Privacy Policy
Legal Notice: This document was created as a template for informational purposes only. By using it, you agree to this notice and acknowledge that Webnode is not responsible for any actions taken based on the contents of this page. We recommend that you seek legal advice and adjust this document to suit the needs of your business.
The online store […] on the website […] with VAT number […] located at […] processes personal data provided by the Customer to comply with and enforce the Terms and Conditions, process orders and electronic deliveries, and for necessary communication within the period required by law.
General Terms
-
The controller of personal data, in accordance with the GDPR (referred to as the "Regulation"), is […], a company with VAT number […], headquartered at […] (referred to as the "Controller");
-
The Controller's contact details are: email: […], phone: […];
-
Personal data means any information related to an identified or identifiable natural person.
Origin of Personal Data
-
The Controller processes personal data obtained with the customer's consent and collected as part of the purchase contract and execution of the electronic order placed in the online store […];
-
The Controller only processes the customer's identification and contact details necessary to fulfill the purchase contract;
-
The Controller processes personal data for delivery and accounting purposes and for necessary communication between the parties involved in the contract, for the period required by law. Personal data will not be disclosed or transferred to other countries.
Purpose of Data Processing
The Controller processes the customer's personal data for the following purposes:
-
Registration on the Website […] in accordance with Chapter 4, Section 2 of the GDPR;
-
Execution of electronic orders created by the Customer (name, address, email, phone number);
-
Compliance with laws and regulations arising from the contractual relationship between the customer and the data controller;
-
Execution of the purchase contract based on the necessary personal data. The contract cannot be fulfilled without personal data.
Data Retention Period
-
The Controller stores personal data for the period necessary to comply with laws and regulations arising from the contractual relationship between the Customer and the Controller, and for a period of 3 years after the end of the contractual relationship;
-
The Controller shall delete all personal data once the data retention period has expired.
Recipients and Processors of Personal Data
Third parties processing the customer's personal data are subcontracted by the Controller. The services of subcontractors are essential for the successful execution of the contract for the acquisition and processing of electronic orders between the Controller and the Customer.
The Controller's subcontractors are:
-
Webnode AG (e-commerce system);
-
Shipping companies;
-
Google Analytics (website analysis);
Customer Rights
In accordance with the Regulation, the Customer has the right to:
-
Access personal data;
-
Rectify personal data;
-
Delete personal data;
-
Object to the processing of personal data;
-
Data portability;
-
Withdraw consent for the processing of personal data in writing or by email: […];
-
File a complaint with a supervisory authority in case of an alleged violation of the Regulation.
Personal Data Security
-
The Controller takes all necessary technical and organizational precautions to protect personal data;
-
The Controller has implemented technical precautions to secure data storage locations, in particular by protecting computer access with a password, using antivirus software, and performing regular computer maintenance.
Final Provisions
-
By placing an electronic order on the website […], the customer confirms that they are informed of all personal data protection conditions and accept them to the fullest extent possible;
-
The customer agrees to these conditions by ticking the checkbox on the order form;
-
The Controller may update these terms at any time. A new updated version shall be published on the website.
These Rules come into effect on [Date].