Personal Data Processing Policy
By this document, in accordance with applicable legal regulations, we inform you about the processing of your
personal data.
1 Data Controller
1.1 The personal data controller Buddyvet s.r.o., Company ID No. (IČ): 17327792, Tax ID No. (DIČ): CZ17327792, with registered office at: nám. sv. Václava 60/12, Stará Boleslav, 250 01 Brandýs nad Labem-Stará Boleslav, file no.: C 369991 kept at the Municipal Court in Prague (hereinafter the „controller“), declares that all personal data processed by the controller is strictly confidential. The controller handles it in accordance with national legal regulations as well as European Union regulations applicable in the area of personal data protection. The controller has not appointed a Data Protection Officer.
1.2 The controller collects, stores and uses your personal data within the meaning of Act No. 110/2019 Coll., on the Processing of Personal Data (hereinafter the “Personal Data Processing Act”), respectively Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the „GDPR Regulation“). The individual purposes for which the controller processes personal data are further defined
1.3 The controller also collects this personal data through its website at the address www.tlappka.cz and the mobile application on the Appstore and Google Play (hereinafter the „online services“).
1.4 The controller issues this policy so that you are sufficiently informed about which of your personal data the controller processes, for what purpose, for how long, who will have access to your personal data, and what rights you have. This policy applies to all personal data collected by the controller, whether collected for the purpose of performing a contractual relationship, a legal obligation, a legitimate interest, or given consent.
2 Data Processed
2.1 We may collect your personal data if you use our online services or are otherwise in contact with us (collectively the “services”). The data we collect falls into three categories: (a) information you provide to us; (b) information we collect through automated processes; and (c) information we obtain from other sources. As a general rule, you provide your personal data to us voluntarily. However, situations may arise where providing your personal data is necessary in order to provide a particular service, or is required by law. Please note that in certain cases we may not be able to provide you with our services if you do not provide us with the relevant data. We will let you know if the provision of your personal data is necessary. Information that you provide to us may be combined with information obtained through automated processes, or with information we obtain from other sources. Depending on how contact between us takes place, you may provide us with the following data:
2.1.1 Personal information – for example your name, postal or email address, telephone number, date of birth and other contact information – if you register within our online services, participate in one of our competitions, or contact us by telephone or through our online services;
2.1.2 Transactional information – for example information about a notification sent;
2.1.3 Account information – for example your username and password (or other data that identifies you) used to access our online services or to purchase or use our products and services;
2.1.4 Profile information, including products and services you like, or information about the time when you use our services;
2.1.5 Other personal information that you voluntarily provide to us during contact with us. We collect information through automated processes.
2.1.6 We may use automated technologies to collect information from your computer system or mobile device while you use our online services. Automated technologies may include cookies, local shared objects, and web tags.
We may collect the following information about you:
· Internet Protocol (IP) address; date and time of access to our online services;
· The name and URL of the file accessed while you use our online services;
· The operating system of your computer or mobile device and the type of browser;
· The type of mobile device and its settings;
· The unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device;
· The serial number of the device and its individual components;
· Advertising identifiers (e.g. IDFA or IFA) or similar identifiers;
· The referring website (i.e. the page that brought you to our website) or application;
· Information about how you use our online services – for example which pages within our websites or mobile applications you visit. Our online services may collect data about the precise location of your mobile device or computer using geolocation and technologies such as GPS, Wi-Fi, Bluetooth, or proximity to a base station. On most mobile devices and computer systems you will be asked to give the tlappka service or application your consent to the processing of this information. You can withdraw your consent to the collection of this data using the settings of the given device or web browser. If you have any questions about how to prevent us from collecting precise information about your location, we recommend that you contact your mobile service provider, mobile device manufacturer, or web browser provider. Some online services may not function properly without information about your location. If you would like us to delete information we have obtained that could identify your precise location, please contact us using the contact details below. We may be required by law to retain certain information.
· We collect information from other sources. We may also obtain information about you from other companies and organizations, including public databases, social media platforms, or external partners – e.g. entities that provide analytics or marketing services. We may also collect information that is publicly available. For example, we may collect information from your public profile if you are in contact with us through social networks. We may also collect communications within social networks that are addressed to us or that relate to us. Information that you provide to us may be combined with information obtained through automated processes, or with information we obtain from other sources.
2.2 The controller is entitled to process the following personal data according to purpose. The individual purposes of processing mean the following:
2.2.1 performance of a contractual relationship means: the relationship between you and the controller arising on the basis of an order, registration, a concluded contract (including an insurance contract with HALALI, všeobecná pojišťovna, a.s., Company ID No.: 60192402), an application for and participation in a competition, and similar;
2.2.2 sending commercial communications and offering products and services means: sending commercial offers, by electronic mail (e-mail), by short text messages, in the form of mobile notifications, or by telephone call;
2.2.3 accounting and tax purposes means: keeping accounting records within the meaning of accounting and tax legislation;
2.2.4 statistical purposes means: anonymized measurement of website traffic, as well as monitoring the number of page views, the time spent on the website, and the type of device from which you access the website. We collect this data in order to improve the quality of the services provided and to offer clients relevant content;
2.2.5 displaying advertisements means: displaying advertisements on the website based on statistically determined customer preferences;
2.2.6 legitimate interest means: effective defense in the event of a dispute. We want to continuously improve our services and, where appropriate, provide new and better services; we want to protect ourselves against the frustration of such activity; therefore, activities that contribute to fulfilling this goal are our legitimate interest. Legitimate interest also includes processing for the purposes of fraud prevention (e.g. assessing the risk of concluding a contract), direct marketing (e.g. offering relevant services to existing customers), transferring personal data within a group of companies for internal administrative purposes, reporting criminal offenses and transferring personal data to the competent authority, ensuring the security of the network and information. This list is illustrative only;
2.2.7 fulfillment of other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, and similar.
2.3 We process your personal data for the period necessary to secure all rights and obligations arising from the mutual legal relationship. Given that the controller needs certain personal data to perform the contract, it will process this data for the duration of the performance of the contract, but for no longer than 3 years after the termination of the contract, with certain data in the nature of identification data being retained for a further 10 years from the termination of the contract for the purpose of any potential proof of performance. In the case of processing based on consent, the controller will process the personal data until you withdraw such consent. In the case of processing for direct marketing purposes based on legitimate interest, the controller will process this personal data for the duration of the performance of the contract, or at most until 3 years after the termination of the contract (in the event that no contract was concluded, then until 3 years from the completion of the form).
2.4 Personal data is processed by the controller both manually and in an automated manner. The controller is entitled to process certain information automatically, for example to generate statistical information about the traffic on its website.
2.5. Recipients of personal data - Under the conditions set out in applicable legal regulations, the controller is entitled to transfer (make accessible) the client's personal data only to its authorized employees and cooperating persons, or to individual processors of personal data (contractually engaged by the controller), or possibly to other controllers for the purpose of further processing, always however only to the extent necessary to fulfill the individual purposes of processing and on the basis of an appropriate legal title for processing. Such recipients are in particular:
- providers of the relevant services or products (for the purpose of concluding the relevant contract and/or fulfilling
the contractual obligations of the controller);
- providers of information and communication systems, technical infrastructure (for example IT
services, technical solutions for data storage), providers of accounting and legal services;
- marketing agencies (in preparing and coordinating the controller's commercial and advertising activities for the
purpose of offering the controller's services and products).
3 Rights of the Data Subject
3.1 As a data subject, you have the rights set out below, which arise for you from legal regulations and which you may exercise at any time. These are:
3.1.1 the right of access to personal data, according to which you have the right to obtain from the controller information about whether the controller is processing your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is given by the provisions of Article 15 of the GDPR Regulation. The controller has the right to request a reasonable payment not exceeding the costs necessary for providing the information;
3.1.2 the right to rectification or erasure of personal data, or restriction of processing, according to which you have the right to have personal data that is inaccurate or incorrect corrected. If your personal data is no longer needed for the purposes for which it was collected, or is being processed unlawfully, you have the right to request its erasure. If you do not wish to request the erasure of your personal data, but only to temporarily restrict its processing, you may request a restriction of processing;
3.1.3 the right to request an explanation in the event that you suspect that the processing of personal data by the controller is contrary to legal regulations;
3.1.4 the right to turn to the Office for Personal Data Protection in the event of doubts about compliance with obligations related to the processing of personal data;
3.1.5 the right to data portability, i.e. the right to obtain the personal data concerning you that you have provided to the controller, in a structured, commonly used and machine-readable format, see further Art. 20 GDPR;
3.1.6 the right to object to the processing of personal data that is processed for the purposes of performing a task carried out in the public interest or in the exercise of public authority, or for the purposes of protecting the legitimate interests of the controller. The controller will terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing that overrides your interests, rights or freedoms;
3.1.7 the right to withdraw your consent to the processing of personal data at any time, if you have given the controller consent to the processing of personal data.
4 Cookies
4.1 Cookies are small text files that a website sends to your browser. They allow the website to record information about your visit, such as your chosen language and similar, so that your next visit to the site can be easier and more pleasant. Cookies are important because, without them, browsing the Internet would be much more complicated. Cookies enable better use of our website and the adaptation of its content to your needs; they are used by almost every website in the world. Cookies are useful because they increase the user-friendliness of a repeatedly visited website.
4.2 On its website, the controller may use the following types of cookies:
4.2.1 Session (i.e. temporary) cookies allow us to link your individual activities for the duration of your browsing of this website. These files are activated when you open your browser window and deactivated when you close your browser window. Session cookies are temporary and all such files are deleted when the browser is closed.
4.2.2 Persistent cookies help us identify your computer if you visit our website again. A further advantage of persistent cookies is that they allow us to adapt our website to your needs.
4.3 In accordance with the provisions of Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, as amended, we hereby wish to inform you that our website uses cookies for its operation, i.e. that we process your cookies, including persistent ones.
4.4 Web browsers usually include cookie management. Within your browser settings, you can therefore probably manually delete, block, or completely disable the use of individual cookies. For more information, use your web browser's help function. If you do not allow the use of cookies, some functions and pages may not work as they should.
4.5 We use cookies to personalize content and advertisements, provide social media features, and analyze our traffic. We share information about how you use our website with our partners active in the fields of social media, advertising, and analytics. By using the website, you express your consent through the connection of the following services:
4.5.1 Google Ireland Limited (registration number: 368047), with registered office at Gordon House, Barrow Street, Dublin 4, Ireland; terms and conditions: https://policies.google.com/technologies/ads (advertising cookies)
4.5.2 Facebook Ireland Limited, with registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland; terms and conditions: https://cs-cz.facebook.com/about/privacy (advertising cookies)
4.5.3 Smartsupp.com, with registered office at: Šumavská 31, 602 00 Brno, CZ03668681; terms and conditions: https://www.smartsupp.com/cs/help/ochrana-osobnich-udaju-gdpr/
4.5.4 Seznam.cz a.s., with registered office at Radlická 3294/10, Smíchov, 150 00, Prague 5, Company ID No.: 26168685; terms and conditions: https://www.seznam.cz/reklama/cz/obsahovy-web/pravidla-reklamy/gdpr/ (advertising cookies)
4.5.5 Smartlook.com, s.r.o., with registered office at Šumavská 524/31, 602 00 Brno, Czech Republic; terms and conditions: https://help.smartlook.com/en/articles/3244452-privacy-policy
4.6 In order to display targeted advertising within advertising and social networks on other websites, we transfer data about your behavior on the website to these advertising and social networks; however, we do not transfer your identification data to them.
5 Transfer to Third Countries
5.1 Your personal data will not be transferred to third countries.
6 Information and Questions
6.1 The data subject may obtain further information about rights and obligations regarding personal data protection by e-mail at podpora@buddyvet.cz