Personal data processing information

MUFFIK s.r.o. performs personal data processing for reasons of legitimate interest, or if necessary for the agreement's performance, which has been concluded with you regarding the sale of goods (or for the performance of measures taken before concluding such an agreement), and they also carry out the personal data processing necessary for fulfilling the company's public law obligations.
The data controller's identity and contact details
o   The data controller regarding personal data is MUFFIK s.r.o., with their registered office at Podolská 50, 147 00 Prague 4, Business ID No: 08849102, registered in the Commercial Register: file no. C 326367 maintained with the Municipal Court in Prague (hereinafter referred to as the “data controller”).
o   The data controller's contact details are as follows: mailing address Zábřežská 596/40 Šumperk 7887 01, e-mail address store@muffik.eu, telephone +420 723 336 335.
o   The data controller has not appointed a data protection officer.
Legal basis for the personal data processing
o   The legal basis for personal data processing is the fact that such processing is necessary for the purposes of the legitimate interests of the data controller in question or third party within the meaning of Article 6 (1)(f) of the Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to personal data processing and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "the Regulation”); or
o   processing is necessary for the performance of the agreement between you and the data controller or in order to take steps by the data controller prior to entering into such contract within the meaning of Article 6 (1)(b) of the Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to personal data processing and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "the Regulation”);  
o   processing is necessary for compliance with legal obligations to which the data controller is subject; within the meaning of Article 6 (1)(c) of the Regulation, in particular for compliance with legal obligations imposed on the data controller by the generally binding legal regulations, in particular by the Act No. 235/2004 Sb., on Value Added Tax, as amended, by Act No. 586/1992 Sb., on Income Tax, as amended, and Act No. 563/1991 Sb., on Accounting, as amended.
Scope and purpose of personal data processing
o   The data controller processes the following data based on your consent: name and surname, billing address, delivery address, e-mail, telephone number, company number, tax number.
o   The purpose of personal data processing is:
▪      legitimate interest of the data controller or a third party in fulfilling the data subject's request to send an offer, reply to a question or comment on an article, goods, or services; or
▪      performance of the agreement between you and the data controller, including goods delivery and settlement of the rights arising from the liability for defects, or taking steps by the data controller prior to entering into such an agreement and performance of related public law obligations by the data controller.
o   There is no automated individual decision-making by the data controller within the meaning of Article 22 of the Regulation.
Personal data retention period
o   Your personal data will be processed for the duration of the effects of the rights and obligations arising from the agreement and for the time necessary for the purposes of archiving in accordance with the relevant generally binding legal regulations, but no longer than for the period specified by generally binding legal regulations; or
o   For a period of 3 years.
Other recipients of personal data
o   Other recipients of your personal data will be shipping companies and other persons involved in the delivery of goods or services, and persons providing the data controller with technical services related to the e-shop's operation, including the operation of software and data storage.
o   Recipients of your personal data processed for the purpose of fulfilling obligations arising from legal regulations may also be financial administration bodies or other competent authorities in cases where the data controller is imposed to do so by generally binding legal regulations.
o   The data controller has no intention of transferring your personal data to a third country (to a country outside the EU) or to an international organisation.
The data subject's rights
o   Under the conditions set out in the Regulation, you have the right to request that the data controller gives you access to your personal data, and the right to rectify or delete your personal data, or restrict its processing, the right to object to personal data processing and the right to portability of your personal data.
o   If you believe that personal data processing has breached or breaches the Regulation, among other things, you have the right to lodge a complaint with the supervisory authority.
o   You are not obliged to provide your personal data. The provision of your personal data is a necessary requirement for the conclusion and performance of the agreement and without the provision of your personal data, it is not possible for the data controller to conclude or fulfil the agreement.