In this document, we would like to inform you about the principles according to which we process your personal data and analyze certain aspects of the behavior of visitors to our website. We would also like to inform you about your rights in this regard.

The protection of your personal data and your privacy is important to us, therefore we handle your personal data with due care and ensure their proper protection in accordance with applicable legal regulations. Our (and your) personal data protection is taken care of by verified specialists. This information is freely available mainly on the website. Whenever we obtain personal data from you, we refer to these principles and allow you to read these principles and inform us about our policy when processing personal data. Our company (not only) always aims to inform our customers on the website, in the most understandable way. If something is still unclear to you, do not hesitate to contact us with a question or comment, we will be happy to explain any term or passage to you.

Contact details:

Address: Lhota 279, 763 02 Zlín

Email: info@botas.cz

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"), the Act on the Processing of Personal Data and Act No. 480/2004 Coll., on certain information society services, as amended.

1. DEFINITIONS

1.1. Data subject: A natural person (consumer or self-employed person) to whom the personal data relates (hereinafter also referred to as "You" or "Customer" );

1.2. Personal data: Any information relating to an identified or identifiable customer; an identifiable customer is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (hereinafter referred to as “data” );

1.3. Controller: The entity that determines the purpose and means of processing personal data, carries out the processing and is responsible for this processing. The controller of personal data is the company Vasky trade sro, ID: 04779207 (hereinafter referred to as the "Controller" );

1.4. Processor: An entity that, pursuant to law or on the authority of the controller, processes personal data for the controller, based on a personal data processing contract (hereinafter referred to as the "processor" or "business partner" );

1.5. Website: Website available at www.botas.cz;

1.6. Purpose of processing personal data: The reason why personal data is processed. Such a reason may be, for example, the performance of a contract, the management of user accounts, the handling of suggestions and complaints, the sending of commercial communications or the display of advertisements based on customer interests;

1.7. Scope of personal data processing: A list of specific categories of customer personal data processed for a specific purpose;

1.8. Cookies: Short text files that are stored by your web or mobile browser. Most cookies contain a unique identifier, called a cookie ID. This is a string of characters assigned by websites and servers to the browser that stored the cookie. This allows websites and servers to distinguish and identify individual browsers. Cookies are used to improve the functioning of websites, evaluate their traffic, and better target marketing activities. By browsing our websites, we assume that you agree to the use of these files.

2. WHAT PERSONAL DATA IS PROCESSED?

2.1. The administrator and its contractual processors process the following personal data, or categories of personal data, in connection with the relevant legal title and purpose of processing:

a) identification and address data: e.g. name, surname, delivery or other contact address, address of the collection point, registered office of the business, company ID, VAT number;
b) electronic contact details: e.g. telephone number, e-mail address;
c) other electronic data: IP address processed using so-called cookies;
d) other personal data related to the contractual relationship: bank account number, order history;
e) data related to Botas club: link to Instagram profile.

f) other personal data: typically data provided by the customer in the order form or in other documents and when communicating with us, including later updates.

3. WHAT IS THE ORIGIN OF THE PERSONAL DATA?

3.1. We process the data that you provide to us, e.g. when ordering our products, registering for the Botas club, communicating with us. Typically, this includes:

1. identification and address data;
2. electronic contact details;
3. personal data related to the contractual relationship;
4. personal data related to the use of Botas club benefits.

3.2. And also data that we collect automatically based on your browsing of our website. Typically, this includes:

other electronic data:

• information about the cookies used,
• the website from which you came to our website;
• IP address;
• access date and time;
• search queries;
• http and https response code;
• transmitted data groups;
• information about the browser and operating system of the device.

4. WHY ARE PERSONAL DATA PROCESSED?

4.1. Your personal data may be processed for the following purposes:

a) Conclusion of the contract and performance of the contractual relationship

Purpose: Based on the contract with us, you are entitled to the ordered goods. In return, we are entitled to payment of the agreed price. In order to fulfill our part and check the fulfillment of your part of the obligation, we need to process your identification and address data, contact data and other personal data related to the contractual relationship (e.g. account number).

Legal basis: The processing of personal data for the purpose of fulfilling a contractual relationship is justified by the contractual relationship between you and us. In this case, the provision of personal data is a contractual requirement, without which it is not possible to conclude a contract.

Storage period: The storage period of data is determined by the duration of the customer's contractual relationship with us, but as a rule, 2 years from the order. A longer storage period applies to customers who are part of the Botas Club, for whom we record, for example, their address or orders for correct classification.

 

 

b) Botas Club account

Purpose: Customers can register for Botas Club on our website, which is a form of customer program. With individual orders, the user is credited with points for each paid order, on the basis of which the user is classified into an individual category. At the same time, it is possible to manage your personal settings. For this purpose, we need to process your e-mail address, first name, last name and telephone number . This data is then used to make ordering our products easier and to enable you to use the benefits of membership.

Legal basis: The processing of personal data for the purpose of managing customer accounts is justified by the implementation of measures prior to the conclusion of a contract. The provision of personal data in this case is voluntary, but registration would not be possible without it.

Storage period: The data is stored for the duration of the Administrator's legal authority. Any deletion will take place after not logging into the customer account for a period longer than 5 years.

c) Communication with customers, satisfaction assessment, publication of reviews, handling complaints and claims

Purpose: We use your data to manage your inquiries, product recommendations, handle suggestions, complaints with our customer support. We may also contact you to request you to complete a satisfaction survey.

We also use your data to notify you of the status of your order and to notify you of any changes to your order (non-payment of the agreed amount, change of delivery, etc.). If you do not complete your order, we may send you an email or SMS reminding you that you have not completed this order. We believe that this is a useful service because it allows you to continue with an order you have started and does not have to re-enter the entire order from the beginning.

We also process your data in cases of exercising your rights from defective performance and when exercising your rights in connection with the processing of your personal data.

Legal basis: The processing of personal data for the purpose of communicating with customers, assessing satisfaction, handling suggestions, complaints and claims is justified by our legitimate interest in the possibility of communicating with customers. The provision of personal data in this case is not a legal or contractual requirement. You are therefore not obliged to provide us with your personal data for this purpose.

Storage period: The data storage period is determined by the duration of the customer's contractual relationship with us and subsequently for a period of 4 years after its termination.

d) Sending commercial communications and offering our goods

Purpose: We regularly send our customers and those who have consented to this by email about our products. You can quickly and easily unsubscribe from these commercial communications at any time using the unsubscribe link included in each communication. We also send personalized communications to our Botas Club members.

In other cases, we ask for your consent to send you commercial communications about our products, events and promotional campaigns of the company. We may use the information you provide to us, as well as information obtained otherwise in connection with our products – such as information about how you use the website, information about orders placed or information about your participation in events and competitions – to personalize our commercial communications. We will ask for your consent to send you commercial communications whenever consent is required by applicable law.

Legal basis: The processing of personal data for the purpose of sending commercial communications and offers of our goods is justified by your consent, or our legitimate interest in direct marketing. The provision of personal data based on your consent is voluntary in this case, but without it it would not be possible to send you commercial communications. You can withdraw your consent at any time. The provision of personal data in this case is not a legal or contractual requirement. You are therefore not obliged to provide us with your personal data for this purpose.

Storage period: The storage period of the data is determined by the duration of your consent. We will consider the withdrawal of consent or the end of legitimate interest if you do not open our commercial communications for a period of 5 years.

e) Direct marketing and creation of personalized content and advertising

Purpose: Technologies for creating personalized content and advertising allow us to display to visitors who have already shown interest in our websites or services. We strive to ensure that you only see advertising that is truly of interest to you, and not advertising that is unrelated to your person and interests. Based on your order history, interests and behavior on the websites, you may be shown personalized content and offers on our websites and on third-party websites and applications (including social networks). In addition, we are entitled to store other personal data about you in compliance with legal provisions for our own marketing purposes. We would also like to assure you that the stored data is not transferred to third parties. All data is anonymized and pseudonymized for these partners who help us with this type of advertising. These are mainly cookies. You can read about managing your preferences regarding the processing of cookies in the Cookies section.

Legal basis: The processing of personal data for the purpose of direct marketing and the creation of personalized content and advertising is justified by your consent, or our legitimate interest in direct marketing. The provision of personal data based on your consent is voluntary in this case, but without it it would not be possible to provide you with personalized content and advertising. You can withdraw your consent at any time. The provision of personal data in this case is not a legal or contractual requirement. You are therefore not obliged to provide us with your personal data for this purpose.

Storage period: The storage period of data is determined by the duration of your consent. The storage period of cookies may vary depending on the type of cookies. Some cookies are limited by the duration of the session (so-called session cookies). These are processed as long as the browser is running and are automatically deleted after it is turned off. Other cookies are permanent (so-called persistent cookies). These cookies remain in the browser even after it is turned off until a specified date, or until they are manually deleted by the user. These cookies can be used to identify the user's computer when the web browser is restarted and the Internet is browsed. You can read more about the storage period of cookies in the Cookies section.

f) Improving the quality of our goods and services, analyzing traffic to our websites and your behavior on the websites

Purpose: We always strive to improve the quality of our services and goods and your better experiences. The development of new services and goods and the improvement of existing ones is achieved by identifying the needs and wishes of users through phone calls, questionnaires, website analyses, interest in certain services and texts, etc.

In connection with browsing our website, we also process information about traffic, readership, number of pages viewed, the device from which you come to our website, time spent on the website. This data helps us identify areas of our website that are less accessible or less understandable. We collect this data in order to be able to offer you quality content that is user-friendly and to develop services in which you are clearly interested. Based on this information, we regularly improve our website.

If you do not want your data to be collected using these technologies, there is a simple way to do this: most browsers offer you the option to automatically refuse many of these technologies, or give you the choice to accept or decline them. You can read about managing your preferences regarding cookie processing in the Cookies section.

g) Protecting our rights, property or safety or the rights, property or safety of others

Purpose: We may use information about how you use our website or information about your orders to prevent or detect fraud, abuse, unlawful use and violations of our terms and conditions, as well as to comply with the decisions of a court or other law enforcement authorities, state administration authorities or conditions set out in applicable law.

Legal basis: The processing of personal data for the purpose of protecting our rights, property or safety or the rights, property or safety of other persons is justified by the fulfillment of legal obligations, or by our legitimate interest in protecting our rights, property or safety or the rights, property or safety of other persons. The provision of personal data in this case is not a legal or contractual requirement. You are therefore not obliged to provide us with your personal data for this purpose.

Storage period: The data storage period is 10 years from the termination of our contractual relationship, or 4 years from the date of its acquisition.

h) Accounting and tax purposes

Purpose: We must also process your personal data because we are required to do so by applicable accounting and tax legislation.

Legal basis: We process this personal data mainly for the purpose of fulfilling the concluded contract. Fulfillment of contractual obligations typically occurs when, based on the concluded contract, we have to record invoices or other tax documents in the accounting system pursuant to Act No. 563/1991 Coll., on Accounting

Storage period: For the period specified by legal regulations, in particular Accounting data is processed for a period of 5 years starting from the end of the accounting period to which it relates, tax documents for a period of 10 years from the end of the tax period in which the performance took place.

5. TO WHOM IS PERSONAL DATA DISCLOSED?

5.1. Your personal data is made available primarily to our employees who need this data to be able to provide you with our services.

5.2. In addition to our employees, we must transfer your personal data to various business partners who enable the operation of the Administrator and help us provide you with better, more accurate and generally more specific content and services. We select the processors to whom we entrust your personal data very carefully. We cooperate only with those who are able to ensure such technical and organizational security measures that there can be no unauthorized or accidental access to your data or other misuse of it. All these partners are authorized to process your data solely on the basis of the supplement on the processing of personal data, in which they undertake to maintain confidentiality. The provided data may also not be used for any other purposes than those for which we have made it available to them.

5.3. The following categories of our partners (recipients) may have access to your personal data:

a) Partners who provide transportation of our goods for us

b) Partners to whom we provide data for the purpose of analyzing traffic to our websites, your behavior on the websites and business conversions

We strive to make your experience of using our website as pleasant as possible. That is why we cooperate with partners who analyze traffic and your behavior on our website. Thanks to these partners, we have information about which part of our website is not understandable, where you are looking for the information you need and whether you find it, which offers on our website you have clicked on, etc. Based on this information, we regularly improve our website.

c) Partners who provide us with their services, who ensure the technical operation of a certain service for us, and operators of technologies that we use for our services

In order for the Administrator to function properly and provide you with its services, we must cooperate with a number of partners who provide us with their services, ensure the technical operation of certain services, or operate the technologies we use for our services. Typically, these are the following categories of partners:

• accounting and tax consulting providers,
• IT service and hosting providers, including cloud storage,
• providers of security and integrity of our services and websites,
• payment gateway providers (payment card providers),
• legal service providers, lawyers,
• printing and postal service providers,
• partners cooperating with us in loyalty programs, organizing social events, seminars, etc.

 

d) Public administration bodies

• We disclose personal data in the event of law enforcement, if required by law or necessary for the prevention, detection and prosecution of crime and fraud, or if we are otherwise required to do so by law.
• These may be criminal prosecution authorities (the Czech Police, the state prosecutor's office and courts) or tax authorities.
• The transfer of personal data to these recipients does not take place regularly but only occasionally, especially if required by law.

6. HOW IS PERSONAL DATA PROCESSED?

6.1. Personal data is processed both manually and automatically. We keep proper records of all processing activities in accordance with the relevant legal regulations – in particular, Article 30, Records of processing activities.

 

7. WHAT ARE THE RIGHTS OF DATA SUBJECTS?

7.1. To exercise your rights, please contact us using our contact details provided in the introduction to these policies. We reserve the right to use reasonable means to verify the identity of the person requesting the rights in question. If requests are repeated and are manifestly unfounded or disproportionate, we may charge you a reasonable fee or refuse to comply with the request.

a) Right to access personal data

If you want to know whether we are processing your personal data, you have the right to obtain from us information about whether your personal data is being processed and, if so, you also have the right to access your personal data. In the event of a repeated request, we are entitled to charge a reasonable fee based on our administrative costs for a copy of the personal data provided.

b) The right to correct inaccurate and complete incomplete personal data

If you believe that we are processing inaccurate or false data about you, you have the right to request its correction. You also have the right to supplement incomplete data. We will carry out the correction or supplementation without undue delay, always taking into account our technical capabilities.

c) Right to erasure

If your personal data is no longer necessary for the purposes (in particular, due to necessary legislative regulations) for which it was collected or otherwise processed, or if you find that it has been processed unlawfully, you have the right to request its deletion.

d) Right to restriction of processing of personal data

If you are not interested in complete deletion, but only in temporarily restricting the processing of your personal data, you can request that we restrict the processing of your personal data in certain cases.

e) Right to data portability

If you want us to transfer your personal data to a third party, you can exercise your right to data portability if you have previously given your consent. If exercising this right could adversely affect the rights and freedoms of third parties, we will not be able to comply with your request.

f) Right to object

You have the right to object at any time to the processing of personal data which is processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of our legitimate interests. Unless we demonstrate compelling legitimate grounds for the processing which override your interests or rights and freedoms, we will cease the processing based on your objection without undue delay.

g) Right to withdraw consent at any time

If the processing of your data is based on your consent, you have the right to withdraw this consent at any time.

h) Right to information about automated decision-making, including profiling

You are not subject to any decision based solely on automated processing, including profiling, which would produce legal effects for you or similarly significantly affect you.

i) Right to lodge a complaint with the Supervisory Authority

Last but not least, you also have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, with its registered office at Pplk. Sochova 27, 170 00 Prague 7, tel.: 234 665 111, website: www.uoou.cz.

8. COOKIES

8.1. 8.1. Cookies are short text files that the visited website sends to the browser. Thanks to cookies, the administrator can distinguish you from other website users and more effectively record information about your visit and behavior on the website. Cookies are not harmful to your device or its software. As a user, you can disable or restrict the use of cookies in your browser.

The administrator uses cookies for many purposes such as:

 

Insert cookies list:

 

 

name	provider	purpose	Duration	Type

 

 

9. IS DATA ABOUT CHILDREN PROCESSED?

9.1. Our website is not directed at children under the age of 16. We do not knowingly collect their personal data. If we become aware that we have inadvertently collected personal data about children under the age of 16, we will take steps to delete that data as soon as possible, unless we are required to retain it by applicable law.

10. CONCLUSION

10.1. The principles of personal data processing were developed and approved by the company's executive director on May 1, 2024.

10.2. Our business strategy and the related methods of processing your personal data may change. If we decide to update this policy, we will place the changes on our website and inform you about these changes not only on the aforementioned website, but also on social networks. We ask you to read this policy carefully and to check it regularly when communicating with us or using our website.