Information on Processing and Protection of Personal Data

The operator is ImpactTech s.r.o. ID: 232 81 421 with registered office at Korunní 2569/108, Vinohrady, 101 00 Prague 10 The terms and conditions further specify the rights and obligations of the seller and buyer.

I. Legal Framework for Processing

Personal data of customers and other persons (hereinafter also „data subjects“) whose personal data Kupfollowers.cz processes are processed in accordance with applicable legal regulations. In particular, with the Regulation of the European Parliament and of the Council (EU) No 2016/679, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

II. Data Controller

The controller of the obtained personal data is Kupfollowers.cz

III. Accuracy of Personal Data

The data subject is obliged to provide his personal data (e.g. when placing an order through the web interface of the store) correctly and truthfully and is obliged to inform the controller without unnecessary delay of any changes to his personal data.

IV. Purposes of Processing and Legal Basis for Processing Personal Data

• Name, surname (including any addition further characterizing the person or business establishment of a natural person), title (if provided by the customer), residential or business address, delivery address, ID number, tax ID, email address of the data subject, telephone number and data on purchases made are processed for the purpose of contract performance (e.g., order confirmation, information about order status, order delivery, issuance of tax document); the legal basis for processing these data for the stated purpose is their necessity for the performance of a contract to which the data subject is a party, or for the performance of measures taken before the conclusion of a contract at the request of the data subject. The aforementioned personal data are further processed after contract performance, if necessary to fulfill a legal obligation that applies to the company Kupfollowers.cz.

• Personal data listed under letter A and data on the history of orders made by the customer, purchases made and complaints filed may be processed for the purpose of maintaining the customer’s Internet user account; the legal basis for processing these data for the stated purpose is the consent granted by the customer.

• Personal data of customers listed under letter A may be processed for the purposes of direct marketing, namely in particular sending commercial messages concerning goods and services of Kupfollowers.cz; the legal basis for processing these data in this case is the legitimate interest of Kupfollowers.cz. If you participate in a contest organized by Kupfollowers.cz, the aforementioned data may be processed for the purposes of direct marketing on the basis of your given consent.

• Name, surname, and possibly other identification and contact data may be required and processed by Kupfollowers.cz for the purpose of identifying a person when returning monetary or non-monetary performance due to the termination of contractual relationship (e.g., cancellation of purchase contract due to withdrawal), when receiving a prize in a contest organized by Kupfollowers.cz and related protection of parties before issuing performance to an unauthorized person. The legal basis for processing these data in this case is the legitimate interest of the controller.

• When you use our website www.kupfollowers.cz (hereinafter „Website“), Kupfollowers.cz receives and records information from your browser, which may include personal data. We use various procedures to collect this information, such as so-called cookies; this information may include your IP address, a unique identifier using „cookies“, information about cookies and information regarding whether your device has the software necessary to access certain elements, unique device identifier and device type, domain, browser type and language, type of operating system and its settings, country and time zone, previously visited websites, information about your actions on our Website, such as clicks, purchases made and marked preferences and time of access and referral URLs.

• We use cookies to track how our customers use the Website and to understand the preferences of our customers. This allows us to provide our customers with services and improve their Internet experience. We also use cookies to obtain aggregate data on site traffic and communication, to identify trends and obtain statistical data in order to further improve our Website. On our Website, we generally use three categories of cookie files.

• Functional: These cookie files are required for basic site operation and are therefore always enabled; they include cookies that allow us to remember you while browsing our Website during a single visit, or – if you wish – during each visit. They help create shopping cart content and go through the payment process and also assist in security and compliance with requirements set by legal regulations.

• Improving functionality (performance): These cookie files allow us to improve the functionality of our Website by monitoring its use. In some cases, these cookies improve the response speed to your requests and allow us to remember your choices selected for a given page. If you refuse these cookies, it may result in recommendations not being accurate and the site’s performance slowing down.

• Social media and advertising: Social media cookies offer the ability to connect you with social networks and share content from our Website on them. Advertising cookies (third-party cookies) collect information to help better tailor advertising to your interests, both on our Website and outside it. In some cases, processing of your personal data is included as part of these cookies. Refusing these cookies may result in displaying advertising that will not be as relevant to you, or inability to effectively connect with Facebook, Instagram or other social media accounts, and/or preventing you from sharing content on social media.

The legal basis for processing the above-mentioned data for the specified purposes is the consent given by the data subject, or the legitimate interest of the controller for the purpose of basic analysis of Website traffic.

V.

The provision of personal data specified in Article IV letters A and F is a contractual requirement of Kupfollowers.cz. The name, surname, residential address and email address of a buyer who is a non-business natural person and the name, surname (including any addition characterizing in more detail a natural person or business establishment of a business natural person), address of registered office, ID number, tax ID number (for VAT payers) and email address of a buyer who is a business natural person are at the same time data that must be included in the contract; failure to provide this data may lead to the impossibility of concluding the contract.

VI. Storage Period

Personal data will be stored by Kupfollowers.cz for the period required by applicable legal regulations, and if such period is not determined this way, then for the duration of the legal reason for processing or for the period necessary to determine the exercise or defense of legal claims.

VII. Categories of Recipients of Personal Data:

Kupfollowers.cz may entrust the processing of personal data to a third party as a processor.

• Providers of accounting, tax and legal services
  The administrator is authorized to provide personal data also to persons providing the administrator with accounting, tax and legal services for the purpose of fulfilling its legal obligations and in cases where it is necessary to determine, exercise or protect legal claims, whether in court, out-of-court or administrative proceedings.
• Entities assessing the validity of complaints
  The administrator is authorized to provide the entity that ensures assessment of the validity of a complaint for the administrator with tax documents for purchased goods containing, in addition to the legally required details, also the customer’s email address and telephone number.
• Entities providing services within direct marketing
  The administrator is authorized to provide an email address and telephone number for the purpose of sending commercial messages to entities that perform this activity for the administrator as processors.
• Entities contacting customers for the purpose of obtaining reviews
  The administrator is authorized with the consent of the data subject to provide information about the order and email address to entities contacting customers for the purpose of obtaining reviews of purchased goods and provided services.

VIII. Right to Access Personal Data

The data subject has the right to obtain from the administrator confirmation of whether personal data concerning him or her is being processed or not, and if it is, the right to access such personal data.

IX. Right to Rectification of Personal Data

The data subject has the right for the administrator to rectify inaccurate personal data concerning him or her without undue delay. Having regard to the purposes of processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

X. Right to Erasure of Personal Data

The data subject has the right for the administrator to erase without undue delay personal data concerning such data subject, and the administrator is obliged to erase personal data without undue delay if any of the reasons established by the General Regulation on the Protection of Personal Data is met.

XI. Right to Restrict Processing of Personal Data

The data subject has the right for the administrator to restrict the processing of his or her personal data in cases established by the General Regulation on the Protection of Personal Data.

XII. Right to Data Portability

Under the conditions established by the General Regulation on the Protection of Personal Data, the data subject has the right to receive personal data concerning him or her, which he or she provided to the administrator, in a structured, commonly used and machine-readable format, and the right to transmit this data to another administrator without hindrance from the administrator to whom the personal data was provided,

XIII. Right to Object to the Processing of Personal Data

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of the controller’s legitimate interest, including profiling based on the controller’s legitimate interest. If personal data is processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for this marketing, which also includes profiling insofar as it is related to this direct marketing.

XIV. Right to Withdraw Consent to the Processing of Personal Data

The data subject has the right to withdraw consent to the processing of personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal. Consent may be withdrawn by email notification sent to the email address: kupfollowers@email.cz or by written notification sent to the controller’s registered address. Consent to the sending of information about news and discount and marketing campaigns concerning the controller’s goods and services may also be withdrawn through an electronic opt-out system by clicking on the unsubscribe link directly in the sent email marketing message.

XV. Exercise of Rights

The data subject may exercise the above rights by email notification sent to the email address: kupfollowers@email.cz or by written notification sent to the controller’s registered address.

XVII. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of the EU of his or her habitual residence, place of work or place where the alleged infringement occurred, if he or she believes that the processing of his or her personal data constitutes a violation of the General Regulation on the Protection of Personal Data. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection.