Privacy policy
Information on the processing of personal data
Who is responsible for processing your personal data?
Controller: OLA online s.r.o., Na Maninách 1040/14, 170 00 Prague 7, of which you are a customer
Contact details: gdpr@alo.cz
Why and how is your personal data processed?
Purposes of processing:
The controller processes your personal data
to the extent specified in the contract/recommendation protocol,
Your transaction history, where applicable, the results of the complaints procedure,
business communications and
other data that you knowingly and voluntarily provide in the context of the performance of individual orders (e.g. data about family members or close persons)
for the following purposes:
Receiving and processing customer orders and customer billing.
Business communications
Performance of all rights and obligations arising from the contract between the Controller and you
Dealing with complaints made to us.
Protecting the rights of the Controller (e.g. recovery of amounts due)
Bookkeeping
Direct marketing, including basic profiling and sending commercial communications (e.g. sending news, discount offers or invitations to marketing events) by electronic means (e.g. e-mail, SMS), unless you reject this method of marketing communication in advance
Personal data is processed both automatically (in the customer database) and in paper form.
Legal basis:
The controller is entitled to process your personal data without your consent as it carries out processing that is necessary for the performance of the contract concluded with you and the fulfilment of legal obligations.
The provision of personal data is a legal or contractual requirement and without this data it will not be possible to accept/process your order/order or complaint.
The controller is also entitled to process your personal data for the controller's legitimate interests (e.g. recovery of customer debts, defence in legal disputes).
The controller is also entitled to process your personal data for direct marketing purposes on the basis of the controller's legitimate interest, unless you object to this processing.
To whom can your data be provided or disclosed?
Processors:
In addition to our employees, your personal data is processed by third parties who are authorised or entrusted by the Controller under a data processing agreement.
We use the processors, for example, in our business, administrative and marketing activities, when we cooperate with our affiliated company OLA online s.r.o. (registration number 03665348, based at Na Maninách 1040/14, Holešovice, 170 00 Prague 7), which may share personal data with other processors (e.g. IT company, marketing agency).
Other recipients:
Your personal data may be disclosed to other third parties if the disclosure constitutes an obligation imposed by law (e.g. law enforcement authorities, courts) or if the personal data is disclosed for the protection of the rights of the controller (e.g. lawyers) or for the delivery of written communications (e.g. Czech Post, s.p., printing company). Upon your request, your data may also be transferred to another ALO boutique.
Can personal data be transferred to countries outside the EEA?
Your personal data will not be transferred outside the European Union or the European Economic Area.
How long will we keep your personal data?
Personal data (contacts, purchase history, sales and marketing communications) will be retained for the duration of the Controller's activities, unless you object to processing for direct marketing purposes.
In the event that you object to direct marketing, we will retain your personal data for a maximum of 5 years from the last business contact with you.
Tax documents and accounting records will be retained for the period specified by the relevant legislation (no longer than 10 years from the end of the accounting period).
What rights do you have?
Right to information about the processing of your personal data
The right of access to your personal data, including the right to a copy of your personal data and to the portability of your personal data to another controller
The right to rectification of personal data
Right to erasure (if you object to direct marketing or if the retention period for your personal data expires)
Right to restriction of processing (if you contest the accuracy of the personal data processed, request restriction of processing instead of erasure of personal data or object to processing on the grounds of legitimate interest of the controller)
YOU MAY OBJECT TO THE PROCESSING OF PERSONAL DATA FOR DIRECT MARKETING PURPOSES AT ANY TIME AND THE PERSONAL DATA WILL BE ERASED AND SHREDDED (UNLESS THE CONTROLLER HAS ANOTHER REASON FOR PROCESSING IT).
YOU MAY ALSO OBJECT TO THE PROCESSING OF PERSONAL DATA FOR OTHER LEGITIMATE INTERESTS OF THE CONTROLLER AT ANY TIME AND THE PERSONAL DATA WILL BE ERASED UNLESS THE CONTROLLER DEMONSTRATES COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS OR RIGHTS.
Please make all your requests using the contact details above.
You also have the right to contact the Data Protection Authority (www.uoou.cz) at any time with your complaint or suggestion.