PRIVACY POLICY

Dear visitors and users of our website,
We would like to inform you that in connection with your visit to and use of the services of the www.artebohemien.com website (hereinafter referred to as the "website"), data relating to your person (hereinafter referred to as "personal data") is processed. In this statement you will learn who, when and what personal data is processed, for what purpose, on what legal basis, and what rights you have in connection with the processing of personal data.

Personal data controller

The controller of the personal data is the company Arte Bohemien, Foundation Fund, ID No.: 19390165, with registered office at Říční 456/10, Prague 1, 118 00, email address: arte@artebohemien.com, registered in the Commercial Register maintained by the Municipal Court in Prague, Section N, Insert 2317 (hereinafter referred to as the "Controller").

Processing of log files

In connection with your visit to the website, log files are processed. Log files contain data about accesses to the website that are automatically recorded by our web server. The following data is logged: web request, http response code, date and time of access, amount of data transferred, previously visited website, requesting provider, IP address, operating system and web browser information of the accessing device.

The log files are processed to ensure the functionality and protection of the website against cyber attacks. The processing takes place without the consent of the website visitor, the legal basis for the processing being our legitimate interest.

By default, we keep log files for 12 months after a visit to the website. If a legitimate interest arises on our part to retain the relevant data for a longer period, this data will be retained for the necessary longer period.

We may also process log files for the purpose of optimizing the website. For this processing purpose, the IP address you use to connect to the website is promptly anonymised. It is therefore not possible to determine your identity during the subsequent evaluation of the log files.

Processing of cookies

Cookies are also processed in connection with your visit to the website. Cookies are small files that are stored on the computer or other device from which you access the website when you visit the website. Temporary cookies allow you to link your individual activities while you are browsing the website and are deleted when you close your web browser. Permanent cookies remain stored on your device for a certain period of time and allow your device to be recognised when you visit the website again.

We use cookies to ensure the functionality of the website, enhance user experience and for analytical purposes. For some of these activities, we use the services of third parties who may collect certain information about your behaviour on our website, retrieve cookies stored on your device or place their own cookies on your device. For these purposes, only information that does not reveal your identity is collected. The legal basis for the processing is our legitimate interest.

If we use persistent cookies, they remain stored on your device for a maximum of 2 years. Your web browser allows you to delete the cookies stored on your device at any time and to refuse or restrict the storage of cookies in the future. However, changing the cookie settings may reduce the user-friendliness of the website and some services and functions (e.g. shopping cart) may not work. More detailed information about the setting of cookies is available directly in your browser settings, or please consult the help section of your browser. You can also find information about cookie settings for the most commonly used web browsers here: Internet Explorer, Microsoft Edge, Google Chrome, Mozilla Firefox. For more information about cookies, please visit http://www.allaboutcookies.org.

Google Analytics

To analyse the website, we use Google Analytics, provided by Google Inc., headquartered at Amphitheatre Parkway, Mountain View, CA 94043, USA.

Detailed information about Google Analytics.

If you do not want to allow Google Analytics to use your data, you can install the Google Analytics Opt-out Browser Add-on.

For more information about how Google protects your privacy, please visit https://policies.google.com.

Sending the newsletter

In case you are interested in receiving our newsletter, we will send you a newsletter about the latest news on our portal. The email address you provide for this purpose will be included in the newsletter database after verification. Your consent is the legal basis for the processing of your email address.

We will also send you the newsletter if you are a customer of our e-shop and you have not refused to use your email address for this purpose. The legal basis for the inclusion of your email address in the database of addresses for sending the newsletter in this case is our legitimate interest and the legal authorisation resulting from the provisions of Section 7 of Act No. 480/2004 Coll., on certain information society services.

The newsletter will be sent to you and your email address will be recorded in the relevant database until you refuse to receive the newsletter or until you withdraw your consent to the processing of your email address for this purpose, which you can do at any time by written notification sent to the address of the administrator's registered office, to the email address arte@artebohemien.com or by using the link in the footer of each newsletter.

We would like to inform you that we may continue to process the data on the basis of which we sent you the newsletter and the data on when you refused to receive the newsletter or when you withdrew your consent to the processing of your email address for this purpose for a period of 3 to 4 years after your email address has been deleted from the newsletter database, in order to prove the lawfulness of the processing of personal data.

Purchasing in our eshop

In the event that you order goods from the e-shop, we will process the personal data you provide in the order, in particular your name, surname, email address, telephone number, billing address and delivery address, if different from the billing address. If you pay the purchase price of the goods by bank transfer, we will also process the bank account number from which the purchase price was paid. Together with these data, we will process the data about the purchase and the purchased goods.

We will process the above personal data for the purpose of identifying you as a contracting party, informing you about the progress of the order, for the purpose of any further communication with you regarding the order, delivery of the ordered goods, for the purpose of fulfilling obligations arising from consumer protection legislation (e.g. For the purpose of the proper acknowledgement of receipt of the order, proper refund of funds in case the customer withdraws from the contract, etc.), keeping accounting and tax records and, last but not least, for the purpose of proving the fulfilment of contractual and legal obligations and the enforcement of claims from concluded contracts. The legal basis for processing is the performance of a contract, the fulfilment of a legal obligation and our legitimate interest.

The provision of personal data is voluntary, but without providing certain personal data, the purchase of goods in the e-shop is not possible.

We will keep the above personal data for a period of 5 years from the conclusion of the respective purchase or brokerage contract. If a legitimate interest arises on our part or if we are obliged by law to keep the personal data for a longer period of time, we will keep this data for the necessary longer period.

If the goods are to be delivered to the address specified in the order, we will provide your personal data (including: name, surname, telephone contact and delivery address) to the relevant carrier.

In the case of an intermediary contract, we will provide your personal data to the relevant seller.

If you indicate your academic degree in your order, you consent to the processing of this personal data for the above purposes and under the above conditions. The legal basis for processing in this case is your consent, which you can withdraw at any time.

The use of your email address for sending the newsletter and the rights you have in this respect are discussed above.

Withdrawal from the contract, exercise of the right of defective performance or other right

If you withdraw from a contract you have concluded with us or whose conclusion we have mediated, exercise a right of defective performance or other right, we will process the personal data you provide in connection with the withdrawal or exercise of the relevant right, in particular your identification and contact data and the reason for exercising the right.

We will process that personal data for the purpose of assessing the validity of the exercise of the right, settling the mutual rights and obligations arising from the exercise of the right and demonstrating compliance with the relevant contractual and legal obligations. The legal basis for the processing is the performance of a contract, the fulfilment of a legal obligation and our legitimate interest.

The provision of personal data is voluntary, but without the provision of certain personal data, the asserted right cannot be assessed and settled.

We will retain the above personal data for a period of 5 years from the full settlement of the mutual rights and obligations arising from the exercise of the relevant right or other settlement of the matter. If there is a legitimate interest on our part to keep the personal data for a longer period of time, we will keep the data for the necessary longer period of time.

Method of processing personal data, processors and recipients of personal data

We process personal data both manually - in paper and/or electronic form - and by electronic means in a way that allows the storage of personal data in electronic databases and the processing of such data by computer programs used by us and the persons listed below.

We process personal data both ourselves and through third parties who provide us with external services, such as transport services, programming services, server services, sending emails, statistics and analysis of website traffic, operation of backup servers, bookkeeping and tax records, legal services, debt collection and debt recovery. These persons process personal data only to the extent necessary, under the conditions set out in the preceding sections of this statement and only for the purpose of providing the relevant services to our party.

We will only disclose personal data to other entities if they have a lawful reason for accessing the data (in particular public authorities) or if necessary to protect our rights and legally protected interests (e.g. courts), and always only to the extent necessary.

Your rights relating to the processing of personal data

You have the following rights in relation to the processing of personal data:

the right to confirm whether or not personal data concerning you are being processed and, if so, the right to access such personal data and other information referred to in Article 15 of Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (the "Regulation"),
the right to rectification of inaccurate personal data and, taking into account the purposes of the processing, to the completion of incomplete personal data concerning you,
the right to erasure of personal data concerning you in the cases referred to in Article 17 of the Regulation,
the right to restrict the processing of personal data concerning you in the cases referred to in Article 18 of the Regulation,
the right to the portability of personal data, which means the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to transmit that data to another controller, where the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) of the Regulation and the processing is carried out by automated means,
the right to withdraw consent to the processing of personal data concerning you at any time where the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the Regulation,
the right to lodge a complaint with a supervisory authority, i.e. the Data Protection Authority.

Please also note that

for reasons relating to your particular situation, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f) of the Regulation (i.e. where the legal basis for the processing is the public interest or the legitimate interest of the controller), including profiling based on these provisions, and where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling where it relates to such direct marketing.

This data processing declaration is valid and effective from 1.11.2023.