Information on the processing of personal data in the case of concluding a purchase contract and in the case of online payment

The company ARMED STORE s.r.o., with the registered office at Plzeňská 103/215a, 15000, Prague, Czech Republic, ID No.: 28108523, registered in the Commercial Register at the Municipal Court in Prague, Section C, File 160200 (hereinafter only as the “Controller”), pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter only as the “Regulation”), processes the following personal data:

1. in the case of conclusion of a purchase contract:

   • first name and surname
   • e-mail address
   • billing address
   • phone number
   • company name
   • ID No., VAT No.

   processed for the purpose of identification of the contracting parties and contract performance, and further for the purpose of contract records and future enforcement and protection of rights and obligations of the contracting parties. Such processing is allowed by Article 6 par. 1 letters b) and f) of the Regulation.
   The personal data will be processed for the purpose mentioned above and for the duration of the contractual relationship, and further in the necessary scope for 10 years since any termination of the contractual relationship, unless other law requires longer retention period of the contractual documentation
   Email address in case of any purchase of goods may be processed for the purpose of entry into the database to send commercial notifications. This procedure is allowed by Section 7 par. 3 of Act No. 480/2004 Coll., on information society services, based on the performed purchase of goods, unless you reject it. These notifications may be related only to the similar goods and they may be simply – by sending a letter, e-mail or click on the link in the commercial notification – unsubscribed. For this purpose, the e-mail address will be processed for 3 years since the last concluded contract, unless you prolong this period. These commercial notifications may be sent even by the company Heureka Shopping s.r.o. within the service Verified by customers to evaluate Buyer’s feedback.

2. in the case of online payment

   • first name and surname
   • e-mail address
   • order code
   • payment ID

   it is necessary to process for the purpose to pay within a concluded contract, fulfilment of Controller’s legal obligation and protection of Controller’s rights and legitimate interests. Such procedure is allowed by Article 6 par. 1 letters b), c) and f) of the Regulation. Personal data will be processed for the period 10 years and then in the necessary scope for the period defined by the relevant laws.
   The Controller states that all personal data are confidential and they will not be provided to a third party. The only exception are carriers to whom buyers’ personal data will be provided in the minimal extent necessary to deliver goods, and further processors which may be:

   • provider of the software Altus Vario - Altus software s.r.o., with the registered office at Rubeška 215/1, Vysočany, 190 00 Prague 9, Czech Republic, ID No.: 61681202
   • administrator of Controller’s website of the company PragueBest s.r.o., with the registered office at Vítkova 5/32, Karlín, 186 00 Prague 8, Czech Republic, ID No.: 257 70 438,
   • webhosting service provider, the company Tlap s.r.o., v č.p. 19, 391 43 Běleč , Czech Republic, ID No.: 28094433
   • the company Heureka Shopping s.r.o., with the registered office at Karolinská 650/1, Karlín, 186 00 Prague 8, Czech Republic, ID No.: 023 87 727,
   • providers of credit services,
   • online payment services operators,
   • Other providers of processing software services and applications, which are not currently used by the Seller.

   Please acknowledge that pursuant to the Regulation you are entitled to:

   • request information how we process your personal data,
   • equest access to such personal data and keep them updated or rectified, or restrict their processing,
   • request deletion of such personal data – the Controller shall perform such deletion, if it is not in conflict with laws or their legitimate interests,
   • data transferability and the right to request a copy of processed personal data,
   • if the processing is performed based on Controller’s legitimate interest pursuant to Art. 6 par. 1 letter f) of the Regulation, you are entitled to raise an objection against the processing
   • file a complaint to the Office for personal data protection and efficient court protection, if you believe that your rights arising from the Regulation were breached due to the processing of your personal data in conflict with the Regulation.