Privacy policy

Privacy Policy

1. Introduction

1.1 MADU THE LABEL s.r.o., as the operator of the MADU online shop, available at https://www.maduthelabel/ (hereinafter referred to as the "Operator"), processes personal data of natural persons (so-called data subjects) who are interested in making a purchase in the online shop (potential customers) or who are making a purchase or have made a purchase in the online shop in the past (customers). The operator ensures that the processing of personal data of the aforementioned persons is lawful, fair, transparent, accurate, confidential and that personal data is processed only to the extent necessary.

 

1.2 The personal data controller is MADU THE LABEL s.r.o., ID No.: 19387385 VAT No.: CZ19387385, with registered office: Kunětická 2534/2, Vinohrady, 120 00 Prague 2. The Operator's contact details are: info@maduthelabel.com.

 

 

2. Purpose of the processing of personal data

2.1 All personal data voluntarily provided by the Buyer to the Operator for the purpose of order fulfilment is collected, processed and stored in accordance with the applicable laws of the Czech Republic and the relevant EU regulations, in particular Act No. 110/2019 Coll., on the processing of personal data and Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

 

2.2 By concluding the Purchase Agreement, the Buyer agrees to the processing and collection of his/her personal data in the Operator's database after successful completion of the contract, until the Buyer expresses his/her written disagreement with this processing. The Buyer agrees to the processing of the following personal data: name and surname, residential address (or billing and delivery address), electronic mail address (e-mail) and telephone number, for the purpose of concluding the purchase contract, operating the information system of the web interface of the shop, enforcing the rights under the purchase contract and for marketing purposes (sending the Newsletter).

 

2.3 The Operator processes personal data mainly for the purpose of fulfilling the concluded purchase contract. The processing of personal data for the purpose of performance of the concluded purchase contract is necessary, inter alia, in order for the Operator to be able to deliver the purchased goods to the customer.

 

2.4 The Operator also processes personal data for the purpose of fulfilling its legal obligations arising for the Operator, in particular from accounting and tax laws (e.g. the VAT Act), the Consumer Protection Act, etc.

 

2.5 Each subject who has provided his/her personal data has the right to withdraw consent to the processing of personal data at any time by electronic notification sent to the Operator's e-mail address info@maduthelabel.com. The withdrawal of consent shall not affect the lawfulness of the processing of personal data in the period prior to the withdrawal of consent, on the basis of which the processing of personal data was carried out.

 

2.6 We also use your personal data to arrange transport so that we can deliver your order to you. We pass on the information you provide to the shipping companies. We process this data for the purpose of arranging transport for a period of 5 years from the creation of the order.

 

3. Buyer's declaration

3.1 The Buyer confirms that the personal data provided by him/her is accurate and correct and that he/she has been informed that this is a voluntary provision of personal data. The Buyer is obliged to provide his/her personal data correctly and truthfully.

 

4. Sending newsletters

4.1 Based on the consent to the processing of personal data, the Operator is entitled to process personal data for the purpose of direct marketing (sending newsletters).

 

4.2 Processing of personal data for direct marketing purposes means processing of personal data for the purpose of sending commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services, as amended (hereinafter referred to as "Act No. 480/2004 Coll."). Commercial communication means any form of communication, including advertising and encouragement to visit the website of the online shop, intended to directly or indirectly promote the goods or services of the Operator (hereinafter referred to as "Newsletters").

 

4.3 The processing of personal data for the purpose of sending the Newsletter to persons who have opted to receive the Newsletter themselves is only possible on the basis of their consent to the processing of personal data.

 

4.4 The Operator shall terminate the processing of personal data for direct marketing purposes without delay after the data provider has expressed its disagreement with such processing. The disagreement can be done by unsubscribing from the Newsletter, which can be done in each Newsletter.

 

5. Personal data processors

5.1 The Operator may delegate the processing of personal data to third parties as Processors. The processor of personal data is anyone to whom the Operator provides personal data. The Operator may only provide personal data to entities whose services are used in the operation of the online shop. This includes, in particular, entities providing accounting, printing and mailing services, e-shop fullfilment services, legal services, IT services, cloud services, newsletter distribution services or payment gateway operators, etc. These recipients will process personal data either as independent controllers (i.e. as entities that determine the purposes and means of processing personal data themselves, independently of the Operator) or as processors (i.e. as entities that process personal data for the Operator on the basis of the Operator's instructions).

 

5.2 The Operator may provide personal data to public authorities if this obligation is or will be imposed by generally binding legal regulations.

 

6. Duration of processing of personal data

6.1 We process personal data on the basis of a legal title of legitimate interest and keep it in databases together with other data for 5 years after your last order. Individual purchase contracts are archived after their conclusion by the Operator, in electronic form and are only accessible to the Operator. The Operator is obliged to remove the personal data from the database upon the prior written request of the Buyer.

 

6.2 For the purpose of direct marketing (sending newsletters), the Operator will process personal data until the moment of withdrawal of consent to the processing of personal data (unsubscription from the newsletter) or for a period of 5 years from the date of your last order.

 

 

7. Rights of data subjects

7.1 Every data subject has the following rights, among others:

• the right of access to personal data (under the terms of Article 15 GDPR)
• the right to rectification of personal data (under the terms of Article 16 GDPR)
• the right to erasure of personal data (under the terms of Article 17 GDPR)
• the right to restrict the processing of personal data (under the terms of Article 18 GDPR)
• the right to object to processing (under the terms of Article 21 GDPR)
• the right to data portability (under the terms of Article 20 GDPR)
• the right to lodge a complaint with a supervisory authority (the Office for Personal Data Protection)
• the right to withdraw consent to the processing of personal data (see Article 4 of this Policy for more details)

 

 

7.2 In the event that the Buyer believes that the Operator or the Processor carries out processing of his/her personal data that is contrary to the protection of the Buyer's private and personal life or contrary to the law, the Buyer may:

• ask the Operator or the Processor for an explanation;
• require the Operator or Processor to remedy the condition.

 

8. Final provisions

8.1 The Operator is entitled to change this Policy. It will publish the new version of the Personal Data Processing Policy on its website.

8.2 This Policy shall take effect on 16.7.2021.