating the effectiveness of the technical and organizational measures implemented to ensure the security of processing.
- Multi-level firewall.
- Antivirus protection and control of unauthorized access.
- Encrypted data transmission via IT technologies.
- Access to personal data only for authorized persons of the Provider.
Servers with personal data locked in a server room
General provisions of these Principles:
- The customer provides his personal data to the seller for the purpose of concluding a purchase contract with the seller and for the proper continuation of the legal relationship between the customer and the seller established by the concluded purchase contract. Consent to the processing of personal data in full pursuant to this article is not a condition that would in itself prevent the conclusion of a purchase contract.
- The customer voluntarily provides his/her personal data and agrees to its provision to third parties under the conditions set out below.
- Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner.
- If the customer believes that the seller or processor is processing his personal data in a way that is contrary to the protection of the customer's private and personal life or in violation of the law, especially if the personal data is inaccurate with regard to the purpose of their processing, he may:
- Ask the seller or processor for an explanation via email or in writing,
- Request the seller or processor, by sending a request to their electronic address or in writing, to eliminate the situation that has arisen.
- If the customer requests information regarding the processing of his personal data, the seller is obliged to provide him with this information to his electronic address or in writing by post. The seller has the right to demand a reasonable fee for the provision of information pursuant to the previous sentence, not exceeding the costs necessary to provide the information, in the event of a repeated request.
- The Seller is a duly registered personal data controller. Customer personal data is secured against misuse. Handling of customer personal data is governed by the relevant provisions of Act No. 110/2019 Coll., on the protection of personal data and on amendments to certain acts, as amended.
- You can report any errors, questions, leaks or misuse of personal data to the relevant Office for Personal Data Protection, Pplk. Sochora 727, Holešovice, 170 00 Prague 7, e-mail: [email protected] . (ÚOOÚ)
If you have any further questions regarding the processing of your personal data, please write to us at any time and we will get back to you as soon as possible.
These Policies are effective from _______________
Data processing around a ticket purchase is summarised in article 13 of the terms and conditions. Terms and conditions
