Processing of Personal Data and Data Subject Information
Personal Data Protection Conditions
I. Basic Provisions
The operator of personal data according to § 5 letter o) of the Act No. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as the “Act”) is
Pro SUPP LTD., 07756234, 9 Oaklands Ave, Isleworth TW7 5PX, United Kingdom
email: shop@musclebody.eu (hereinafter referred to as the “operator”).
Personal data means all information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, network identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The operator has not appointed a data protection officer.
II. Sources and Categories of Processed Personal Data
The operator processes personal data you have provided or personal data obtained in the course of fulfilling your order.
The operator processes your identification and contact details and data necessary for contract performance.
III. Legal Basis and Purpose of Personal Data Processing
The legal basis for processing personal data is
the performance of the contract between you and the operator according to § 13 para. 1 letter b) of the Act,
the legitimate interest of the operator in providing direct marketing (especially for sending commercial communications and newsletters) according to § 13 para. 1 letter f) of the Act,
your consent to processing for the purpose of providing direct marketing (especially for sending commercial communications and newsletters) according to § 13 para. 1 letter a) of the Act, if no order for goods or services has been placed.
The purpose of processing personal data is
handling your order and the execution of rights and obligations arising from the contractual relationship between you and the operator; personal data required for the successful processing of the order (name and address, contact) are demanded, providing personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude or perform the contract by the operator,
sending commercial communications and performing other marketing activities.
The operator engages in automatic individual decision-making according to § 28 of the Act. You have given your explicit consent to such processing.
IV. Retention Period of Personal Data
The operator stores personal data
for the period necessary to exercise rights and obligations arising from the contractual relationship between you and the operator and to claim rights from these contractual relations (for a period of 15 years from the termination of the contractual relationship).
for the period until consent to process personal data for marketing purposes is withdrawn, for a maximum of 3 years, if personal data are processed based on consent.
After the retention period expires, the operator deletes the personal data.
V. Recipients of Personal Data (operator's subcontractors)
The recipients of personal data are persons
involved in the delivery of goods/services/execution of payments based on the contract,
providing e-shop operation services and other services related to the operation of the e-shop,
providing marketing services,
for the purpose of accounting for tax documents in accordance with the contract and with generally binding legal regulations to the extent of:
- name and surname, title,
- postal address,
- billing address,
- email address,
- telephone contact,
- banking information,
- details of the performance subject. The operator does not intend to transfer personal data to a third country (country outside the EU) or international organization.
VI. Your Rights
Under the conditions set in the Act, you have
the right to access your personal data according to § 21 of the Act,
the right to rectification of personal data according to § 22 of the Act, or limitation of processing according to § 24 of the Act,
the right to erasure of personal data according to § 23 of the Act,
the right to object to processing according to § 27 of the Act,
the right to data portability according to § 26 of the Act,
the right to withdraw consent to processing in writing or electronically at the address or email of the operator specified in section III of these conditions.
Furthermore, you have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.
VII. Personal Data Security Conditions
The operator declares that all appropriate technical and organizational measures have been taken to secure personal data.
The operator has implemented technical measures to secure data storage (login name, password, antivirus program, and firewall) and storage of personal data in paper form (locked room).
The operator declares that personal data are accessed only by authorized persons.
VIII. Final Provisions
By submitting an order from the internet order form, you confirm that you are familiar with the personal data protection conditions and that you accept them in their entirety.
You agree to these conditions by ticking consent via the internet form. By ticking consent, you confirm that you are familiar with the personal data protection conditions and that you accept them in their entirety.
The operator is entitled to change these conditions. The new version of the personal data protection conditions will be published on its websites and at the same time, the new version of these conditions will be sent to your email address provided to the operator.
These conditions take effect on May 25, 2018.