Privacy Policy
Personal Data Protection (GDPR)
This document describes how we use and process the personal data you have provided to us. You will also find information on how to contact us if you have any questions regarding personal data. We will be happy to answer any questions you may have.
Identity and contact details of the controller:
Company: OBAL CENTRUM s.r.o.
Registered office: Veská 35, 53304 Sezemice
Company ID: 25923536
Tel.: +420 466 971 391
Email: obchod@obal-centrum.cz
What type of personal data do we collect?
We only collect personal data for the purpose of delivering the ordered shipment or providing the offered service based on the performance of the concluded contract. To deliver the shipment, we need your first name, last name, delivery address, billing address, email address, and payment details depending on the type of payment.
For what purpose do we process personal data?
The processing of personal data is necessary for the performance of the contract concluded when placing an order, for the following purposes:
- Informing you about the status of your order.
- Delivering the ordered goods.
- Creating a personal account with the option to set your privacy preferences.
- Handling any complaints.
- Providing information about new products.
- Contact email from the advice center.
- We also need your email address so that we can inform you about discounts and special offers, competitions, and other interesting news. You must give your informed consent to this extended marketing communication. Consent is given by confirming the email sent to you when you placed your order or by filling out the registration form for these emails.
If you do not wish to receive this information, you can withdraw your consent at any time. You will find this option in the footer of each email or in the privacy section of your account. You can also contact the authorized person at the above email address.
Personal data processing period
We will process personal data for the duration of the contract. We are guided by the conclusion of the purchase contract, which begins with the delivery of the order or the sending of consent for marketing communication. This period is 2 years. After this period, we only archive documents required by law.
How we use cookies
We use two types of cookies. Our own, which are used directly for the operation of the e-shop. We store favorite products, products added to the shopping cart, or products being compared. We also use third-party cookies that anonymously store information about visits to the e-shop. These can then be used for analytical or marketing purposes. All information stored in cookies is anonymous.
What security procedures do we use for storing personal data?
The provider has adopted and maintains technical and organizational measures to prevent unauthorized or accidental access to personal data, its alteration, destruction or loss, unauthorized transfers, other unauthorized processing, and other misuse of personal data.
- Anonymization of personal data.
- Ability to restore the availability of and access to personal data in a timely manner in the event of physical or technical incidents.
- Process of regular testing, assessment, and evaluation of the effectiveness of technical and organizational measures implemented to ensure the security of processing.
- Multi-level firewall.
- Antivirus protection and control of unauthorized access.
- Encrypted data transmission via IT technologies.
- Access to personal data only for authorized persons of the Provider.
- Servers with personal data locked in the server room.
General provisions
- The customer provides their personal data to the seller for the purpose of concluding a purchase contract with the seller and the proper duration of the legal relationship between the customer and the seller based on the concluded purchase contract. Consent to the processing of personal data in its entirety in accordance with this article is not a condition that would in itself prevent the conclusion of a purchase contract.
- The customer voluntarily provides their personal data and agrees to its provision to third parties under the conditions set out below.
- Personal data will be processed electronically in an automated manner or in printed form in a non-automated manner.
- If the buyer believes that the seller or processor is processing their personal data in a manner that violates the buyer's privacy or is contrary to the law, in particular if the personal data is inaccurate with regard to the purpose of its processing, they may:
- Request an explanation from the seller or processor at their email address or in writing,
- Request that the seller or processor remedy the situation by sending a request to their email address or in writing,
- If the buyer requests information regarding the processing of their personal data, the seller is obliged to provide this information to their email address or in writing by post. The seller has the right to request reasonable compensation for providing the information according to the previous sentence, not exceeding the costs necessary to provide the information, in the case of a repeated request.
- The seller is a duly registered personal data controller. Customers' personal data is secured against misuse. The handling of customers' personal data is governed by the relevant provisions of Act No. 110/2019 Coll., on the protection of personal data and on amendments to certain acts, as amended and effective.
- Any errors, questions, leaks, or misuse of personal data can be reported to the relevant Office for Personal Data Protection (ÚOOÚ).