Personal Data Protection

Společnost Necy s.r.o. with its registered office at Pivovarská 573, Uherské Hradiště - Jarošov, 686 01, Czech Republic, ID No. (IČO): 28285425 (hereinafter referred to as "Necy"), operator of the internet website www.glamot.com (hereinafter also referred to as the "website"), declares that all personal data (hereinafter also referred to as "data") is considered strictly confidential and is handled in accordance with applicable legal provisions in the field of personal data protection.

The security of your personal data is a priority for us. We therefore pay due attention to personal data and its protection. In this Personal Data Processing Policy ("Policy"), we would like to inform you about what personal data we collect about you and how we use it further. Necy has not appointed a data protection officer.

1. Sources and Categories of Processed Personal Data

We collect various data depending on which of our services you use.

If you shop with us, we collect:

• Name and contact details. Name and surname, email address, postal address, billing address, phone number, bank details.
• Demographic data. Salutation, country, and preferred language.
• Data resulting from the duration of the contract – purchased products, customer segment, volume of services provided.

If you receive marketing messages from us, we collect:

• Name and contact details – email address and first name.
• Demographic data – language.

Furthermore, we process the following personal data:

• Data from communication between Necy and the customer.
• Website usage data, i.e., information about your behavior on our website, such as IP addresses and HTTP protocol logs obtained through your device used to access the website.
• Cookies data, i.e., data obtained from cookies and similar technologies that we use on our website.
• Product and service usage data, i.e., information about your use of the e-shop and ordered products and services, such as browsing and access logs, your device identification, and the content of your orders.
• Data associated with a user account, if this option exists within individual websites. Data entered during registration and management of the customer account, such as username, password (in hashed form), preference settings, and order history within the account.

2. Legal Basis and Purpose of Personal Data Processing

Provision of services, support, and their improvement

In order to provide the offered services and improve them to your satisfaction, we process your personal data. Specifically, this includes:

• Processing an order for goods or services, whether ordered through our website or customer service line. The legal basis here is the necessity for the fulfillment of a purchase contract, or contract, and for selected data, the fulfillment of legal obligations (e.g., accounting documents). If you create a user account with us, we also process your data associated with the user account.
• Notification of product availability. In the event that you request monitoring of product availability, we will process your personal data (email) based on your consent.
• Customer support. To ensure customer service and to resolve any problems during the fulfillment of the purchase contract, we process your personal data based on the necessary fulfillment of these contracts.
• Communication. We use the collected data for the purpose of communicating with you and adapting it individually. For example, we may contact you by phone, email, or in another form to remind you that you have goods in your online cart, help you complete your order, inform you of the current status of your request, order, or complaint, or obtain further information from you about it, or alert you that you must take an action necessary to maintain the active status of your account.
• Improvement of services. We use the data to continuously improve our services and systems, including adding new features, and at the same time to make informed decisions using aggregate analysis and business intelligence, all based on our legitimate interest in improving the services provided for success in economic competition. To ensure sufficient protection of your rights and interests, we use personal data in anonymized form for improvement purposes.
• As part of supporting our services, we may organize competitions and other events. If you sign up for such a competition, we will process your data necessary for this participation, i.e., name, surname, email, or address for delivery of the prize.

Protection, security, and dispute resolution

We may also process data based on a legitimate interest, which consists of ensuring the protection and security of our systems and our customers, detecting and preventing fraud, resolving disputes, and enforcing our agreements based on legitimate interest.

Marketing offers

Email newsletter (commercial communications)

We send you commercial communications regarding products similar to those you have bought.

You can always reject these commercial communications via the unsubscribe link found in each individual email. To unsubscribe, you can also contact our customer service directly.

If you unsubscribe from commercial communications, we will no longer use your electronic contacts for these purposes. We will start using them again if you register them or explicitly request them.

Other marketing offers

The marketing offers displayed to you may be selected based on other information we have obtained about you over time according to contact details, demographic data, favorite items, and usage data from our products and websites (cookies, IP address, data provided by your browser, click-through data, displayed commercial communications, visited products). We do not perform fully automated processing that would have legal effects for you.

We process these other marketing offers based on your consent via the cookie banner.

Right to object You have the right to object to this processing at any time free of charge. Contact details are provided at the end of this document.

Processing of cookies from our website

If you have cookies enabled in your web browser, we process behavior logs from cookies placed on websites operated by Necy, for the purpose of ensuring better operation of Necy's websites and for the purposes of Necy's internet advertising. More information can be found in a separate chapter of this document.

Fulfillment of legal obligations

We also process your personal data for the purpose of fulfilling legal obligations that apply to us as a personal data controller, for example, obligations arising from the Accounting Act, tax regulations, or other generally binding legal regulations. For this purpose, we process your identification and contact details, purchase details (especially tax documents), and possibly other data necessary to fulfill the relevant legal obligation. The legal basis for this processing is the fulfillment of a legal obligation within the meaning of Article 6(1)(c) of the GDPR. Data is processed for the period prescribed by the relevant legal regulations.

3. Transfer of Personal Data to Third Parties

Your personal data will be transferred to third parties or otherwise mediated only if it is necessary within the framework of the fulfillment of a purchase contract, based on a legitimate interest, or if you have given your prior consent.

• To companies and processors based on the fulfillment of a purchase contract
• To credit card issuing companies, payment service providers for the purpose of processing payments, and banks based on your order, fulfillment of a purchase contract
• To carriers for the purpose of delivering your ordered products or services and resolving complaints, including withdrawal from the contract
• To other service providers, third parties involved in data processing
• To third parties, e.g., legal representatives, courts for the purpose of enforcement or conclusion of any contract with you;
• To public authorities (e.g., police)

If third parties use data within their legitimate interest, Necy bears no responsibility for this processing. This processing is governed by the personal data processing policies of the respective companies and persons.

If we transfer your personal data to recipients in third countries (outside the European Economic Area), we do so only on the condition that an appropriate legal basis exists for the transfer, in particular if the European Commission has decided on an adequate level of protection in the given country, or if an appropriate protection instrument has been agreed, such as standard contractual clauses (SCC) approved by the European Commission or binding corporate rules (BCR).

4. Purchase with and without Registration

As part of registration, we set up a customer account for you, which is secured by a password. Within the customer account, you gain direct access to your data, including its editing, and you can thus view both your completed and incomplete orders and modify the subscription to the newsletter. Through the customer account, you can also manage your personal data and newsletter subscriptions.

As part of the customer account, we provide additional benefits. More information can be found in the relevant terms and conditions.

If you do not wish to set up a customer account to make a purchase, you can also shop in our e-shop without registration, i.e., as a non-member, and registration can be canceled at any time.

Registered customers have the option to join the club of another customer – by entering a code or clicking a link. By entering the code to log into the club, you consent to your name, surname, and email being displayed to the club administrator for the purpose of organizing cooperation between the club and Necy.

If the customer is registered, the web application facilitates the completion of the order by remembering the choice of shipping and payment from the previous purchase.

If your customer account is not used, we may delete it after 3 years from your last visit to the website.

5. Security of Personal Data and Retention Period

Security of personal data

Your personal data is transmitted to us in encrypted form. We use the SSL (secure socket layer) encryption system. We secure our website and other systems by means of technical and organizational measures against the loss and destruction of your data, against access by unauthorized persons to your data, its modification or distribution.

We require our processors to demonstrate compliance of their systems with the GDPR regulation.

Access to your customer account is only possible after entering your personal password. In this context, we would like to point out that it is essential that you do not disclose your access data to third parties and always close your web browser window after finishing your activity in the customer account, especially if you use the computer together with other users. Necy accepts no responsibility for the misuse of passwords used unless Necy caused this situation directly.

Processing period

We process and store personal data:

• for the period strictly necessary to ensure all rights and obligations arising from the purchase contract, i.e., for the duration of the order and the warranty period;
• 1 year from the end of the warranty period due to the resolution of potential disputes;
• for the period for which we are obliged to retain it as a controller under generally binding legal regulations. Accounting documents, e.g., our invoices, are archived in accordance with the law for up to 10 years from their issuance;
• Consent for notification of product availability remains valid until the availability information is sent, for a maximum of 1 year or until it is revoked;
• Consent to marketing offers is valid for 4 years or until it is revoked;
• Communication is retained for the time necessary to resolve the matter, for a maximum of 2 years;
• If we host a competition, personal data is retained for the duration of the competition and for the time necessary for its evaluation, but for a maximum of 1 year

In other cases, the processing period results from the purpose of processing or is given by legal regulations in the field of personal data protection.

6. Rights of Data Subjects

a) If we process your personal data, you can request free information about the processing of your personal data at any time. b) In the event that you believe that we are processing personal data in violation of the protection of your personal data and the legal conditions of personal data protection, you can ask for an explanation, request that we remove the situation thus created, in particular you can request correction, addition, erasure of personal data or blocking of personal data. c) You can revoke your consent to the processing of personal data at any time. If you revoke your consent to the processing of personal data, your personal data will be deleted or anonymized; however, this does not apply to those personal data that Necy needs to fulfill legal obligations (e.g., processing an order already submitted) or to protect its legitimate interests. Personal data will also be destroyed if the personal data is no longer required for the specified purpose or if the storage of your data is impermissible for other reasons stipulated by law. Furthermore, you have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

Right of access

You have the right to obtain confirmation from us as to whether we process your personal data. If we process your personal data, you have the right to request access to information about the purpose of processing, categories of processed data, recipients or categories of recipients, planned processing period, existence of the right to rectification, erasure, restriction of processing and objection, the right to file a complaint with a supervisory authority, and about the sources of personal data. Based on your request, we will also provide you with a copy of the processed personal data. We provide the first copy free of charge; we are entitled to charge a reasonable fee for additional copies. The scope of the provided data may be limited so as not to affect the rights and freedoms of other persons.

Right to rectification

You have the right to request the correction of inaccurate personal data that we process about you. Taking into account the purpose of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (right to be forgotten)

You have the right to request the erasure of your personal data if: (i) the personal data is no longer necessary for the purposes for which it was collected or processed; (ii) you withdraw the consent on which the processing was based, and there is no other legal basis for processing; (iii) you object and there are no overriding legitimate grounds for processing, or you object to processing for direct marketing purposes; or (iv) the personal data was processed unlawfully. However, this right cannot be exercised if the processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if: (i) you contest the accuracy of the personal data – the restriction lasts for the period of verifying the accuracy; (ii) the processing is unlawful, but you oppose erasure and request restriction instead; (iii) we no longer need the personal data, but you require it for the establishment, exercise, or defense of legal claims; or (v) you have objected to processing – the restriction lasts for the period of verifying whether the legitimate reasons of the controller override.

Right to object

You have the right to object to the processing of your personal data that we process based on our legitimate interest. We will stop processing your data unless there are other overriding reasons for processing or if the processing is not necessary for the establishment, exercise, or defense of legal claims, or if you object to processing for direct marketing purposes.

Right to data portability

You have the right to obtain the personal data you provided to us and which we process automatically based on your consent or for the fulfillment of a contract, in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted directly to another controller, if technically feasible.

Right to file a complaint with a supervisory authority

You have the right to file a complaint with the relevant supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data violates the General Data Protection Regulation (GDPR). In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), with its registered office at Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.cz.

How to exercise your rights

Direct all requests to exercise the above rights to gdpr@necy.eu or to the correspondence address Necy s.r.o., Pivovarská 573, Uherské Hradiště, 686 01, Czech Republic. We will comply with your request without undue delay, no later than 1 month from its receipt. In exceptional cases, in particular due to the complexity of the request, we are entitled to extend this period by an additional 2 months, and we will always inform you of such extension and its reason.

7. Website

Cookies

Our website uses so-called cookies to make our offer relevant, interesting, and user-friendly for you. Cookies are small text files stored on your computer, smartphone, or other device, and which are used in your browser. More information about cookies can be found here. We use cookies, for example, for:

• for the proper functioning of the cart so that you can complete your order as easily as possible
• for remembering your login details so you don't have to enter them repeatedly
• the best possible adaptation of our website to your requirements by tracking traffic, your movement on the website, and the functions used
• finding information about ad views so that we do not show you ads for goods you are not interested in

Some cookies may collect information that is subsequently used by third parties and which, for example, directly supports our advertising activities (so-called "third-party cookies"). For example, information about products purchased on our website may be displayed by an advertising agency as part of the display and customization of internet advertising banners on the websites you view. However, you cannot be identified based on this data.

Use of cookies

The cookies used on our website can be divided into two basic types. Short-term so-called "session cookies" are deleted immediately as soon as you end your visit to our website. Long-term so-called "persistent cookies" remain stored on your device much longer or until you remove them manually (the retention time of cookies on your device depends on the settings of the cookie itself and your browser settings).

Cookies can also be divided according to their functionality into:

• analytical, which help us increase the user comfort of our website by understanding how users use it
• conversion, which allow us to analyze the performance of various sales channels
• tracking, which in combination with conversion help analyze the performance of various sales channels
• remarketing, which we use to personalize ad content and target it correctly
• essential, which are important for the basic functionality of the website

Rejecting cookies

The settings for using cookies are part of your internet browser. Most browsers automatically accept cookies by default. Cookies can be rejected or restricted to your chosen types using your web browser.

Information about browsers and how to set preferences for cookies can be found on the following websites or in other web browser documentation:

• Chrome
• Firefox
• Android
• iPhone and iPad

An effective tool for cookie management is also available at http://www.youronlinechoices.com/cz/

Links

Our website contains links to other websites that are practical and contain information. Please note that these sites may be owned and operated by other companies and organizations and have different security and privacy policies. Our company has no control over and bears no responsibility for any information, material, products, or services contained on or accessible through these websites.

8. Contact Us

In case of any questions, comments, and requests regarding this Policy, please do not hesitate to contact us at the address or customer service line indicated in the footer of this Policy or via the email address: gdpr@necy.eu

Contact: Company name: NECY hala Glamot
Street: Pivovarska 573
Postcode: 686 01
City: Uherske Hradiste
Country: Czech Republic

9. Data Deletion

In the event that you want to delete the entered personal data, please contact us at  info@glamot.com .