1. The controller of personal data pursuant to Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR“) is Lucie Drdova ID 19088230 with its registered office at Renneská 43, Brno, 63900 (hereinafter: “Controller“).
2. The contact details of the controller are
address: Renneská 43, Brno, 63900
email: luci.vonaskova@gmail.com
phone: +420770778118
3. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
4. The controller has not appointed a data protection officer.
1. The controller processes personal data that you have provided to the controller or personal data that the controller has obtained as a result of the fulfillment of your order. We obtain personal data directly from you as the person concerned. If the personal data is not obtained directly from you as the person concerned, the source of this personal data is in most cases your travel companion or a family member. You also provide personal data or some of your personal data when you subscribe to the newsletter or in other places in the online environment or in other documents.
2. By personal data we mean in particular identity-related data and contact details, i.e. title, name, surname, residential address, date of birth, birth number, travel document number and scan, e-mail and telephone number.
For marketing purposes, the Controller processes the following categories of personal data:
(a) Basic identification data – title, name, surname and home address;
b) Contact details – email address and telephone number;
c) Photographs of the expedition experience, if any;
d) Information about your use of products and services – what services you have been interested in using with us in the past, etc., and we will be able to recommend suitable products and services based on this information;
e) Information from records of telephone calls or other interactions with you, for example by email or SMS.
3. The controller processes your identification and contact data and the data necessary for the performance of the contract. The scope and list of personal data processed is determined by the relevant legislation and furthermore follows directly or indirectly from the concluded dispatch order as well as other contractual documentation or is specified in the consent to the processing of personal data. The Controller processes personal data to the extent necessary to fulfill the purpose of processing.
1. The lawful reason for processing personal data is performance of a contract between you and the controller pursuant to Article 6(1)(b) GDPR, the legitimate interest of the controller in the provision of direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(f) GDPR, your consent to processing for the purposes of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services, in the absence of an order for goods or services.
2. The purpose of the processing of personal data is to process your order and to exercise the rights and obligations arising from the contractual relationship between you and the controller; when placing an order, personal data is required that is necessary for the successful processing of the order (name and address, contact), the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or its performance by the controller, sending commercial communications and doing other marketing activities.
If the personal data are processed in connection with the performance of the contractual obligations of the Controller, the legitimate interest of the Controller or pursuant to a special regulation or international treaty to which the Czech Republic is bound, the purpose of the processing is related in particular to the following activities:
Where personal data is processed on the basis of consent for marketing purposes, the main purpose of that processing is to offer the latest information on the Controller’s current products and services or on the offers and services of the Controller’s business partners, whereby the said purpose of processing is mainly related to the following activities:
The consent given for marketing purposes is voluntary. However, it is necessary in order for the Administrator to send individual offers of products and services, to arrange consumer competitions, etc., and without such consent the Administrator is not entitled to provide the services in question.
3. There is no automatic individual decision-making by the Controller within the meaning of Article 22 GDPR.
4. The legal basis for the processing of personal data is normally the performance of a legal obligation, the conclusion, administration and performance of contractual obligations from the dispatch order, a legitimate interest, which is the protection of the rights and legally protected interests of the Controller and the consent of the person concerned (in particular for the purposes of marketing, consumer competitions, etc.). If you refuse to provide the Controller with the personal data required for the purpose of fulfilling the Controller’s contractual obligations or as required by law, the Controller is not obliged to confirm your dispatch order or provide any other services to you.
1. The controller shall retain personal data
2. After the expiry of the retention period, the controller shall delete the personal data, unless their retention is required under the relevant legislation of the Czech Republic.
1. In addition to the Controller and its employees, other persons who process personal data as intermediaries may have access to personal data. Given the range of services provided by the Controller, this is a very wide range of intermediaries, with personal data also being transferred to third countries, mostly countries of destination and transit in the sense of dispatch orders. The different categories of intermediaries are listed below:
2. For the processing of personal data for marketing purposes, in addition to the Controller and its employees, other persons who process personal data as intermediaries may have access to personal data. For example, these may be external companies that manage IT systems or provide other services in connection with the processing of personal data for marketing purposes that have been commissioned by the Controller for this purpose.
1. Za podmínek stanovených v GDPR máte
2. Dále máte právo podat stížnost u Úřadu pro ochranu osobních údajů v případě, že se domníváte, že bylo porušeno Vaše právo na ochranu osobních údajů.
3. Vyjádření a případné informace o přijatých opatřeních Správce poskytne co nejdříve, nejpozději však do jednoho měsíce od doručení žádosti. V odůvodněných případech s ohledem na komplexnost a počet žádostí může Správce tuto lhůtu prodloužit o další dva měsíce, a to i opakovaně. Správce je povinen Vás informovat o každém takovém prodloužení do jednoho měsíce od doručení žádosti spolu s důvody prodloužení lhůty.
4. Souhlas se zpracováním osobních údajů je založen na principu dobrovolnosti t.j. souhlas můžete kdykoliv odvolat prostřednictvím e-mailu zaslaného na emailovou adresu luci.vonaskova@gmail.com, s uvedením Vašich osobních údajů minimálně v rozsahu jméno a příjmení, adresa bydliště spolu s informací, že si nepřejete, aby Správce zpracovával Vaše osobní údaje (případně pokud byste chtěli dostávat pouze vybrané nabídky, uveďte, prosím, o jaké nabídky jde, abychom vám mohli vyhovět). V případě, že máte jakékoliv dotazy nebo připomínky ke zpracovávání Vašich osobních údajů, kontaktujete nás prosím prostřednictvím e-mailu na e-mailové adrese: luci.vonaskova@gmail.com.
1. The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data.
2. The controller has taken technical measures to secure data storage and storage of personal data in paper form, in particular, e.g. use of antivirus programs, secure storage of backups, secure access passwords.
3. the controller declares that only persons authorised by the controller have access to the personal data.
1. The confirmation in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), you consent to the processing of your personal data by Lucie Drdova, ID 19088230, with registered office at Renneská 43, Brno, 63900, as the operator for marketing purposes for a period of 15 years in the following scope: title, name, surname, home address, e-mail address, telephone number, and, if applicable, photos of the dispatch, if taken. You may withdraw your consent to the processing of personal data at any time. Further information on the protection and processing of personal data can be found on the website www.horsemenistan.com/gdpr.
2. You agree to these terms and conditions by ticking the consent box via the online form. By checking the consent form, you confirm that you have read and accept the terms and conditions of the privacy policy in its entirety.
3. The administrator is entitled to change these conditions. It will publish the new version of the privacy policy on its website.
These terms and conditions shall take effect on 04.12.2023.