Protection of personal data

Basic provisions

  1. The controller of personal data according to Article 4, Point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR“) is Fakescape z. s., Company ID: 07918280, with its registered office at Botanická 834/56, 602 00 Brno (hereinafter referred to as the “controller“).
  • The contact details of the controller are: 

Fakescape z. s.

registered with the Regional Court in Brno under file number L 25783

registered office: Botanická 834/56, 602 00 Brno

email: info@fakescape.cz.

  • Personal data refers to any information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  • The controller has not appointed a Data Protection Officer.

Sources and Categories of Processed Personal Data

  1. The controller processes personal data that you have provided to them and/or personal data that the controller has obtained based on the fulfillment of the purchase contract concluded through an order made by the data subject (hereinafter referred to as the “buyer”) in the controller’s online store.
  2. The controller processes identification and contact data, along with other data necessary for fulfilling the contract.

Legal Basis and Purpose of Processing Personal Data

  1. The legal basis for processing personal data is:
  2. the performance of the contract between the buyer and the controller according to Article 6(1)(b) of the GDPR,
  3. the sending of promotional communications in accordance with Section 7(1) and (2) of Act No. 480/2004 Coll., on certain information society services, as amended on the date of data processing.
  4. The purpose of processing personal data is:
    1. Processing the order and exercising the rights and obligations arising from the contractual relationship between the buyer and the controller; personal data necessary for the successful processing of the order (such as name, address, and contact information) are required when placing an order. Providing personal data is a necessary requirement for concluding and fulfilling the contract; without providing personal data, it is not possible to conclude the contract or fulfill it by the controller.
    1. Sending promotional communications and newsletters.

Data Retention Period

1.The controller retains personal data:

  1. for the time necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims from these contractual relationships (for 15 years from the termination of the contractual relationship),
    1. until the consent to the processing of personal data for marketing purposes is revoked, if the personal data are processed based on consent.

2.After the expiration of the data retention period, the controller will delete the personal data.

The recipients of personal data (sub-contractors of the controller)

  1. The recipients of personal data are natural or legal persons who:
    1. contribute to the fulfilment of the contractural relationship between the controller and the buyer,
    1. Managing the e-shop services and any other services related to the e-shop,
    1. Providing marketing services.
  2. The controller intent to forward the data into third-countries (non EU countries) or international organizations. The recepients of personal data are providers of mailing or cloud services.

Buyers Rights

  1. Under the conditions set forth in the GDPR, the buyer has the following rights:
    1. 1.access their personal data according to Article 15 of the GDPR,
    1. correct personal data according to Article 16 of the GDPR, or restrict processing according to Article 18 of the GDPR,
    1. erase personal data according to Article 17 of the GDPR,
    1. object to the processing of personal data according to Article 21 of the GDPR, 
    1. data portability according to Article 20 of the GDPR, 
    1. withdraw consent to the processing of personal data in writing or electronically to the address or email of the controller provided in Article III of these terms.
  2. The buyer also has the right to lodge a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.

Personal Data Security Conditions

  1. The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
  2. The controller has implemented technical measures to secure data storage systems and physical storage of personal data.
  3. The controller declares that personal data is accessible only to persons authorized by the controller.

Final provisions

  1. By submitting an order through the online order form, the buyer confirms that they are familiar with the terms of personal data protection and that they fully accept them.
  2. The buyer agrees to these terms by checking the consent box in the online form. By checking the consent box, the buyer confirms that they are familiar with the terms of personal data protection and that they fully accept them.
  3. In accordance with § 7 paragraphs 1 and 2 of Act No. 480/2004 Coll., on certain information society services, as amended as of the date of data processing, the data subject has the option to express disagreement with the sending of commercial communications by electronic means.

The controller is entitled to change these terms. The new version of the personal data protection terms will be published on their website, and at the same time, the new version of these terms will be sent to the buyer at the address provided to the controller.