Privacy Policy

PROCESSING OF PERSONAL DATA

They are long, written in legalese, but we have to have them.

According to Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

Personal data controller:

Bullet Project s.r.o., with registered office at U Staré elektrárny 291/11, Slezská Ostrava, 710 00 Ostrava, ID No.:28618475, registered with the Regional Court in Ostrava under file No. C 35070, e-mail: info@balistas.com, website: www.balistas.com (hereinafter referred to as the "company" or "controller").

PREAMBLE

These terms and conditions contain information on the processing of personal data submitted to the company by the customer when placing an order (concluding a contract), for the purpose of evaluating the purchase on the Heuréka.cz portal and by the visitor to the website in the context of communication with the company. They do not apply to the processing of personal data on the basis of consent.

I. PROCESSING ON THE BASIS OF AN ORDER

1. As the controller of your personal data (see contact details above), we are responsible for its protection and undertake to process it with appropriate technical and organisational security. If they are transmitted to us as part of an order for goods or services, we always process them under the conditions set out below.

2. The purpose, legal basis for processing and duration of processing of your personal data are as follows:

(a) Purpose: processing of the order and subsequent contractual or legal obligations, handling of complaints and other acts related to contractual obligations; legal basis: performance of the contract (according to Article 6(1)(b) GDPR); processing period: 2 years from the processing of the order or until the end of the warranty period if it lasts longer than two years.

(b) purpose: archiving of accounting documents on the basis of an obligation arising from accounting legislation; legal title: performance of a legal obligation (pursuant to Article 6(1)(c) GDPR); processing period: determined by the relevant legislation.

(c) Purpose: direct marketing - offering goods and services, announcing discounts, sales, sending information about the e-shop and the products offered, etc., in particular by sending commercial communications by e-mail (within the meaning of Section 7 of Act No. 480/2004 Coll., on certain information society services); legal basis: legitimate interest (pursuant to Article 6(1)(f) of the GDPR); duration of processing: 3 years.

d) Purpose: ensuring IT and network security of processing, legal basis: legitimate interest (pursuant to Article 6(1)(f) GDPR); duration of processing: 3 years.

e) Purpose: possible enforcement of legal claims arising from a concluded contract or related legal disputes; legal basis: legitimate interest (pursuant to Article 6(1)(f) GDPR); duration of processing: 3 years.

3. You are not obliged to provide us with personal data, however, this is a condition for the execution of the order (conclusion of the contract) - we will carry out the processing for contractual reasons.

4. We may transfer your personal data to the following processors and recipients as part of the processing of your personal data:

- software providers - to facilitate the operation of the e-shop and ensure its technical security (server hosting, e-mail hosting, cloud-hosting, CRM system or EPR system, office applications, etc.),

- marketing company for the purpose of direct marketing promotion,

- operators of backup servers and other hardware - to ensure the proper operation of the e-shop and the protection and availability of related data,

- accounting office - for the purpose of maintaining the accounting agenda and related archiving of tax documents,

- tax advisor, auditor, law firm - for the purpose of advising on the operation of the e-shop,

- collection agencies - for the purpose of recovery or collection of the company's debts,

- payment gateway providers and banking institutions for the purpose of processing your order,

- transport companies for the purpose of arranging transport of the goods you have ordered,

- government authorities in cases provided for by law,

- other persons, if applicable,

all according to the current needs and to the extent necessary for the organizational and technical support of the proper operation of the e-shop.

5. To express your disagreement (objection) with the processing of your personal data, as well as to exercise other rights that you can exercise against us during processing, please use the following address info@balistas.com

II. PROCESSING IN THE CONTEXT OF HANDLING ENQUIRIES/SUGGESTIONS

1. As the controller of your personal data, we are responsible for its protection and undertake to process it with appropriate technical and organisational security. If they are transmitted to us in the context of enquiries/suggestions concerning goods or services or other matters relating to the operation of the e-shop (via contact form, e-mail, telephone, chat, etc.), we always process them under the conditions set out below.

2. The purpose, legal basis for processing and duration of processing of your personal data is as follows:

a) Purpose: keeping correspondence and storing the history of correspondence; legal basis: performance of the contract - negotiation of the order (according to Article 6(1)(b) GDPR) and legitimate interest (according to Article 6(1)(f) GDPR) in the case of inquiries unrelated to the interest of the website visitor to conclude the order; processing period: 1 year from the processing of the inquiry or suggestion,

b) Purpose: sending enquirers about goods or services - offering goods and services, announcing discounts, sales, sending information about the e-shop and the products offered, etc. - in particular in the form of commercial communications via e-mail (within the meaning of Section 7 of Act No. 480/2004 Coll., on certain information society services); legal basis: legitimate interest (pursuant to Article 6(1)(f) of the GDPR); duration of processing: 1 year.

c) Purpose: physical, IT and network security processing; legal basis: legitimate interest (pursuant to Article 6(1)(f) GDPR); processing period: 1 year. We engage the following processors to process your personal data:

- operators of backup servers and other hardware - to ensure the proper operation of the e-shop and the protection and availability of related data.

3. To express your disagreement (objection) with the processing of your personal data, as well as to exercise other rights that you can exercise against us during processing according to Article IV, please write to us here: info@balistas.com.

4. If you order goods or services on the basis of correspondence with us, your data will be processed under the conditions set out in Article I above.

III. PROCESSING IN THE EVALUATION OF PURCHASES BY HEUREKA.CZ

1. As the controller of your personal data, we are responsible for its protection and undertake to process it with appropriate technical and organizational security. If they are transmitted to us on the basis of the completion of a purchase evaluation questionnaire (via e-mail), we always process them under the conditions set out below.

2. The purpose, legal basis for processing and duration of processing of your personal data are as follows:

(a) Purpose: to determine your satisfaction with shopping with us and to place your rating completely anonymously on the Heuréka.cz portal; legal basis: legitimate interest (according to Article 6(1)(f) GDPR); processing period: 6 months from the sending of the questionnaire if you do not complete the satisfaction questionnaire; 4 years from the completion of the questionnaire if you complete the satisfaction questionnaire.

3. We involve the following processors in the processing of your personal data:

- Heureka Shopping s.r.o., with registered office at Karolinská 650/1, 186 00 Prague, ID: 02387727, for the purpose of generating the satisfaction questionnaire,

- software providers - for facilitating the operation of the e-shop and ensuring its technical security (server hosting, e-mail hosting, cloud-hosting, CRM system or EPR system, office applications, etc.),

- operators of backup servers and other hardware - to ensure the proper operation of the e-shop and the protection and availability of related data.

4. To express your disagreement (objection) with the processing of your personal data, as well as to exercise other rights that you may exercise against us during processing (see the following article), please write to us at the following e-mail address: info@balistas.com.

IV. CUSTOMER RIGHTS

During the time we process your personal data you have the right to:

request information from the company about what personal data it processes,
request an explanation from the company regarding the processing of your personal data,
request access to your personal data and have it updated or corrected,
request that the company erase your personal data or restrict its processing,
transfer your personal data to another controller,
object to the processing of your personal data on the grounds of legitimate interest of the company (see Article I(2)(c), (d) and (e) and Article II(2)(a), (b)),
unsubscribe from receiving commercial communications within the meaning of Article 7 of Act No. 480/2004 Coll., on certain information society services.

To exercise the above-mentioned rights, please write to the following e-mail address: info@balistas.com. If you have any doubts as to whether we process your personal data properly - in accordance with the relevant legislation, you can also contact the Office for Personal Data Protection.