Privacy policy
These privacy policies (hereinafter referred to as "Policies") describe how we collect, use, and handle personal data obtained through the web interface www.bu1.cz (hereinafter referred to as "web interface")
Data controller:
BU1 sport s.r.o., located at Nákladní 36/16a, Město, 746 01 Opava
Company ID: 059 29 377
VAT ID: CZ05929377
registered in the commercial register maintained by the Regional Court in Ostrava, section C, insert 69933
Contact details of the data controller:
mailing address: Nákladní 36/16a, 746 01 Opava
phone number: +420 775 114 014
contact email: bu1@bu1.cz
Protecting personal data is very important to us. We kindly ask you to thoroughly familiarize yourself with these Policies, which contain important information regarding the handling of your personal data and related rights and obligations.
1. INTRODUCTORY PROVISIONS
1.1. What do we follow when handling personal data?
When handling personal data, we act in accordance with the legal order of the Czech Republic and directly applicable regulations of the European Union, especially with the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "regulation"), Act No. 110/2019 Coll., on the processing of personal data, as amended, Act No. 480/2004 Coll., on certain services of the information society and on the amendment of certain laws, as amended, and Act No. 127/2005 Coll., on electronic communications and on the amendment of certain related laws (Electronic Communications Act), as amended.
1.2. What is personal data?
Personal data means any information that identifies or can identify a specific natural person. Personal data includes, but is not limited to:
- identification data, such as name and surname, identification number, tax identification number, date of birth, gender, username for the user account;
- contact data, such as home address (or delivery address), phone number, email address;
- other data, such as information obtained through cookies, IP address (network identifier) including browser type, device and operating system, duration and number of accesses to the web interface, and other similar information.
2. COLLECTING AND USING PERSONAL DATA
2.1. How do we collect your personal data?
You provide us with your personal data mainly when filling out an order (or through the contact form), or when creating a user account or submitting reviews. If there are any changes to your personal data, please inform us.
When visiting and using the web interface, some personal data may also be collected and stored through cookies. You can read more about cookies in Article 5 of these Policies.
2.2. On what basis and for what purposes do we process your personal data?
- We can process personal data entered when inquiring (especially through the contact form) and ordering goods or services without your explicit consent on the basis of and for the purpose of concluding and fulfilling a contract, that is, for the purpose of delivering goods or providing services. We can also process this data on the basis of and for the purpose of fulfilling our legal obligations (especially record-keeping obligations, archiving tax documents, etc.) and based on our legitimate interest for the purposes of protecting our legal claims.
- We can process personal data entered when creating a user account without your explicit consent on the basis of fulfilling a contract and solely for the purpose of enabling access, management, and maintenance of the user account.
- Personal data provided when posting reviews on the web interface can be processed without your explicit consent based on a legal obligation, particularly for the purpose of verifying the authenticity of reviews.
- We're allowed to use your email address without your explicit consent based on our legitimate interest for sending commercial communications related to our goods or services similar to those you've ordered from us. You can refuse to receive commercial communications at any time (even when ordering goods or services).
- If you give us consent by confirming on the web interface, we can process your personal data entered on the web interface, especially when filling out an order or creating a user account, for the purpose of sending commercial communications and direct marketing, or for other purposes you've explicitly agreed to. If you are under 15 years old, your legal representative must give consent. In case of doubt, we may request confirmation of your age.
- We assess your satisfaction with your purchase through email surveys as part of the Customer Verified program, in which our e-shop is involved. We send these to you every time you shop with us, unless you refuse to receive them. We process personal data for the purpose of sending surveys as part of the Customer Verified program based on our legitimate interest, for the purpose of monitoring and improving our services and products and determining your satisfaction with your purchase from us. To send surveys, evaluate your feedback, and analyze our market position, we use a processor, which is the operator of the Heureka.cz portal; for these purposes, we may provide information about the purchased goods or services and your email address. Your personal data is not shared with any third party for their own purposes when sending email surveys. You can object to receiving email surveys as part of the Customer Verified program at any time by refusing further surveys using the link in the survey email. In the event of your objection, we will not send you the survey further.
- If personal data is processed through cookies, we process this personal data on the basis of and for the purposes of concluding and fulfilling a contract (applies only to necessary cookies) or based on your consent (which you give in the relevant bar placed on the web interface, and without this consent it's not possible to collect these cookies), especially for the purposes of providing user support, improving our services including analyzing user behavior andmarketing.
We can only use your personal data for a purpose other than that for which it was obtained based on your consent.
2.3. How long do we use the data?
We use personal data provided in the context of inquiries and ordering goods or services, or during registration, only for the time necessary to fulfill the contract and meet legal obligations, or to protect our legal claims.
If you give us explicit consent to process personal data or if we use your email address to send commercial communications and/or to monitor and improve our services and products in accordance with the previous article, the data will be used for the duration of the operation of the web interface on which we will offer services or goods similar to those you have ordered from us, or for the duration specified in the consent.
3. YOUR RIGHTS REGARDING PERSONAL DATA
3.1. Right to withdraw consent to the processing of personal data
If we process your personal data solely based on your consent (i.e., without any other legal reason), you can withdraw this consent at any time.
You can withdraw your consent to the processing of your personal data at any time, and this can be done:
- via email sent to our contact email address;
- by phone at our contact phone number;
- in writing by sending a letter to our delivery address;
- for the relevant cookies – in the settings of the web interface or in the settings of your internet browser;
- in the case of commercial communications – in the manner specified in each email containing commercial communication (by clicking on the unsubscribe link or in another way).
The withdrawal of consent does not affect the lawfulness of the processing of data carried out until the withdrawal of consent to processing.
3.2. Right to access personal data
You have the right to ask us whether we are processing your personal data. If we process your data, you have the right to access this personal data and, in particular, the following information:
- the purpose of processing;
- categories of processed personal data;
- recipients or categories of recipients to whom personal data will be disclosed;
- the period for which the personal data will be stored.
Upon your request, we will provide you with a copy of the processed data. For additional copies, we may charge an administrative fee not exceeding the costs associated with the preparation and delivery of these additional copies.
3.3. Right to rectification
If your personal data is inaccurate or incomplete, you have the right to request an immediate correction, i.e., to correct inaccurate data and/or to complete incomplete data.
3.4. Right to object to processing
You have the right to object at any time to the processing of your personal data if we process it for direct marketing purposes, including any automated processing of personal data. Upon raising an objection, we will stop processing your personal data for these purposes.
3.5. Right to erasure ("right to be forgotten")
You have the right to request that we delete your personal data if:
- the personal data is no longer necessary for the purposes for which it was collected or processed;
- you have withdrawn your consent to processing;
- you have raised objections to the processing of personal data;
- the personal data has been processed unlawfully.
If there are no legal grounds for refusing deletion, we are obliged to comply with your request.
3.6. Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if:
- you dispute the accuracy of your personal data;
- the processing is unlawful and instead of erasure, you request the restriction of processing of personal data;
- we no longer need your personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims;
- you raise an objection to processing.
When processing is restricted, we are only permitted to store your personal data; further processing is only possible with your consent or for legal reasons.
If the processing of personal data is restricted due to an objection to processing, the restriction lasts for the time necessary to determine whether we are obliged to comply with your objection.
If the processing of personal data is restricted due to a dispute over the accuracy of the data, the restriction lasts for the time needed to verify the accuracy of the data.
3.7. Right to data portability
You have the right to obtain your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transfer it to another data controller.
3.8. How can you exercise your rights?
You can exercise your rights regarding personal data through our contact details. All information and actions will be provided to you without unnecessary delay.
We will do our utmost to protect your personal data. However, if you are not satisfied with the handling, you have the right to contact the relevant authorities, especially the Office for Personal Data Protection (http://www.uoou.cz), which supervises the protection of personal data. This provision does not affect your right to directly contact the Office for Personal Data Protection with your concerns.
If your residence, place of employment, or the location of the alleged violation of personal data protection is outside the Czech Republic in another member state of the European Union, you can contact the relevant supervisory authority in that member state.
4. MANAGEMENT AND PROCESSING OF PERSONAL DATA
4.1. Who processes your personal data?
We are the data controller in the sense of the regulation.
To the extent necessary to fulfill the contract or other obligations, we are entitled to pass your personal data to other parties, such as carriers, cloud storage providers, email campaign managers, the company providing the "Customer Verified" certificate, external accountants, or other parties involved in fulfilling the contract or our obligations. We may also appoint other processors and recipients of personal data. We will also inform you who specifically processes your personal data upon your request.
To the extent necessary to fulfill the contract or other obligations, we are entitled to pass your personal data to other parties, such as carriers, cloud storage providers, email campaign managers, external accountants, or other parties involved in fulfilling the contract or our obligations. We may also appoint other processors and recipients of personal data. We will also inform you who specifically processes your personal data upon your request.
Your personal data will not be transferred to countries outside the European Union unless it is necessary for the fulfillment of the contract or for another reason in accordance with the rules for such transfers established by the regulation.
4.2. How do we process personal data?
Both personal and other collected data are fully secured against misuse. Personal data will be processed electronically in an automated manner or in printed form in a non-automated manner.
5. COOKIES
5.1. What are cookies?
Cookies are text files stored on the computer or other electronic device of each visitor to the web interface, which enable the functioning of the web interface.
Not all cookies collect personal data; some only allow the web interface to function properly. You can refuse the use of cookies by choosing the appropriate setting in your internet browser.
Please note that if you refuse to use cookies, it is possible that you will not be able to fully utilize all the features of the web interface.
5.2. What cookies does the web interface use and for what purposes?
The web interface uses session (temporary) cookies, which are automatically deleted after you finish browsing the web interface. It also uses persistent cookies, which remain on your device until they expire or until you delete them.
The cookies used by the web interface are as follows:
- first-party cookies – these cookies are assigned to the domain of our website; they are necessary cookies and performance cookies that we use for concluding and fulfilling contracts (especially necessary cookies), or based on the consent mentioned above. These cookies can be temporary or persistent;
necessary cookies – allow navigation on the web interface and the use of basic functions, they usually do not identify you and are not personal data;
performance cookies – serve to analyze how the web interface is used (number of visits, time spent on the web interface, etc.); the data obtained from these cookies is usually anonymous, and the collection of these cookies occurs based on your consent (which you give in the relevant bar located on the web interface, and without this consent, it is not possible to collect these cookies);
- third-party cookies – these cookies are assigned to a different domain than our website's domain, even when you are on our website; these cookies allow us, based on your consent (which you give in the relevant bar located on the web interface, and without this consent, it is not possible to collect these cookies), to analyze our website and display tailored advertisements for you; these are functional cookies and targeted and advertising cookies;
functional cookies – serve to personalize content by remembering login details, geolocation, etc.; through them, personal data may be obtained and processed;
targeted and advertising cookies – serve to display targeted advertisements on the web interface and beyond; through them, personal data may be obtained and processed. We may further share information about how you use our website with our partners in the fields of social media, advertising, and analytics.
5.3. Services using cookies
The web interface uses the Google Analytics service and possibly other services provided by Google LLC (hereinafter referred to as "Google"). These services work with information obtained through cookies.
Google Analytics is used to obtain statistical information about your use of the web interface. Cookies obtained by this service expire depending on your browser settings, but no later than after 2 years, or until they are manually deleted by you.
Google Ads is used to identify you within Google's advertising network and for ad retargeting (retargeting and remarketing). Cookies obtained by this service expire depending on your browser settings, but no later than after 18 months, or until they are manually deleted by you.
then after 18 months, or until you manually remove them.
If you're curious about how Google uses the data it gets from us, and how to change or stop the processing, you can find this info by clicking on the following link: How Google uses data when you use our partners' sites or apps.
5.4. How to set up and possibly refuse the processing of cookies
Instructions on how to properly set and manage the processing of cookies in your internet browser can be found here:
Google Chrome - https://support.google.com/accounts/answer/61416?hl=csInternet Explorer - https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies
Internet Explorer - https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies
Microsoft Edge - https://support.microsoft.com/cs-cz/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy
Mozilla Firefox - https://support.mozilla.org/cs/kb/vymazani-cookies-dat-stranek? redirectlocale=cs&redirectslug=vymazani-cookies
Opera - https://help.opera.com/cs/latest/web-preferences/#cookies
Safari - https://support.apple.com/cs-cz/guide/safari/sfri11471/mac
These Policies are valid and effective from the 3rd. 11. 2023