Processing of personal data

Processing of personal data - Česká mincovna SK s.r.o

Česká mincovna SK, s.r.o., undertakes to process personal data in accordance with valid legal regulations, i.e. Act No. 18/2018 Coll. (Personal Data Protection Act) and, with effect from 25 May 2018, also with EU Regulation 2016/679 (General Regulation on Personal Data Protection), which will in some respects replace the amendment to the Act. Below we provide you with important information and conditions for the processing of business data that are related to your purchase or your interest in sending business offers.

Processing of personal data

PROCESSING PERSONAL DATA CONDITIONS FOR CLIENTS

CLIENTS CAN SUBMIT AN ONLINE APPLICATION HERE.

INFORMATION ON THE PROCESSING OF PERSONAL DATA
PERSONAL DATA CONTROLLER

CONTACT DETAILS
Česká mincovňa SK, s.r.o.
Address: Centrum 26/31, 017 01 Považská Bystrica,
E-mail: info@ceskamincovna.sk
Telephone: +421940644 668

The controller of personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and pursuant to Act No. 18/2018 Coll. on the protection of personal data, as amended, is Česká mincovna SK, s.r.o., with registered office at Centrum 26/31, 017 01 Považská Bystrica, ID No.: 52 444 040, (referred to as Česká mincovňa).

THE SCOPE OF THE PERSONAL DATA PROCESSED

Personal data means any information about an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, a network identifier or other specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The Czech Mint processes personal data provided by the Client when establishing a business relationship, i.e. when the Client orders or reserves goods or uses the services provided (Golden Account, Golden Savings, Golden Safe) and also when registering a customer account. Furthermore, the Company processes the personal data provided by the Clients for the purpose of participating in the Company's promotions or for the purpose of sending commercial communications.

The data processed may include:

Common personal data: name and surname, email address, telephone number, billing and delivery address, academic degree, date of birth, bank account number, information about the business conducted (bookings, orders, dispatches, invoices, redemption of goods, stored goods, services used: (Golden Account, Golden Savings, Golden Safe)) and contact history (e-mails and SMS sent). Furthermore, in the case of electronic access to the company's website, the following data is processed: IP address and cookies).

Sensitive personal data: none

Other information: data that we collect automatically in connection with the use of the website, such as IP address, type of browser, device and operating system, time and number of accesses to the website, information obtained by means of cookies and other similar information. Please note that we may collect this additional data even without registration and regardless of whether or not you make a purchase on the Website. This additional data helps us to detect cookies, the use of which we have informed you about upon your arrival on the website.

COOKIES AND GOOGLE SERVICES

The website uses so-called “cookies“ for its operation. The website also uses Google Analytics and, where applicable, other services provided by Google, Inc. (“Google“). The use of cookies also occurs in the context of the use of these other services.

What are cookies and how do you consent to their use?

Cookies are text files stored on the computer or other electronic device of each visitor to a web interface, which allow the analysis of the use of the web interface.

By using the web interface, you consent to the use of cookies and to the processing of data about you by Google and our company in the manner and for the purposes described in more detail on the web interface.You were informed about the use of cookies when you first accessed the web interface.

Is there anything you can do to prevent cookies from being stored on your computer?

You can refuse the use of cookies by selecting the appropriate settings in your internet browser. If you do not want to be part of Google Analytics statistics, you can use the blocking option. Please note that if you refuse the use of cookies, it is possible that you will not be able to use the website fully.

How does Google use the data collected?

If you are interested in how Google uses the collected data by using the web interface, you can find out this information by clicking on the following link: How Google uses data when you use our partners' websites or app s and How Google processes personal information.

Remarketing activities

For better targeting and personalisation of internet advertisements, we use services such as Sklik from Seznam.cz, AdWords from Google, and possibly others. For you, this means that when you browse the internet, you are shown advertisements for products that you have already shown interest in in the past, for example by visiting our website. These services use information from cookies to learn about your movements on the web for the purposes described above. If you do not want this information to be used for these purposes, you must set your internet browser accordingly (set your browser to block the storage of web browsing information).

PURPOSE OF PROCESSING PERSONAL DATA

Clients' personal data is processed for the purposes set out below:

1) Client registration in the Czech Mint's information systems and sending of information notifications

The registration of the Client is important, in particular to enable the establishment of future business relations and to inform the Client about ongoing business operations (Reservations, Orders, Invoices, etc.). The scope of the Client's data provided corresponds to the needs for future business dealings. The Client shall provide first and last name, billing address, email address and possibly other optional data.

For this purpose of processing, the Client's consent is granted, which can be revoked at any time, in the same way it was obtained, i.e. in the case of registration of a customer account by the Client via the website www.ceskamincovna.sk - after logging in to his customer account, in the case of registration at sales outlets, the Client can revoke the consent at any sales outlet of the Czech Mint.

2) Sending commercial communications

The purpose of sending commercial notifications is to inform the Client about the ongoing marketing activities and offers of the Czech Mint. The scope of the data provided is limited to e-mail or postal address, first and last name.

For this purpose, the legitimate interest of the Administrator in providing direct marketing (in particular for sending business notifications) is exercised in the event that a business relationship has already been established with the Client. For cases where a business relationship is not established, the Client must give consent for this processing purpose. In both of the above cases, it is possible to withdraw at any time, either at the footer of each email commercial communication or via the contact details provided above.

3) Processing of personal data for legitimate interest

The processing of the Client's personal data for the purpose of legitimate interest is mainly for the protection of the rights of Česká mincovňa. In this context, the personal data of the Client who expresses an interest in visiting an area that requires an increased level of security (e.g. the company's production department) is recorded.

4) Processing for the purpose of contract performance

For the purpose of contract performance, the Czech Mint processes the Client's personal data in connection with validly concluded contracts pursuant to Article 6(1)(b) of EU Regulation 2016/679 and Section 13 of Act No. 18/2018 Coll.

5) Legal grounds for processing personal data

The Czech Mint complies with all applicable laws of the Slovak Republic and the EU, for the purpose of which it processes the Client's personal data, these are the cases listed below:

The Client's personal data in connection with all accounting documents must be kept for the statutory period.
- Act No. 222/2004 Coll. on VAT
- Act No. 431/2003 Coll. on Accounting
- Act No. 563/2009 Coll. on the Tax Code.

SOURCES OF PERSONAL DATA

1) The controller processes personal data that you have provided to the controller or personal data that the controller has obtained on the basis of the fulfilment of your order.

2) The controller processes your identification and contact data and the data necessary for the performance of the contract.

WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA

The client always voluntarily gives his/her consent to the processing of personal data and has the possibility to withdraw it at any time, in whole or in part. The client can withdraw consent in several ways:

Via their customer account on the company's website.
By e-mail request sent to info@ceskamincovna.sk.
By written request sent to the address of the Company's registered office.
Via the unsubscribe link provided in the footer of each business communication.

After withdrawal of consent to the processing of personal data by the Client, Česká mincovňa may only process personal data where there is another purpose for processing, and only to the extent that is adequate for that purpose.

PERSONAL DATA PROCESSOR

The Czech Mint is the controller of the personal data of clients and the main processor of this data. In order to provide the necessary services for the client (e.g. transport of goods, sending emails, etc.), other companies that provide these services to the Czech Mint are also involved in the processing. The Czech Mint has concluded a personal data processing agreement with all processors, which declares the protection of the Client's personal data. List of cooperating companies:

STAPRO - information system support,
AutoCont CZ sro - information system support,
G2 server CZ sro – server hosting,
Microsoft Azure - server hosting,
Post servis – Sending notifications,
ClickDimension – Sending business notifications,
Slovenská pošta - delivery of goods,
Loomis - delivery of goods,
FEDEX - delivery of goods,
ORIS - camera technology,
HomeCredit as - only in case of orders with payment by instalments,
Google - web analytics and online marketing,
Heureka - purchase satisfaction rating,

As you have already been informed when placing an order, the company Česká mincovna, passes on the email addresses entered when completing the order to the operator of the portal www.heureka.sk for the purpose of generating and sending satisfaction questionnaires with the purchase on the website. The operator of the www.heureka.sk portal is in relation to Česká mincovna in the position of a processor - the personal data transmitted is therefore processed for the purpose of measuring satisfaction with the purchase exclusively for Česká mincovna SK, s.r.o. and is not processed for its own purposes.

C.Profit – accounting and payroll processing,
Česká mincovna a.s.

DISCLOSURE OF DATA TO OTHER ENTITIES

The Czech Mint does not disclose the Client's personal data to any entities other than those mentioned above. Personal data may be further disclosed only to entities authorized by law, such as law enforcement authorities, etc.

PERIOD OF PERSONAL DATA PROCESSING

The period for which the Client's personal data will be processed depends on the purpose of the processing. The individual processing periods are specified in more detail below:

Registration of the Client in the information system on the basis of consent to registration:

The Client's consent is granted for a period of 3 years, after which the Client's data will no longer be processed.
If the Client withdraws consent within the 3-year period, the Client's data will no longer be processed.

Sending business notifications:

The Client's consent is granted for a period of 3 years, after which the Client's data will no longer be processed.
If the Client withdraws consent within the 3-year period, the Client's data will no longer be processed.

Processing of data for legitimate interest:

Client data will only be processed for the duration of the legitimate interest period.

Processing for the purpose of performance of a contract:

The Client's data will only be processed for the period necessary for the proper performance of the contractual obligations.

Lawful grounds for processing personal data:

The Client's data will only be processed for the duration of the lawful reason.

CLIENTS' RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA

Clients are granted new rights in relation to the processing of personal data, which are applied in the EU General Regulation 2016/679 (General Data Protection Regulation) and in accordance with Act No. 18/2018 Coll., the Czech Mint will always meet the needs of its clients in these rights, so here you will find the forms you can use to exercise the rights listed below, if necessary. The processing of the client's request will be carried out according to the regulation within 30 days of its submission at the latest.

1) Client's right of access to personal data

Access to personal data means the Client's right to obtain from the Czech Mint, based on his/her active request, information (confirmation) as to whether or not his/her personal data is being processed and, if it is being processed, the data subject has the right to obtain this personal data and also has the right to obtain the following information:

the purposes of the processing,
the categories of personal data concerned,
the recipients or categories of recipients to whom the personal data have been or will be disclosed,
the intended period for which the personal data will be stored,
any available information about the source of the personal data, unless it is obtained from the Client,
the fact that automated decision-making, including profiling, is taking place.

This is the equivalent of the right of access to personal data provided for in Article 21 of Act No. 18/2018 Coll. on the Protection of Personal Data.

2) Client's right to erasure or rectification of personal data

The right to erasure (to be forgotten) is the obligation of the Czech Mint, expressed in other words in the General Regulation, to destroy personal data if at least one condition is met:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
the Client withdraws consent and there is no further legal basis for the processing,
the Client objects to the processing and there are no overriding legitimate grounds for the processing,
the personal data has been unlawfully processed,
the personal data must be erased to comply with a legal obligation,
the personal data were collected in connection with the offer of information society services pursuant to Article 8(1) of the General Regulation.

The right to erasure is therefore only applicable at the points listed above, i.e. when the circumstance arises. Most of the enumerated cases are also listed in Article 23 of Act No. 18/2018 Coll. on the Protection of Personal Data or arise from its essence.

The right to rectification of personal data means that the client can ask the Czech Mint to correct his/her data if it is inaccurate or incorrect, and the Mint must subsequently implement the correction of the data.

3) The right to restrict the processing of the client's personal data

The Client has the right to have the Czech Mint restrict the processing of his/her personal data in the following cases:

The Client denies the accuracy of the personal data for the time necessary for the controller to verify the accuracy of the personal data.
The processing is unlawful and the Client refuses to erase the personal data and requests instead to restrict its use.
The Czech Mint no longer needs the personal data for the purposes of the processing, but the Client requires it for the establishment, exercise or defence of legal claims.
The Client has raised an objection to the processing pursuant to Article 21(1) of Section 27 of Act No. 18/2018 Coll. until it is verified whether the legitimate grounds of the Czech Mint outweigh the legitimate grounds of the Client.

If the processing has been restricted on the basis of the aforementioned cases, these personal data, with the exception of their storage, may only be processed with the consent of the data subject, or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. A client who has obtained processing restrictions on the basis of the above-mentioned cases shall be notified in advance by the Czech Mint that the processing restriction will be lifted.

4) Right of portability of the client's personal data

The right of portability is a completely new right of the Client, the essence of which is the possibility to obtain, under certain conditions, personal data concerning him/her, which he/she has provided to the Czech Mint for transfer to another controller.

Common conditions for the application of the right to portability:

the processing must be based on a legal ground of consent or contract,
the processing is automated.

The exercise of the right of portability must not adversely affect the rights and freedoms of other persons.

5) Client's right to object

The client has the right to object at any time to the processing of personal data which is processed on the basis of legal grounds, for reasons relating to his or her particular situation:

the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
the processing is necessary for the purposes of the legitimate interests of the Czech Mint or of a third party.

The Czech Mint shall not further process the Client's personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the Client or for the establishment, exercise or defence of legal claims. To some extent, this is equivalent to the right to an explanation under Section 27 of the Act. On the protection of personal data.

Furthermore, the Client has the right to lodge a complaint with the Data Protection Authority in the event that he/she believes that his/her right to protection of personal data has been violated.

CONDITIONS FOR THE SECURITY OF PERSONAL DATA

The Czech Mint declares that it has taken all appropriate technical, procedural and organisational measures to safeguard personal data and that only persons authorised by it have access to personal data.

FINAL PROVISIONS

You agree to these terms and conditions by ticking the consent box via the online form, submitting an order/reservation or entering into a contract with the Czech Mint, both via the Company's website and through the Company's sales representatives or partners. By each of the above specified actions you confirm that you are familiar with the terms and conditions of personal data processing and that you accept them in their entirety.

The controller is entitled to change these terms and conditions. The current valid version of the privacy policy is always published at www.ceskamincovna.sk.