Personal Data Processing Information (GDPR)

BASIC SUMMARY
The Roses Co. s.r.o. processes your personal data because it is necessary for the fulfillment of the sales contract concluded with you (or for taking measures prior to entering into such a contract), and also processes your personal data as required to fulfill its public law obligations.

1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
1.1. The controller of your personal data is the company

The Roses Co. s.r.o.
registered office: Purkyňova 108
612 00 Brno
registered at the Regional Court in Brno, file number C/97881
Company ID (IČO): 05779723

1.2. The controller’s contact details are as follows:

Mailing address:
Purkyňova 108
612 00 Brno
Email address: info@theroses.cz
Phone: +420 776 617 320

1.3. The controller has not appointed a Data Protection Officer.
2. LEGAL BASIS FOR PERSONAL DATA PROCESSING
2.1. The legal basis for processing your personal data is that such processing is necessary for:
2.1.1. the performance of a contract between you and the controller or the implementation of measures taken by the controller prior to entering into such a contract, pursuant to Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR);
2.1.2. the fulfillment of legal obligations applicable to the controller, pursuant to Article 6(1)(c) GDPR, specifically compliance with obligations imposed on the controller by generally binding legal regulations, particularly Act No. 235/2004 Coll., on Value Added Tax, as amended, Act No. 586/1992 Coll., on Income Taxes, as amended, and Act No. 563/1991 Coll., on Accounting, as amended.
3. PURPOSE OF PERSONAL DATA PROCESSING
3.1. The purpose of processing your personal data is the performance of the contract between you and the controller, including delivery of goods and handling claims for defects, or taking measures prior to entering into such a contract, and also fulfilling related public law obligations by the controller.
3.2. The controller does not engage in automated individual decision-making pursuant to Article 22 GDPR.
4. RETENTION PERIOD OF PERSONAL DATA
4.1. Your personal data will be processed for the duration of the rights and obligations arising from the contract and for the period necessary for archiving purposes according to applicable generally binding legal regulations, but no longer than the period specified by such regulations.
5. OTHER RECIPIENTS OF PERSONAL DATA
5.1. Other recipients of your personal data will include shipping companies and other persons involved in the delivery of goods or the execution of payments under the purchase contract, and persons providing technical services to the controller related to the operation of the e-shop, including software operation and data storage.
5.2. Recipients of your personal data processed for the purpose of fulfilling obligations arising from legal regulations may also include financial authorities or other relevant offices when generally binding legal regulations require it.
5.3. The controller does not intend to transfer your personal data to a third country (outside the EU) or to an international organization.
6. RIGHTS OF THE DATA SUBJECT
6.1. Under the conditions set out in the GDPR, you have the right to request access to your personal data, the right to rectification or erasure of your personal data, the right to restrict processing, the right to object to the processing of your personal data, and the right to data portability.
6.2. If you believe that the processing of your personal data violates or has violated the GDPR, you have the right to lodge a complaint with the supervisory authority.
6.3. You are not obliged to provide personal data. Providing your personal data is a necessary requirement for entering into and fulfilling the contract, and without providing your personal data, it is not possible to conclude the contract or for the controller to fulfill it.