Gordon Gekko Enterprises, s.r.o. carries out the processing of your personal data as it is necessary for the performance of a contract with you regarding the sale of goods (or for the implementation of measures taken prior to the conclusion of such a contract), and also carries out the processing of your personal data that is necessary for the performance of the company’s public obligations.
1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
1.1. The controller of your personal data is the company Gordon Gekko Enterprises, s.r.o., with its registered office at Stará Louka 353/8, Karlovy Vary, 360 01, identification number: 29118182, registered in the Commercial Register kept at the Regional Court in Pilsen, Section C, Insert 26262 (hereinafter referred to as the “Controller”).
1.2. The contact details of the controller are as follows: delivery address Gordon Gekko Enterprises, s.r.o., Chebská 48/73, 360 06 Karlovy Vary, email address office@beerspa-beerland.com, phone +420 739 975 250.
1.3. The controller has not appointed a data protection officer.
2. LEGAL BASIS FOR PROCESSING PERSONAL DATA
2.1. The legal basis for processing your personal data is the necessity of such processing for:
2.1.1. the fulfillment of a contract between you and the controller or for taking steps by the controller prior to entering into such a contract within the meaning of Article 6(1)(b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation”);
2.1.2. the fulfillment of legal obligations to which the controller is subject, within the meaning of Article 6(1)(c) of the Regulation, specifically, in particular, the obligations imposed on the controller by generally binding legal regulations, especially Act No. 235/2004 Coll., on Value Added Tax, as amended, Act No. 586/1992 Coll., on Income Taxes, as amended, and Act No. 563/1991 Coll., on Accounting, as amended.
3. PURPOSE OF PROCESSING PERSONAL DATA
3.1. The purpose of processing your personal data is the fulfillment of the contract between you and the controller, including the delivery of goods and handling of rights arising from liability for defects, or taking steps by the controller prior to entering into such a contract, and further, the fulfillment of related public-law obligations by the controller.
3.2. The controller does not engage in automatic individual decision-making within the meaning of Article 22 of the Regulation.
4. DURATION OF STORAGE OF PERSONAL DATA
4.1. Your personal data will be processed for the duration of the effects of rights and obligations from the contract and further for the necessary period for archiving purposes according to applicable generally binding legal regulations, but no longer than the period stipulated by generally binding legal regulations.
5. OTHER RECIPIENTS OF PERSONAL DATA
5.1. Other recipients of your personal data will be shipping companies and other persons involved in the delivery of goods or the execution of payments under a purchase contract, and persons providing technical services related to the operation of the e-shop for the controller, including software operation and data storage.
5.2. Recipients of your personal data processed for the purpose of fulfilling obligations arising from legal regulations may also be tax administration authorities or other relevant offices in cases where the controller is required to do so by generally binding legal regulations.
5.3. The controller does not intend to transfer your personal data to a third country (a country outside the EU) or to an international organization.
6. RIGHTS OF THE DATA SUBJECT
6.1. Under the conditions set out in the Regulation, you have the right to request access to your personal data from the controller, the right to rectify or delete your personal data, or to restrict their processing, the right to object to the processing of your personal data, and the right to data portability.
6.2. If you believe that the processing of your personal data has violated or is violating the Regulation, you have the right to lodge a complaint with a supervisory authority.
6.3. You are not obliged to provide personal data. Providing your personal data is a necessary requirement for entering into and fulfilling a contract, and without providing your personal data, it is not possible to enter into or fulfill the contract by the controller.