Principles of Processing Personal Data

SOLSOL s.r.o., IČO: 293 60 391, with its registered office at Technická 3029, Královo Pole, 616 00 Brno, registered in the Commercial Register kept by the Regional Court in Brno, Section C, File 75143 ("SOLSOL" or also "we"), as the operator of the website www.solsol.cz ("Website") and at the same time the administrator of your personal data, we hereby inform you, as a user of the Website, about the processing of your personal data, which we obtain from you by using our Website and your registration in the SOLSOL partner portal (the "Portal").

When processing your personal data, we proceed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as amended (the “GDPR Regulation”) and the legal regulations of the Czech Republic;

With regard to the above, we issue these personal data protection principles (“Principles”), by which we fulfill our information obligation as a personal data controller imposed on us by the GDPR towards you, as a visitor to our Website, user of the Portal and at the same time the subject of personal data (“Data Subject”);

The purpose of these Principles is to inform you in accordance with our legal obligations, in particular about the type, scope, purpose, duration, and legal basis for data processing.
When processing your data, we take great care to protect it. We have implemented a number of technical and organizational measures to protect your privacy in order to ensure the most effective protection of personal data processed through the Website. Despite the above, we would like to point out that data transmissions over the Internet may have security gaps, as a result of which the absolute protection of your data may not be guaranteed. Any use of this website is therefore entirely at the user's own risk. 

1. LEGAL BASIS AND PURPOSE OF PROCESSING YOUR PERSONAL DATA: 

1.1. The processing of your personal data is necessary for the conclusion of a contractual relationship between you and us and the subsequent fulfillment of the obligations arising from it:

PURCHASE AND SALE OF GOODS

Your personal data is processed in connection with your purchase of our goods made through our Website, in particular for sending an order confirmation, delivering a confirmation of receipt of payment, sending an electronic invoice, as well as for continuous information about the status of your order and any other individual communication regarding your order and delivery of goods.

USER ACCOUNT

In connection with access to your user account on the Portal, we process your personal data for the purpose of establishing and maintaining your account, logging into your account and using the services and benefits of the Portal.

1.2. The processing of personal data is necessary to protect our legitimate interests:

DIRECT MARKETING

We process personal data for the purpose of sending you commercial communications related to our products and services, unless your consent is required for sending them.

OPERATION, CUSTOMIZATION AND CREATION OF WEBSITE CONTENT

Processing personal data about your behavior on our Websites helps us to obtain information on the basis of which we can improve our Websites to make them as user-friendly as possible.

We may also process your personal data to create statistics, for example, to monitor traffic or measure the effectiveness of advertising or to test the functionality of our Websites.

Data about your behavior on the Websites also helps us to protect our Websites from attacks and misuse.

IMPROVING WEBSITE SERVICES AND FUNCTIONALITIES

We use your personal data to improve our services and systems, including adding new functionalities to the Website.

DISPUTE RESOLUTION, CONTROL BY PUBLIC ADMINISTRATION AUTHORITIES

We also process your personal data for the purpose of enforcing our rights and legitimate claims in court and similar proceedings in the event that you breach the contract or our other legitimate interests.
We may also process personal data for the purposes of any checks carried out by public administration authorities.

1.3. Processing of personal data is necessary to comply with legal obligations imposed on us by law:

We process personal data, for example, to fulfil accounting and tax obligations set out for us by the relevant legal regulations.

1.4.Processing of personal data based on informed consent:

We process personal data, for example, for the purpose of direct marketing, in particular sending commercial communications offering our products and the services, products and services of our contractual partners and other cooperating persons, and conducting market surveys and questionnaires for statistical and analytical purposes, all in the event that we cannot proceed in this way solely on the basis of our legitimate interest. You can withdraw your consent to the processing of your personal data at any time and unsubscribe from receiving commercial communications.

2. TYPE OF PROCESSED PERSONAL DATA:

The scope of personal data that we process about you depends on which services of our Website you use. The scope of data provided can be divided into the following groups according to the way you use our Website:

PURCHASE AND SALE OF GOODS

As part of an order to purchase our goods via our Website, you provide us with data that is necessary for the conclusion and performance of the purchase contract.

The data provided in this way can be divided as follows:

We distinguish the personal data that we process according to the following categories:
i. Identification data: in particular name, surname;
ii. Contact data: address of residence / registered office, contact (delivery) address, telephone number, e-mail address;
iii. Business data: billing data, bank details, data related to orders and data related to payments for goods.

USER ACCOUNT

For the purpose of registering and maintaining your user account on the Portal, we may process the following personal data:
i. Identification data: name and surname;
ii. Contact data: address of residence / registered office, contact (delivery) address, telephone number, e-mail address;
iii. Login data: login name and password. We do not have access to your password.

COMMERCIAL COMMUNICATIONS

If you are a subscriber to our commercial communications, we process the following personal data:
i. Identification data: name and surname;
ii. Contact data: e-mail address.

USING OUR WEBSITE

We collect various information about your visit to our Website, such as your IP address, browser settings and preferred language, visited Websites, including the time of your visit. In order to best tailor the content of the Website to your preferences, we also collect the links you click on. When you visit our Website, we store and subsequently read cookies and other data about your behavior on the website, your IP address, data provided by your browser, your device's operating system, including its version, and language settings in your Internet browser and device. You are responsible for the content and activity you post on our Website, so we advise you not to publicly share any personal data through content that you do not wish to be publicly available.

3. CATEGORIES OF RECIPIENTS OF PERSONAL DATA:

We process your personal data mainly for our own purposes. In connection with the operation of our Websites, however, we also use the services of other persons who have or may have access to your personal data, or may directly process it for us ("recipients"), but only if this is necessary for the performance of the contract (e.g. to ensure payment or transport), on the basis of legitimate interest or if you have given your prior consent to the transfer of data.
These recipients may include in particular:

• Suppliers of development and service services related to the Websites;
• Operators of data storage (cloud server solutions) for the Websites;
• Providers of payment services for the purposes of payments for the goods ordered by you, i.e. the performance of the purchase contract;
• Transport companies for the purpose of delivering the goods ordered by you;
• Contractual partners providing us with accounting, tax and legal services (in particular accounting service providers, tax advisors, lawyers, debt collectors, etc.);
• PR and marketing consultants, partners ensuring the distribution of commercial communications;
• Courts and public administration bodies for the purpose of enforcing our rights.

If third parties use your personal data within the framework of their own legitimate interests, such processing is governed exclusively by the personal data processing principles of the relevant companies and persons.

4. PERIOD OF PROCESSING PERSONAL DATA:

We process your personal data for the duration of the contractual relationship, i.e. in particular the purchase contract or other legal title that allows us to process your personal data. We are obliged to process personal data that are necessary for the performance of our obligations, in particular obligations arising from the concluded contract between us or from generally binding legal regulations, for the period specified by the given legal regulations. For example, we, as the administrator, are obliged to keep accounting documents containing information about you for at least 10 years from their issue.

We keep personal data that we process with your consent only for the duration of the purpose for which the consent was granted, or for the duration of your consent.

5. ADDITIONAL INFORMATION ON THE PROCESSING OF PERSONAL DATA:

Providing us with your personal data, except in cases falling under the processing of personal data based on informed consent, is necessary for us to enable you to use the Website or if their provision is required by law. In these cases, the provision of personal data is your obligation. Failure to provide personal data will result in the impossibility of concluding, or possibly a reason for terminating, the contractual relationship and thus the use of the Website.

Personal data may be processed in writing and electronically.

Personal data is placed on servers and data storages (“storage”) that are owned or controlled by us and that are maintained and managed with all necessary professional care appropriate to the nature and character of the service provided, in accordance with European and Czech legal regulations.

Personal data may be transferred within the EU and, subject to the conditions set out in legal regulations, in particular the GDPR Regulation, to a third country.

YOUR RIGHTS IN CONNECTION WITH THE PROTECTION OF PERSONAL DATA:

We process your personal data transparently and in accordance with the relevant legal regulations.

Nevertheless, you have the right to contact us at any time to obtain information about the processing of your personal data or to exercise the rights listed below related to personal data.

Right to access personal data

You have the right to obtain confirmation from us whether we are processing your personal data, and if so, you have the right to access this data and other information (e.g. what data it is, for what purpose, to what extent, in what manner and for how long the data will be processed and what your rights are in relation to your personal data), or the right to request a copy of your personal data.

Right to rectification of personal data

If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to update or supplement it.

Right to erasure of personal data (right to be forgotten)

You have the right to request that we erase your personal data without undue delay, if the conditions under the GDPR are met, in particular if they are no longer necessary for the purposes for which they were collected or otherwise processed or if you have withdrawn your consent to the processing. We are also obliged to erase your personal data if the processing of personal data is unlawful or if we are required to do so by law. However, this does not apply to personal data that we need to comply with our legal obligations and whose retention is required by law or to protect our legitimate interests.

Right to restriction of processing of personal data

You have the right to request restriction of processing if you dispute the accuracy of your personal data or if the processing is unlawful but you object to the erasure of such personal data, or if you request us to do so, we may process your selected personal data even after they are no longer necessary for the purpose for which they were provided to us (e.g. in connection with the exercise of a claim in court for which you need the personal data processed by us), or you have objected to the processing until it has been verified whether our legitimate interest outweighs your legitimate reasons.

Right to object to the processing of personal data

You have the right to object at any time to the processing that is based on the legitimate interests of the Controller, a third party or if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. If the processing is for marketing purposes, we will cease processing the personal data without undue delay. In such a case, unless we demonstrate compelling legitimate grounds for the processing that override your interests or rights and freedoms, or for the establishment, exercise or defence of our legal claims, we will no longer process your personal data for this purpose.

Right to data portability

In the case of automated processing of personal data that is based on a concluded contract or consent that you have given us, you have the right to the so-called data portability, i.e. to provide you with personal data in a structured, commonly used and machine-readable format, and the right to transmit these data to another controller, or to transmit your personal data directly to another controller, if technically feasible.

Right to withdraw consent to the processing of personal data

If you have given us consent to the processing of personal data for purposes that require consent, you have the right to withdraw this consent at any time. However, the withdrawal of consent does not affect the lawfulness of the processing of personal data that occurred before the withdrawal of consent. The withdrawal of your consent to the processing of personal data can be made at the address marketing@solsol.cz.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection, if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations.
The contact details of the supervisory authority are as follows:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Telephone: +420 234 665 111
Databox ID: qkbaa2n
Website: https://uoou.gov.cz
E-mail: posta@uoou.cz

COOKIES

Some Personal Data is contained in cookies that we use when operating the Website. Details on the use of cookies are provided directly on the Website.

GOVERNING LAW

These Policies are governed by directly applicable regulations of the European Union and the legal order of the Czech Republic.

UPDATES OF THE POLICY

We are entitled to amend or update these Policies from time to time.
Any changes to the Policies will become effective upon publication of the updated version of the Policies on our Website. If we make such changes to the Policies that will require your consent, or if, even without the need for your consent, we consider the changes made to the Policy to be fundamental, we will inform you via your user account on the SOLSOL Partner Portal and, if necessary, we will also request your consent in this way.

6. CONTACT

For any questions, comments and requests regarding this Policy and the processing of your personal data, you can contact us via the email address provided below.
We will handle your request without undue delay, but no later than within 30 days. In exceptional cases, especially taking into account the complexity of your request, we are entitled to extend this period by a further two months. We will inform you of any such extension and its justification.
You can also contact us at:

SOLSOL s.r.o.
Technická 3029/17
616 00 Brno
tel: 774 458 148
e-mail: sales@solsol.cz