Privacy Policy

PRIVACY POLICY

We adhere to personal data protection principles

This Privacy Policy (GDPR) is issued by the controller so that you are sufficiently informed about which of your personal data the controller processes, for what purpose, for how long, who will have access to your personal data, and what your rights are. This privacy policy applies to all personal data collected by the controller, whether it was collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or granted consent.

1. Personal Data Controller

1.1 The personal data controller, První exportní / importní s.r.o., with its registered office at Prusíkova 2577/16, Stodůlky, 155 00 Prague 5, ID: 27621499, registered in the Commercial Register maintained by the Municipal Court in Prague under file ref. C 119499 (hereinafter referred to as the "controller"/"processor"/ "company"), declares that all data processed by the controller is strictly confidential. The controller handles it in accordance with national legal regulations as well as European Union regulations applicable in the field of personal data protection.

Contact details of the personal data controller:
První exportní / importní s.r.o., with its registered office at Prusíkova 2577/16, Stodůlky, 155 00 Prague 5
Phone: +420 777 333 309; E-mail: sales@giftsservice.com

1.2 The controller collects, stores, and uses your personal data within the meaning of relevant personal data processing laws and Regulation (EU) 2016/679 of the European Parliament and of the Council of 24 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR Regulation"). The individual purposes for which the controller processes personal data are further defined below.

1.3 The controller also collects this personal data through its website at www.gifts-service.com (hereinafter referred to as the "website").

2. Data Collection, Processed Data, and Purposes of Personal Data Processing

2.1 If we have obtained consent from the data subject to process personal data, it was done for one of the following purposes:

• inquiry for goods or services
• ordering goods or services
• use of the website

2.2 The controller is authorized to process the following personal data. Personal data is any information relating to a natural person whom První exportní / importní s.r.o. is able to identify. If any change occurs in your personal data, please inform us.

2.3 Personal data includes, in particular (but not exclusively):

• identification data, such as: title, first name and surname, business name, national identification number or date of birth, Company ID, Tax ID, permanent residence address, registered office or place of business address, billing address, bank details;
• contact details, such as: residential address (or delivery address), telephone number, email address, social media profiles;
• other data, such as: information obtained using cookie files, IP address (network identifier) including browser type, device, and operating system, time and number of visits to the website, and other similar information.

2.4 Purposes of personal data processing

• Fulfillment of a contractual relationship means: the relationship between the data subject and the controller arising on the basis of an order, registration, a concluded contract, and the like;
• Sending commercial communications and offering products and services means: sending commercial offers via electronic mail (email), by post, or via a phone call;
• Accounting and tax purposes means: keeping accounting records within the meaning of accounting and tax legislation;
• Personnel and payroll agenda means: concluding employment contracts, processing wages, and social and health insurance deductions in accordance with applicable labor laws;
• Statistical purposes means: anonymized tracking of website traffic, monitoring the number of page views, time spent on the website, and the type of device from which you access the website. We collect data in order to improve the services provided and offer relevant content to clients;
• Displaying advertisements means: displaying advertisements on the website based on statistically determined customer preferences;
• Legitimate interest means: effective defense in the event of a dispute. Legitimate interest also includes processing for the purposes of fraud prevention (e.g., assessing the risk of concluding a contract), direct marketing (e.g., offering relevant services to existing customers), transferring personal data within a group of undertakings for internal administrative purposes, reporting crimes, and transferring personal data to the competent authority, as well as ensuring network and information security. This list is illustrative only;
• Fulfillment of other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, and the like.

3. Management and Processing of Personal Data

3.1 We process personal data for the period strictly necessary to ensure all rights and obligations arising from mutual legal transactions, at least for the duration of processing the order, executing the transaction, arranging the service, etc., and further for the period for which the data subject may have granted consent to the controller. In the event of withdrawal, the lawfulness of processing personal data prior to the withdrawal of consent is not affected. Otherwise, the processing period results from the purpose for which the personal data is processed or is determined by legal regulations.

3.2 The personal data of the subject is processed by the controller in electronic form in an automated manner or in printed form in a non-automated manner. The controller is authorized to process certain information automatically, for example, to generate statistical information about website traffic.

3.3 We use all personal data obtained from customers exclusively for the internal needs of the company. To the extent necessary to fulfill the contract or other obligations, we are authorized to transfer your personal data to other parties, such as carriers, payment processing institutions, state authorities, or other persons involved in fulfilling the contract or our obligations.

4. Rights of the Data Subject

4.1 As a data subject, you have the following rights which arise for you from legal regulations and which you can exercise at any time. These are:

4.1.1 The right of access to personal data, according to which you have the right to obtain information from the controller as to whether the controller processes your personal data. The controller is obliged to pass this information to you without undue delay. The content of the information is determined by the provisions of Article 15 of the GDPR. The controller has the right to request a reasonable fee for providing the information, not exceeding the costs necessary to provide the information.

4.1.2 The right to rectification or erasure of personal data, or restriction of processing, according to which you have the right to have personal data corrected if it is inaccurate or incorrect. If the personal data is no longer required for the purposes for which it was collected, or if it is processed unlawfully, you have the right to request its erasure. If you do not wish to request the erasure of personal data but only to temporarily restrict its processing, you can request a restriction of processing.

4.1.3 The right to request an explanation in the event that you suspect that the processing of personal data by the controller is in conflict with legal regulations;

4.1.4 The right to contact the Office for Personal Data Protection in case of doubt regarding compliance with obligations related to the processing of personal data;

4.1.5 The right to data portability, i.e., the right to obtain personal data concerning the data subject which they provided to the controller, in a structured, commonly used, and machine-readable format, see Art. 20 GDPR for details;

4.1.6 The right to object to the processing of personal data which is processed for the performance of a task carried out in the public interest or in the exercise of public authority or for the purposes of protecting the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless they demonstrate that there are compelling legitimate grounds for the processing which override the interests, rights, or freedoms of the data subject.

5. Information and Questions

5.1 A data subject who has questions or requests related to the processing of personal data by the company, or uncertainties regarding this information, can contact us by email at sales@giftsservice.com or in writing at the address: První exportní/importní s.r.o., Prusíkova 2577/16, Stodůlky, 155 00 Prague 5

5.2 The data subject will receive a response within the statutory period of 30 days. Every request must include a clear verification of the identity of the person who sent the request (e.g., with a certified signature) in order to prove that they are the subject of the requested data. In the event that your request cannot be clearly verified remotely, a personal meeting will subsequently be required to verify the identity of the inquirer before the answers to your questions are handed over.

This Privacy Policy (GDPR) is valid and effective from May 25, 2018.