In 3DVcard s.r.o, residing at Stojická 881/2a, Vinoř, 190 17 Prague 9, Czech Republic, ID No.: 17120918, registered in Commercial Register with the Municipal Court in Prague in section C, insert 366926 (hereinafter referred to as the „Us“) we, as a data controller, pay great attention to protecting Your personal data.
In this document, You will find information about what personal data We process about You, whether We process personal data based on the consent or other legal title, for which purposes We use these, to whom We may transfer these and what rights do You have in connection with processing of Your personal data.
This document is linked to Our Terms and Conditions. Any definitions that are capitalized herein and not further defined are contained in these Terms and Conditions (T&C).
Who determines how personal data will be processed?
We determine for what purpose and by what means Your personal data will be processed, i.e. in particular collected, recorded, sorted and, where appropriate, disclosed, and We are responsible for the proper implementation of such processing of Your personal data.
This role arises from Our status as a data controller (hereinafter the "Controller") as We provide Our Products, i.e. goods and services, and operate Our Portal in accordance with Our T&C.
We are, of course, responsible for the processing of Your personal data: You may exercise Your rights regarding the processing of Your personal data that You are entitled to by virtue of Your status as a data subject with Us in the manner described below. You can also contact Us at any time with questions about the processing of Your personal data in the manner described in the section "How can I exercise my rights?". Other persons may be involved in the processing of Your personal data, including data controllers and data processors as listed in the section "Who processes your data and to whom do we transfer it?".
What personal data do We process?
It is important to us that You know what personal data We process. In the following section We will give You an overview of what personal data is involved, including examples:
In particular, the names of the customers who order Product from Us on the Portal, which are important so that We can properly create and provide You with access to Your account, so that You can create orders and We are able to correctly assign them to You and provide You with the requested Product.
In particular, Your e-mail addresses and telephone numbers so that We can properly provide You with the ordered Product. Without Your contact details, We would not be able to communicate properly when providing it.
Payment and billing details
We process data about Your means of payment, accounts and data from invoices and other tax and accounting documents in order to properly track and settle payments for the Products provided.
Records of orders and our mutual communication
We also process personal data relating to the ordering and provision of the Products and our communications with each other in the provision of the Products.
Information about usage of Portal
By using our Portal, some data is automatically sent from Your devices as a visitors to our Portal. We can therefore detect Your general location. From the logs, where information about the activity of visitors to our Portal is also recorded for security reasons, We can read the length of a single login, the actions You have performed on the Portal and information about the data filled in forms. This helps Us to continuously improve Our services and adapt them to current technical possibilities.
Information from cookies and other technologies
If cookies are allowed to be stored in Your browser, they are used to send Us additional information, for example about the pages You visit and the user preferences on Your computer. Here We also include data from similar tracking technologies.
What entitles Us to process personal data?
Within our operations, we process personal data for different purpose and in various scope. These purposes and legal titles of processing are presented below.
Functioning of user accounts on the Portal
For setting up a user account on Our Portal and to order Products through it, We need some of Your Identification data, Contact details, and Payment and billing details. You enter these into your account yourself in the interface of our Portal. User accounts subsequently contain Records of orders and our mutual communication, which is derived from the interaction on Portal.
The legal basis for this processing is the performance of the Contract that we conclude in the manner described in the T&C, i.e. your registration on the Portal.
For this purpose, We process Your data for the duration of this Contract, i.e. for the duration of Your user account.
Ordering and delivery of Products on the Portal
To be able to fully use the Portal and to order some of our Products within it, we will process your Identification data, Contact details, Payment and billing details and Records of orders and our mutual communication.
The legal basis for this processing is the performance of the contract on the basis of which we provide you with the Product requested by you.
For this purpose, we process your data in particular for the duration of this contract, i.e. from the moment of the order to the undefective provision or delivery of our Products.
Compliance with the legal obligations imposed on Us
As a company that provides Products to end customers who may be consumers, We also have certain obligations imposed on Us by law. Typically, these include the obligation to record payments and keep proper accounting records of them, to comply with consumer protection on the Portal or simply to properly identify You when using our Portal. For this purpose, we may process Your Identification data, Contact details, Payment and billing details and Records of orders and our mutual communication.
The legal basis for this processing is the performance of a legal obligation. We usually have data from You when You add them to Your user account or when You use it to order and deliver the Products.
For this purpose, we process personal data for a period of time according to the given legal time limits, usually not exceeding 10 years as the maximum processing period according to accounting regulations.
Internal evidence and protection of our rights and claims
We also need Your personal data to properly protect Our rights and claims and keep internal evidence of our subcontractors, including personal data needed for debt collection or effective defence in any dispute (i.e. so that We could, as a controller, defend Our claims in judicial, extrajudicial, enforcement or other similar proceedings where, without the use of the processed data, the protection of Our rights could be jeopardised or prevented).
For this purpose, We may process Identification data, Contact details, Payment and billing details, Records of orders and our mutual communication and Information about usage of our Portal.
The legal basis for the processing here is Our legitimate interest in protecting Our rights, legal claims and in keeping records about Products.
Personal data are generally retained for the duration of statutory limitation period, including any possible suspension or interruption of this period, but typically no longer than 16 years after the performance or termination of contract with Us, including the deletion of user account.
Promotion of our brand and marketing communication
We also use personal data when we provide offers of Our Products, promote Our brand and our Portal, including sending our newsletters. However, We do not want to bother You with unnecessary and inappropriate communication, so We use collected personal data to get to know Your needs better and to be able to offer You a suitable solution.
We use a wide range of channels to communicate with You, in particular traditional mail, e-mail, SMS, push notifications and online marketing campaigns.
For this purpose, We may process Identification data, Contact details, Records of orders and our mutual communication data a Information about usage of Portal.
The legal basis for processing here is our legitimate interest in promoting Our brand, Products and the Portal. At the same time, in some cases, You can give consent to the processing of Your personal data.
If We process Your personal data on the basis of legitimate interest, We usually do so for the duration of Your user account, which You can delete at any time. You have the right to object to such processing.
If We process Your personal data on the basis of Your consent, We do so until You withdraw the consent.
Operation of Portal
Operation of Portal and its security (necessary)
Processing of Your personal data is necessary for the Portal operation, including its presentation and functionality and ensuring your safety on the Portal. Within this purpose, We identify you as a visitor during the browsing or during repeated logins on the Portal.
For this reason, we process Information about usage of Portal and Information from cookies and other technologies, which is necessary for operation of our Portal.
The legal basis for processing here is our legitimate interest for making our Portal functional and safe.
We generally retain your personal data for up to 2 years after yours visit to our Portal.
Customization of Portal (preferences)
Our processing of Your personal data is necessary for keeping Your preferences and customizing the Portal following these preferences as well as for more enjoyable user experience from the Portal. Within this purpose, We customize the Portal to your preferences, such as location, language choices and your device.
The legal basis for processing Information about usage of Portal is our legitimate interest on customization of Portal to preferences of customers and we generally retain Your personal data for up to 2 years after Your visit to Portal.
With your consent, we also process Information from cookies and other technologies, which is necessary for customization of Portal (preferential cookies), while your data may also be transferred to third parties. The legal basis for processing here is therefore Your consent, given through the Cookies Sidebar. We retain Your data for the duration of Your consent but in any case, no longer than 2 years from receiving Your consent.
Analysis of visits of Portal (statistics)
Processing of your personal data is necessary for understanding the way in which visitors use the Portal. Within this purpose, we monitor traffic on Portal, optimize it, ensure the security both of the Portal and your data and make the Portal more seamless and user-friendly.
The legal basis for processing Information about usage of Portal is our legitimate interest on gathering information about usage of the Portal for its further improvement. We generally retain Your personal data for up to 2 years after your visit to Portal.
With Your consent, we also process Information from cookies and other technologies, which is necessary for analysis of Portal visits (statistical cookies), while Your data may also be transferred to third parties. The legal basis for processing of these data is therefore Your consent, given through the Cookies Sidebar. We retain Your data for the duration of your consent but in any case, no longer than 2 years from receiving Your consent.
Promotion and marketing on Portal (marketing)
Our processing of Your personal data is necessary for gathering information about Your personal preferences for presentation of advertisement and subsequent presentation of recommended Products according to these preferences. Within this purpose, We promote and market our Products on the Portal and show You marketing communication related to Products you expressed your interest and promote our brand through online promotion.
The legal basis for processing Information about usage of Portal for this purpose is our legitimate interest on promotion of the sale of our Products and we generally retain Your personal data for up to 2 years after Your visit to Portal.
With Your consent, we also process Information from cookies and other technologies, which is necessary for our promotion (marketing cookies), while Your data may also be transferred to third parties. The legal basis for processing here is therefore Your consent, given through the Cookies Sidebar. We retain Your data for the duration of Your consent but in any case, no longer than 2 year from receiving Your consent.
From what sources do We obtain personal data?
The personal data that we process comes primarily from You, i.e. from Your use of the Portal and from Your user account. However, You may also provide us with it in other ways. We also obtain personal data directly from You by monitoring Your behaviour on the Portal.
We may then obtain other personal data from Our partners who are controllers of Your personal data and who transfer it to us according to their own instructions and purposes: we are therefore data processors in relation to them. However, there may also be partners in relation to whom we will be in joint control.
For more information on processors and controllers of personal data, please see section "Who processes your personal data and to whom do we transfer it?".
Who processes your personal data and to whom do We transfer it?
All of the aforementioned personal data are processed by Us as the controller or as the processor.
When We are the controller, it means that We determine for what purpose and by what means will your personal data be processed, i.e. in particular collected, recorded, sorted and, where appropriate, made available, and we are responsible for the proper implementation of such processing of Your personal data. If We are the processor, these purposes and means are determined by another person who holds your personal data as a controller.
We may also transfer Your personal data, based on Your consent, to other entities that are in the role of controller, for example in connection with the performance of a contract with You to our partners involved in such performance.
We also use the services of other processors to process personal data, who only process personal data on our instructions and for the purposes described above under "What entitles us to process personal data?". Such processors are:
When do we transfer Your personal data outside the EEA?
As part of the transfer of data to our processors listed in the section " Who processes your personal data and to whom do we transfer it?", We may also transfer Your data to third countries outside the European Economic Area that do not ensure an adequate level of personal data protection. We will only make any such transfers if the processor in question commits to comply with the standard contractual clauses issued by the European Commission and available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en
What are Your rights related to personal data processing?
Just as We have rights and obligations when processing Your personal data, You also have certain rights when processing Your personal data. These rights include:
Right to withdraw consent
Any consents We obtain are entirely voluntary and You are under no obligation to provide them.
However, not giving or withdrawal of consent given for some of abovementioned purposes stated in “What entitles us to process personal data?” does not affect the lawfulness of sending You marketing communication based on our legitimate interest (see the abovementioned purpose “Promotion of our brand and marketing communication”).
In all cases of processing based on consent, You can revoke it by sending an e-mail to the firstname.lastname@example.org address or by using the button within the Portal or the communication itself, if applicable. If You withdraw consent by e-mail, You must send it from the e-mail address indicated in Your profile so that We can verify that it is indeed You.
In the event of withdrawal of consent, We will assume that You no longer wish us to process Your personal data for marketing purposes, even on the basis of any previously granted marketing consents or any specific marketing consents. We will therefore also consider these further marketing consents, if any, to have been withdrawn.
Withdrawal of consent does not affect the lawfulness of processing performed before this withdrawal.
Right to access
Simply put, you have the right to know what data we process about You, for what purpose, for how long, where We obtain Your personal data, to whom We transfer it, who processes it apart from Us and what other rights You have in relation to the processing of Your personal data. You can find out all of this information in this document. However, if You are unsure which personal data We process about You, You can ask Us to confirm whether or not personal data relating to You is being processed by Us and, if so, You have the right to access that personal data. As part of Your right of access, You can ask Us for a copy of the personal data We are processing and We will provide You with the first copy free of charge and subsequent copies at a charge.
Right to rectification
If You find that the personal data We process about You is inaccurate or incomplete, You have the right to have it corrected or completed without undue delay.
Right to erasure
In some cases, You have the right to have Us delete Your personal data. We will delete Your personal data without undue delay if one of the following reasons is met:
We no longer need Your personal data for the purposes for which it was collected or processed;
You withdraw the consent on the basis of which the personal data was processed and there is no further reason for processing it;
You use your right to object to processing (see “Right to object to processing” down below) with regards to data, which we process based on Our legitimate interest, and We consider that and there are no other purposes for processing, which would enable such processing, or You object to processing for direct marketing purposes;
You believe that Our processing of personal data has ceased to comply with generally binding regulation.
This right does not apply if the processing of Your personal data is still necessary to comply with Our legal obligation or to establish, exercise or defend Our legal claims (see "What entitles us to process personal data?").
Right to restrict the processing
In some cases, in addition to the right to erasure, You can exercise the right to restrict the processing of personal data. This right allows You in certain cases to request that Your personal data be marked and not be subject to any further processing operations - in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:
You contest the accuracy of Your personal data, until we agree, which data are correct;
the processing of Your data is against the law (for example more extensive than necessary), but You will request restriction of the processing of your personal data instead of erasure (for example if you expect, that You would provide these data to Us anyway);
We no longer need Your personal data for the purposes mentioned above, but you require it for the establishment, exercise or defence of Your legal claims;
you have objected to the processing of your personal data as stated in “Right to object to processing”; in this case, you may request a restriction of processing pending verification that our legitimate interests prevail.
Right to portability
You have the right to obtain from Us a copy of Your personal data that You provided to us and that We process by automated means on the basis of Your consent or for the performance of a contract. We will transmit this data to you or to a controller designated by you in a commonly used and machine-readable format.
Right to object to processing
You have the right to object to the processing of Your personal data that We process on the basis of Our legitimate interest (see "What entitles us to process personal data?"). In case of marketing activities, We will cease to process Your personal data without further conditions; in other cases, we will do so if We have no important legitimate reasons to continue with such processing.
Right to lodge a complaint
Exercising of the rights above does not impact Your right to lodge a complaint with the relevant supervisory authority. You max exercise this right especially in case You think that We process Your personal data without proper grounds or contrary to the generally binding legal rules.
You may lodge a complaint against Our processing of personal data with the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.
How can you exercise individual rights?
For all matters related to the processing of your personal data, whether it is an enquiry, exercising a right, lodging a complaint or anything else, you can contact us at email@example.com. We will deal with your request without undue delay, but within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.