In this document, we would like to inform you about the principles according to which we process your personal data and analyze some aspects of the behavior of visitors to our website. Furthermore, we would like to inform you about your rights related to this.

The protection of your personal data and your privacy is important to us, that is why we handle your personal data with due care and in accordance with applicable legal regulations ensure their proper protection. Screened specialists take care of our (and your) personal data protection. This information is freely available mostly on websites. Whenever we collect personal data from you, we refer to this policy and allow you to read this policy and inform us about our personal data processing policy. Our company (and not only) always aims to inform our customers on the website, in the most understandable way. If something is still not clear to you, do not hesitate to contact us with a question or comment, we will be happy to explain any concept or passage.

Contact details:

Address: Lhota 279, 763 02 Zlín

Email: [email protected]

The processing of personal data takes place in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (hereinafter "GDPR"), the Personal Data Processing Act and Act No. 480/2004 Coll., on certain information society services, as amended.

1. DEFINITION OF TERMS

1.1. Data subject: Natural person (consumer and self-employed person) to whom the personal data relate (hereinafter also "You" or "customer" );

1.2. Personal Data: Any information about an identified or identifiable customer; an identifiable customer is a natural person who can be directly or indirectly identified, in particular by reference to a certain identifier, for example a name, identification number, location data, network identifier or to one or more special elements physical, physiological, genetic, psychological, economic, cultural or social the identity of this natural person (hereinafter referred to as "data" );

1.3. Administrator: The entity that determines the purpose and means of personal data processing, performs the processing and is responsible for this processing. The administrator of personal data is the company Vasky trade s.r.o., ID: 04779207 (hereinafter referred to as the "Administrator" );

1.4. Processor: An entity that, on the basis of the law or on the authority of the administrator, processes personal data for the administrator, based on a contract for the processing of personal data (hereinafter referred to as "processor" or "business partner" );

1.5. Website: Website available at www.botas.cz;

1.6. Purpose of personal data processing: The reason why personal data is processed. Such a reason can be e.g. fulfillment of the contract, administration of user accounts, processing of suggestions and complaints, sending business messages or displaying advertisements based on customer interests;

1.7. Scope of personal data processing: List of specific categories of customer personal data processed for a specific purpose;

1.8. Cookies: Short text files stored by your web or mobile browser. Most cookies contain a unique identifier, the so-called Cookie ID. This is a string of characters assigned by websites and servers to the browser that stored the cookie. This allows websites and servers to distinguish and identify individual browsers. Cookies are used to improve the functioning of the website, to evaluate its traffic and to better target marketing activities. If you browse our website, we assume that you agree to the use of these files.

2. WHAT PERSONAL DATA ARE PROCESSED?

2.1. The controller and its contractual processors process the following personal data, respectively categories of personal data, in connection with the relevant legal title and purpose of processing:

a) identification and address data: e.g. name, surname, delivery or other contact address, address of the collection point, registered office, ID number, VAT number;
b) electronic contact details: e.g. telephone number, e-mail address;
c) other electronic data: IP address processed using the so-called cookies;
d) other personal data associated with the contractual relationship: bank account number, order history;
e) data related to Botas club: link to Instagram profile.

f) other personal data: typically data provided by the customer in the order form or in other documents and when communicating with us, including later updates.

3. WHAT IS THE ORIGIN OF PERSONAL DATA?

3.1. We process data that you give us, e.g. when ordering our products, registering for the Botas club, communicating with us. Typically these are:

1. identification and address data;
2. electronic contact details;
3. personal data associated with the contractual relationship;
4. personal data regarding the use of Botas club benefits.

3.2. And further data that we obtain automatically based on the fact that you browse our website. Typically these are:

other electronic data:

• information about the cookies used,
• the website from which you came to our website;
• IP address;
• date of access and time of access;
• search queries;
• http and https response code;
• transmitted groups of data;
• information about the device's browser and operating system.

4. WHY IS PERSONAL DATA PROCESSED?

4.1. Your personal data may be processed for the following purposes:

a) Conclusion of the contract and fulfillment of the contractual relationship

Purpose: Based on the contract with us, you are entitled to the ordered goods. On the other hand, we are entitled to pay the agreed price. In order to fulfill our part and check the fulfillment of your part of the obligation, we need to process your identification and address data, contact data and other personal data connected to the contractual relationship (e.g. account number).

Legal basis: The processing of personal data for the purpose of fulfilling the contractual relationship is justified by the contractual relationship between you and us. In this case, the provision of personal data is a contractual requirement, without which it is not possible to conclude a contract.

Storage period: The data storage period is determined by the duration of the customer's contractual relationship with us, but as a rule, 2 years from the order. The longer storage period is for customers who are part of the Botas Club, for whom we record e.g. address or orders for correct inclusion.

 

 

b) Botas Club account

Purpose: Customers can register on our website for Botas Club, which is a form of customer program. For individual orders, the user receives points for each paid order, on the basis of which the user is assigned to an individual category. At the same time, it is possible to manage your personal settings. For this purpose, we need to process your e-mail address, first name, last name and telephone number. These data are then used for easier ordering of our products and for the possibility of using the benefits of membership.

Legal basis: The processing of personal data for the purpose of managing customer accounts is justified by the implementation of measures before the conclusion of the contract. The provision of personal data is voluntary in this case, but it would not be possible to register without it.

Storage period: The data storage period is given for the duration of the Administrator's legal authority. Possible deletion will take place after not logging into the customer account for more than 5 years.

c) Communication with customers, satisfaction evaluation, publication of reviews, processing of complaints and complaints

Purpose: We use your data to manage your questions, product range recommendations, handling suggestions, complaints with our customer support. We can also contact you with a request to fill out a satisfaction questionnaire.

We also use your data to notify you of the status of the order and notify you of any changes to the order (non-payment of the agreed amount, change of delivery, etc.). If you do not complete your order, we may send you an e-mail or SMS reminding you that you have not completed this order. We believe this is a useful service because it allows you to continue an order you have started and not have to re-enter the entire order from the beginning.

We also process your data in cases of exercising your rights due to defective performance and when exercising your rights in connection with the processing of your personal data.

Legal basis: The processing of personal data for the purpose of communicating with customers, evaluating satisfaction, handling suggestions, complaints and complaints is justified by our legitimate interest in the ability to communicate with customers. The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

Storage period: The data storage period is determined by the duration of the customer's contractual relationship with us and subsequently for a period of 4 years from its end.

d) Sending commercial messages and offering our goods

Purpose: We regularly send news about our products to our customers and those who have given their consent via e-mail. You can quickly and easily unsubscribe from these commercial communications at any time by using the unsubscribe link included in each communication. We also send personalized messages to our Botas Club members.

In other cases, we ask for your consent to send commercial messages about our goods, events and promotional campaigns of the company. We may use the information you provide us, as well as information obtained otherwise in connection with our goods - such as data about how you use the website, data about orders placed or information about your participation in events and competitions to personalize our commercial communications. We will always ask for your consent to send commercial communications when consent is required by relevant legal regulations.

Legal basis: The processing of personal data for the purpose of sending commercial messages and the offer of our goods is justified by your consent or our legitimate interest in direct marketing. The provision of personal data based on your consent is voluntary in this case, but without it it would not be possible to send you commercial messages. You can withdraw your consent at any time. The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

Storage period: The data storage period is determined by the duration of your consent. We will consider withdrawal of consent or termination of legitimate interest if you do not open our commercial communications for a period of 5 years.

e) Direct marketing and creation of personalized content and advertising

Purpose: Personalized content and advertising technologies allow us to display to visitors who have already expressed interest in our website or services. We try to ensure that you only see ads that really interest you, and not ads without any connection to your person and interests. Based on your order history, interests and website behavior, you may be shown personalized content and offers on our website and on third-party websites and applications (including social networks). In addition, we are entitled to store other personal data about you in compliance with legal provisions for our own marketing purposes. Furthermore, we would like to assure you that there is no transfer of stored data to third parties. All data is anonymized and pseudonymized for these partners who help us with this type of advertising. These are mainly cookies. You can read about managing your preferences regarding the processing of cookies in the Cookies section.

Legal basis: The processing of personal data for the purpose of direct marketing and the creation of personalized content and advertising is justified by your consent, or our legitimate interest in direct marketing. The provision of personal data based on your consent is voluntary in this case, but without it it would not be possible to provide you with personalized content and advertising. You can withdraw your consent at any time. The provision of personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

Storage period: The data storage period is determined by the duration of your consent. The storage time of cookies may vary depending on the type of cookies. Some cookies are limited by the duration of the session (so-called session or session cookies). These are processed while the browser is running and are automatically deleted when the browser is closed. Other cookies are permanent (so-called persistent cookies). These cookies remain in the browser even after it is turned off until a specified date, or until they are manually deleted by the user. According to these cookies, the user's computer can be identified when restarting the web browser and browsing the Internet. You can read more about the storage time of cookies in the Cookies section.

f) Improving the quality of our goods and services, analyzing traffic to our website and your behavior on the website

Purpose: We always strive to improve the quality of our services and goods and your better experiences. The development of new services and goods and the improvement of existing ones takes place by means of ascertaining the needs and wishes of users through telephone calls, questionnaires, analyzes on websites, interest in certain services and texts, etc.

In connection with browsing our website, we also process information about traffic, readership, number of pages viewed, device from which you access our website, time spent on the website. This data helps us to identify areas of our website that are more difficult to access or less understandable. We collect this data in order to be able to offer quality content that is user-friendly for you and to develop services in which you are obviously interested. Based on this information, we regularly improve our website.

If you do not want data to be collected using these technologies, you can use a simple procedure: most browsers offer you the option to automatically reject many such technologies, or give you a choice to accept or reject them. You can read about managing your preferences regarding the processing of cookies in the Cookies section.

g) Protection of our rights, property or safety or the rights, property or safety of other persons

Purpose: We may use data about how you use our website or data about your orders to prevent or detect fraud, abuse, illegal use and violations of our terms and conditions, as well as to comply with the decisions of the court or other law enforcement authorities , state administration bodies or conditions set by valid legal regulations.

Legal basis: The processing of personal data for the purpose of protecting our rights, property or safety or the rights, property or safety of other persons is justified by the fulfillment of legal obligations, or our legitimate interest in protecting our rights, property or safety or the rights, property or safety of other persons. Providing personal data in this case is not a legal or contractual requirement. You are therefore under no obligation to provide us with your personal data for this purpose.

Storage period: The data storage period is 10 years from the termination of our contractual relations, or 4 years from their acquisition.

h) Accounting and tax purposes

Purpose: We also have to process your personal data because the relevant accounting and tax legislation imposes it on us.

Legal basis: We handle this personal data mainly for the purpose of fulfilling the concluded contract. Fulfillment of contractual obligations typically occurs when, on the basis of a concluded contract, we have to record invoices or other tax documents in accordance with Act no. 563/1991 Coll., on accounting

Storage period: For the period specified by law, in particular Accounting data are processed for a period of 5 years starting from the end of the accounting period to which they relate, tax documents for 10 years from the end of the tax period in which the performance took place.

5. TO WHOM PERSONAL DATA IS ACCESSED?

5.1. Your personal data is made available primarily to our employees, who need this data in order to be able to provide you with our services.

5.2. In addition to our employees, we must transfer your personal data to various business partners who enable the Administrator to function and help us provide you with better, more accurate and generally more specific content and services. We select the processors to whom we entrust your personal data very carefully. We cooperate only with those who are able to ensure such technical and organizational security measures that unauthorized or accidental access to your data or other misuse of your data cannot occur. All these partners are authorized to process your data exclusively on the basis of the addendum on the processing of personal data, in which they commit to the obligation of confidentiality. The provided data may also not be used for any purposes other than those for which we made them available to them.

5.3. The following categories of our partners (recipients) may have access to your personal data:

a) Partners who ensure the transport of our goods for us

b) Partners to whom we provide data for the purpose of analyzing traffic to our website, your behavior on the website and business conversions

We strive to make your experience of using our website as pleasant as possible. That is why we work with partners who analyze traffic and your behavior on our website. Thanks to these partners, we have information about which part of our website is not understandable, where you may be looking for the required information and whether you find it, which offers on our website you clicked on, etc. Based on this information, we regularly improve our website.

c) Partners who provide us with their services, who ensure the technical operation of a certain service for us, and operators of technologies that we use for our services

In order for the Administrator to function properly and provide you with its services, we must cooperate with a number of partners who provide us with their services, ensure the technical operation of a certain service or operate the technologies that we use for our services. Typically these are the following categories of partners:

• providers of accounting and tax advice,
• providers of IT services and hosting, including cloud storage,
• providers of the security and integrity of our services and websites,
• payment gateway providers (payment card providers),
• legal service providers, lawyers,
• providers of printing and postal services,
• partners cooperating with us in loyalty programs, organizing social events, seminars, etc.

 

d) Public administration bodies

• We disclose personal data in the event of law enforcement, if required by law or necessary for the prevention, detection and prosecution of crimes and fraud, or if we are otherwise required to do so by law.
• It can be law enforcement authorities (Police of the Czech Republic, public prosecutor's office and courts) or financial authorities.
• The transfer of personal data to these recipients does not take place regularly but only randomly, especially if required by law.

6. HOW ARE PERSONAL DATA PROCESSED?

6.1. Personal data is processed manually and automatically. We keep proper records of all processing activities in accordance with the relevant legal regulations - in particular, Art. 30, Records of Processing Activities.

 

7. WHAT ARE THE RIGHTS OF DATA SUBJECTS?

7.1. To exercise your rights, please contact us via our contact details, which are listed at the beginning of this policy. We reserve the right to reasonably verify the identity of the applicant for the rights in question. If the requests are repeated and are clearly unreasonable or unreasonable, we may charge you a reasonable fee or refuse to comply with the request.

a) Right of access to personal data

If you want to know whether we are processing your personal data, you have the right to obtain from us information about whether your personal data is being processed, and if so, you also have the right to access your personal data. In the event of a repeated request, we are entitled to charge a reasonable fee based on our administrative costs for a copy of the personal data provided.

b) The right to correct inaccurate and supplement incomplete personal data

If you believe that we are processing inaccurate or false data about you, you have the right to request their correction. You also have the right to supplement incomplete data. We will carry out the repair or addition without unnecessary delay, but always taking into account our technical capabilities.

c) Right to erasure

In the event that your personal data are no longer needed for the purposes (especially from the necessary legislative regulations) for which they were collected or otherwise processed, or if you discover that they were processed illegally, you have the right to request their deletion.

d) The right to limit the processing of personal data

If you are not interested in a complete erasure, but only a temporary restriction of the processing of your personal data, you can in certain cases request us to restrict the processing of your personal data.

e) The right to data portability

If you want us to transfer your personal data to third parties, you can exercise your right to data portability in the case of prior consent. In the event that the exercise of this right could adversely affect the rights and freedoms of third parties, we will not be able to comply with your request.

f) Right to object

You have the right to object at any time to the processing of personal data that is processed for the purpose of fulfilling a task carried out in the public interest or in the exercise of public authority or for the purpose of protecting our legitimate interests. In the event that we do not prove that there is a serious legitimate reason for the processing that outweighs your interests or rights and freedoms, we will terminate the processing based on your objection without undue delay.

g) The right to withdraw consent at any time

If the processing of your data is based on your consent, you have the right to withdraw this consent at any time.

h) The right to information about automated decision-making, including profiling

You are not the subject of any decision based solely on automated processing, including profiling, which would have legal effects for you or would similarly significantly affect you.

i) The right to file a complaint with the Supervisory Authority

Last but not least, you also have the right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data, based in Plk. Sochova 27, 170 00 Prague 7, phone: 234 665 111, website: www.uoou.cz.

8. COOKIES

8.1. 8.1. Cookies are short text files that the visited website sends to the browser. Thanks to cookies, the administrator can distinguish you from other website users and more effectively record information about your visit and behavior on the website. Cookies are in no way harmful to your device or its software. As a user, you can disable or limit the use of cookies in your browser.

The administrator uses cookies for many purposes such as:

 

Cookies list:

 

name	provider	purpose	Duration	Type

 

 

9. IS DATA ON CHILDREN ALSO PROCESSED?

9.1. Our website is not intended for children under the age of 16. We therefore do not intentionally collect their personal data. If we become aware that we have inadvertently obtained personal information about children under the age of 16, we will take steps to delete that information as quickly as possible, except where we are required by applicable law to retain it.

10. CONCLUSION

10.1. The personal data processing policy was drawn up and approved by the company's executive on 5/1/2024.

10.2. Our business strategy and related ways of processing your personal data may change. If we decide to update these policies, we will post the changes on our website and we will inform you about these changes not only on the already mentioned website, but also on social networks. We ask that you read these policies carefully and check them regularly when you continue to communicate with us or use our website.