Privacy Policy
Privacy information
Dear customers and business partners,
On this page, we would like to inform you about the conditions and circumstances of the processing of your personal data in the course of my activities, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the "GDPR"), which came into effect on 25 May 2018. In this way, we also inform you about the protection of personal data and about your rights related to the processing of this data.
Personal Data Controller
The controller of your personal data is the person to whom you have provided the data or who has obtained the data from or about you for the fulfilment of one or more purposes, i.e.:
Arc Light Solutions s.r.o., ID No.: 09321527, Registered office: Na Folimance 2155/15, Vinohrady, 120 00 Prague 2, registered at the Municipal Court in Prague, file number C 334425.Email: info@arc-light-solutions.cz
Phone: +420603900449
You can contact the administrator of your personal data at any time via the e-mail address info@arc-light-solutions.cz
Personal data we process
We process only such personal data of yours necessary to operate the e-shop available on the website www.shellshock.cz where you can purchase goods, both after prior registration and without registration.
In connection with the individual steps of the purchase in the e-shop (e.g. registration, purchase of goods, or obtaining feedback on the purchase made, etc.), our company processes your personal data.
Depending on the specific situation, we also process data on, for example, representatives of legal entities, including members of statutory bodies and employees.
Therefore, we process in particular the following categories of personal data:
Basic data
identification data: title, name, surname, birth number, date of birth, ID number, VAT number, gender;
contact details: permanent address, delivery or other contact address, address of registered office or place of business, telephone, e-mail address;
Additional information
We also process data that you provide to us or otherwise create during the purchasing process, or data that arise from the nature of our business cooperation. Such additional data includes, in particular:
bank account number, payment card number, data on the customer's payment discipline, customer account number, traffic and location data, IP address, and other personal data arising from the performance of a specific contract or relevant legal regulation.
Purposes of personal data processing
We process the personal data obtained in particular for the following purposes:
conclusion and performance of a purchase contract for goods, including their delivery;
conclusion and performance of a cooperation agreement;
Providing our company products
compliance with legal obligations;
ensuring operational activities;
keeping customer records;
keeping records of business partners;
accounting, tax and business purposes;
Recovery;
archiving conducted on the basis of the law;
protection of the rights and legitimate interests of the company;
evaluation of payment discipline.
Most often, these will be the following situations:
Processing of personal data within the user account
For the purpose of convenient and faster shopping, you can set up a user account in the e-shop, after entering your e-mail address and password, and fill in and change your identification and contact details. Thanks to this, you will not have to fill in your personal data every single purchase in the e-shop.
The purpose of processing your personal data within the user account is to simplify and accelerate the subsequent conclusion of individual purchase contracts for goods purchased in the e-shop.
The legal basis for the processing of your personal data lies in the so-called performance of a contractual obligation or acts aimed at concluding a contract (Article 6 (1)(b) of the GDPR), and therefore it is the processing of personal data that is not subject to your consent as a data subject.
The period of processing of your personal data within the user account is determined in accordance with the purpose of processing in such a way that the personal data provided under the user account will be processed by our company until you cancel your user account or ask us to cancel it.
Processing of personal data in the context of the purchase of goods in the e-shop
When purchasing goods in the e-shop, our company will process your identification and contact personal data, as well as data on the purchased goods and the method of payment and transport.
The purpose of processing your personal data when purchasing goods in the e-shop is to conclude and perform the purchase contract for the goods, including their delivery
The legal basis for this data processing is thus the fulfilment of a contractual obligation (Art. 6 (1) (b) GDPR). Therefore, it is a processing of personal data that is not linked to your consent as a data subject.
Our company will transfer your personal data to a contractual carrier as a processor within the meaning of the GDPR so that they can deliver the ordered goods to you.
The period of processing of your personal data has been determined with regard to the purposes pursued at a period of 5 years from the conclusion of the relevant purchase contract. After this period, your personal data will be deleted, unless there is a need to store them for other purposes, e.g. protection of our company's rights from a possible dispute, or valid and effective legal regulations do not stipulate longer periods for the storage of these personal data.
Processing of personal data upon withdrawal from a contract for goods purchased in the e-shop
In the event that you withdraw from the purchase contract for goods purchased in the e-shop, our company will process your identification, contact and bank personal data, as well as data on the goods to which the withdrawal from the purchase contract relates.
The purpose of processing your personal data upon withdrawal from the contract is to fulfil the obligation to return the purchase price paid to you for the goods to which the withdrawal from the purchase contract relates.
The legal basis for this processing of personal data is therefore the performance of a legal or contractual obligation (Article 6(1)(b) and (c) GDPR), and therefore it is a processing of personal data that is not subject to your consent as a data subject.
The period of processing of your personal data in connection with withdrawal from the purchase contract for goods purchased in the e-shop was set at 90 days from the provision of the data. After this period, your personal data will be automatically deleted.
Processing of personal data to obtain feedback on the purchase made
Our company values the opinions of our customers very much, which is why we use feedback to find out your experience with shopping in the e-shop so that we can adjust the purchase process to make it as convenient as possible for customers.
In order to determine your satisfaction with the purchase process and the entire purchase process, we will process your e-mail address for the purpose of sending you a satisfaction questionnaire in the form of a commercial message. Filling in the questionnaire is voluntary.
In this case, the purpose of processing your e-mail address is our company's interest in ascertaining customer experience and satisfaction with purchases in our e-shop, so that we can make possible adjustments to our processes and thus ensure the greatest possible customer satisfaction with the purchase.
The legal basis for the processing of your e-mail address is therefore the legitimate interests of our company (Art. 6 (1) (f) GDPR) and is therefore personal data processing that is not tied to your consent as a data subject.
The processing period of your e-mail address has been set with regard to the purpose pursued and will be deleted after the questionnaire has been sent.
Processing of personal data in connection with complaints about purchased goods
In connection with the complaint of purchased goods, our company will process your personal data to the extent necessary for its settlement, i.e. at least to the extent of your identification and contact details and data on the claimed goods.
The purpose of processing your personal data in this case is to settle the complaint as well as to protect the rights of our company.
The legal basis for the processing of your personal data when filing a complaint lies in the fulfilment of our company's legal obligation to settle your complaint (Article 6(1)(c) of the GDPR) and also in the legitimate interests of our company (Article 6(1)(f) of the GDPR), and therefore it is personal data processing that is not linked to your consent as a data subject.
The period of processing of personal data depends on the time necessary for settling the complaint and also on the time necessary for the protection of the legitimate interests of our company.
Processing of personal data for the purpose of sending the newsletter
If you are interested, you can subscribe to our newsletter on our company's website. To subscribe to the newsletter, you must provide our company with some of your personal data for processing, at least in the scope of your e-mail address.
In this case, the purpose of processing your personal data is direct marketing in the form of sending a newsletter.
The legal basis for the processing of your personal data lies in your consent to receive the newsletter (Art. 6 (1)(a) GDPR), which you express by subscribing to our company's newsletter. You can revoke this consent at any time, with effect for the future, either by post or e-mail, or by clicking on the link that you can find here and at the end of each newsletter sent.
The period of processing of personal data depends on the consent granted and the provided personal data will be processed until you withdraw your consent.
Processing of personal data within the framework of the business relationship with contractual partners
Within the framework of business cooperation, it is necessary for our company to process certain personal data of contractual partners, their contact persons or persons involved in the establishment and implementation of the contractual relationship. In particular, the following categories of personal data may be processed:
personal identification data (e.g. name, surname, position held, date of birth, etc.);
personal contact data (e.g. employer's address, business mobile phone number or e-mail address, etc.);
data proving entries in public registers (e.g. extract from the Commercial or Trade Register, etc.);
data on the course of the contractual relationship (e.g. due date, etc.);
photographs and camera recordings (e.g. from the delivery of goods, etc.);
Other data related to the contractual relationship (e.g. complaints regarding possible violations of legal regulations, etc.).
Our company will obtain personal data from you and the contractual partners themselves and, in justified cases, also from third parties (e.g. tax authorities or notifiers of possible complaints or suggestions, etc.).
In this case, the purpose of processing your personal data consists of:
the establishment and implementation of a contractual relationship;
fulfilment of the obligations imposed on our company by legal regulations (e.g. in connection with legal regulations to prevent money laundering, etc.); and
protection of legitimate interests of our company (e.g. enforcement of legal claims arising from the contractual relationship
The legal reason for our company's processing of your personal data lies in:
performance of a contractual obligation (Art. 6 (1) (b) GDPR);
compliance with a legal obligation (Art. 6 (1) (c) GDPR); and
legitimate interests of our company (Art. 6 (1) (f) GDPR).
Therefore, it is a processing of personal data that is not subject to your consent as a data subject, because without knowledge of your personal data, our company would not be able to achieve the above-mentioned purposes.
For the above purposes, our company will process your personal data for the period necessary to achieve them. The processing time is based mainly on the relevant legal regulations, such as the Accounting Act, the Value Added Tax Act or the Income Tax Act.
Processing of personal data in the context of claims resolution
Although our company strives to prevent and reduce such situations as much as possible, there are certain situations where certain damage may occur to our company's customers in connection with the sale of products (for example, damage caused by defective products).
As part of the resolution of a loss event, our company must process personal data of injured persons, witnesses and tortfeasors, at least to the extent of identification and contact personal data, data on the damage caused and other necessary related data.
The purpose of processing your personal data in this case is to resolve the loss event, i.e. to clarify the course of the loss, identify the tortfeasor, determine the amount of damage and possible compensation for damages.
The legal reason for our company's processing of your personal data lies in:
compliance with the legal obligation to compensate for the damage caused, if our company is liable for the damage (Article 6(1)(c) of the GDPR);
legitimate interests of our company in compensation for damage caused to it (Art. 6 (1) (f) GDPR).
With regard to the legal grounds for processing your personal data, this is processing that is not tied to your consent as a data subject.
Our company will process your personal data for the above purpose for the period necessary to achieve it, unless there is a need to process it for other purposes (e.g. for the needs of court proceedings, i.e. for other legitimate interests of our company).
Cookies and personal data processing
Our company uses so-called cookies files on its website. These are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit a website and do not damage this in any way. Cookies store information associated with your end device that was used to display the website.
Although cookies do not allow the identification of a specific user of a terminal device, they can still be considered personal data within the meaning of the GDPR under certain conditions. For this reason, our company applies the same rules to the handling of these files as to the handling of personal data.
Our company uses so-called SESSION COOKIES, which help to recognize that you have already visited some of our company's pages, or that you have already logged in to your user account in the E-shop. Session cookies are automatically deleted when you leave our website.
Furthermore, our company uses so-called TEMPORARY COOKIES, which are stored on your end device for a specified period of time and allow our company to recognize that you have visited this website in the past and what settings you have made, including the goods you have placed in the E-shop cart. The aim of these cookies is to simplify and make your navigation on our company's website more pleasant.
We use cookies for the following purposes:
statistical evaluation of visits to its website;
optimisation of your website;
To make our company's product offer more effective by displaying personalized advertising derived from user behavior on the website, application or newsletter.
With regard to the stated purposes, the legal basis for the processing of this personal data lies in the legitimate interests of our company (Art. 6 (1) (f) GDPR). Therefore, it is a processing of personal data that is not subject to your consent as a data subject.
An overview of the cookies used by our company on its website, along with other relevant information (e.g. storage duration), can be found in the cookie policy.
In general, you can prevent cookies from being stored on your device in the following ways:
by changing your browser settings as described in the Cookie Policy; or
by filing an objection with our company
Preventing cookies from being stored on your device may result in you not being able to use some of the functions of the website to their full extent. If you have a customer account and are logged in, the information stored in cookies will also be assigned to your customer account.
To optimize the website, we use the analysis tool Google Analytics, developed and operated by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Analytics analyzes the behavior of website users through pseudonymized profiles that it creates based on cookies that collect the following data:
browser type/version;
operating system used;
referrer URL (the previous page visited);
the name of the host computer from which access was made (IP address);
the time of the server query.
Our company uses so-called IP masking in Google Analytics, where the IP address is collected in an abbreviated format, which makes it impossible to identify the user of the end device.
The data generated by the cookie files is transmitted to a Google server in the United States of America for analysis by Google Analytics. Google will not associate the IP address contained in the cookie file with any other data held by Google.
The processing period of cookies within Google Analytics is set to 14 months. They will then be automatically deleted. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.
You can prevent the storage of cookies for Google Analytics in the following ways:
by changing your browser settings as described in the Cookie Policy; or
by filing an objection with our company; or
by downloading and installing this browser add-on.
Processing of personal data on social networks
Our company also uses social networks for the purposes of communication with the public, in the form of setting up and operating its pages on these social networks and by implementing plugins of these social networks into its website.
Within social networks, your personal data is processed by their operators. In those areas of social networks that our company can influence by setting parameters, our company is considered to be a so-called joint controller within the meaning of Article 26 of the GDPR together with the operator of the relevant social network.
Our company has no influence on the processing of personal data by the operators of individual social networks and is not aware of the scope of this processing. It cannot be ruled out that the operators of social networks do not use web tracking methods, create personalized profiles of your behavior, etc. For more information on the processing of personal data by the respective social network operator, please refer to the terms of use of the respective social network or the terms of personal data protection.
In this case, the purpose of processing your personal data is to ensure communication between our company and the public.
The legal ground for processing your personal data for the above purpose lies in the legitimate interests of our company (Article 6 (1)(f) of the GDPR). This is the processing of personal data that does not require your consent as a data subject.
Our company will not store or process your personal data in any way. Information about the period of processing of your personal data by the operator of the respective plug-in is not available to our company.
Processing log files
When you visit our company's website, so-called protocol files are created and processed. These consist of the data listed below, which may (but does not have to) include personal data, and which are sent to the server of our company's website by the browser used on the end device used to visit the website. These are the following data:
information about the website from which you visited our website;
the IP address of the Internet-enabled device that sent the request;
an indication of the date and time of access;
information about the name and URL of the displayed file;
information about the website/application from which access was made (referrer URL);
information on the browser used, or the operating system of the end device used with an Internet connection, and the designation of the connection provider.
If you have given your consent to so-called geo-location in your browser, operating system or other settings on your device, this function is used exclusively to offer you individual services related to your current location.
The purpose of processing protocol files by our company is to ensure a trouble-free connection to our company's website, to ensure comfortable use of our company's websites/applications and to evaluate the security and stability of the system.
The legal basis for the processing of log files is the legitimate interests of our company (Art. 6 (1) (f) GDPR) and therefore it is personal data processing that is not subject to your consent as a data subject.
The processing time of protocol files has been set by our company with regard to the monitored purposes to 1 month. After this period, the entire log file will be automatically deleted, including any personal data. If you have consented to the processing, the data on the geographical location of your terminal device will be automatically deleted as soon as you leave our website.
Sources of personal data collection
We obtain personal data primarily from you, especially as part of the process of concluding a purchase contract for goods or from publicly available records.
Processing and sharing of personal data
We process your personal data exclusively manually without the use of automated decision-making.
The protection of your data is organisationally and technically secured in accordance with the relevant legal regulations. I process your personal data in paper and electronic form and they are stored exclusively in the Czech Republic.
Of the processing of your personal data described above, it will be transferred to recipients outside the European Union or the European Economic Area in the cases described under section 10. (Analysis of user behavior on websites using Google Analytics) and 11 (Social networks). All of these beneficiaries have signed up to the EU-U.S. rules.
Your personal data is further transferred, on the basis of a legal obligation, to the following recipients:
Supervisory authorities;
Tax Office
Your personal data is further transferred to the following processors:
Shipping Company
Business partners (suppliers of products and services)
In certain cases, our company is a joint controller of your personal data with the operators of social networks, namely:
in the case of the social network Facebook, with Facebook Inc., with its registered office at 1601 South California Avenue, Palo Alto, CA 94304, USA. You can find more information on the terms of use of the Facebook social network and the processing of your personal data at the following links:
http://www.facebook.com/policy.php
http://www.facebook.com/about/privacy/your-info-on-other#applications
http://www.facebook.com/about/privacy/your-info#everyoneinfo
in the case of the social network Instagram, with Instagram Inc., with its registered office at 1601 Willow Road, Menlo Park, California 94025, USA. You can find more information about Instagram's terms of use and the processing of your personal data at the following links:
in the case of Twitter, with Twitter, based in San Francisco, California, USA. You can find more information about Instagram's terms of use and the processing of your personal data at the following links:
https://twitter.com/en/privacy
in the case of Pinterest, with Pinterest, based in San Francisco, California, USA. You can find more information about Instagram's terms of use and the processing of your personal data at the following links:
https://policy.pinterest.com/en/privacy-policy
We would like to inform you that the operators of individual social networks can use tracking tools and create personalized profiles. This processing of personal data is fully the responsibility of the respective social network operator as a personal data controller.
Your personal data may also be transferred to third parties that have the legal authority to require the transfer of such personal data, such as various state authorities, upon a legitimate request.
Retention of personal data
Your personal data is stored for as long as necessary to provide services, complete requested transactions or for other necessary purposes, such as compliance with legal obligations, etc.
Your privacy rights
If the processing of personal data is based on your consent, you have the right to withdraw your consent for future processing at any time.
You have the right to request access to your personal data and more detailed information about their processing from our company, as the administrator of your personal data,
You have the right to request the correction of your inaccurate or incomplete personal data.
You have the right to request the provision of your personal data in a commonly used and machine-readable format, allowing them to be transferred to another controller, if we have obtained these data on the basis of your consent or in connection with the conclusion and performance of a contract, and they are processed by automated means.
You have the right to object to the processing of some or all of your personal data.
You have the right to ask our company to delete your personal data if we no longer have any legal reason for further processing.
You have the right to lodge a complaint with the Office for Personal Data Protection.
Possible changes to this information
Over time, there may be changes in the legal regulations governing the rules and conditions of processing and protection of your personal data, or changes in our conditions, procedures and methods of processing and protection of your personal data. We will always notify you by updating this information.
Thanks
Arc Light Solutions, s.r.o.