1.1 By submitting personal data, the user confirms that they are aware of these personal data protection terms, that they agree with their content, and that they accept them in full.

1.2 The data controller is DITA s.r.o., Company ID (IČO): 45359741, with registered office at Ak. Běhounka 723/5, Rybáře, 360 05 Karlovy Vary, contact e-mail: info@ditasro.cz, phone: +420 608 136 806 (hereinafter the “Provider”). The Provider is the controller of users’ personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “GDPR”). The Provider undertakes to process personal data in accordance with applicable legal regulations, in particular the GDPR.

1.3 Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.4 When placing an order, personal data required for the successful processing of the order (name and address, contact details) are requested. The purpose of processing personal data is to fulfil the user’s order and to exercise the rights and obligations arising from the contractual relationship between the Provider and the User. The purpose of processing personal data further includes sending commercial communications and carrying out other marketing activities. The legal basis for processing personal data is the performance of a contract pursuant to Art. 6(1)(b) GDPR, compliance with the controller’s legal obligation pursuant to Art. 6(1)(c) GDPR, and the Provider’s legitimate interest pursuant to Art. 6(1)(f) GDPR. The Provider’s legitimate interest is the processing of personal data for the purposes of direct marketing.

1.5 In order to provide its services, the Provider uses the services of subcontractors, in particular the mailing service provider Ecomail.cz s.r.o. (registered office in the Czech Republic, personal data is processed within the European Union) and a web hosting provider. Subcontractors have been vetted for secure processing of personal data. The Provider and the web hosting subcontractor have entered into a personal data processing agreement, under which the subcontractor is responsible for the proper security of the physical, hardware and software perimeter, and therefore bears direct liability to the user for any leak or breach of personal data.

1.6 The Provider stores the user’s personal data for the duration of the contractual relationship and for a further period of 4 years after its termination for the purpose of asserting any legal claims, or for the period required by special legal regulations (e.g. accounting and tax records under the Accounting Act and the Value Added Tax Act, i.e. 10 years). Personal data processed for the purposes of direct marketing on the basis of the Provider’s legitimate interest is stored for 3 years from the last contact with the user, or until an objection to such processing is raised, whichever occurs first. Upon expiry of the relevant period, the personal data will be deleted.

1.7 The user has the right to request access to their personal data from the Provider pursuant to Art. 15 GDPR, rectification of personal data pursuant to Art. 16 GDPR, or restriction of processing pursuant to Art. 18 GDPR. The user has the right to erasure of personal data pursuant to Art. 17(1)(a) and (c) to (f) GDPR. The user furthermore has the right to object to processing pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR.

1.8 The user has the right to lodge a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.

1.9 The user is not obliged to provide personal data. However, the provision of personal data is a necessary requirement for entering into and performing a contract, and without providing personal data it is not possible for the Provider to conclude or perform the contract.

1.10 The Provider does not carry out automated individual decision-making within the meaning of Art. 22 GDPR.

1.11 A person interested in using the Provider’s services by filling in the contact form:

• agrees to the use of their personal data for the purposes of electronic sending of commercial communications, advertising materials, direct sales, market research and direct product offers by the Provider and third parties, but no more often than once a week, and at the same time
• declares that they do not consider the sending of information under point 1.11.1 to be unsolicited advertising within the meaning of Act No. 40/1995 Coll., as amended, since the user expressly consents to the sending of information under point 1.11.1 in conjunction with Section 7 of Act No. 480/2004 Coll.
• The user may withdraw their consent under this paragraph in writing at any time at info@ditasro.cz

1.12 The Provider uses cookies and similar technologies on its website to ensure the functionality of the website, analytics, and, where applicable, personalisation of offers. Cookies that are not strictly necessary for the operation of the website are used only on the basis of the user’s prior consent, given via the cookie banner upon visiting the website. Consent given may be withdrawn or modified at any time via the cookie banner settings. Detailed information on the individual types of cookies and their purpose is available directly in the cookie banner on the Provider’s website.

3.1 These terms cease to be valid upon expiry of the period specified in Art. 1.6 of these terms.

3.2 The user agrees to these terms by ticking the consent checkbox via the online form. By ticking the consent checkbox, the user declares that they have read these terms, that they agree with them, and that they accept them in full.

3.3 The Provider is entitled to amend these terms. The Provider is obliged to publish the new version of the terms on its website without undue delay, or to send the new version to the User at their e-mail address.

3.4 The Provider’s contact details for matters relating to these terms: +420 608 136 806, info@ditasro.cz.

3.5 Relationships not expressly governed by these terms shall be governed by the GDPR and the laws of the Czech Republic, in particular Act No. 89/2012 Coll., the Civil Code, as amended.

These terms take effect as of 25.5.2018