PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF CUSTOMERS

Controller of the personal data (seller):

REO AMOS, spol s r. o.
ID No. 42767181
with its registered office at Provozní 5560/1b, Třebovice, 722 00 Ostrava, Czech Republic 
registered at the Regional Court in Ostrava, Section C, Insert 1828

In accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council, hereinafter referred to its the "Regulation"), the Controller provides the following information on the processing of personal data in the context of the purchase of products from the Controller.

1. Contact details for privacy matters

1.1 REO AMOS, spol. s r.o., ID 42767181, with its registered office at Provozní 5560/1b, Třebovice, 722 00 Ostrava, Czech Republic, acts as the so-called personal data controller (hereinafter also referred to as the "Controller"). If  you have any questions, requests or objections regarding the processing of your personal data, please contact the contact details below:

Written contact:
Provozní 5560/1b, Třebovice, 722 00 Ostrava, Czech Republic 

Electronic contact:
sales@reoamos.cz

1.2 Contact details of the Data Protection Officer (DPO):

The conditions set out in Article 37 of the Regulation for the appointment of the Data Protection Officer are not met, therefore the Controller of the Office did not appoint the Data Protection Officer.

2. When is your personal data processed?

2.1 Your personal data may be processed in the following cases:

2.1.1 if you are a visitor of the www.reoamos.com website

2.1.2 if you have created a customer account on the online store of the Controller www.reoamos.com

2.1.3 if you have ordered goods from the Controller of the Municipal Administration, either through the online store of the Controller available under www.reoamos.com or in another way (by e-mail, by phone)

2.1.4 if you exercise any rights arising from the purchase contract relating to the product of the Controller.

3. Legal basis for personal data processing, method and purpose of processing, storage period

As your personal data Controller, we are entitled to process your personal data even without your consent:
· to the extent necessary to fulfill his/her obligations arising from the order/purchase contract and/or arising from the creation of customer account on the www.reoamos.com website,
· to the extent necessary to comply with a legal obligation imposed on the Controller by law,
· to the extent necessary to protect the legitimate interests of the Controller - direct marketing.
Below you will find more detailed information on the individual legal bases for the processing of personal data:

3.1. Processing necessary for the performance of a contract you have concluded with the Controller (Article 6 (1) (b) of the Regulation)

3.1.1 The personal data is processed in order to be able to fulfil its obligations under concluded purchase contracts (order processing, delivery of goods, transport arrangements, issuance of accounting documents, etc.). Without any connection with a specific order, the Controller processes the personal data of customers who have set up a customer account on the website of the "www.reoamos.com" online store, for the purpose of identifying the account with a specific customer and keeping a history of orders made through the customer account. In this way, the Controller processes your identification data (name, surname, username, date of birth, or ID number and VAT number) and contact data (e-mail address, address of residence or registered office/place of business), or other descriptive data, if you have provided them within the registration (e.g. academic degree). In case of natural persons acting on behalf of customers-legal entities, the Controller also processes information about their affiliation to the given legal entity.

3.1.2 The purpose of personal data processing is to conclude a purchase contract, or to register a customer account and subsequently fulfil the obligations of the Controller arising from the registration and the concluded contract, in particular to establish, maintain and, if necessary, verify the user account, to provide the possibility of using the features of the online store.

3.1.3 Storage period: For the period until the order is processed (until the obligation under the purchase contract is fulfilled) and for the duration of the customer account (the Controller is entitled to cancel the customer account in accordance with the General Terms and Conditions if it is inactive for more than 12 months). The Controller stores paper orders for the period during which claims arising from the given order can be asserted, but no longer than 3 years from the receipt of the order.

3.2. Processing for the fulfillment of a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation)

3.2.1 Your personal data is also processed by the Controller as it is necessary for the fulfilment of legal obligations to which it is subject.

3.2.2 The Controller issues tax documents he is obliged to be keep and archive for the period stipulated by legal regulations, in particular by the Accounting Act (Act No. 563/1991 Coll.) and the Value Added Tax Act (Act No. 235/2004 Coll.). Other obligations arise from the Civil Code, in particular from the legal regulation of so-called consumer contracts, and from Act No. 634/1992 Coll. on Consumer Protection.

3.2.3 The purpose of the processing of your personal data is the fulfilment of the legal obligations of the Controller, especially in the field of accounting and tax regulations.

3.2.4 Storage period: The Controller stores the Personal Data only for the necessary time and archives according to the statutory deadlines imposed by law.

3.3. Legitimate interests of the Controller of the Office consisting in the performance of direct marketing (Article 6 (1) (f) of the Regulation)

3.3.1 Your personal data is further processed by the Controller, as it is necessary for the purposes of its legitimate interests, in the manner specified below.

3.3.2 The Controller may send an e-mail newsletter (commercial communication) to your e-mail address that you have provided to the Controller in connection with registration or order but only relating to the products and related events provided by the Controller. The Controller will not send you any offers provided by third parties. You have the option to opt-out from receiving the newsletter in the manner provided within the ordering or registration process, and subsequently in each individual newsletter.

3.3.3 Purpose of processing of your personal data is the possibility to inform you about news regarding the Controller’s offer and online store reoamos.com. The Controller considers this to be necessary for the purposes of its legitimate interests. For this purpose, it only processes the e-mail address you provided within the order/registration. You can object to this method of processing personal data (see the article 6.5.) and very easily terminate the processing of personal data for direct marketing purposes by unsubscribing from the newsletter.

3.3.4 Storage period: Your e-mail address is stored by the Controller until all rights and obligations arising from the purchase contract are fully settled, and in the case of a customer account, for the entire duration thereof. However, for the purpose of sending the newsletters, the e-mail address is stored only until you unsubscribe from a further receiving of newsletters within the meaning of Art. 3.3. Upon refusal to receive the newsletter, the e-mail address is immediately removed from the list of recipients.

3.4. Consent of the personal data subject to processing

3.4.1 Only based on your consent to the processing of personal data, the Controller processes your personal data within the use of cookies and data on the use of website. Based on the consent, commercial messages (e-mail newsletter) are also sent to those recipients whose e-mail address we have not obtained in connection with the conclusion of the purchase contract or the registration of a customer account.

3.4.2 In addition to technical cookies, which are a necessary prerequisite for the proper functioning of our website and which can be deployed even without your consent, the Controller uses analytical or marketing cookies only with your prior consent.

3.4.3 More information about individual cookies and the purpose of their use can be found on the page containing the consent with the cookies.

3.4.4 In case of granting consent to receive newsletters, the recipient's e-mail address is stored in the recipients' database for the period until the consent is withdrawn but no longer tan 5 years from the granting of consent. After this period (unless the consent is actively withdrawn by the recipient), the recipient is again asked to grant the consent, without which no further newsletters are sent to him and the recipient's e-mail address is removed from the system.

4. To whom is your personal data provided?

4.1. Your personal data is transferred by the Controller to third parties, i.e. personal data recipients, in particular for the purpose of ensuring the fulfilment of obligations arising from purchase contracts (delivery of ordered products via a carrier), for the purpose of keeping the database of buyers and for the purpose of direct marketing to the extent specified in Article 3 above.

4.2 In particular, the recipients of personal data may be:

4.2.1 contractual carriers of the Controller:
4.2.2 hosting service provider
4.2.3 e-mailing service provider
4.2.4 suppliers, insurance companies, external legal representation, other authorities in consumer proceedings:
4.2.5 financial administration bodies, tax advisors and auditors, if this is necessary to fulfil the legal obligation of the Controller.

5. Transfer of personal data to third countries

5.1 Personal data is processed exclusively in the Czech Republic or in EU Member States and is not transferred to third countries.

6. Your rights in relation to the processing of your personal data

6.1. Your personal data is processed by the Controller in a fair and transparent manner, in accordance with legal regulations. You may find below a description of your rights that you have in connection with the processing of your personal data.

6.2. Right of access to personal data

6.2.1 You have the right to access personal data concerning you as a so-called data subject, under the conditions set out in Article 15 of the Regulation.

6.2.2 If you have a customer account, the personal data you enter is accessible within the customer account for the entire duration of the account.

6.3 Right to rectification of personal data

6.3.1If you believe that your personal data processed by the Controller are inaccurate or incomplete, you have the right to ask the Controller to rectify them. However, you can rectify your personal data by yourself within your user account.

6.4. Right to object to the processing of personal data concerning you 

6.4.1 You have the right to request that the Controller deletes your personal data without undue delay, but only if one of the reasons listed in Article 17 of the Regulation occurs.

6.4.2 You have the right to restriction of processing in any of cases specified in Article 18 of the Regulation.

6.5. Right to object to the processing of personal data concerning you 

6.5.1 You have the right to object to the processing of personal data concerning you if the Controller processes personal data based on Article 6 (1) of the GDPR. 1 lit. f) of the Regulation, i.e. for the purposes of the legitimate interests of the Controller; legitimate interest of the Controller justifies the processing for the purposes of direct marketing (see Art. 3).

6.5.2 In practice, an objection to processing for the purposes of direct marketing means that you can object to the sending of a newsletter or other commercial communications, and the Controller will no longer send you newsletters and other commercial communications. However, you can simply unsubscribe from newsletters directly via the newsletter delivered or in your user account.

6.6. Right to personal data portability

6.6.1 You have the right to obtain personal data concerning you in a structured, commonly used and machine-readable format, and possibly the right to transfer this data to another entity without the Controller preventing you from doing so.

6.6.2 You also have the right to ask the Controller to transfer your personal data to another entity that acts as the so-called personal data Controller, if this is technically feasible.

6.7. Right to withdraw consent to the processing of personal data

6.7.1 If you have provided the Controller with consent to the processing of personal data for purposes that require such consent, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

6.8. Right to lodge a complaint with a supervisory authority

6.8.1 You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data violates legal regulations. You can lodge a complaint with the supervisory authority, which is:

Office for Personal Data Protection (ÚOOÚ)
Lt. Col. Sochora 27
170 00 Prague
www.uoou.cz

6.9 How to exercise the right?
7. You can exercise your data protection rights in writing or electronically at the addresses listed in Article 1 above. In case of doubt, the Controller is entitled to verify the identity of the person who submitted the application or objection. The rights under Art. 1 cannot be claimed by telephone.