Privacy policy
SKARAB, s.r.o., Company ID 25857631
**Purpose of Personal Data Processing:**
1. Delivery of goods (name, surname, contact address, and phone number)
2. Sending order confirmations, informing about order status, sending commercial communications with consent (email, phone number)
**Legal Basis for Processing:**
1. Necessity for concluding and properly fulfilling the order and contract (name, surname, contact address, phone number, email, VAT number in the case of self-employed individuals)
2. Your consent for sending commercial communications
---
**Privacy Policy and Information on Personal Data Processing** (hereinafter referred to as "Policy")
**I. Introductory Provisions**
1. For the purposes of this Policy, the following terms are defined:
a) **Operator**: SKARAB, s.r.o., Company ID 25857631, with its registered office at 9. května 1162, 742 58 Příbor, Czech Republic, email: gdpr@skarab.cz
b) **Personal Data**: name and surname, residential address, email address, phone number, self-employed individual's identification number, and VAT number.
2. The Operator, as the controller of Personal Data, hereby informs about the manner and extent of processing Personal Data, including the scope of Users' (as defined below) rights related to the processing of their Personal Data.
3. The Operator is a commercial company that operates the website www.skarab.cz, which includes an E-shop section. In the course of this service, the Operator processes Personal Data:
- to the extent provided in connection with the order of products and/or services from the Operator, or in the context of negotiations for the conclusion of a contract with the Operator, as well as in connection with the concluded contract; and
- for the purpose(s) specified below in point 4.
4. The Operator processes Personal Data for the following purposes:
- contract fulfillment and service provision
- fulfillment of legal obligations (especially accounting, tax, and archival)
- marketing and commercial offers of the Operator’s services
- protection of the rights and legally protected interests of the controller (legitimate interest)
5. The Operator is the controller of Personal Data. Personal Data is not processed by any other entity. Only the controller will have access to the processed Personal Data.
**II. Data Protection and Processing Information**
1. Individuals who complete and submit the order form from the website www.skarab.cz (hereinafter referred to as "User") are subject to Act No. 101/2000 Coll., on the Protection of Personal Data, as amended, and other relevant legal regulations.
2. The User acknowledges that by submitting the completed order form, the processing of Personal Data by the Operator begins.
3. If the User does not provide their Personal Data, it is not possible to conclude a contract with the Operator and/or provide services resulting from it. Personal Data is necessary for providing a specific service or product of the Operator.
4. Personal Data will be processed during the negotiations for the conclusion of a contract between the Operator and the User, for the purpose of concluding a contract, as well as during the term of the contractual relationship.
5. In the event of the conclusion of a contract under the Operator's Terms and Conditions, Personal Data will be processed and stored for the following 24 months in case of a dispute related to the relationship between the Operator and the User, for the purpose of protecting the Operator's legitimate interests. The legitimate interest of the Operator is the proper and timely fulfillment of the agreed contractual obligation between the Operator and the User and the fulfillment of legal obligations arising from the contractual relationship between them.
6. For the purpose of fulfilling the legal obligation to archive accounting documents under Act No. 563/1991 Coll., on Accounting, as amended, Personal Data (except email address and phone number) will be processed and stored for 10 years, starting from the year following the year in which the contract between the Operator and the User was concluded.
7. Personal Data – phone number and email – will be processed for marketing and commercial communications purposes for the duration of the User’s record according to Article II, paragraph 5, and further for 12 months after its termination, unless the consent is revoked by the User at any time.
8. After the expiry of the period specified in Article II, paragraphs 4, 5, 6, and 7, the Operator will destroy the Personal Data.
9. The User is obliged to provide the Operator with only truthful and accurate Personal Data.
10. The Operator will make every effort to prevent unauthorized processing of Personal Data.
11. Users' Personal Data will not be transferred to any third parties, third countries, or international organizations.
12. Personal Data will be processed electronically in a non-automated manner.
**III. Users' Rights Related to Processing**
1. The User has the right to withdraw their consent (in cases where the processing of Personal Data is based on consent) to the processing of the provided Personal Data at any time. Withdrawal of consent to the processing of Personal Data is not possible to the extent and for the purposes of fulfilling the Operator’s legal obligation. Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal. Withdrawal of consent also does not affect the processing of Personal Data that the controller processes based on another legal basis than consent (i.e., especially if the processing is necessary for fulfilling the contract, legal obligations, or for other reasons specified in applicable legal regulations).
2. The User also has the right to:
- request access to their Personal Data from the Operator
- correct the provided Personal Data
- delete the provided Personal Data
- restrict the processing of Personal Data
- file a complaint with the Office for Personal Data Protection
3. If the User believes that the Operator is processing their Personal Data in a manner that infringes on their privacy and personal life or is in violation of applicable legal regulations, especially if the Personal Data is inaccurate with regard to the purpose of its processing, they may:
- request an explanation from the Operator via email at gdpr@skarab.cz
- object to the processing and request via email sent to gdpr@skarab.cz that the Operator remove the resulting state (e.g., blocking, correction, supplementation, or destruction of Personal Data). The Operator will promptly decide on the objection and inform the User. If the Operator does not comply with the objection, the User has the right to contact the Office for Personal Data Protection directly. This provision does not affect the User's right to contact the Office for Personal Data Protection directly with their complaint.
4. If the User requests information about the scope or method of processing their Personal Data, the Operator is obliged to provide this information promptly, but no later than within one month of receiving the request at gdpr@skarab.cz
5. If the User exercises the right to access Personal Data electronically, the Operator will provide the requested information also electronically unless the User requests another method of providing information.
6. The Operator is entitled to charge a reasonable fee for administrative costs associated with providing physical copies of processed Personal Data in the case of repeated and unfounded requests.
**IV. Final Provisions**
1. All legal relationships arising in connection with the processing of Personal Data are governed by the legal order of the Czech Republic, regardless of where the access to them was realized. Czech courts have jurisdiction to resolve any disputes arising in connection with privacy protection between the User and the Operator.
2. Users who provide their Personal Data through the order form for the purpose of concluding a contract with the Operator or provide consent to the processing of Personal Data do so voluntarily, in their own name, and the Operator does not direct their activities in any way.
3. The Operator may change or supplement the text of the Policy. The Operator will inform Users of any such changes on the website www.skarab.cz at least 30 days before the changes take effect.
4. These Policies take effect on May 21, 2020.