Privacy Policy

Dušní 3 Concept s. r. o., Václavské náměstí 2132/47, Praha 1, 110 00, IČO 24794333

Email addresses: obchod@bostore.cz

Phone: +420 727 915 597

is obliged, under Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, hereinafter "GDPR"), to provide information about what personal data it processes as a controller about natural persons in the course of providing services, selling goods and operating websites; for what purposes and how it processes such personal data in accordance with applicable legal regulations; to whom and for what reason it may disclose them; and also to inform about the rights that natural persons have in connection with the processing of their personal data.

These Policy are effective from 25 May 2018 and are issued in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, in order to fulfil the information obligation under Art. 13 GDPR. First we define the categories of personal data we process, then the types of processing, and finally we present your rights under GDPR.

Personal data: academic title, first and last name, company name, company registration number, VAT number, permanent residence address, registered office or place of business address, billing address, bank details, signature, phone number, email, address of a link to an individualised profile on a social network or other website.

Personal data may be processed:

• directly on the basis of a contract – when you purchase goods
• legitimate interest of Dušní 3 Concept s.r.o.
• on the basis of law (without consent)
• on the basis of consent

We process personal data where it is necessary for the performance of a contract, compliance with legal obligations and protection of legitimate interests. Without providing personal data for these purposes it would not be possible to provide the services. We do not need consent to process personal data for these purposes. These include in particular the following basic sub-purposes: processes associated with customer identification (contract performance); fulfilment of statutory tax obligations (legal obligations); purposes set by special laws for criminal proceedings and to fulfil the obligation to cooperate with the Czech Police and other state authorities (legal obligations); operation of camera and monitoring systems on premises for the purpose of preventing damage (legitimate interest); securing evidence in the event of a need to defend rights (legitimate interest). Personal data for these activities are processed to the extent necessary to fulfil these activities and for the time necessary to achieve them or for the time directly set by legal regulations. After that, personal data are deleted or anonymised. Invoices issued by Dušní 3 Concept s.r.o. are archived for 10 years from their issue date in accordance with Section 35 of Act No. 235/2004 Coll., on Value Added Tax. In order to demonstrate the legal basis for issuing invoices, the underlying billing documents containing personal data (e.g. contracts) are also archived for 10 years from the date of contract termination. In the event of negotiations between Dušní 3 Concept s.r.o. and a prospective customer regarding the conclusion of a contract that was not concluded, Dušní 3 Concept s.r.o. processes the personal data provided for 3 months from the end of those negotiations.

With consent for commercial purposes, Dušní 3 Concept s.r.o. will, from 25 May 2018, process the customer's personal data primarily for sending newsletters – commercial communications relating to products of Dušní 3 Concept s.r.o. (product offers, etc.). Dušní 3 Concept s.r.o. will retain, for persons who grant consent, data about their typical behaviour when using the services and will create and retain anonymised behavioural analyses, including through so-called cookies, for which consent to the processing of personal data is addressed separately on the Dušní 3 Concept s.r.o. websites. Providing consent for commercial purposes is voluntary and the customer may withdraw it at any time. This consent remains valid for the duration of the use of the services and the following 4 years thereafter, or until the customer withdraws it.

Personal data are processed both manually and automatically and are stored in paper and electronic form. Employees who handle the personal data of represented and cooperating models are bound by a confidentiality agreement, the validity of which is not limited by the termination of the employment relationship. Personal data captured on paper documents are stored in rooms equipped with security locks, at the registered office of Dušní 3 Concept s.r.o. and at the registered office of the external supplier of accounting and tax services, with whom Dušní 3 Concept s.r.o. has concluded a data processing agreement.

Dušní 3 Concept s.r.o. cooperates with various entities that cover partial activities ensuring the subject matter of its business. These are mainly providers of administrative and technical support for Dušní 3 Concept s.r.o.'s activities such as: IT administrator, CRM system administrator, accountant, company lawyer and the provision of other services (e.g. goods transportation) etc. Dušní 3 Concept s.r.o. provides these persons with personal data to the extent necessary for the given purpose. A data processing agreement is concluded with each entity. Their list can be obtained upon written request sent to the registered office of Dušní 3 Concept s.r.o. or to the email address prague@beostores.com.

The data subject has the right of access to personal data, which includes the right to obtain from Dušní 3 Concept s.r.o.: confirmation as to whether it processes personal data; information on the purposes of processing, categories of personal data concerned, recipients to whom personal data have been or will be disclosed, the planned retention period, the existence of the right to request rectification or erasure of personal data relating to the data subject or restriction of their processing or to object to such processing, the right to lodge a complaint with a supervisory authority, all available information about the source of personal data if not obtained from the data subject, the fact that automated decision-making is taking place, including profiling, and appropriate safeguards when transferring data outside the EU; and, where the rights and freedoms of others are not adversely affected, a copy of the personal data. The right to confirmation of processing of personal data and to information may be exercised in writing at the address of the registered office of Dušní 3 Concept s.r.o., or by email at prague@beostores.com or obchod@bostore.cz.

The data subject has the right to rectification of inaccurate personal data that Dušní 3 Concept s.r.o. processes about them. Updating data is an obligation on the part of the data subject or arises in cooperation. Rectification is carried out without undue delay within the time strictly necessary for its processing. A request for rectification of personal data may be submitted via the email address prague@beostores.com.

The data subject has the right to erasure of personal data concerning them, unless Dušní 3 Concept s.r.o. demonstrates legitimate grounds for processing such data. If the data subject believes that their personal data have not been deleted, they may contact Dušní 3 Concept s.r.o. in writing at the address of its registered office or by email at prague@beostores.com.

The data subject has the right to restriction of processing until the matter relating to the processing of their personal data is resolved. An objection or complaint must be submitted in writing to the address of the registered office of Dušní 3 Concept s.r.o. or by email at prague@beostores.com.

The data subject has the right to notification in the event of rectification, erasure or restriction of processing of personal data. If personal data are rectified or erased, we will notify the individual recipients, unless this is not possible based on available personal data. Upon request from the data subject, we can provide information about these recipients.

The data subject has the right to portability of data concerning them that they have provided to the controller, in a structured, commonly used and machine-readable format, and the right to request that such data be transmitted to another controller. Where technically feasible, data may also be transferred to a designated controller, provided that the person acting on behalf of the relevant controller is duly identified and can be authorised. If the exercise of this right could adversely affect the rights and freedoms of third parties, your request cannot be complied with. A request may be submitted in writing by sending it to the address of the registered office of Dušní 3 Concept s.r.o.

The data subject has the right to object to the processing of their personal data on the grounds of the legitimate interest of Dušní 3 Concept s.r.o. If Dušní 3 Concept s.r.o. cannot demonstrate that there is a compelling legitimate reason for the processing that overrides the interests or rights and freedoms of the data subject, it will cease the processing without undue delay following the objection. An objection may be sent in writing to the address of the registered office of Dušní 3 Concept s.r.o. or by email at prague@beostores.com.

Dušní 3 Concept s.r.o. declares that it does not carry out automated decision-making without human assessment having legal effects for data subjects, nor does it create a database of automated profiles.

Dušní 3 Concept s.r.o. does not have a Data Protection Officer given the scale of its processing. Consent to the processing of personal data for commercial purposes may be withdrawn at any time. Withdrawal must be made by an explicit and intelligible expression of intent, either at the email addresses prague@beostores.com or by written request to the registered office of Dušní 3 Concept s.r.o. The data subject has the right to lodge a complaint relating to the processing of their personal data with the Office for Personal Data Protection (www.uoou.cz).