with registered office at Moskevská 516/49, Vršovice, 101 00 Prague, ID No.: 09096159, registered at the Municipal Court in Prague, Section C, Insert 330857, for the sale of goods through the online shop located at https://www.theminers.eu
The personal data controller is The Miners Roasters s.r.o., with registered office at Moskevská 516/49, Vršovice, 101 00 Prague, ID No.: 09096159, represented by Oldřich Valta, Managing Director, registered with the Municipal Court in Prague, Section C, Insert 330857 (hereinafter also referred to as "we" or "Controller").
The purpose of this document is to inform you of all information concerning the processing of your personal data. We encourage you to read this personal data processing policy. If you have any further questions about the processing of your personal data, please contact us by email at firstname.lastname@example.org or by post at the above address.
We process your personal data for statutory purposes, for the performance of a contract, or on the basis of our legitimate interest. If the processing of personal data is not for any of these three reasons, then we will ask for your consent. We make sure that your personal data is processed in accordance with the following principles: Reasonable limits, meaning that we use your personal data to the extent necessary to fulfill the purpose for which it is provided; transparency, in other words, we inform you in advance what personal data we process, why, for how long and to whom we transfer your personal data; and security, we always work with technology and internal procedures to keep your personal data safe; as a matter of course, we monitor, evaluate and adopt our internal settings in line with developments in modern technology.
For better clarity and orientation, below are terms that are frequently repeated in this policy.E-shop
An online store operated by the Administrator, available at https://www.theminers.eu;GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council;Commercial Communication
Generally an email or sms message sent to the User for the purpose of promoting products and services;Order
d A completed transaction by the Customer by pressing the relevant "ORDER WITH PAYMENT OBLIGATION" button with the intention of the Customer to enter into a purchase contract for the goods, which obliges the Customer to pay the price of the goods;Personal data
any information about the data subject from which he or she can be directly or indirectly identified;User
the natural person to whom the Personal Data relates, most commonly a customer or potential customer or user of our website, also referred to as "you";Processor
Carries out Personal Data processing activities on the basis of a contract or other mandate for the Controller;Processing of personal data
means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated processes, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other disclosure, alignment or combination, restriction, erasure or destruction;Special categories of personal data
Such personal data which reveals the racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, or sex life or sexual orientation of an individual. Genetic and biometric data are also considered to be a special category of data when they are processed for the purpose of uniquely identifying a natural person;
1. WHAT PERSONAL DATA WE PROCESS, HOW WE OBTAIN IT, FOR WHAT PURPOSE AND FOR HOW LONG WE KEEP IT
We process the following personal data about you:
- name and surname,
- contact details (in particular e-mail, telephone number),
- delivery address,
- billing data and bank details (data necessary for bookkeeping and payment for goods), a note on the Order;
- the information you provide to us in the course of communication with us (in particular, this will include your questions and answers to your questions, communication with you),
- User account login and User account activity (in particular, the data filled in by the User in the User account, purchase history, time of registration, date of last profile update),
- IP address,,
We do not process Special Categories of Personal Data.
General to the time of Processing of Personal Data. We process your personal data to the extent necessary for the duration of the purchase contract and for the time necessary to exercise the rights and obligations arising from the contractual relationship between you and us and the possible exercise of claims arising from these contractual relationships (e.g. exercise of rights arising from defects in the goods in the context of a claim, exercise of the warranty on the goods, etc.). Please note that in some cases the period for Processing of Personal Data may be up to 15 years after the execution of the Contract.
You will also learn how we may obtain Personal Information..
Publicly Available Personal Information. We may process Personal Information from publicly available sources, our marketing partners, and combine it with Personal Information that is voluntarily provided to us. We take steps to ensure that third parties are legally entitled to provide this information to us. For example, this will include demographic information, IP addresses and cookies. This is to improve the provision of our services and to promote the sale of our goods.
To register, set up a user account, sign up for newsletters, tell us about a query. You voluntarily provide us with Personal Information by setting up a user account for the E-shop and updating it subsequently. You can also voluntarily subscribe to our newsletters or tell us about a query.
Website. We also process information about when you visit and view our website. This information may include, for example, your IP address, the date and time you accessed our website, information about your internet browser, operating system or your language settings. We may also look at your website activity history, such as which links you visit on our website and which products you are shown. However, information about your activity on the website is anonymised for your maximum privacy.
If you access our website from a mobile phone or similar device, we may also process information about your mobile device (data about your mobile phone, etc.).
Please see below to learn what purposes we may process Personal Data for..
Performance of a contractual relationship. The lawful basis for Processing Personal Data is the performance of the Purchase Contract or the proper execution of the Order, including related communication with Customer Support.
Data processing related to the security of the E-shop website. If you visit our website, a situation may arise where access to a particular address is unauthorised or triggers an error condition (incident).
Blog. We have a publicly accessible blog on our website. Please note that any information you put in a comment on our blog can be read and used by anyone. If your Personal Information appears on our blog and you wish to remove it, please contact us at email@example.com. If we are unable to remove your Personal Information from the blog, we will notify you and tell you why.
Answer. If you have contacted us by email, telephone or via the contact form on our website or social media, then we process your Personal Data for the purpose of dealing with your enquiry.
Commercial messages. We may send commercial communications based on our legitimate interest to promote our goods and services to customers until they opt-out of receiving commercial communications. This makes it easy to click through any commercial communication we send by email. Based on our legitimate interest to promote our goods and services, we may also use the registered user's telephone number to distribute commercial communications by SMS. In this case, the user can unsubscribe from receiving SMS by sending a short message to firstname.lastname@example.org. You can object to the processing of your personal data on the basis of our legitimate interests at any time (see the section on your rights for more details).
Sign up for commercial communications. If you register for our newsletter, we will send you interesting information and offers to promote our goods and services based on your consent. If you no longer wish to receive emails, then click on the unsubscribe link in the footer of each of our emails. If you still want to receive our news and offers emails, you can object to receiving them (see the section on your rights below).
Customer satisfaction rating. We determine your satisfaction with your purchase through an e-mail questionnaire as part of the evaluation services in which our E-shop is involved. This is sent to you shortly after you make a purchase with us, unless you object to this. We use the processor who operates the evaluation service to send the questionnaire, evaluate your feedback and analyze our market position; we may pass on information about the goods you have purchased and your e-mail address in particular for this purpose.
2. OUR ACCOUNTING AND TAX OBLIGATIONS
Please note that we process a number of personal data for reasons for which we are legally obliged to do so. We are obliged under Section 31 of the Accountancy Act (No. 593/1991 Coll.) to keep accounting documents and accounting records (invoices) for a period of 5 years starting from the end of the accounting period to which they relate. We are also obliged under Section 47 of the Tax Administration Act (No 337/1992 Coll.) to keep the invoice for 3 years from the end of the tax period in which the tax liability related to the invoice arose. The invoice contains the following personal data: name, surname, e-mail address, billing address or other identification of the User and details of the purchased goods.
Please also note that we are obliged, pursuant to Section 35 of the Value Added Tax Act (No. 235/2004 Coll.), to archive tax documents for 10 years from the end of the tax period in which the transaction took place. The tax document contains the following personal data: name, surname, e-mail address, billing address or other identification of the User and details of the goods purchased.
3. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?
Technical and security measures. Taking into account the likelihood of risks and the cost-effectiveness of possible measures as well as the technical possibilities, we have implemented technical security and organizational measures - in all areas where Personal Data is processed (in particular, website operation, E-shop operation, employee agenda, communication with customers).
We use a secure information system that provides personal data with security appropriate to the state of the art, cost, nature, scope and purpose of the processing.
Organizational measures. All employees who have access to Personal Data are bound by confidentiality and must respect the security policy. Access to all systems, including the information system, is personalized and covered by passwords. The information system keeps logs so that we can control the access of individual employees to individual databases. Employees are regularly trained.
4. WHEN DO WE TRANSFER YOUR PERSONAL DATA TO THIRD PARTIES?
Your personal data may be transferred to our business partners (Processors) or other third parties if required by law.
Processors. We only use vetted Processors with whom we have a written contract and who provide us with at least the same guarantees as we provide you. These are only Processors who are from the European Union, or to countries that have been declared and recognized as safe, or to countries with which we have standard contractual clauses in accordance with Article 46 of the GDPR, and who provide your Personal Data with a comparable level of protection as if the GDPR and Czech law were applied. All of these Processors are bound by confidentiality obligations and may not use the Personal Data you provide for any purpose other than that for which we have disclosed it in accordance with this Policy. We have listed the specific Processors for each individual reason and purpose for Processing Personal Data.
Legal Obligations. We may transfer Personal Data to third parties outside of the Processor if required to do so by law or in response to lawful requests by public authorities or a court order in litigation.
5. WHAT RIGHTS DO YOU HAVE?
You can ask us for access to your personal data and request that we correct, amend, delete or restrict the processing of your personal data where it is inaccurate or has been processed in breach of applicable data protection laws. You have the right to data portability, to object to the processing of personal data, to withdraw consent to the processing of personal data and to not be subject to automated individual decision making, including profiling (which we do not do).
Your rights regarding the processing of Personal Data can be exercised by emailing email@example.com, in person, or by post to our address.
We endeavor to comply with your requests promptly, but no later than 1 month. However, there may be circumstances in which we cannot provide access (for example, where the information requested threatens the privacy of others or other legitimate rights, or where the cost of providing access would be disproportionate to the risks to the individual's privacy in the particular case). We may take reasonable steps to verify the identity of the user before taking any action on data subject rights.
Right of access to personal data Under Article 15 of the GDPR, you will have the right to access personal data, which includes the right to obtain from the controller: Confirmation as to whether it processes personal data, information about the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the intended duration of the processing, the existence of the right to request the controller to rectify or erase personal data relating to Users or to restrict or object to the processing, the right to lodge a complaint with a supervisory authority, any available information about the source of the personal data if not obtained from Users, the fact that automated decision-making, including profiling, takes place, appropriate safeguards for the transfer of data outside the European Union, where the rights and freedoms of others will not be adversely affected, a copy of the personal data. In the event of a repeated request, the controller will be entitled to charge a reasonable fee for a copy of the personal data.
Right to rectification of inaccurate data
According to Article 16 of the GDPR, you have the right to rectification of inaccurate personal data. You are also obliged to notify changes to your personal data (e.g. user profile records). You are also obliged to cooperate if it is found that the personal data we process is not accurate. We will make the rectification without undue delay, but always taking into account the given technical possibilities.
Right to erasure
According to Article 17 of the GDPR, you have the right to erasure of personal data relating to you unless we can demonstrate legitimate grounds for processing such personal data. We have mechanisms in place to ensure the automatic anonymisation or erasure of personal data when they are no longer needed for the purpose for which they were processed.
Right to restriction of processing
According to Article 18 GDPR, you have the right to restrict processing until the complaint is resolved if you contest the accuracy of the personal data, the grounds for processing or if you object to the processing.
Right to notification of rectification, erasure or restriction of processing
According to Article 19 of the GDPR, you have the right to notification in the event of rectification, erasure or restriction of the processing of personal data. We will notify individual recipients if personal data is rectified or erased, except where this proves impossible or requires disproportionate effort.
Right to data portability
According to Article 20 of the GDPR, you have the right to the portability of data relating to you that you have provided to the controller in a structured, commonly used and machine-readable format and the right to request the transfer of such data to another controller. If you provide personal data in connection with our contractual obligations or on the basis of consent and the processing is carried out by automated means, you have the right to receive such data in a structured, commonly used and machine-readable format. If technically feasible, the data may also be transferred to a controller designated by you, provided that the person acting on behalf of the respective controller is duly designated and can be authorized. If the exercise of this right would adversely affect the rights and freedoms of third parties, your request cannot be granted.
Right to object to the processing of personal data
According to Article 21 GDPR, you have the right to object to the processing of his/her personal data on the grounds of legitimate interest. If we do not demonstrate that there is a compelling, legitimate reason for the processing which overrides your interests or rights and freedoms, we will terminate the processing without undue delay on the basis of the objection. If the objection is made in the case of processing related to direct marketing, then we will terminate the process without undue delay.
Right to withdraw consent to the processing of personal data
Consent to the processing of personal data for marketing and business purposes may be withdrawn at any time. The revocation must be made in an explicit, comprehensible and specific expression of will. The processing of data from cookies can be prevented by adjusting your web browser settings.
Automated individual decision-making, including profiling
You have the right not to be subject to any decision based solely on automated processing, including profiling, which would have legal effects on you or affect you in a similarly significant way. However, we point out that we do not carry out automated decision-making without the influence of human judgment with legal effects for the Data User.
If you are dissatisfied, you may file a complaint at any time with the Office for Personal Data Protection, located at Pplk. Sochora 727/27, 170 00 Prague 7 - Holešovice (more information at https://www.uoou.cz/)