Privacy Policy
Personal data protection principles and conditions
Personal data protection declaration
Name: GENEZISCOIN Michaela Smetanová
Address: Bžany 62 ZIP 415 01
IČO: 17060851
DIČ: CZ0157303047
Date of preparation: 01.09. 2024
Responsible person: Michaela Smetanová
This document contains basic information on the handling of personal data. In the text you will learn in particular:
• what personal data we process,
• for what purpose and how we process personal data,
• to whom personal data may be transferred,
• how long we process personal data,
• what rights you, as a data subject, have in relation to the protection of personal data.
If you need any part of the text to be explained, advised or to discuss further processing of your personal data, you can contact us at any time at the e-mail address info@geneziscoin.cz.
1. INTRODUCTORY PROVISIONS
1.1 These Principles are prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR Regulation).
1.2 The aim of these Principles is to provide Data Subjects with basic information regarding the processing of Personal Data.
1.3 For the purposes of these Principles, the following shall apply:
1.3.1 the controller is GENEZISCOIN Michaela Smetanová Bžany 62 415 01, ID number 17060851, contact info@geneziscoin.cz (hereinafter referred to as the Controller),
1.3.2 the data subject is you, i.e. the natural person about whom Personal Data is processed (hereinafter referred to as the Data Subject)
1.3.3 personal data means the name and surname, address, e-mail, telephone number, identification number of a natural person undertaking a business (hereinafter referred to as Personal Data).
1.4 The Controller of Personal Data hereby informs about the method and scope of processing of Personal Data, including the scope of your rights related to the processing of Personal Data.
1.5 The Controller is GENEZISCOIN Michaela Smetanová and for this purpose operates the e-shop and website www.geneziscoin.cz. As part of this activity, the Controller processes Personal Data:
1.5.1 to the extent that they were provided in connection with the order of products and/or services of the Controller, or within the framework of negotiations on the conclusion of a contract with the Controller, as well as in connection with the concluded contract, and
1.5.2 for the purpose(s) specified in Article 3 of these Principles.
1.6 Personal Data are not processed by any other entity. Only the Controller will have access to the processed Personal Data.
2. PROTECTION OF PERSONAL DATA AND INFORMATION ABOUT PROCESSING
2.1 Act No. 101/2000 Coll., on the Protection of Personal Data, as amended, and other relevant legal regulations apply to Data Subjects.
2.2 The Data Subject acknowledges that by sending the completed registration or inquiry form, the Controller will begin processing Personal Data.
2.3 If the Data Subject does not provide his/her Personal Data, it is not possible to conclude a contract with the Controller and/or to provide him/her with services arising from it/resulting from consent. Personal data are necessary in this context for the provision of a specific service or product of the Controller.
2.4 The provision of Personal Data to the Controller is generally a contractual and legal requirement. Regarding the provision of Personal Data for marketing purposes, which does not constitute the fulfillment of a contractual and legal obligation of the Controller, the Data Subject's consent is required. If you have not granted the Controller consent to the processing of Personal Data for marketing purposes, this does not mean that the Controller would refuse to provide you with its services as a result.
2.5 The Data Subject is obliged to provide the Controller with only true and accurate Personal Data.
2.6 The Controller will make every effort to prevent unauthorized processing of Personal Data. 2.7 Personal Data are and will be processed in electronic form in a non-automated manner.
2.8 The data subject acknowledges that his/her Personal Data is stored in the data centers of GENEZISCOIN Michaela Smetanová. The Administrator uses the services of third parties, in particular website hosting operators and e-shops, whose operation is in accordance with European personal data protection standards.
2.9 The data subject acknowledges that cookies may be stored by GENEZISCOIN Michaela Smetanová on his device:
Cookie name / Cookie functionality - activity
Order / Order goods
Email communication / Communication
Write us a message / Communication
Inquiry forms / Communication
3. PURPOSE OF PROCESSING
3.1 The Administrator processes Personal Data for the following purposes:
Purpose of processing Personal Data / Legal title of processing Personal Data
Order / Order goods
Email communication / Communication
Write us a message / Communication
Inquiry forms / Communication
3.2 You may refuse the processing of your Personal Data for the purpose of sending marketing and commercial communications at any time and this will not affect our other mutual relationships. Simply send us a letter to our address/send an e-mail with the relevant request to info@geneziscoin.cz or to another address from which you received commercial communications from us/call the phone number +420 775 603 489.
4. PERIOD OF PROCESSING PERSONAL DATA
4.1 Personal data will be processed during the negotiation of the contract between the Controller and the Data Subject, for the purpose of concluding the contract, as well as for the duration of the contractual relationship or for the period specified in the consent.
4.2 In the event of concluding a contract according to the Controller's Terms and Conditions, Personal data will be processed and stored for the following 36 months in the event of a dispute arising regarding the relationship between the Controller and the Data Subject, in order to protect the legitimate interests of the Controller.
4.3 In order to fulfill the legal obligation to archive accounting documents based on Act No. 563/1991 Coll., on Accounting, as amended, Personal data (except for the e-mail address and telephone number) will be further processed and stored for a period of 5 years starting from the year following the year in which the contract between the Controller and the Data Subject was concluded.
4.4 After the periods specified in this article have expired, the Controller will securely destroy the Personal Data.
5. ACCESS TO PERSONAL DATA
5.1 Your Personal Data is processed by the Controller.
5.2 Your Personal Data may be transferred to other processors for the specified processing purposes to carry out the processing. Processors include:
Processor of Personal Data / Description of the processor and the processing it performs for the Administrator
Forwarding / Delivery of goods
5.3 Your Personal Data is transferred to the following recipients of Personal Data:
Categories of recipients of Personal Data / Description of the category
Forwarding / Delivery of goods
6. CROSS-BORDER PROCESSING OF PERSONAL DATA
6.1 Processing of Personal Data is carried out in the following third countries or international organizations:
Subject Country / Guarantees Note Copy/access
Forwarding / SR
6.2 Further transfer of Personal Data to third countries or international organizations will be carried out only if the Data Subject is informed and consents to it.
7. RIGHTS OF THE DATA SUBJECT
7.1 The Administrator always processes your Personal Data in such a way that the processing is carried out correctly and securely. The rights of the Data Subject are guaranteed to you and you can exercise them with the Administrator.
7.2 The Data Subject may exercise their rights electronically by completing and sending a request for a given right to the e-mail: info@geneziscoin.cz
or the Data Subject may exercise their rights electronically by sending a message to the e-mail info@geneziscoin.cz or orally by calling the phone number +420 775 603 489. Another option is to send a written request to the address: GENEZISCOIN Michaela Smetanová Bžany 62, ZIP Code 415 01.
7.3 The statement and other information about the measures taken will be provided to the Data Subject as soon as possible, no later than one month after submitting their request. This period may be extended by up to two months with regard to the complexity and number of requests. The Administrator will inform the Data Subject of any extension and the reasons for it.
7.4 The Controller provides the exercise of rights free of charge.
7.5 A reasonable fee taking into account the administrative costs associated with providing the requested information may be charged if the request is manifestly unfounded or excessive, in particular due to its repetition.
7.6 If the Data Subject believes that the Controller is processing his/her Personal Data in a manner that is contrary to the protection of his/her private and personal life or in violation of applicable legal regulations, in particular if the Personal Data are inaccurate with regard to the purpose of their processing, he/she may:
7.6.1 request an explanation from the Controller by e-mail to info@geneziscoin.cz,
7.6.2 raise an objection to the processing and request by e-mail to GENEZISCOIN Michaela Smetanová Bžany 62, ZIP Code 415 01 that the Controller ensure the elimination of the situation thus created (e.g. by blocking, correcting, supplementing or destroying the Personal Data). The Controller shall immediately decide on the objection and inform the Data Subject. If the Controller does not comply with the objection, the Data Subject has the right to contact the Office for Personal Data Protection directly. This provision does not affect the Data Subject's right to address his/her complaint directly to the Office for Personal Data Protection.
7.7 Right of access:
7.7.1 The Data Subject has the right to obtain from the Controller confirmation as to whether or not Personal Data concerning him/her are being processed. Where processed, the Data Subject has the right to access such data and the following information (which is part of this Privacy Policy and Information Sheet):
7.7.1.1 the purposes of the processing,
7.7.1.2 the categories of Personal Data processed,
7.7.1.3 the recipients or categories of recipients to whom the Personal Data have been or will be disclosed, in particular recipients in third countries or international organisations,
7.7.1.4 the planned period for which the Personal Data will be stored or, if this cannot be determined, the criteria used to determine this period,
7.7.1.5 the existence of the right to request from the Controller the rectification or erasure of Personal Data concerning the Data Subject or the restriction of their processing or to object to such processing,
7.7.1.6 the right to lodge a complaint with a supervisory authority, which in the Czech Republic is the Office for Personal Data Protection,
7.7.1.7 all available information about the source of the Personal Data, unless obtained from the Data Subject,
7.7.1.8 the fact that automated decision-making, including profiling, is being carried out and, at least in such cases, meaningful information concerning the process involved, as well as the significance and foreseeable consequences of such processing for the Data Subject.
7.7.2 Where Personal Data are transferred to a third country or an international organisation, the Data Subject shall have the right to be informed of the appropriate safeguards applicable to the transfer.
7.7.3 The Data Subject shall have the right to request that the Controller provide him with a copy of the Personal Data being processed. For further copies at his request, the Controller may charge a reasonable fee based on administrative costs. If the request is made in electronic form, the information shall be provided in a commonly used electronic form, unless the Data Subject requests otherwise. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
7.8 Right to rectification:
7.8.1 The Data Subject shall have the right to obtain from the Controller the rectification of inaccurate Personal Data without undue delay. Taking into account the purposes of the processing, the Data Subject shall have the right to have incomplete Personal Data completed, including by providing a supplementary statement.
7.9 Right to erasure:
7.9.1 The data subject has the right to request that the Controller erase his or her Personal Data without undue delay and the Controller has the obligation to erase the Personal Data without undue delay if one of the following reasons applies:
7.9.1.1 The Personal Data are no longer necessary for the purposes for which they were collected or otherwise processed,
7.9.1.2 The data subject withdraws consent and there is no other legal ground for the processing,
7.9.1.3 The data subject objects to processing which is carried out on the basis of public interest and exercise of official authority or legitimate interests of the Controller, including profiling, and there are no overriding legitimate grounds for the processing,
7.9.1.4 The data subject objects to processing for direct marketing purposes, 7.9.1.5 The Personal Data have been processed unlawfully,
7.9.1.6 The Personal Data must be erased for compliance with a legal obligation laid down in Union or Member State law to which the Controller is subject,
7.9.1.7 The Personal Data were unlawfully collected in connection with the offering of information society services to a child.
7.9.2 After the expiry of the period specified for the processing of Personal Data, the Controller shall always and automatically delete the Personal Data. The Data Subject may contact the Controller at any time with a request for deletion. Upon receipt of such a request, the Controller shall assess the legitimacy of the Data Subject's right (the Controller may have legal obligations or legitimate interests for the processing of Personal Data on the basis of which it may continue to process the Personal Data) and shall inform the Data Subject of its settlement.
7.10 Right to restriction of processing:
7.10.1 The data subject has the right to request that the Controller restrict the processing of his or her Personal Data in any of the following cases:
7.10.1.1 The data subject disputes the accuracy of the Personal Data, for a period of time necessary for the Controller to verify the accuracy of the Personal Data,
7.10.1.2 the processing is unlawful and the Data Subject opposes the erasure of the Personal Data and requests the restriction of their use instead,
7.10.1.3 The Controller no longer needs the Personal Data for the purposes of the processing, but the Data Subject requires them for the establishment, exercise or defence of legal claims,
7.10.1.4 The Data Subject objects to processing which is carried out on the grounds of public interest and the exercise of official authority or the legitimate interests of the Controller, including profiling, until it has been verified whether the legitimate grounds of the Controller override those of the Data Subject.
7.10.2 Where processing has been restricted, such Personal Data may, with the exception of storage, be processed only with the consent of the Data Subject, or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
7.10.3 If the restriction of processing of the Data Subject's Personal Data is to be lifted, the Data Subject will be informed in advance by the Controller.
7.11 Right to portability:
7.11.1 The data subject has the right to receive the Personal Data concerning him or her, which have been provided to the Controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the Controller to whom the Personal Data have been provided, where:
7.11.1.1 the processing is based on consent or a contract, and 7.11.1.2 the processing is carried out by automated means.
7.11.2 In exercising this right, the Data Subject may request the Controller to transmit the Personal Data directly from one Controller to another Controller, where technically feasible.
7.11.3 This right may not be exercised if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
7.12 Right to object:
7.12.1 The data subject has the right to object at any time to the processing of his/her Personal Data which is processed on the basis of public interest and the exercise of official authority or the legitimate interests of the Administrations including profiling. The Controller shall not further process the Personal Data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the Data Subject, or for the establishment, exercise or defence of legal claims.
7.12.2 Where Personal Data are processed for direct marketing purposes, the Data Subject shall have the right to object at any time to processing of his or her Personal Data for such marketing, including profiling in so far as it relates to such direct marketing.
7.12.3 Where Personal Data of the Data Subject are processed for scientific or historical research purposes or for statistical purposes, the Data Subject shall have the right, on grounds relating to his or her particular situation, to object to processing of his or her Personal Data. This shall not apply where the processing is necessary for the performance of a task carried out for reasons of public interest.
7.12.4 As required by the GDPR, this right has been expressly mentioned and is stated clearly and separately from any other information.
7.13 Right not to be subject to automated decision-making, including profiling:
7.13.1 The data subject has the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
7.13.2 The right may not be exercised where the decision:
7.13.2.1 is necessary for entering into or performing a contract,
7.13.2.2 is authorised by Union or Member State law to which the Controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject,
7.13.2.3 is based on the data subject's explicit consent.
7.13.3 Where the processing of Personal Data is based on a contract or explicit consent, the Data Controller shall implement suitable measures to safeguard the rights and freedoms and legitimate interests of the Data Subject, at least the right to human intervention by the Controller, the right to express his or her point of view, the right to obtain an explanation of the decision taken and the right to contest the decision.
7.14 Right to withdraw consent:
7.14.1 The Data Subject has the right to withdraw the consent (or explicit consent) given to the processing of Personal Data at any time. The appeal can be made by:
7.14.1.1 By sending a request to the email: info@geneziscoin.cz
7.15 Right to lodge a complaint with a supervisory authority:
7.15.1 The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his/her habitual residence, place of employment or place where the alleged infringement occurred, if the data subject believes that the processing of his/her Personal Data infringes the GDPR.
7.15.2 The supervisory authority in the Czech Republic is the Office for Personal Data Protection, which can be contacted at Pplk. Sochora 27, 170 00 Prague 7, telephone number +420 234 665 111 (switchboard) or e-mail posta@uoou.cz. Further information can be obtained at https://www.uoou.cz/.
8. AUTOMATED DECISION-MAKING
8.1 The processing of Personal Data does not include profiling.
8.2 The processing of Personal Data does not include automated decision-making.
8.3 Personal data is automatically evaluated and may be used for profiling or automated decision-making in the area of the Controller's marketing activities. The Controller uses the following methods:
8.3.1 does not use.
8.4 As a result of these activities of the Controller, the behavior of the Data Subject will be mapped and evaluated, which represents a certain interference with their privacy. However, this evaluation contributes to the fact that only such advertising and other offers are sent to the Data Subject that could be suitable and interesting given the results of the evaluation.
9. FINAL PROVISIONS
9.1 All legal relationships arising in connection with the processing of Personal Data are governed by the legal order of the Czech Republic, regardless of where access to them was made. Czech courts are competent to resolve any disputes arising in connection with the protection of privacy between the Data Subject and the Administrator.
9.2 Data Subjects who provide their Personal Data via the registration form for the purpose of concluding a contract with the Administrator or provide consent to the processing of Personal Data do so voluntarily, on their own behalf, and the Administrator does not control their activities in any way.
9.3 The Administrator may change or supplement the text of the Policy. The Administrator shall inform the Data Subjects of any such change by e-mail at least 30 days before the changes come into effect.
9.4 These Policies are effective from 01.09.2024.
GENEZISCOIN Michaela Smetanová Teplice 01.09.2024