Privacy policy

I. Basic provisions

The controller of personal data pursuant to Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is D.M.D.-Group spol. s r.o., ID number 26475600 with its registered office at Jeremenkova ul. 1171/102, 14000 Prague Podolí (hereinafter: “administrator”).

Personal data means any information about an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or one or more specific physical, physiological, genetic, mental, economic, cultural or social characteristics of that person.

The administrator did not appoint a data protection officer.

II. Sources and categories of personal data processed

The administrator processes personal data that you have provided to him, or personal data obtained on the basis of fulfillment of a legal obligation, performance of a contract, legitimate or vital interest, or your consent to the processing of personal data.

The administrator processes your identification and contact data, as well as data necessary for content personalization, advertisements, traffic analysis, and contract performance.

III. Legal reason and purpose of personal data processing

Processing on the basis of legitimate interest: In some cases, the administrator processes personal data to ensure the protection of its rights and legally protected interests, or the rights and interests of other entities. Such processing may be performed without the consent of the data subject after careful assessment of the legitimate interest.

Processing on the basis of contractual conditions: Performance of the contract between you and the administrator (Article 6 (1) GDPR). Provision of personal data (name, address, contact) is necessary to conclude and execute the contract; without it, the contract cannot be concluded or performed.

Direct marketing: The administrator may process personal data for direct marketing purposes (e.g., sending commercial communications and newsletters) based on legitimate interest (Article 6 (1) (f) GDPR) or your consent (Article 6 (1) (a) GDPR in conjunction with § 7 paragraph 2 of Act No. 480/2004 Coll.) if no goods or services have been ordered.

No automated individual decisions are made by the administrator within the meaning of Article 22 GDPR.

IV. Data retention period

The administrator stores personal data:

for the duration of the mutual contractual relationship;
for the time necessary to exercise rights and obligations arising from the contractual relationship and to assert claims (up to 5 years from termination of the contract);
until consent to marketing purposes is revoked, but no more than 5 years if processing is based on consent.

After the retention period, personal data will be deleted.

V. Recipients of personal data (subcontractors of the controller)

Recipients of personal data are persons involved in the delivery of goods/services or execution of payments under a contract. The administrator does not intend to transfer personal data to a third country or international organization. In such cases, appropriate safeguards or Commission decisions regarding adequate protection will be applied.

VI. Cookies

We use cookies to improve the convenience of viewing our website. Cookies are small text files created on your device when you visit the website.

Types of cookies:

Session cookies – deleted when the browser is closed;
Persistent cookies – stored to remember preferences and improve convenience for future visits.

Cookies help us collect statistics, improve functionality, support tools (anti-spam, age-restricted content), and provide services via our suppliers.

You can disable or delete cookies in your browser settings. By using the website, you consent to the use of cookies as described above.

VII. Your rights

Under GDPR, you have the right to access, correct, delete, restrict processing, object, data portability, and withdraw consent for processing of personal data. You also have the right to file a complaint with the relevant data protection authority if you believe your rights have been violated.

VIII. Terms of personal data security

The administrator declares that all appropriate technical and organizational measures have been taken to secure personal data, including passwords, antivirus programs, and backups. Access to personal data is limited to authorized persons only.

IX. Final Provisions

By submitting an order via the online form, you confirm that you are familiar with these personal data protection conditions and accept them in full. The administrator may change these conditions; the new version will be published on the website and sent to the email address you provided.

These conditions take effect on 1.11.2021.