Personal Data Protection Policy

These Personal Data Processing Principles (hereinafter referred to as the "Principles") describe the methods of obtaining, using, and further handling personal data collected through the web interface www.prestar.cz (hereinafter referred to as the "web interface").

Data Controller:

Prestar, s.r.o., with its registered office at Vávrovická 287/101, 747 07 Opava, ID No.: 64609219, VAT No.: CZ64609219

Contact Details of the Data Controller:

Mailing Address: Prestar, s.r.o., Vávrovická 287/101, 747 07 Opava, Czech Republic
Phone Number: +420 553 759 720
Contact Email: prestar@prestar.cz
The protection of personal data is of utmost importance to us. Please carefully review these Principles, which contain important information regarding the handling of your personal data and related rights and obligations.

1. Introductory Provisions

1.1 What governs our handling of personal data?

When handling personal data, we comply with the legal framework of the Czech Republic and directly applicable regulations of the European Union, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Act No. 101/2000 Coll., on the Protection of Personal Data, as amended (hereinafter referred to as the "Personal Data Protection Act"), and Act No. 480/2004 Coll., on Certain Information Society Services and Amendments to Certain Acts, as amended.

1.2 What are personal data?

Personal data refers to any information that identifies or could identify a specific natural person. Personal data includes, but is not limited to:
Identification data, such as first and last name, personal identification number, date of birth, gender, or login credentials for a user account;
Contact details, such as residential address (or delivery address), phone number, or email address;
Other data, such as information obtained through cookies, IP address (network identifier), including browser type, device, operating system, time and number of visits to the web interface, and other similar information.

2. Collection and Use of Personal Data

2.1 How do we collect your personal data?

You provide us with your personal data primarily when placing an order or creating a user account.
When visiting and using the web interface, certain personal data may also be collected and stored through cookies. More information about cookies can be found in Section 5 of these Principles.

2.2 On what basis and for what purposes do we process your personal data?

Personal data provided during the ordering of our services may be collected and processed without your explicit consent solely for the purpose of fulfilling the contract, i.e., providing the services. Additionally, we may process this data to fulfill our legal obligations (e.g., record-keeping obligations, archiving tax documents, etc.).
Personal data provided during the creation of a user account may be collected and processed without your explicit consent solely for the purpose of enabling access, management, and maintenance of the user account.
We are entitled to use your email address to send commercial communications related to the services you have ordered from us. You may opt out of receiving commercial communications at any time.
If you provide consent through confirmation on the web interface, we may process personal data entered on the web interface, particularly during order placement or user account creation, for the purpose of sending commercial communications, direct marketing, or other purposes for which you have explicitly consented.
Personal data obtained through cookies is processed based on your consent (which you can provide by confirming on the web interface after being informed about the use of cookies and having the opportunity to review these Principles). We are also entitled to process personal data obtained through cookies if you continue to use the web interface after being informed about such processing. Personal data obtained through cookies is used for providing user support, improving our services, including analyzing user behavior, and for marketing purposes.
We may use your personal data for purposes other than those for which they were collected only with your consent.

2.3 How long do we use the data?

Personal data provided during the ordering of goods or registration is used only for the time necessary to fulfill the contract and comply with legal obligations.
If you provide explicit consent for the processing of personal data or if we use your email address to send commercial communications in accordance with the previous section, the data will be used for the duration of the web interface’s operation.

3. Your Rights in Relation to Personal Data

3.1 Right to Withdraw Consent for Personal Data Processing

If we process your personal data solely based on your consent (i.e., without any other legal basis), you may withdraw this consent at any time.
You can withdraw your consent for the processing of your personal data at any time by:
Sending an email to our contact email address: info@prestar.cz;
Sending a written letter to our mailing address;
In the case of commercial communications, using the method specified in each email containing commercial communications (e.g., clicking an unsubscribe link or another method).
Withdrawing consent does not affect the lawfulness of data processing carried out prior to the withdrawal.

3.2 Right to Access Personal Data

You have the right to request information from us about whether we are processing your personal data. If we are processing your data, you have the right to access this personal data and, in particular, the following information:
The purpose of the processing;
The categories of personal data being processed;
The recipients or categories of recipients to whom the personal data will be disclosed;
The duration for which the personal data will be stored.
Upon your request, we will provide you with a copy of the processed data. For additional copies, we may charge an administrative fee not exceeding the costs associated with producing and delivering these additional copies.

3.3 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request immediate correction, i.e., rectification of inaccurate data and/or completion of incomplete data.

3.4 Right to Object to Processing

You have the right to object at any time to the processing of your personal data if we process it for direct marketing purposes, including any automated processing of personal data. After raising an objection, we will cease processing your personal data for these purposes.

3.5 Right to Erasure ("Right to Be Forgotten")

You have the right to request that we erase your personal data if:
The personal data is no longer necessary for the purposes for which it was collected or processed;
You have withdrawn your consent for processing;
You have objected to the processing of personal data;
The personal data has been processed unlawfully.
If there are no legal grounds for refusing erasure, we are obligated to comply with your request.

3.6 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data if:
You dispute the accuracy of your personal data;
The processing is unlawful, and instead of erasure, you request restriction of processing;
We no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims;
You have objected to the processing.
During the restriction of processing, we are only entitled to store your personal data; further processing is possible only with your consent or for legal reasons.
If the restriction of processing is due to an objection to processing, the restriction lasts for the time necessary to determine whether we are obligated to comply with your objection.
If the restriction of processing is due to disputed accuracy of the data, the restriction lasts for the duration of verifying the data's accuracy.

3.7 Right to Data Portability

You have the right to obtain your personal data, which you provided to us, in a structured, commonly used, and machine-readable format and to transfer it to another data controller.

3.8. How can you exercise your rights?

You can exercise your rights regarding personal data through our contact details. All information and actions will be provided to you without undue delay.
You can exercise your rights regarding personal data through our contact details. All information and actions will be provided to you without undue delay. We will make every effort to accommodate you in protecting your personal data. However, if you are dissatisfied with the handling of your request, you have the right to contact the relevant authorities, particularly the Office for Personal Data Protection (http://www.uoou.cz), which oversees personal data protection. This provision does not affect your right to directly contact the Office for Personal Data Protection with your concern.
If your place of residence, workplace, or the location of the alleged personal data protection violation is outside the Czech Republic in another European Union member state, you may contact the relevant supervisory authority in that member state.

4. Management and Processing of Personal Data

4.1 How do we manage and process your personal data?

We are the data controller within the meaning of the Personal Data Protection Act and GDPR. Your personal data is processed by external companies for specific tasks, such as tax advisors, accountants, subcontractors, external marketing or HR firms, or other processors of personal data we may appoint. We will inform you of the specific entities processing your personal data upon request.
Personal and other collected data are fully secured against misuse. Personal data is processed electronically in an automated manner or in printed form in a non-automated manner.

4.2 To whom do we transfer your personal data?

To the extent necessary to fulfill the contract or other obligations, we are entitled to transfer your personal data to other entities (e.g., doctors, experts, lawyers, police authorities, insurance companies). We do not transfer personal data to any other entities.
Your personal data may be transferred to countries outside the European Union, for example, in the case of handling insurance or damage claims abroad.

5. Cookies

5.1 What are cookies?

Cookies are text files stored on a computer or other electronic device of each visitor to the web interface, enabling the web interface to function.
Not all cookies collect personal data; some only ensure the proper functioning of the web interface. You may refuse the use of cookies by selecting the appropriate setting in your internet browser.
Please note that refusing the use of cookies may prevent you from fully utilizing all functions of the web interface.

5.2 What cookies does the web interface use and for what purposes?

The web interface uses session (temporary) cookies, which are automatically deleted after browsing the web interface ends. It also uses persistent cookies, which remain on your device until you delete them.
The cookies used by the web interface include the following:
First-party cookies - these cookies are assigned to our website’s domain; they include essential and performance cookies and may be temporary or persistent;
Essential cookies - these enable navigation on the web interface and the use of basic functions; they do not identify you and are not considered personal data;
Performance cookies - these are used to analyze how the web interface is used (e.g., number of visits, time spent on the web interface, etc.); the data obtained through these cookies is anonymous;
Third-party cookies - these cookies are assigned to a domain other than our website’s domain, even when you are on our website; they allow us to analyze our website and display tailored advertisements; these include functional cookies and targeted/advertising cookies;
Functional cookies - these are used to personalize content by remembering login details, geolocation, etc.; they may involve the collection and processing of personal data;
Targeted and advertising cookies - these are used to display targeted advertisements on and off the web interface; they may involve the collection and processing of personal data. Information about how you use our website may be shared with our partners in the areas of social media, advertising, and analytics.

5.3. Google Services Used

The web interface uses Google Analytics and potentially other services provided by Google, Inc. (hereinafter referred to as "Google"). These services work with information obtained through cookies.
If you are interested in how Google uses the data it receives from us and how to modify or disable the processing, please click on the following link to find out: How Google uses data when you use our partners' websites or apps (https://www.google.com/policies/privacy/partners/).